I've suffered the same. It happens when you run the third-party script. Running script sometimes allows third-party to send trojan very easily.