Your probably right. I've actually created some malicious software in the past and uploaded it. The only time I would see any detections from virus total is when I would add hooking features to my software.
The past 72 hours have been hell for me with Bitcoin. I had a security issue and asked coinbase to disable my account they did it right away but when I asked then to enable it again they have not responded yet.