Collected AE virus

[tool57]

I'm trying to fix a friends computer that has this virus , without much success.
I stopped the System Restore then restarted in Safe Mode. Antivirus (AVG) does not find this virus. However when the computer is started in normal mode
then AVG finds the Collected AE virus , and heals or deletes the file. But when the computer is restarted again and tested , the virus is back.
AVG has found "Collected.AE" in
C:\Docs.&Sett.\Username\Local Sett.\Temp\installer.exe

I have run AVG numerous times and it has removed it.
Everytime I try to access the internet, it comes back.
My IE starts automatically and goes to a webpage that
is not the homepage. After I close this window, I can
surf but I can see something is using my bandwidth.


Any help would be greatly appreciated.

[Ron]

Info --->> http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ%5FAGENT%2EAE&VSect=Sn
Delete all temp files in the following folders, C:\Docs.&Sett.\Username\Local Sett.\Temp and C:\Windows\Temp
Do an online scan http://www.thecomputermechanics.com/forums/showthread.php?t=1098 Download/install/update Ewido Security Suite (the trial version is fine, it's on demand scanner will just de-activate after 14 days). http://www.ewido.net/en/
Now reboot to safe mode http://service1.symantec.com/SUPPOR...src=sec_doc_nam
Now run an Ewido Security Suite scan. Delete all bad files. When it is finished "save a scan report" and copy it's contents in your next post.
If you are still having problems download HighjackThis and post a log http://www.majorgeeks.com/download3155.html

[tool57]

Info --->> http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ%5FAGENT%2EAE&VSect=Sn
Delete all temp files in the following folders, C:\Docs.&Sett.\Username\Local Sett.\Temp and C:\Windows\Temp
Do an online scan http://www.thecomputermechanics.com/forums/showthread.php?t=1098 Download/install/update Ewido Security Suite (the trial version is fine, it's on demand scanner will just de-activate after 14 days). http://www.ewido.net/en/
Now reboot to safe mode http://service1.symantec.com/SUPPOR...src=sec_doc_nam
Now run an Ewido Security Suite scan. Delete all bad files. When it is finished "save a scan report" and copy it's contents in your next post.
If you are still having problems download HighjackThis and post a log http://www.majorgeeks.com/download3155.html


Thanks for your help with the virus removal.
the computer is all fixed
tool57