I'm also agreeing with Joey, two wrongs dont make a right.

As a side question:

Once I had reported s site to their web host, as the materials posted on the site was in violation of the Terms of service.

As well I found a javascript exploit that, upon entering their site, was uploaded to your computer and would begin infection. My antivirus caught it befor it could do anything. But a week after me reporting them to the hosting company I noticed the site was still there. Should I have reported them to the isp instead of the web host?