I never realized that files uploaded to Virustotal are shared with the AV vendors, but that makes a good deal of sense.