From time to time, we see emails that pretend to come from Microsoft, which include an attachment that masquerades as a critical update.

It is a FAKE.  Do NOT install any update attached to an email!!

Microsoft does NOT email out updates.  All updates come through the regular patching regime.  And if you are on a Kinetics KARE Contract - Core Fundamentals, Proactive Peace of Mind or Total KARE, then we will be installing them for you on your contracted machines. 

The fake messages may look real enough, after all this hacker technique has been around for a while and they keep improving it, but they not real.  The attached file is bad news.  THe one we saw this week asks you to disable your antivirus while you run the update.  And that is never a good idea!

Check out ZDNet, including an example of the email here  and when in doubt, call Kinetics for help!