Posted Friday 3rd April 2009 15:08 GMT
How about...
How about this for a revolutionary idea...
As this analysis is based on the IPs of the infected machines, how about emailing the ISPs who control these IPs and asking them to inform the user who had that IP allocated at the time of their infection, and pass them some useful links to help them remove the infection...
The mechanism almost already exists on some ISPs to allow the RIAA to pump out the automated "You are an evil pirate, prepare to be cut off!" emails.
This does assume the ISPs give a sh*t of course!