Sorry for the slow progress, working as fast as I can.
Compromised addresses:
...
More to come; will update this post as I find more.
Consider spending the coins off to another fresh address of your own, editing your post, and inviting the person come get them from you. Who knows, the victim could re-run the program and send a fresh copy to the malware author.