I also downloaded TurboTax from BigTaxDeal.com (which now does not exist as a web page anymore), and I took a look at the executable (.exe) and the code signing certificate on it is Intuit's code signing certificate, meaning nobody except Intuit could modify the contents of the executable without being Intuit or having a copy of their code signing certificate. If the code signing process had been hacked or bypassed it would have worldwide implications for software distribution, so I doubt that has happened. What I think is happening is that people are trying to make a quick buck by just reselling a TurboTax installer which they got through one of the high-volume downloadable TurboTax sellers like Amazon. These downloadable installs don't appear to have any registration code and therefore can be used by more than one person (from what I can tell). I have some experience in code signing and looked at the details and the .exe I have is signed by Intuit of San Diego and is chained up to the VeriSign certificate authority which is well known and trusted. Anybody else installed it and seen any signed of malware?
