[bell-cot]

Just "we detected malware spreading from your site" would sure narrow things down a lot. Time to inspect the web server access logs, 'diff' the site contents with a month-old backup, etc.

[mrguyorama]

They should be doing exactly that anyway.

[bell-cot]

Just as all Americans should be driving at no more than the speed limit...