Nothing on my PC ever gets as far as Outlook without at least 2 checks.Everything is manually vetted on the server using EmC Email Control and anything I don't like the look of is deleted without being read
Norton is set for automatic update and checks all email being downloaded.
Also for non trusted sources I give out a Hotmail address (all but one virus attacks have gone into the Hotmail account where they do no harm)