I too have been seeing a flood comment spam that I’ve traced back to not using nofollow. I posted an article a couple days ago with some of my findings and conclusions that might also be useful in this discussion:

http://smithsrus.com/nofollow-and-the-spam-war-arms-race/