| Threat Alias | Number of Incidents |
| Trojan Horse [Symantec] | 63 |
| Generic.dx [McAfee] | 24 |
| Mal/Generic-A [Sophos] | 24 |
| W32.SillyFDC [Symantec] | 24 |
| Backdoor.Agent [PC Tools] | 18 |
| Generic Downloader.k [McAfee] | 17 |
| TROJ_DLOADER.AUU [Trend Micro] | 16 |
| Trojan-Downloader.Win32.Agent.akh [Kaspersky Lab] | 16 |
| Downloader [Symantec] | 14 |
| Backdoor.Trojan [Symantec] | 12 |
| Win-Trojan/Xema.variant [AhnLab] | 12 |
| New Malware.u [McAfee] | 11 |
| Trojan-Downloader.Win32.Banload [Ikarus] | 11 |
| W32.Spybot.Worm [Symantec] | 11 |
| Email-Worm.LovGate!sd5 [PC Tools] | 8 |
| Infostealer.Gampass [Symantec] | 8 |
| W32.IRCBot [Symantec] | 8 |
| W32.Lovgate.R@mm [Symantec] | 8 |
| W32/Lovgate.x@MM [McAfee] | 8 |
| Downloader.gen.a [McAfee] | 7 |
| Email-Worm.Win32.LovGate.x [Kaspersky Lab] | 7 |
| Generic BackDoor [McAfee] | 7 |
| IRC/Client [McAfee] | 6 |
| Trojan.Win32.VB.uqe [Kaspersky Lab] | 6 |
| Trojan-Downloader.Win32.Small [Ikarus] | 6 |
| VirTool:Win32/VBInject.AQ [Microsoft] | 6 |
| W32.Mikbaland [Symantec] | 6 |
| Email-Worm.Win32.Brontok.ai [Kaspersky Lab] | 5 |
| Generic PWS.y [McAfee] | 5 |
| I-Worm.Brontok.EJ [PC Tools] | 5 |
| Keylog-Perfect [McAfee] | 5 |
| New Malware.hr [McAfee] | 5 |
| not-a-virus:Monitor.Win32.Perflogger.ad [Kaspersky Lab] | 5 |
| Spyware.Perfect [Symantec] | 5 |
| TROJ_SMALL.BYV [Trend Micro] | 5 |
| Trojan.Win32.VB [Ikarus] | 5 |
| Trojan-Spy.Win32.VB.qq [Kaspersky Lab] | 5 |
| W32/Rontokbro.gen@MM [McAfee] | 5 |
| Win32/IRCBot.worm.Gen [AhnLab] | 5 |
| Worm:Win32/Pushbot.gen [Microsoft] | 5 |
| Backdoor.Bifrose [Symantec] | 4 |
| Backdoor.Rbot [Ikarus] | 4 |
| Backdoor.Rbot.AEU [PC Tools] | 4 |
| Backdoor.Win32.Rbot.gen [Kaspersky Lab] | 4 |
| Backdoor:Win32/Poisonivy.E [Microsoft] | 4 |
| BehavesLikeWin32.ExplorerHijack [Ikarus] | 4 |
| Generic Downloader.c [McAfee] | 4 |
| Generic Downloader.x!bt [McAfee] | 4 |
| Generic PWS.f [McAfee] | 4 |
| Generic.dx!fjp [McAfee] | 4 |
| IRC Trojan [Symantec] | 4 |
| Mal/Packer [Sophos] | 4 |
| New Malware.d [McAfee] | 4 |
| TROJ_AGENT.ADVT [Trend Micro] | 4 |
| Trojan.Win32.Buzus [Ikarus] | 4 |
| Trojan-Downloader.Win32.Small.jrq [Kaspersky Lab] | 4 |
| TrojanDownloader:Win32/Troxen!rts [Microsoft] | 4 |
| Trojan-Spy.VB!sd5 [PC Tools] | 4 |
| Trojan-Spy.Win32.Kronos.b [Kaspersky Lab] | 4 |
| Trojan-Spy.Win32.VB.pi [Kaspersky Lab] | 4 |
| TSPY_VB.FLU [Trend Micro] | 4 |
| Virus.Win32.VB.cm [Kaspersky Lab] | 4 |
| W32/Autorun.worm.i.gen [McAfee] | 4 |
| W32/Rbot-Fam, Mal/IRCBot-B [Sophos] | 4 |
| W32/Sdbot.worm.gen.t [McAfee] | 4 |
| W32/Virut.gen [McAfee] | 4 |
| Win-Trojan/Downloader.19968.LJ [AhnLab] | 4 |
| Worm.Hamweg.Gen [PC Tools] | 4 |
| Worm.VB.EQW [PC Tools] | 4 |
| Worm.Win32.AutoRun.bdq [Kaspersky Lab] | 4 |
| Worm:Win32/Wootbot.EG [Microsoft] | 4 |
| WORM_AUTORUN.ABI [Trend Micro] | 4 |
| Backdoor.Win32.Poison.pg [Kaspersky Lab] | 3 |
| MonitoringTool:Win32/PerfectKeylogger [Microsoft] | 3 |
| Net-Worm.Spybot [PC Tools] | 3 |
| New Malware.eb [McAfee] | 3 |
| not-a-virus:Client-IRC.Win32.mIRC.591 [Kaspersky Lab] | 3 |
| not-a-virus:Monitor.Win32.Perflogger [Ikarus] | 3 |
| Packed/nPack [PC Tools] | 3 |
| PE_VIRUT.XP [Trend Micro] | 3 |
| Suspicious.MH690 [Symantec] | 3 |
| Trojan:Win32/Malagent [Microsoft] | 3 |
| Trojan-Dropper.Win32.Sramler.i [Kaspersky Lab] | 3 |
| VirTool.Win32.VBInject [Ikarus] | 3 |
| Virus.Win32.Poison [Ikarus] | 3 |
| Virus.Win32.Virut.q [Kaspersky Lab] | 3 |
| Virus:Win32/Virut.AE [Microsoft] | 3 |
| W32.HLLO.A [Symantec] | 3 |
| W32.Rontokbro.K@mm [Symantec] | 3 |
| W32/Vetor-A [Sophos] | 3 |
| Worm.Win32.AutoRun [Ikarus] | 3 |
| WORM_VB.AGY [Trend Micro] | 3 |
| Backdoor.Sdbot [Symantec] | 2 |
| Backdoor.Win32.Agent.aga [Kaspersky Lab] | 2 |
| Backdoor.Win32.Bifrose [Ikarus] | 2 |
| Backdoor.Win32.HacDef.ae [Ikarus] | 2 |
| Backdoor.Win32.Rbot.ety [Kaspersky Lab] | 2 |
| Backdoor.Win32.SdBot [Ikarus] | 2 |
| BackDoor-AWQ [McAfee] | 2 |
| BKDR_HAMWEQ.J [Trend Micro] | 2 |