someone check this but some trojans Dyfuca for example download things and install them also some spyware do the same.
check with spy bot or adaware for spyware and trend or kaspersky for the trojan