Malware? renames my library files

something is re-naming my library files to EVO which is the name of a person providing files. A detailed virus scan of the disk shows nothing. I have to delete and rebuild my library to get rid of the 30 or more name changes.