I just want to make sure I am doing this right, I am running windows xp, and I am getting ready to do a Malware removal. The only spyware etc, that is on the computer is AOL ( I know stupid) I am guessing I should remove that before installing the ones recommended by Castlecops overview. So I would ignore steps 2-4 and then remove the aol spyware, also to not have a firewall up? then go to step 6. ( I assume I should do all of this in safe mode and under administrator ) Then if things are not all cleaned up should I send the first hijackthis log or then do a new one and send that to the right forum.

The only other werid thing I found in start up is swdoctor.exe it is not under c:/ at all, it is hiding under the run file in the registry. I believe my son tried to install Spy doctor once and I uninstalled it but it still must have something hiding ( or was bad) should I go into the registry and remove that line?

Thank you again please tell me where to go for questions like this in the future.

Please start a new topic in the HJT forum now, and post a HJT log before you start the MRP. Then, post a second one to that same topic after you finish. We like to be able to see both "pre" and "post" MRP HJT logs. Also, any step you are unsure of can be skipped - just post those you skipped for whomever will help you there, and they will tell you how to do anything you missed while helping you.

Don't try registry editing yourself unless you are very experienced and comfortable working on the registry. Your 1st Responder will tell you how to fix things like that.