Yeah but I actually can argue that we should here.

There should be some negative consequences for DDOSing dbzer0 at a minimum. There should be some negative consequences for releasing software, gratis or otherwise, with an opt-out hidden centralized blacklist. Being made fun of for a few days is a perfectly reasonable and proportional consequence of tricking people into using malware. In a few days time, we'll forget about Patrick and his malware, and hopefully he can move on with his life.