Well first off, that is not the only method of acquiring samples. Second, the VirusTotal report uses default settings right? So it uses limited heuristics, therefore providing an inaccurate representation of real world AV results for those of us who properly configured our scanners. Am I right?