When dealing with windows update, or any other sensitive site, it's a good idea to ignore any link offered by a second party and enter the url yourself. Phishing and spoofing, you know. Even if the links always seem correct it's good policy not to trust them.