Windows Messenger is a likely culprit, as well as others. I know this was discussed before, so search in the XP/.Net section.
Microsoft says no personal data is transmitted, but it's Microsoft we're talking about.
The only time you should be sweating is if you've got a pirated copy, otherwise you shouldn't have to worry (yeah, right ;( )