To be more specific, all samples without killswitch were samples of just the ransomware, not the worm spreading it.