Confusing HEUR/HTML.Malware issue

Hi, thanks for looking!

My friend is having a problem with a "HEUR/HTML.Malware" hit from Avira Antivirus. I had her do a cleanup through the Read&Run instructions a few weeks back. She has SuperAntiSpyware & Malwarebytes installed and did a sweep with them, but Avira's still telling her about the "HEUR/HTML.Malware."

I'm having her send me the logs from malwarebytes. Note: she's a bit of a technological klutz and I haven't been able to advise her on installing a firewall that's user friendly for her. I give her very simple instructions on what to do, and she still seems to mess it up lol so it's been a bit trying working with her since she lives far away from me now and I can't hop in a car and go see her.

Any advice on this problem? I've searched various threads here but was unable to find one that had a legit solution--mostly abandoned attempts at fixes. I read up on Avira's site about the hit, but it wasn't very helpful since her laptop keeps restarting without warning whenever she tries to quarantine the virus--even in SafeMode.

Help is much appreciated, as I don't know much about this particular malware, if it is that. I'll post more info about her laptop once I get the log.