| Threat Alias | Number of Incidents |
| Mal/EncPk-HP [Sophos] | 9 |
| Suspicious.MH690 [Symantec] | 6 |
| Mal/FakeVirPk-A, Mal/TibsPk-A [Sophos] | 4 |
| Downloader-BON [McAfee] | 2 |
| Infostealer.Banker.C [Symantec] | 2 |
| Mal/EncPk-IF, Mal/EncPk-HH [Sophos] | 2 |
| Mal/TibsPk-A [Sophos] | 2 |
| Troj/FakeAle-LE [Sophos] | 2 |
| Trojan Horse [Symantec] | 2 |
| Trojan-Spy.Win32.Zbot [Ikarus] | 2 |
| Win32/IRCBot.worm.variant [AhnLab] | 2 |
| FakeAlert-DA [McAfee] | 1 |
| Generic PWS.y [McAfee] | 1 |
| PWS:Win32/Zbot.gen!B [Microsoft] | 1 |
| Trojan.Crypt [Ikarus] | 1 |
| Trojan.Win32.Winwebsec [Ikarus] | 1 |
| Trojan-Dropper.Agent [Ikarus] | 1 |
| Trojan-Dropper.Win32.Agent.ahfu [Kaspersky Lab] | 1 |
| Trojan-Dropper.Win32.Agent.ahpg [Kaspersky Lab] | 1 |
| Trojan-PSW.Banker [PC Tools] | 1 |
| Trojan-Spy.Win32.Zbot.tnm [Kaspersky Lab] | 1 |
| Trojan-Spy.Win32.Zbot.uba [Kaspersky Lab] | 1 |