The one you have has a lot of variants, Classified as a hoax virus in that they don't tend to be very harmful in the long run. They seem to change your IE startup page and call it good.... a couple of them do more.
There are instructions for removing each of them though:
Trend Micro - Security Info - Virus Encyclopedia - Search Results - JS.Exception.Exploit
If he doesn't already know about that!
I'll have to wait until I get home to see if it's gone for good. My dad says he's pretty sure it's gone, but he would feel better if my sister took a look.
I'll check out the PC-Cillan and see what it has that is any different from ZoneAlarm. :)