Waste of time.
I remember my first virus, off of a floppy disc, setting off klaxons and flashing red warnings from Central Point Anti-virus.
For many years I reported such things to wherever they came from, and went to considerable lengths to point out security problems. I was the poster-boy for proactive user behaviour.
Ultimately I stopped bothering when it became clear that the majority of companies and institutions just don't care, and especially don't want customers wasting their time on such things.
I guess there was just one too many times when the offending party replied with "Don't bother your little head with it dear."
There a few companies that treat these things seriously, and I'll bend over backwards to help them, but in most cases I've simply given up.