Thanks a lot @Zesko
I found /home/limo/.koofr/ and /.koofr-dist/
I better delete it all.
UPDATE:
I followed Best Free Antivirus and it is still running! I will see how it goes.
I noticed somehow in one of those folders there were some python scripts (dated like yesterday) and related to something i was playing with in python. So, maybe pyhton though somehow there is something related to what it does in theses folders and this is how it appeared again…
UPDATE 2:
from the root folder I did:
sudo clamscan -r -i | grep FOUND >> /home/limo/scan.txt
I will see how it goes.
I never thought I would ever install a anti malware software on Linux!