did you get anything in email from him?

virus scan it first, and download it to flash drive then open the file on a non-web and server connected machine

and how does he have your number? i suppose a whois, but th number listed is for the data center?