New worm disguises as MS update