emails contain poisoned Word documents
facepalm. see icon.
It's time for corporate firewall appliances to aggressively strip off any MS Office document attachments, particularly those that contain scripts, and for company policies to dictate and enforce "never open or preview them". If it can't be sent as plain text or something WITHOUT script in it, don't allow it to be received.
it's been what, TWO DECADES since the first word macro virus?
The Wikipedia page on Macro viruses states that the Melissa virus was from 1999.