NIS 2006 infostealer removed window won't go away!

I am using NIS 2006 with the latest update, XP.

 

This morning I got a pop up window from Norton telling me there is an "infostealer detected and removed", clicked OK. A couple seconds later it pops up again with the same info.

 

The file is c:\windows\orm.hbn   I did a search on this and found nothing about this file.

 

I tried to delete it manually but it seems to come back automatically. Norton tried to rename that file but putting a bunch of X's in the name but the original files is still there.

 

Anybody go any idea what I am dealing with here?  I just installed malwarebyte anti-malware. Should I do the hijackthis as well? 

 

Any help would be greatly appreciated!