Here is a concept....
What if anti virus soft ware reported all that they find to a common database- reporting when and where the virus was found?
You might be able to locate the source of the 'outbreak' and then home in on the criminal that started it....
Am I too Naive?