Ran OTL with script see attached. MAIN USER.

The Avast scan on second user had javascript Trojan? (JS:Iframe-CAP[TRJ]) which was successfully deleted.

Also ran mbam from second user (PUP) removed. (see attached mbam log)

PS I updated their JAVA :o