I get this message all the time for various (default) aliases, popups, remotes. I've kept an eye on it and the modified times of these files have not changed and the hashes are the same. So I'm not sure what's going on but I doubt it's malware.