| Threat Alias | Number of Incidents |
| Backdoor:WinNT/Nuwar.D!sys [Microsoft] | 25 |
| Backdoor.Tidserv [Symantec] | 17 |
| Generic BackDoor [McAfee] | 6 |
| Packed.Win32.Krap.e [Kaspersky Lab] | 6 |
| Troj/Rootkit-ED [Sophos] | 6 |
| Trojan:WinNT/Tibs.gen!A [Microsoft] | 6 |
| Backdoor.Agent!sd6 [PC Tools] | 5 |
| Trojan:WinNT/Alureon.D [Microsoft] | 5 |
| Backdoor.Win32.Agent.rfx [Kaspersky Lab] | 4 |
| Trojan:Win32/Tibs.HH [Microsoft] | 4 |
| Backdoor.Win32.Agent.rhz [Kaspersky Lab] | 3 |
| BackDoor-DVU [McAfee] | 3 |
| Troj/Meredrop-A [Sophos] | 3 |
| Trojan.Fakeavalert [Symantec] | 3 |
| Trojan.Generic [Ikarus] | 3 |
| W32/Nuwar.worm [McAfee] | 3 |
| Backdoor.Tidserv [PC Tools] | 2 |
| Backdoor.Tidserv!sd6 [PC Tools] | 2 |
| Trojan:Win32/Tibs.HS [Microsoft] | 2 |
| Backdoor.Win32.Agent.oty [Kaspersky Lab] | 1 |
| Backdoor.Win32.Agent.oua [Kaspersky Lab] | 1 |
| Backdoor.Win32.Agent.piv [Kaspersky Lab] | 1 |
| Backdoor.Win32.Agent.poi [Kaspersky Lab] | 1 |
| Backdoor.Win32.Agent.qev [Kaspersky Lab] | 1 |
| Backdoor.Win32.Agent.qjr [Kaspersky Lab] | 1 |
| Backdoor.Win32.Agent.rwh [Kaspersky Lab] | 1 |
| Backdoor.Win32.TDSS.ael [Kaspersky Lab] | 1 |
| Backdoor.Win32.TDSS.amx [Kaspersky Lab] | 1 |
| Backdoor.Win32.TDSS.aoa [Kaspersky Lab] | 1 |
| Backdoor.Win32.TDSS.aos [Kaspersky Lab] | 1 |
| Backdoor.Win32.TDSS.aqm [Kaspersky Lab] | 1 |
| Backdoor.WinNT.Nuwar.D [Ikarus] | 1 |
| Generic.dx [McAfee] | 1 |
| Mal/Generic-A [Sophos] | 1 |
| Rootkit.TDss.F [Ikarus] | 1 |
| Rootkit.Win32.Agent.cku [Kaspersky Lab] | 1 |
| Rootkit.Win32.TDSS [Ikarus] | 1 |
| Trojan:WinNT/Tibs.gen!C [Microsoft] | 1 |
| Win-Trojan/Tdssdrv.58880.S [AhnLab] | 1 |