http://www.securelist.com/en/blog/208193522/The_Flame_Questions_and_Answers
According to the Iranian CERT team none of their 43 detection tools could find it originally
http://www.certcc.ir/index.php?name=news&file=article&sid=1894