OT: ZoneAlarm

I've been issued with a challenge..... A friend has just put satellite internet access in, and is running a firewall called "ZoneAlarm" (or Zonealert, can't remember). He's got a fixed IP, and has challenged me to prove that Windows is less secure than Linux by breaking into his machine and leaving a non-destructive message in his AUTOEXEC.BAT file...:-) Then I can talk to him about converting to Linux...:-) Anyone have any clues about this program ? I've tried all the obvious telnet / ssh tricks, and no go.