If your business does not require encrypted zip attachments, block them. If you do, force users to extract files via a Content Disarm & Reconstruction (CDR) tool that rebuilds the zip without scripts.
: Images or metadata for the "kill" part, such as textures for a "lava" block. Documentation Thimble Kill Script File Zip
sc config WinDefend start= disabled