The problem with sending a message to people telling them they're infected isn't that it's unethical, it's that they'll just think it's some trojan trying to get access and close the window.
Sounds like a good idea to me.
And then the spammers will spoof it and get people to click on apparently legitimate messages.
What the eyes see and the ears hear, the mind believes...