我的机器刚打开QQ登陆窗口
就自动弹出网站：

http://www.edodo.net/mms/we30new/tuling1.asp?ad=2
请大家帮我看看，谢谢啊！
这个是我扫的日志：
Logfile of HijackThis v1.99.1
Scan saved at 18:14:58, on 2006-5-25
Platform: Windows 2000 SP2 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\userinit.exe
C:\WINNT\Explorer.EXE
C:\Documents and Settings\Administrator\桌面\hijackthis\HijackThis.exe

F3 - REG:win.ini: run=C:\WINDOWS\system\nbms.exe
O2 - BHO: CpapView Class - {77962960-536E-47EC-9DDB-52651519705F} - C:\WINNT\system32\cpap.dll
O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - C:\PROGRA~1\FLASHGET\jccatch.dll
O3 - Toolbar: 电台(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\PROGRA~1\FLASHGET\fgiebar.dll
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [NvCplDaemon] ; RUNDLL32.EXE C:\WINNT\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] ; nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] ; RUNDLL32.EXE C:\WINNT\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [TkBellExe] ; "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot
O4 - HKLM\..\Run: [OcxRegister] C:\WINDOWS\system\nbms.exe
O4 - HKLM\..\Run: [kuku] C:\Program Files\kuku\kkup.exe
O4 - HKLM\..\Run: [MicroAvd] C:\WINNT\system32\MainPro.exe
O4 - HKLM\..\Run: [MicroBvd] C:\WINNT\system32\AnnexPro.exe
O4 - HKCU\..\Run: [Internat.exe] Internat.exe
O4 - HKCU\..\Run: [OcxRegister] C:\WINDOWS\system\nbms.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1
O8 - Extra context menu item: 使用网际快车下载 - C:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: 使用网际快车下载全部链接 - C:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: 使用超级解霸播放 - C:\Program Files\Hero 9\MPURLGET.HTM
O10 - Unknown file in Winsock LSP: c:\winnt\system32\mswinsock.dll
O10 - Unknown file in Winsock LSP: c:\winnt\system32\mswinsock.dll
O17 - HKLM\System\CCS\Services\Tcpip\..\{F489EEEB-8EC5-4361-9A72-5404A53E4AB7}: NameServer = 202.98.0.68,202.98.5.68
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: NBExpl - Unknown owner - C:\WINDOWS\system\explxp.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINNT\System32\nvsvc32.exe

开始→运行→输入services.msc，打开“服务”→查找 NBExpl →双击→启动类型→禁止→停止→应用→确定。禁止 NBExpl这个服务
关闭所有浏览窗口以及一些不必要的程序
运行Hijackthis，扫描结束后在下列选项前打上勾，然后选"修复""
F3 - REG:win.ini: run=C:\WINDOWS\system\nbms.exe
O2 - BHO: CpapView Class - {77962960-536E-47EC-9DDB-52651519705F} - C:\WINNT\system32\cpap.dll
O4 - HKLM\..\Run: [OcxRegister] C:\WINDOWS\system\nbms.exe
O4 - HKLM\..\Run: [kuku] C:\Program Files\kuku\kkup.exe这项如果你也不知道，建议修复。
O4 - HKCU\..\Run: [OcxRegister] C:\WINDOWS\system\nbms.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1
O23 - Service: NBExpl - Unknown owner - C:\WINDOWS\system\explxp.exe
双击我的电脑--工具---文件夹选项--查看--单击选取"显示隐藏文件或文件夹"清除"隐藏受保护的

操作系统文件（推荐）"复选框。在提示您确定更改时，单击“是”
删除
C:\WINDOWS\system\explxp.exe
C:\WINDOWS\system\nbms.exe
C:\WINNT\system32\cpap.dll