| Threat Alias | Number of Incidents |
| Hacktool.Rootkit [Symantec] | 803 |
| FakeAlert-C.dr [McAfee] | 697 |
| Rootkit.Renos.Gen.11 [PC Tools] | 558 |
| Mal/FakeAle-C [Sophos] | 438 |
| VirTool:WinNT/Xantvi.gen!A [Microsoft] | 393 |
| TROJ_ROOTKIT.CY [Trend Micro] | 382 |
| Backdoor.Win32.UltimateDefender.a [Kaspersky Lab] | 234 |
| Backdoor.Win32.UltimateDefender [Ikarus] | 190 |
| NTRootKit-AC [McAfee] | 163 |
| Trojan.Virantix.C [Symantec] | 111 |
| Backdoor.Win32.UltimateDefender.igv [Kaspersky Lab] | 104 |
| not-a-virus:FraudTool.Win32.UltimateDefender.cm [Kaspersky Lab] | 86 |
| Adware.Agent.ZO [PC Tools] | 74 |
| VirTool:WinNT/Xantvi.A [Microsoft] | 66 |
| not-a-virus:FraudTool.Win32.UltimateDefender.cm [Ikarus] | 52 |
| Backdoor.Win32.UltimateDefender.xm [Kaspersky Lab] | 48 |
| not-a-virus:.FraudTool.Win32.UltimateDefender.cm [Ikarus] | 42 |
| Troj/KillAV-EM [Sophos] | 27 |
| TROJ_NURECH.AF [Trend Micro] | 25 |
| Troj/Agent-HHC [Sophos] | 12 |
| Hacktool.Rootkit!sd5 [PC Tools] | 8 |
| RTKT_AGENT.BFR [Trend Micro] | 8 |
| TROJ_RENOS.AKQ [Trend Micro] | 8 |
| TROJ_NURECH.AD [Trend Micro] | 4 |
| TROJ_VIRANTIX.AQ [Trend Micro] | 4 |
| Hacktool.Rootkit!sd6 [PC Tools] | 3 |
| not-a-virus:.FraudTool [Ikarus] | 3 |
| Troj/FakeAle-DQ [Sophos] | 3 |
| TROJ_NURECH.AC [Trend Micro] | 3 |
| Adware.UltimateDefend.B [PC Tools] | 2 |
| Backdoor.UltimateDefender [PC Tools] | 2 |
| Backdoor.UltimateDefender!sd6 [PC Tools] | 2 |
| Backdoor.Win32.UltimateDefender.ict [Kaspersky Lab] | 2 |
| Generic BackDoor!l [McAfee] | 2 |
| not-a-virus:FraudTool.Win32.UltimateDefender.af [Kaspersky Lab] | 2 |
| RTKT_AGENT.AGPQ [Trend Micro] | 2 |
| TROJ_VIRANTIX.C [Trend Micro] | 2 |
| Win-Trojan/Rootkit.29184.C [AhnLab] | 2 |
| Win-Trojan/Ultimatedefender.20992.B [AhnLab] | 2 |
| Win-Trojan/Ultimatedefender.28160.AT [AhnLab] | 2 |
| Win-Trojan/Xema.variant [AhnLab] | 2 |
| Adware.UltimateDefend.E [PC Tools] | 1 |
| Backdoor.Win32.UltimateDefender.igl [Kaspersky Lab] | 1 |
| Generic PUP.x [McAfee] | 1 |
| Generic Rootkit.d [McAfee] | 1 |
| not-a-virus:FraudTool.Win32.UltimateDefender.bf [Kaspersky Lab] | 1 |
| not-a-virus:FraudTool.Win32.UltimateDefender.bi [Kaspersky Lab] | 1 |
| RogueAntiSpyware.XPAntispyware [PC Tools] | 1 |
| Rootkit.Zlob.ITS [PC Tools] | 1 |
| RTKT_AGENT.AKTZ [Trend Micro] | 1 |
| TROJ_FAKEAV.E [Trend Micro] | 1 |
| TROJ_FAKEAV.L [Trend Micro] | 1 |
| TROJ_NURECH.AE [Trend Micro] | 1 |
| TROJ_VIRANTIX.BP [Trend Micro] | 1 |
| VirTool.WinNT.Xantvi [Ikarus] | 1 |
| Win-Trojan/Agent.36352.DP [AhnLab] | 1 |
| Win-Trojan/Rootkit.27136.B [AhnLab] | 1 |
| Win-Trojan/Ultimatedefender.27136.O [AhnLab] | 1 |
| Win-Trojan/Ultimatedefender.27648.AM [AhnLab] | 1 |
| Win-Trojan/Ultimatedefender.27648.BP [AhnLab] | 1 |
| Win-Trojan/Ultimatedefender.27648.BX [AhnLab] | 1 |
| Win-Trojan/Ultimatedefender.28160.D [AhnLab] | 1 |
| Win-Trojan/Ultimatedefender.28160.DO [AhnLab] | 1 |
| Win-Trojan/Ultimatedefender.28672.B [AhnLab] | 1 |
| Win-Trojan/Ultimatedefender.29184.M [AhnLab] | 1 |
| Win-Trojan/Xantvi.29184 [AhnLab] | 1 |
| Win-Trojan/Xantvi.29184.B [AhnLab] | 1 |