Hi Pondus,
But there new variants just being released: http://support.clean-mx.com/clean-mx/viruses.php?ip=61.187.182.21&sort=id%20DESC For instance alive since: 2013-10-21 19:26:22 and will probably be up and alive for under 4 hours https://www.virustotal.com/en/file/29d88bb898210bc67dde5a1b3fc9e2294b81c8f8d90c0b12a4d06893204773e0/analysis/
Analysis for alan1998 here: http://camas.comodo.com/cgi-bin/submit?file=29d88bb898210bc67dde5a1b3fc9e2294b81c8f8d90c0b12a4d06893204773e0
This one has been up for 3 days: https://www.virustotal.com/en/file/d9c01085e7f8af6485bbe0032a9446593702fa9fff592cf891a56fb54b577a0a/analysis/#item-detail - last seen Oct 21st
See: http://anubis.iseclab.org/?action=result&task_id=1344eac6d712e39d489f5b3ae46652fa8 For the unnamed file there see: htxp://www.hackforums.net/showthread.php%3Fpid%3D25196097%2Bunnamed+file+0x00120028&oe=utf-8&hl=en&ct=clnk only available via Google cache for the security aware - (subject: htxp://www.blackhatlibrary.net/Buffer_overflow)
and more on that IP: https://www.virustotal.com/en/ip-address/61.187.182.21/information/
polonus