Looks like most all the add malware has been cleaned out, except the name block of the login. Ed L.
Time to call the kid, see if he can figure it.out.Ed L.