Malware Question

Well, let me start off by saying I'm not too sure where to post this, but this seemed like the only place that would fit.

Anyways, I'm sure most of us provide some form of tech support here and there, and on more than one occasion, I get asked "where did I get infected from"?

I usually bust out the regular "games, porn, music downloading, porn, and random misc websites", but, I was wondering if there was any REAL way to tell where (directly) it came from. Which website the file was downloaded from and what not.

Any advice would be appreciated.

 

There is some information here:

http://www.bleepingcomputer.com/forums/topic287710.html

 

Log2timeline: free computer event and artifact timeline analysis

 

it's hard to do that it's called forensic investigation
usually large compromised companies hire forensic company to do that

the best way is to make them read the link posted by thekid7