I just scanned another installer/EXE with VirusTotal. I've come to depend on this crappy service owned by the evil Google, in spite of its ambiguous messages and extremely confusing interface, because I don't have any other choice.
But I never feel confident about the result, especially not when some engines DO detect malware:
"F-Secure" says it's "Trojan.TR/Dropper.Gen", for example. Why would it say that? What makes it falsely (?) report that when other vendors say it's clean? Does this mean that if I were running and paying for "F-Secure", I would sit there with warnings on my screen and it would not allow me to install the program without jumping through hoops?
And "Cynet" says "Malicious (score: 85)". So it's 85% sure that it's malware? That makes me 100% unsure about it.
I find that my "Windows Defender" virtually never reports that anything is malware. I don't know if that's a good or bad thing.
Maybe I should stop using it entirely, because I never really trust the results or know how to interpret them. Sometimes, many/most report malware even though it doesn't seem to be, for example Bitcoin Core downloaded from the "official" website(s).
I don't understand how any "normal" person could ever have any use of anti-virus software and VirusTotal, because I'd likely be considered a "poweruser" with decades of computer experience and many years of worrying and trying to desperately figure out how to stay secure, and "even" I feel absolutely lost and essentially must blindly trust that it doesn't contain trojans and spyware.
(Let's not get into the topic of Windows 10 itself...)
PS: I'm aware of Qubes OS, but it has too many technical and practical problems to be seriously considered for somebody like me who only can fit one physical computer in my limited living space.