The bogus e-mail contains an attachment that purports to be a cumulative Windows patch for May 2005. It's actually an executable file for a well-known virus.
One year after the last major Windows worm, Microsoft talks up its security response improvements, but analysts warn against being lulled into a state of complacency.