The moderators aren't to keen on posting links to live or suspect malware. You could send the samples for analysis to virus @ avast.com (without the spaces) zipped and password protected with the password in email body, a link to this topic might help and possible undetected malware in the subject.
Or you can also add the file to the User Files (File, Add) section of the avast chest where it can do no harm and send it from there (select the file, right click, email to Alwil Software). No need to zip and PW protect when the sample is sent from chest. A copy of the file/s will remain in the original location, so any further action you take can remove that.
The occurrences of how they got on your system could well be legit (not sure about the skin instance though). If the other two were installed with the purpose of killing a virus infection, rather than a virus put them there, then they might have been used as a tool for good rather than evil.