我的计算机主页被修改为：http://www.new114.com.cn

启动时桌面生成了3个网页快捷方式， 瑞星能监控查到：“Trojan.PSW.WoWar.aaz”“Trojan.PSW.OnlineGames.ar”“Trojan.PSW.WsGame.cr”三个病毒，并却也提示已清除病毒

我也能自己更改主页设置，和删除桌面上的网页快捷方式，但是重新启动计算机后 ，主页又被改成http://www.new114.com.cn 那三个网页快捷方式也在左面，瑞星监控的那三个病毒依然存在，依然提示已清除，请高手告诉我怎么处理，或者瑞星什么专杀工具能杀掉这个病毒，谢谢，在线等~~~~~

扫日志，这已没得说的了。

日志如下：
请帮忙解决
Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 10:37:06, on 2007-3-15
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
D:\Program Files\Rising\Rav\CCenter.exe
C:\WINDOWS\System32\svchost.exe
D:\Program Files\Rising\Rav\Ravmond.exe
d:\program files\rising\rfw\rfwsrv.exe
C:\WINDOWS\system32\spoolsv.exe
D:\Program Files\Rising\Rav\RavStub.exe
C:\WINDOWS\system\REM0REG.EXE
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\rundll32.exe
d:\program files\rising\rfw\RfwMain.exe
c:\SysDayN2\svchost.exe
C:\WINDOWS\system32\conime.exe
C:\Program Files\Rising\AntiSpyware\runiep.exe
D:\Program Files\Rising\Rav\RavTask.exe
D:\Program Files\Rising\Rav\Ravmon.exe
C:\SysWsj3\svchost.exe
C:\SysAd5B\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
D:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE
C:\WINDOWS\system32\svchost.exe
D:\Program Files\Rising\Rav\Rav.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\ctfmon.exe
D:\Downloads\m\HiJackThis_v2_PConline.exe

R3 - Default URLSearchHook is missing
O2 - BHO: IEExt Class - {634539A8-7FA8-45E2-8DC3-253AF98548A1} - C:\WINDOWS\system\MFS0FT.DLL
O4 - HKLM\..\Run: [runeip] C:\Program Files\Rising\AntiSpyware\runiep.exe
O4 - HKLM\..\Run: [RavTask] "d:\Program Files\Rising\Rav\RavTask.exe" -system
O4 - HKLM\..\Run: [RfwMain] "d:\Program Files\Rising\Rfw\rfwmain.exe" -Startup
O4 - HKLM\..\Run: [systeminis] C:\WINDOWS\systeminis.exe
O4 - HKLM\..\Run: [wsvbs] C:\WINDOWS\wsvbs.exe
O4 - HKLM\..\Run: [mppds] C:\WINDOWS\mppds.exe
O4 - HKLM\..\Run: [cmdbcs] C:\WINDOWS\cmdbcs.exe
O4 - HKLM\..\Run: [upxdnd] C:\DOCUME~1\cdpmc\LOCALS~1\Temp\upxdnd.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [bgswitch] C:\WINDOWS\system32\bgswitch.exe
O4 - HKCU\..\Run: [ST0RMSetEx] C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system\AV1CAP.dll,Run
O4 - HKCU\..\Policies\Explorer\Run: [66] C:\SysDayN2\svchost.exe
O4 - HKCU\..\Policies\Explorer\Run: [333] C:\Syswm1C\svchost.exe
O4 - HKCU\..\Policies\Explorer\Run: [4] C:\SysWsj3\svchost.exe
O4 - HKCU\..\Policies\Explorer\Run: [50] C:\SysAd5B\svchost.exe
O4 - HKUS\S-1-5-19\..\Run: [ctfmon.exe] ctfmon.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [bgswitch] C:\WINDOWS\system32\bgswitch.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [ctfmon.exe] ctfmon.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [ctfmon.exe] ctfmon.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [ctfmon.exe] ctfmon.exe (User 'Default user')
O8 - Extra context menu item: 上传到QQ网络硬盘 - D:\Program Files\Tencent\QQ\AddToNetDisk.htm
O8 - Extra context menu item: 导出到 Microsoft Office Excel(&X) - res://D:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: 添加到QQ自定义面板 - D:\Program Files\Tencent\QQ\AddPanel.htm
O8 - Extra context menu item: 添加到QQ表情 - D:\Program Files\Tencent\QQ\AddEmotion.htm
O8 - Extra context menu item: 用QQ彩信发送该图片 - D:\Program Files\Tencent\QQ\SendMMS.htm
O9 - Extra button: (no name) - RsAutorunsDisabled - (no file)
O9 - Extra button: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - d:\Program Files\Tencent\QQ\QQ.EXE
O9 - Extra 'Tools' menuitem: 腾讯QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - d:\Program Files\Tencent\QQ\QQ.EXE
O14 - IERESET.INF: START_PAGE_URL=http://www.tomatolei.com
O17 - HKLM\System\CCS\Services\Tcpip\..\{A7545C24-4431-4158-B12B-3D64E51B1C0A}: NameServer = 202.98.160.68,61.166.150.101
O22 - SharedTaskScheduler: Browseui 预加载程序 - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: 组件类别缓存程序 - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: REM0TE REGISTRY (REM0TEREGISTRY) - Unknown owner - C:\WINDOWS\system\REM0REG.EXE
O23 - Service: Rising Proxy  Service (RfwProxySrv) - Beijing Rising Technology Co., Ltd. - d:\program files\rising\rfw\rfwproxy.exe
O23 - Service: Rising Personal Firewall Service (RfwService) - Beijing Rising Technology Co., Ltd. - d:\program files\rising\rfw\rfwsrv.exe
O23 - Service: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - D:\Program Files\Rising\Rav\CCenter.exe
O23 - Service: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - D:\Program Files\Rising\Rav\Ravmond.exe

--
End of file - 4548 bytes

c:\SysDayN2\svchost.exe
O4 - HKLM\..\Run: [systeminis] C:\WINDOWS\systeminis.exe
O4 - HKLM\..\Run: [wsvbs] C:\WINDOWS\wsvbs.exe
O4 - HKLM\..\Run: [mppds] C:\WINDOWS\mppds.exe
O4 - HKLM\..\Run: [cmdbcs] C:\WINDOWS\cmdbcs.exe
O4 - HKLM\..\Run: [upxdnd] C:\DOCUME~1\cdpmc\LOCALS~1\Temp\upxdnd.exe
O4 - HKCU\..\Policies\Explorer\Run: [66] C:\SysDayN2\svchost.exe
O4 - HKCU\..\Policies\Explorer\Run: [333] C:\Syswm1C\svchost.exe
O4 - HKCU\..\Policies\Explorer\Run: [4] C:\SysWsj3\svchost.exe
O4 - HKCU\..\Policies\Explorer\Run: [50] C:\SysAd5B\svchost.exe

O4 - HKCU\..\Run: [ST0RMSetEx] C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system\AV1CAP.dll,Run
O14 - IERESET.INF: START_PAGE_URL=http://www.tomatolei.com

O23 - Service: REM0TE REGISTRY (REM0TEREGISTRY) - Unknown owner - C:\WINDOWS\system\REM0REG.EXE

怎么处理？