I don't feel like anyone is blaming me, but they may have a right to, I dunno.
The thing that I wonder about is that as I've said I've never had this kind of problem with WordPress or the plugins before, but I've used plugins on this site that I've never used before. I apply every security patch for WordPress as soon as it comes out and they're really good about squashing bugs and security holes. I did find some errant code, however, so we didn't imagine this, but it was very simplistic in nature, really more like phishing type stuff, not hardcore virus stuff.
I use Google Chrome as my primary browser with Microsoft Security Essentials for all my other security (virus, firewall, etc.) and I guarantee I hit the homepage more than any of you. I saw the warning a couple times and it never mentioned a specific virus. And I never got infected even though I always told it to ignore the warning and proceed to the site.
So I just don't know. But when I rebuild the site (a process that's already started) I will only install plugins that I trust (have been working on my other sites) and test others elsewhere first.