mhansen - 12:45 pm on Jun 29, 2011 (gmt 0)

Sounds like your malware attack and subsequent blacklisting in Google resulted in someone having to manually review the site for verification of the clean up.

If that was the case... its quite possible the manual reviewer found something that triggered a quality review at the same time.