Probably a good idea, also, is to go into Administrative Tools and shut down the messenger service (not the same as Win Messenger) -- spammers are just beginning to discover that's another way to get to you.
Unless you're on an LAN, you have no use for the service -- it's desgined for messaging between workstations. So just stop it and disable it.