Adam, one of our researchers, got this link through a Messenger Service spam on an unpatched, non SP2 XP system: 

Scam1

 

Looks awfully simliar to the Microsoft update site:

Scam2

 

Alex Eckelberry