F-Secure works extensively with ISPs and operators. We were assisting several large operators last year during the remediation of the DNSChanger malware.
There was an interesting study recently done by researchers at Georgia Tech. They compared how different ISPs responded to DNSChanger and what were the differences in the outcome.
You can download a presentation on their findings from here.
