FAQ from Security Newsgroups

Q: I got an email from Microsoft about a security update. Should I run the attachment?
A: No. Microsoft NEVER sends emails with security update attachments. You can subscribe to mailing lists to receive Microsoft security bulletins or read Microsoft security bulletins on the web. These bulletins NEVER contain executable attachments, only references to web pages where you can access Windows Update, download patches, or request to receive patches from Microsoft Product Support Services. You should never use any tool other than Automatic Updates, the Microsoft Download Center, the Windows Update web site, or a response to your request to Microsoft Product Support Services to install Windows security updates or hotfixes. See https://www.microsoft.com/technet/security/bulletin/info/patch_hoax.mspx for an explanation from Microsoft about these hoax email messages.