many varities of malware install themselves as IE plug-ins. if your FW allows IE it also allows the plugins that are a part of IE.