You would not have to download a trojan, you could EASILY hide it in something like D2BS. Or just about anything else for that matter...