Actually do you think it's possible it came from a pool? I had the same file structure on my mining PC in appdata\local. The good thing is that my mining pc only has mining wallets, all my coins are transferred to cold wallets on another PC as I mine. Whew... I did notice that it tried to access Bitcoin, Bitcoindark, Blackcoin, and Darkcoin wallets at 12:59am on 8/4/2014 EST. I'm still looking but it seems that the processes died shortly after they started but I didn't see anything in malwarebytes.
For this I mined on altpooler
Anyways I also checked zipcoin files and they are clean. It's freaking weird.
Where did you guys mine???
The zipcoin file is CLEAN NOW, but I STILL have the original one, one hour after it was posted on Altcoinherald. The wallet that is there now, is NOT the original!!!
Where did you download the original wallet from?