If the trojan was written to target the bitcoin-qt wallet then it'll be listening out for the decryption event by some means. As soon as it has your password it'll clear out your wallet - and it'll do it faster than you think you could.
I see, i'll try and be careful
