That doesn't help, Mike.
Just because you don't know about the existence of a threat doesn't mean it's safe to dismiss it.
The process described here is correct: push a new .EXE file to virustotal.com before installing it. the goal is to check what other scanners and AV engines say about it (have they seen it before? is it related to malicious activities?).
TurboTax has a product that gathers and stores extremely sensitive information. With that said, I don't know what's worse here: TurboTax not knowing that their product is flagged as malicious by the most well-known scanner or their "champs" not knowing how to respond to a threat report.
@intuit: we need a better answer to this.
