They all seem to be found in the Java Deployment cache.
I ran into something similar not long ago so as advised elsewhere on this forum I ran adwCleaner, MBAM, OTL and aswMBR (logs attached). I didn’t get an Extras log from OTL when it finished though.
I already told her to change all passwords etc, should I tell her to just disable Java? What else do we need to do?
[*]Then click the Run Fix button at the top
[*]Let the program run unhindered, reboot the PC when it is done
[*]Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.