I got the call this past weekend from a computer user that she was hearing voices in addition to a notice from her anti-virus software about malware on her computer. I could tell in the message that she was intrepid about relaying the information about the voices. I must admit I was skeptical, but I went in with my eyes open.
I did find some out-of-place processes including afinding.exe and wserving.exe. I knew these did not look right and began a search via Google. Sure enough. These processes are part of a Trojan-Downloader that will play short snippets of music or speech through the computer speakers. Maybe someone can tell me what the purpose would be for this malware to do this. The only explanation that I could find is that it would make the computer user sound maybe just a bit crazy.
A fairly quick run through with SDFix corrected the problem. The lesson is do not discount any explanation as a clue from your computer users.