| Threat Alias | Number of Incidents |
| Mal/Dorf-F [Sophos] | 224 |
| Mal/FakeVirPk-A [Sophos] | 108 |
| Trojan:Win32/Tibs.IU [Microsoft] | 90 |
| Trojan:Win32/Tibs.gen!ldr [Microsoft] | 73 |
| Generic.dx [McAfee] | 56 |
| Trojan.Win32.Tibs [Ikarus] | 56 |
| Gen.Trojan [Ikarus] | 43 |
| Trojan.Crypt [Ikarus] | 36 |
| Trojan-Dropper.Agent [Ikarus] | 35 |
| Generic Downloader.x [McAfee] | 32 |
| BKDR_AGENT.PEP [Trend Micro] | 30 |
| Mal/Generic-A [Sophos] | 30 |
| Backdoor.Win32.Agent.adqt [Kaspersky Lab] | 24 |
| Trojan.Fakeavalert [Symantec] | 21 |
| Trojan.Initbar [Symantec] | 20 |
| Virus.Win32.VunDrop [Ikarus] | 19 |
| Trojan:Win32/Fakeinit [Microsoft] | 17 |
| Trojan-Downloader.Win32.Agent.bdvd [Kaspersky Lab] | 15 |
| Trojan-Downloader.Win32.Agent.bjzg [Kaspersky Lab] | 15 |
| Trojan Horse [Symantec] | 14 |
| Mal/Dorf-F, Mal/EncPk-HL, Mal/FakeVirPk-A [Sophos] | 13 |
| Trojan-Downloader.Win32.Agent.bqqr [Kaspersky Lab] | 12 |
| Downloader [Symantec] | 9 |
| Trojan.Vundo [Symantec] | 9 |
| Trojan-Downloader.Win32.Agent.bifo [Kaspersky Lab] | 9 |
| Trojan-Spy.Win32.Agent.acrb [Kaspersky Lab] | 9 |
| Win-Trojan/Xema.variant [AhnLab] | 9 |
| Trojan-Downloader.Win32.Agent.bphc [Kaspersky Lab] | 8 |
| Adware.VirtuMonde [Symantec] | 7 |
| Backdoor.Agent!sd6 [PC Tools] | 7 |
| Trojan.Initbar!sd6 [PC Tools] | 7 |
| Trojan.Vundo.B [Symantec] | 7 |
| Trojan-Downloader.Agent!sd6 [PC Tools] | 7 |
| Email-Worm.Win32.Zhelatin.ain [Kaspersky Lab] | 6 |
| Generic FakeAlert.a [McAfee] | 6 |
| Spyware-Ssppyy [McAfee] | 6 |
| Troj/Agent-HLC [Sophos] | 6 |
| Troj/Agent-INX [Sophos] | 6 |
| Trojan.Vundo!sd6 [PC Tools] | 6 |
| Trojan.Win32.FakeSmav [Ikarus] | 6 |
| Trojan.Win32.Multis [Ikarus] | 6 |
| Trojan.Win32.Multis.de [Kaspersky Lab] | 6 |
| Trojan.Win32.Pakes.nhf [Kaspersky Lab] | 6 |
| Trojan:Win32/FakeSmav [Microsoft] | 6 |
| Trojan-Spy.Win32.Agent.amhu [Kaspersky Lab] | 6 |
| Win-Trojan/Pakes.27648.G [AhnLab] | 6 |
| Trojan-Downloader.Win32.Agent.bgjk [Kaspersky Lab] | 5 |
| Win-Trojan/Agent.26624.GV [AhnLab] | 5 |
| Downloader.MisleadApp [Symantec] | 4 |
| Mal/EncPk-MX, Mal/Behav-331, Mal/Dorf-F, Mal/FakeVirPk-A [Sophos] | 4 |
| Troj/Agent-IPQ [Sophos] | 4 |
| Trojan.FakeAV [Symantec] | 4 |
| Trojan.Fakeavalert!sd6 [PC Tools] | 4 |
| Trojan:Win32/Orsam!rts [Microsoft] | 4 |
| Trojan:Win32/Tibs.gen!O [Microsoft] | 4 |
| Trojan-Downloader.Win32.Agent.bkyu [Kaspersky Lab] | 4 |
| Trojan-Spy.Agent!sd6 [PC Tools] | 4 |
| Trojan-Spy.Win32.Agent.eyc [Kaspersky Lab] | 4 |
| Win-Appcare/Agent.27648 [AhnLab] | 4 |
| Email-Worm.Win32.Zhelatin [Ikarus] | 3 |
| FakeAlert-CK.dll [McAfee] | 3 |
| Generic PWS.y [McAfee] | 3 |
| Win32/Zhelatin.worm.22016.E [AhnLab] | 3 |
| FakeAlert-DG [McAfee] | 2 |
| Mal/Behav-331 [Sophos] | 2 |
| Packed.Win32.Tibs [Ikarus] | 2 |
| Packed.Win32.Tibs.ly [Kaspersky Lab] | 2 |
| Trojan.Win32.Fakeinit [Ikarus] | 2 |
| Trojan-Downloader.Win32.Agent.beva [Kaspersky Lab] | 2 |
| Trojan-Downloader.Win32.Agent.cdoz [Kaspersky Lab] | 2 |
| Trojan-Dropper.Agent [PC Tools] | 2 |
| Trojan-Spy.Win32.Agent [Ikarus] | 2 |
| Win-Trojan/Agent.27648.JB [AhnLab] | 2 |
| Win-Trojan/Xema.27648.E [AhnLab] | 2 |
| Backdoor.Win32.Agent.admr [Kaspersky Lab] | 1 |
| Backdoor.Win32.Delf.kij [Kaspersky Lab] | 1 |
| FakeAlert-AB [McAfee] | 1 |
| Mal/EncPk-HL [Sophos] | 1 |
| Trojan:Win32/Tibs.gen!lds [Microsoft] | 1 |
| Trojan-Downloader.Win32.Agent.bfnp [Kaspersky Lab] | 1 |
| Trojan-PWS.Win32.Delf [Ikarus] | 1 |
| Trojan-Spy.Win32.Agent.ajwp [Kaspersky Lab] | 1 |
| Win-Trojan/Agent.27648.HV [AhnLab] | 1 |
| Win-Trojan/Agent.27648.JA [AhnLab] | 1 |