Microsoft does not send unsolicited e-mail or make unsolicited phone calls to request personal or financial information or fix your computer or security updates!

If you receive an unsolicited e-mail message or phone call that purports to be from Microsoft and requests that you send personal information or click links, delete the e-mail or hang up the phone.

“When we release information about a security software update or a security incident, we send e-mail messages only to subscribers of our security communications program.”

Unfortunately, cybercriminals have exploited this program. They have sent fake security communications that appear to be from Microsoft. Some messages lure recipients to Web sites to download spyware or other malware. Others include a file attachment that contains a virus. Delete the message. Do not open the attachment.

Legitimate security communications from Microsoft:

• Legitimate communications do not include software updates as attachments. We never attach software updates to our security communications. Rather, we refer customers to our Web site for complete information about the software update or security incident.
• Legitimate communications are also on our Web sites. If we provide any information about a security update, you can also find that information on our Web sites.

More at Microsoft.