Exactly. I'm worried about a trojan too.
No need to worry about that, there are plenty virus/trojan scans. Everyone can do scans before they launch it.

Unfortunately, this is BTC and there are some trojans and keyloggers that may not be easily picked up by AV
Always use a VM for a new coin. Or a throwaway box that you don't care about. If it works out ok, your golden. If not, no big deal - delete the VM.