From my experience, no virus scanner/trojan scanner is finding anything on compromised machines , I am thinking there maybe a combination of hacks that are being used to get passwords, including hacking gmail, my Bnet accounts were all gmail too.