If you receive or have received an email alleging to be from Microsoft’s security team telling you to “Update your Windows” – be aware! If it has a file attachment called KB453396-ENU.zip , DO NOT RUN IT.
This is another way of spreading malware under the guise of a critical security update from Microsoft. The current version of this spam mail , contains a worm. The spammers have spoofed an email which even quotes the real name of a senior member of Microsoft’s security team – Steve Lipner – to try to fool you into believing it is genuine. Of course, Mr Lipner has nothing to do with the emails and Microsoft never distributes security updates via email attachments.
So be aware and never open an attachment from a source you don’t know.