keyloggers, botnet,password stealers, or just even infected desktops are easy to hide, its not exactly hard - you can make your EXE file fully undetected by AVs etc for under $5!!
So wouldnt suprise me if the server got infected, espcialy with the amount off files im sure are being downloaded.