How screwed am I? - (Possible Trojan at workplace)

A new employee received an email from a client containing a password-protected PDF. After opening the PDF and downloading the file, the employee learned that the client's email had been compromised. Due to the strict punctuality policy of their boss, the employee was unable to take further measures to secure their computer before leaving the office.