It could be a gaobot/agobt/sdbot Worm variant. Delete it in safe mode and delete the references to that file in the Registry.