I'm pretty sure that there's a security hole in WMP that allows a remote user to view your playlist. Try going to Windows Update and seeing if there any patches available (you should do this on a regular basis anyway if you're in charge of a Windows workstation) - they shouldn't take too long to download if you have broadband.