If you can, I’d just block connections from this WinXP box to the Internet completely, then it should be fine.