Isn't this just a regular ISO-7816 smart card? In which case there's a standard USB device class for it, and certainly a standard device driver for it in any OS. It's perhaps surprising that it took until Windows 7 to get added there, but why on earth wouldn't it be stable by now?
A purposefully wonky implementation that drives you to download the 'official' drivers and their super handy payload?
Are there only 6 parts to the story? It seems to stop short of actually determining if there is malware with the software. A VirusTotal result is in no way accurate.