with XP/2000 make sure you turn off the messenger service and disable it (in adminsitrator tools - services) this is one new way of getting spam...
i have 15 xp boxes at work and all are up to date on updates/patches.. no new pops since anything upgraded..
