A tip I always do is if a friend wants me to open an .exe file, I ask them a question that only they would know to make sure that its really them sending me the file, and that they know that they are in fact sending a file.
Just one of those preventative measures that a bot can't get past.
