Directory named with random characters automatically (re)created in SD card? Could this be a malware?

Question

Lately, I've seen that a directory with what seems to be a random name (like Z0tQWDVmQmoyRUxVSWdBU2pwNzAxMzc1Mw) is present in the local storage (/sdcard) of my Samsung Galaxy S5.

When I delete it, it's automatically recreated.

The directory contains three files, two with random name and the third is named 'This directory is very important. Please do not delete.' One file contain some script or code to create an sqlite database and tables.

Could this be a virus? Is there a way to find out which app is creating this directory?

Answer 1

Something similar happened to my 7" phablet.

The file belonged to the MobileCare app.

If you check the properties, the date and time are similar.

Good luck!

Answer 2

This looks like encrypted directory. I saw this when I had multiple users in my Android device. /data/media/0 is the primary user storage, but there was also /data/media/10, another user's storage. It was encrypted and I saw files and directories like this one there.