"Authentic security bulletin mailers never provide the
patch itself or a link to the patch; instead, they refer the
reader to the complete version of the bulletin on our
web site, which provides a link to the patch"

http://www.microsoft.com/technet/security/policy/swdist.asp
http://www.microsoft.com/technet/security/news/patch_hoax.asp

PLEASE Don't click on any email attachment you don't
know about. Because it will most likely be a VIRUS!!!!!!!
Even if you're all protected don't click on any unknown
email attachments.

Consider using these (free for home use) tools:
http://www.grisoft.com/us/us_dwnl_free.php
http://www.kerio.com/us/kpf_download.html

DON'T open any attachments

Consider using these settings in Outlook Express:

Tools | Options | Security | Virus Protection

Choose "Restricted Zone"
Enable "Warn me when other applications trying to send mail as me"
Enable "Do not allow attachments to be saved..."

If you get infected, follow EXACT instructions from:
http://www.symantec.com/avcenter/venc/data/w32.swen.a@mm.removal.tool.html
http://www.f-secure.com/v-descs/swen.shtml#disinf
http://vil.nai.com/vil/stinger/

On Windows XP enable firewall:
http://www.microsoft.com/windowsxp/pro/using/howto/networking/icf.asp

Keep up to date with:
http://windowsupdate.microsoft.com/