So you are saying that your system got infected by malware and it used Zeitgeist to track what files you had recently used, in order to copy those?

Zeitgeist from what I see merely stores...