Windows 10: Can trojans steal files?

Recently I downloaded something and it gave me two trojans. Trojan:Win32/Loaderz.GPH!MTB and HackTool:Win32/Keygen. A lot of my accounts were hacked and I managed to reset the passwords for most of them. Then I realized that they got into accounts whose passwords were not saved on my browser so I was wondering if there is a chance they have all my files. I'm asking because I had sensitive documentation like SSN, etc in a folder in the form of a png. Can these two malware take that and send it to the hackers?

:)

 

Trojans

I had very confidential files in my itunes backup on my PC (but was not encrypted). Now when i scan my PC I found some trojans available. I google about the trojan and found that they can steal our files. Have they steal my itunes backup too? I am worried.
What is the chance that they might have steal it?

 

New Trojan that Demands a Ransom

There is a new virus out there discovered by virus hunters known as "Cryzip". The Trojan encrypts your files and then demands a $300 ransom for the decryption password to get your files back. After encrypting the files, the virus leaves a nice step-by-step guide of how to go about paying the ransom off. It's supposedly spread through email Spam, and has successfully evaded anti-virus scanners.

Source: eWeek

 

Password-Stealing Trojan Targets Skype

A password-stealing Trojan is targeting Skype, posing as a security plug-in for the popular VOIP and IM service and displaying a fake log-in screen that's almost identical to the real thing. McAfee's Avert Labs is identifying the Trojan as PWS-Pykse, and F-Secure is referring to it as Trojan-Spy.Win32.Skyper.B. Skype is calling it 65404-SkypeDefenderSetup.exe. The Trojan identifies itself as the "Skype-Defender" plug-in and is attempting to steal Skype usernames and passwords, along with all usernames and passwords saved in Internet Explorer. After execution, the Trojan disables running instances of Skype and swaps in its fake Skype login window. If the victim enters his or her username and password, the malware captures it and any others saved in IE and posts it via http to a Web site for the malware author to retrieve. Security researchers, and Skype, are recommending that users update their antivirus detections to avoid infection.

Source: eWeek