| Threat Alias | Number of Incidents |
| Hacktool.Rootkit [Symantec] | 891 |
| FakeAlert-C.dr [McAfee] | 780 |
| Rootkit.Renos.Gen.11 [PC Tools] | 559 |
| Mal/FakeAle-C [Sophos] | 523 |
| VirTool:WinNT/Xantvi.gen!A [Microsoft] | 435 |
| TROJ_ROOTKIT.CY [Trend Micro] | 382 |
| Backdoor.Wind0s [PC Tools] | 318 |
| Backdoor.Win32.UltimateDefender [Ikarus] | 271 |
| Backdoor.Win32.UltimateDefender.a [Kaspersky Lab] | 236 |
| Backdoor.Win32.UltimateDefender.igv [Kaspersky Lab] | 185 |
| NTRootKit-AC [McAfee] | 163 |
| Trojan.Virantix.C [Symantec] | 113 |
| not-a-virus:FraudTool.Win32.UltimateDefender.cm [Kaspersky Lab] | 85 |
| Adware.Agent.ZO [PC Tools] | 74 |
| VirTool:WinNT/Xantvi.A [Microsoft] | 66 |
| not-a-virus:FraudTool.Win32.UltimateDefender.cm [Ikarus] | 52 |
| Backdoor.Win32.UltimateDefender.xm [Kaspersky Lab] | 48 |
| not-a-virus:.FraudTool.Win32.UltimateDefender.cm [Ikarus] | 42 |
| Troj/KillAV-EM [Sophos] | 27 |
| TROJ_NURECH.AF [Trend Micro] | 25 |
| Troj/Agent-HHC [Sophos] | 12 |
| Hacktool.Rootkit!sd5 [PC Tools] | 8 |
| RTKT_AGENT.BFR [Trend Micro] | 8 |
| TROJ_RENOS.AKQ [Trend Micro] | 8 |
| Mal/RootKit-A [Sophos] | 5 |
| TROJ_NURECH.AD [Trend Micro] | 4 |
| TROJ_VIRANTIX.AQ [Trend Micro] | 4 |
| Trojan.Win32.Obfuscated.mv [Kaspersky Lab] | 4 |
| Backdoor.UltimateDefender!sd6 [PC Tools] | 3 |
| Hacktool.Rootkit!sd6 [PC Tools] | 3 |
| not-a-virus:.FraudTool [Ikarus] | 3 |
| Rootkit.Agent!sd5 [PC Tools] | 3 |
| Troj/FakeAle-DQ [Sophos] | 3 |
| TROJ_NURECH.AC [Trend Micro] | 3 |
| Adware.UltimateDefend.B [PC Tools] | 2 |
| Backdoor.UltimateDefender [PC Tools] | 2 |
| Backdoor.Win32.UltimateDefender.ict [Kaspersky Lab] | 2 |
| Generic BackDoor!l [McAfee] | 2 |
| Generic PUP.x [McAfee] | 2 |
| not-a-virus:FraudTool.Win32.UltimateDefender.af [Kaspersky Lab] | 2 |
| Rootkit.Win32.Agent.un [Kaspersky Lab] | 2 |
| RTKT_AGENT.AGPQ [Trend Micro] | 2 |
| TROJ_VIRANTIX.C [Trend Micro] | 2 |
| Win-Trojan/Rootkit.29184.C [AhnLab] | 2 |
| Win-Trojan/Ultimatedefender.20992.B [AhnLab] | 2 |
| Win-Trojan/Ultimatedefender.28160.AT [AhnLab] | 2 |
| Win-Trojan/Xema.variant [AhnLab] | 2 |
| Adware.UltimateDefend.E [PC Tools] | 1 |
| Backdoor.Win32.UltimateDefender.ifz [Kaspersky Lab] | 1 |
| Backdoor.Win32.UltimateDefender.igl [Kaspersky Lab] | 1 |
| Bloodhound.Unknown [Symantec] | 1 |
| Generic Rootkit.d [McAfee] | 1 |
| Generic.dx [McAfee] | 1 |
| Infostealer.Gampass [Symantec] | 1 |
| Mal/Generic-A [Sophos] | 1 |
| not-a-virus:FraudTool.Win32.UltimateDefender.bf [Kaspersky Lab] | 1 |
| not-a-virus:FraudTool.Win32.UltimateDefender.bi [Kaspersky Lab] | 1 |
| RogueAntiSpyware.XPAntispyware [PC Tools] | 1 |
| Rootkit.Win32.Agent.evm [Kaspersky Lab] | 1 |
| Rootkit.Win32.Agent.sv [Kaspersky Lab] | 1 |
| Rootkit.Win32.Agent.vw [Ikarus] | 1 |
| Rootkit.Win32.Agent.wj [Kaspersky Lab] | 1 |
| Rootkit.Win32.Agent.wz [Kaspersky Lab] | 1 |
| Rootkit.Zlob.ITS [PC Tools] | 1 |
| RTKT_AGENT.AKTZ [Trend Micro] | 1 |
| TROJ_FAKEAV.E [Trend Micro] | 1 |
| TROJ_FAKEAV.L [Trend Micro] | 1 |
| TROJ_NURECH.AE [Trend Micro] | 1 |
| TROJ_OBFUSCAT.BG [Trend Micro] | 1 |
| TROJ_VIRANTIX.BP [Trend Micro] | 1 |
| Trojan Horse [Symantec] | 1 |
| Trojan.Obfuscated!sd5 [PC Tools] | 1 |
| Trojan.Virantix.B [Symantec] | 1 |
| Trojan.Win32.Obfuscated.mp [Kaspersky Lab] | 1 |
| VirTool.WinNT.Xantvi [Ikarus] | 1 |
| VirTool:WinNT/Rootkitdrv.EC [Microsoft] | 1 |
| Win-Trojan/Agent.36352.DP [AhnLab] | 1 |
| Win-Trojan/Rootkit.27136.B [AhnLab] | 1 |
| Win-Trojan/Ultimatedefender.27136.O [AhnLab] | 1 |
| Win-Trojan/Ultimatedefender.27648.AM [AhnLab] | 1 |
| Win-Trojan/Ultimatedefender.27648.BP [AhnLab] | 1 |
| Win-Trojan/Ultimatedefender.27648.BX [AhnLab] | 1 |
| Win-Trojan/Ultimatedefender.28160.D [AhnLab] | 1 |
| Win-Trojan/Ultimatedefender.28160.DO [AhnLab] | 1 |
| Win-Trojan/Ultimatedefender.28672.B [AhnLab] | 1 |
| Win-Trojan/Ultimatedefender.29184.M [AhnLab] | 1 |
| Win-Trojan/Ultimatedefender.32768.J [AhnLab] | 1 |
| Win-Trojan/Xantvi.29184 [AhnLab] | 1 |
| Win-Trojan/Xantvi.29184.B [AhnLab] | 1 |