@sparkla said:
@TazWake that is exactly the reason why I was asking myself if someone manipulated the box. Locate shows the past, I don’t know which past.
Ah, interesting. When I ran locate just now it returned nothing! 
In my case locate showed user.txt should be in home of my***. But it wasn’t.
It should be. If it isn’t someone messed with your box.
EDITED TO ADD:
I am sorry, I’ve realised I might have added to the confusion here because I wasn’t paying enough attention to detail in my replies.
Hopefully, this is cleared up now.