Here's a list of free security programs that I've used to clean up and protect the computers of several friends and family members. I suppose this will be old news to everybody who reads this, but I've helped a number of people with this info. And since I typed it all up in an email tonight, I thought I might as well excerpt it here - because who knows? I could be wrong, and this might actually be helpful to somebody.
Alternatively, I wouldn't be surprised if one or more people disagree with me about these choices, and will shame me by proving my ignorance in a comment. That's just the kind of fucked-up world this is.
Here's what I recommend:
1. Windows Update. Make sure that it's set to automatically update, but do a manual update just to make sure that your system is absolutely up-to-date. You should be able to start it by clicking on the Start button and looking at the items listed at the top.
2. Firewall. If you don't have a firewall running, activate your Windows XP firewall. Click on Start, Help and Support, and type in "Firewall". It will walk you through the process.
3. Anti-Vir. Consider uninstalling McAffee (if that's what you have) and installing Anti-Vir in its place. The website is http://www.free-av.com/ . Once you've installed it, update it and run a scan. Remember that it's bad to have two anti-virus programs running simultaneously on your system, so if you do decide to install Anti-Vir, be SURE to uninstall any other antivirus program first.
4. Ad-Aware. Download, install, and update it. Then run a scan. http://www.lavasoftusa.com/software/adaware/
5. Spybot-Search & Destroy - http://www.safer-networking.org/en/download/index.html . Download, install, update, scan. Also use it to immunize your system, which will protect you in other ways.
6. SpywareBlaster - http://www.javacoolsoftware.com/spywareblaster.html . Download, install, update, and enable all protections. SpywareBlaster is not a scanning program, so you won't need to scan; it just blocks a lot of bad stuff.
I strongly recommend updating ALL of those programs and scanning at least once a month. Once or twice a week would be better.
You should also consider switching to the FireFox browser instead of Internet Explorer: http://www.mozilla.com/firefox/ . IE isn't very secure. If you do switch, make sure to activate SpywareBlaster's FireFox protections.
Oh, and the Google Toolbar is available for FireFox (at http://toolbar.google.com/firefox/ ) and for Internet Explorer ( http://toolbar.google.com/ ). It blocks pop-ups (not 100% of them, but the vast majority), and has a great built-in spellchecker for web forms - it even has a customizable dictionary.
One more thing: if you use Outlook or Outlook Express, it would be smart to change - those two programs are the ones most often targeted by hackers. I've switched myself and others to Gmail, and it's much better. If you want to keep your mail on your local system rather than online, you might want to switch to Thunderbird; I've never used it myself, but I've heard good things. http://www.mozilla.com/thunderbird/
Alternatively, I wouldn't be surprised if one or more people disagree with me about these choices, and will shame me by proving my ignorance in a comment. That's just the kind of fucked-up world this is.

Here's what I recommend:
1. Windows Update. Make sure that it's set to automatically update, but do a manual update just to make sure that your system is absolutely up-to-date. You should be able to start it by clicking on the Start button and looking at the items listed at the top.
2. Firewall. If you don't have a firewall running, activate your Windows XP firewall. Click on Start, Help and Support, and type in "Firewall". It will walk you through the process.
3. Anti-Vir. Consider uninstalling McAffee (if that's what you have) and installing Anti-Vir in its place. The website is http://www.free-av.com/ . Once you've installed it, update it and run a scan. Remember that it's bad to have two anti-virus programs running simultaneously on your system, so if you do decide to install Anti-Vir, be SURE to uninstall any other antivirus program first.
4. Ad-Aware. Download, install, and update it. Then run a scan. http://www.lavasoftusa.com/software/adaware/
5. Spybot-Search & Destroy - http://www.safer-networking.org/en/download/index.html . Download, install, update, scan. Also use it to immunize your system, which will protect you in other ways.
6. SpywareBlaster - http://www.javacoolsoftware.com/spywareblaster.html . Download, install, update, and enable all protections. SpywareBlaster is not a scanning program, so you won't need to scan; it just blocks a lot of bad stuff.
I strongly recommend updating ALL of those programs and scanning at least once a month. Once or twice a week would be better.
You should also consider switching to the FireFox browser instead of Internet Explorer: http://www.mozilla.com/firefox/ . IE isn't very secure. If you do switch, make sure to activate SpywareBlaster's FireFox protections.
Oh, and the Google Toolbar is available for FireFox (at http://toolbar.google.com/firefox/ ) and for Internet Explorer ( http://toolbar.google.com/ ). It blocks pop-ups (not 100% of them, but the vast majority), and has a great built-in spellchecker for web forms - it even has a customizable dictionary.
One more thing: if you use Outlook or Outlook Express, it would be smart to change - those two programs are the ones most often targeted by hackers. I've switched myself and others to Gmail, and it's much better. If you want to keep your mail on your local system rather than online, you might want to switch to Thunderbird; I've never used it myself, but I've heard good things. http://www.mozilla.com/thunderbird/