When you installed xp, did you patch it up to sp2?
If you were on-line during the instalation, then it only takes a few minutes to get your new installation compromised by trojans etc. unless you take a lot of care.
Have you done virus scan, eliminated rogue diallers, etc?