Pondus
3
Is it even possible that a malicious program could open by itself after downloading it?
depending on type, yes
Scammers are using fake Twitch sites to deliver malware
https://blog.malwarebytes.org/online-security/2014/10/fake-twitch-tv-site-recommends-pup-as-video-plugin/