There should've been a recovery process, obviously. But still this is something even google has taken wrong: automating things without a back button.
PS: Anyway Twitter is on right track with having malware protection. It just need some tuning.
What's worse, having your account suspended or having to read that message explaining the reasoning? Talk about adding insult to injury...
Obviously there needs to be a clear process to reclaim an incorrectly flagged account... But maybe you also should post barely obfuscated links to malware on Twitter.