I even saw more pop up... One was a VBScript that tried to execute ActiveX commands on opening the e-mail. So not after opening the attachment, but after viewing the e-mail itself! I was prompted by my system 'cause I made one change to my security settings. If you're using IE I would suggest you check
http://www.thehun.net/articles/altersecurity/.