also, the infected URL was sent through MSN Messenger and upon being clicked, it launched the infected page. That would mean, correct me if I'm wrong, that the default browser was still IE.

Also, are IT policies applied consistently throughout the world or different regions have a diff. IT policy?