Let me guess: The email comes from security@microsoft.com right?
And the attached file is called patch.exe?
Guess what? That's the Dumaru virus. So don't blame M$ for those messages. While I agree that Windoze is crapola, I don't see a need to bash M$ for a virus that they didn't start.