It's probably safest to never download or update a program from an email notification. The links provided are usually to a fake site.
Always go to the programs own web site or other trusted site like cnet (there are others, but that's where I start). You are less likely to get infected programs from these locations.