This happened to a site I managed a while ago. The cause was a comment a user posted that was flagged as a "batch virus". The content of the comment was all text, along the lines of
@echo off
echo "Speeding up your PC!"
delete c:\Windows\system32\