Always scan before you run. Verification is a promise, not a guarantee. When in doubt, throw the file into a virtual machine.