to go back to TS's remark

it's on a server
in a 'random' named file
it might be there because said 'bad lads' have put it there

his PC may have been compromised, and all data sent to a 'hacker' mailbox, set up on his server.

need some kit, call here for a CC #

get him to remove / delete the file from the server
was it ONLY personal data in the file ?
any other stuff ? [no details, just Y or N ]
I'd be concerned if it was just personal data AND it was NOT a copy of another file on the PC ......

that would damn nigh convince me that 'someone' had set it up specifically as a 'mailbox'