It's a dangerous world out there, and the only real protection is don't open attachments, if it's unexpected, keep your patches and virus software up-to-date. You can contact the police if you wish, but my experience is the only way to get action is usually to definitively prove monetary damage. There's usually some floor, such as US$5,000. The damage claim has to be backed up by some kind of paperwork, like bills from consultants. "Lost time/productivity" doesn't usually cut the mustard. It's probably the "SoBig" virus, based on the filename used is "details.zip". Or it could also be the "Mydoom" virus, since it had "Hey" in the subject line. Both are well-known and would be caught by up-to-date anti-virus software.