how long the malware was there, if it stole any information, or changed anything?
Is it at all possible to detect where it came from, or any other history about it?
If I suspect a particular person of sending malware to my computer, (for example, everytime a specific person sends an email – every few months – I have warnings pop up from my security system) where would I report this suspicion?

Regarding mail:
It often happens that someones computer is compromised (malware) which in turn forwards itself to everyone in their address book…without any signs of these things going on.
Any unsolicited mail from strangers should be marked ‘spam’ & deleted.
Any and all attachments in mail should be suspect immediately; even from someone you know (again, they may be compromised and not know it), no matter how inciting the subject line is.
These installations (often from a browser ‘drive-by download’) may be there for hours, perhaps days, and you’d not know it…and it may not be detected until your A-V has included it’s ‘footprint’ of known malware. Again, it could be hours perhaps days until that happens, if at all.
The best proactive defense is to lock down the browser (the main conduit into the system).
The following tips help, but methods (“vectors”) are dynamic.
FIREFOX: Tools> Options> Privacy> top drop menu set to “Firefox will use custom settings…”> Check ‘Accept Cookies from sites’
►Un-Check ‘Accept 3rd Party cookies’.
A good collection of effective add-on’s (Official Mozilla) is here:https://addons.mozilla.org/collections/d…
AdBlock Plus (with ‘subscription’ added) & “Better Privacy” also help defray rubbish.
►► At minimum, get the #1 item for malware prevention: NoScript, which constrains automagically fetching & deployment of potentially tainted assets.
[see this page for how it works, and how to use it…very straight forward; http://noscript.net/features#contentbloc…
Another fairly good strategy is to open all applications (your browser, the mail program, or anything that reaches out to the ‘Net) in “Sandboxie”, which (in theory) contains all incoming ‘stuff’ in a box, keeping it from the OS itself.http://www.sandboxie.com/
Using Windows on the Internet demands constant vigilance, and relentless threat landscape awareness; something they omit telling you when you buy this OS.
Look into a ‘dual-boot’ arrangement of Linux and Windows: Linux for ‘Net tasks, and Windows isolated from any contact with Internet.
The peace of mind alone is worth the small amount of time needed to familiarize yourself with it.
One source to see how it’s done: http://www.psychocats.net/ubuntu/install…
Windows enslaves it’s users to full time babysitting.
you can’t report that thing but you can avoid those things using internet security