You don't have to KNOWINGLY download a file to get a virus, which is why the "scan on download" option needs to be found and activated.

Again, download Spybot S+D, and the Lavasoft Ad-aware SE Personal. These in combination will eliminate the spyware that probably downloaded the virus.

If Norton is disabled, it should be removed. Multiple a/v programs sometimes cause conflicts with each other, even if not used.

DELETE the infected object. Putting them in a vault merely locks them away, you need to remove them from the H/D. (The vault option is normally used by sys admin types to track down and find the source of the virus)