There is an updated fix for Aurora, so I think you should run it.

You will need to be disconnected from the internet during this process, so you may wish to print out these instructions.

Download the updated Nailfix from here:
http://www.noidea.us/easyfile/file.p...50515010747824
Unzip it to your desktop but do NOT run it yet.

Disconnect your system from the internet and reboot into Safe Mode.

Double-click on Nailfix.cmd; your desktop and icons will disappear and reappear, and a window should open and close very quickly -- this is normal.

Then run another full scan scan with Ewido and save the log.

Scan with hijackthis and have it fix the following entry:

O4 - HKLM\..\Run: [KavSvc] C:\WINDOWS\System32\hjharl.exe reg_run

Go to C:\WINDOWS\System32 and delete hjharl.exe

If you can't delete it, Open HijackThis again.

Click on the Config button, and then click on the Misc Tools button; click on the button labeled Delete a file on reboot...

A new window will open asking you to select the file that you would like to delete on reboot. Navigate to C:\WINDOWS\System32\hjharl.exe, click on it once, and then click on the Open button.

You will now be asked if you would like to reboot your computer to delete the file. Click on the Yes button to reboot now.

After you've rebooted (normally), search for hjharl.exe again to make sure it's gone; let us know in your next post.

Reconnect to the net and post a new hijackthis log along with the new Ewido log.