Considering ufasoft hasn't released the new source and the recent virus warnings, i would start thinking that he is the one spreading the botnet.

He was asked many times in this thread and he just ignored the requests(didn't even bother answering). I don't really need the source, but if he is spreading the botnet, it's very likely the current exe to be "infected" as well.