| Threat Alias | Number of Incidents |
| AdWare.BHO [Ikarus] | 315 |
| Trojan.Fakeavalert.B [Symantec] | 172 |
| Trojan Horse [Symantec] | 124 |
| AdWare.BHO.aes [Ikarus] | 123 |
| Generic Downloader.x [McAfee] | 115 |
| Trojan-Downloader.Win32.Renos [Ikarus] | 91 |
| Mal/Renos-B [Sophos] | 79 |
| Trojan.Skintrim [Symantec] | 73 |
| Trojan.Win32.Agent.anlc [Kaspersky Lab] | 73 |
| Mal/EncPk-CZ [Sophos] | 72 |
| Trojan.Fakeavalert [Symantec] | 67 |
| Mal/Generic-A [Sophos] | 56 |
| Downloader-BKT [McAfee] | 54 |
| Adware.BHO.GEN [PC Tools] | 47 |
| Packed.Generic.187 [Symantec] | 42 |
| Generic Dropper.bw [McAfee] | 34 |
| W32.Spybot.Worm [Symantec] | 28 |
| not-a-virus:NetTool.Win32.Agent.az [Kaspersky Lab] | 26 |
| Trojan.FakeAlert [PC Tools] | 25 |
| Trojan.Win32.FraudPack.gen [Kaspersky Lab] | 24 |
| Hoax.Win32.Renos.vawl [Kaspersky Lab] | 22 |
| Troj/Agent-HYT [Sophos] | 22 |
| Troj/BHO-HY [Sophos] | 22 |
| Trojan-Downloader.Win32.Renos.AY [Ikarus] | 20 |
| Troj/FakeAle-JM [Sophos] | 19 |
| Trojan.Win32.Agent.arat [Kaspersky Lab] | 19 |
| Hoax.Win32.Renos.ffv [Kaspersky Lab] | 17 |
| Troj/Renos-BJ [Sophos] | 16 |
| FakeAlert-EQ [McAfee] | 14 |
| Mal/FakeVirPk-A [Sophos] | 14 |
| Troj/Renos-BX [Sophos] | 14 |
| Trojan.Zlob [Symantec] | 14 |
| Downloader [Symantec] | 13 |
| Hoax.Win32.Renos.fgb [Kaspersky Lab] | 13 |
| Mal/EncPk-II [Sophos] | 13 |
| Mal/FakeAV-AM [Sophos] | 13 |
| Packed.Win32.Katusha.a [Kaspersky Lab] | 13 |
| SecurityRisk.Downldr [Symantec] | 13 |
| Downloader.MisleadApp [Symantec] | 12 |
| Hoax.Win32.Renos.ffd [Kaspersky Lab] | 12 |
| Troj/BHO-JO [Sophos] | 12 |
| Trojan.Win32.FraudPack [Ikarus] | 12 |
| Trojan.FakeAV [Symantec] | 10 |
| Trojan-Downloader.Win32.Agent.apxv [Kaspersky Lab] | 10 |
| Generic PUP.x [McAfee] | 9 |
| Troj/Agent-HYS [Sophos] | 9 |
| Troj/Dload-DU [Sophos] | 9 |
| Trojan.Win32.Agent.agfc [Kaspersky Lab] | 9 |
| Trojan.Win32.Agent.amea [Kaspersky Lab] | 9 |
| Trojan.Win32.Agent.anvm [Kaspersky Lab] | 9 |
| Trojan.Win32.BHO.lti [Kaspersky Lab] | 9 |
| FakeAlert-av360.dll [McAfee] | 8 |
| Hoax.Win32.Renos.evq [Kaspersky Lab] | 8 |
| Troj/Agent-HZV [Sophos] | 8 |
| Troj/BHO-HI [Sophos] | 8 |
| Troj/Renos-BG [Sophos] | 8 |
| Trojan.Win32.Agent.aguj [Kaspersky Lab] | 8 |
| Trojan.Win32.Agent.atdw [Kaspersky Lab] | 8 |
| Trojan.Win32.FraudPack.pre [Kaspersky Lab] | 8 |
| Virus.Win32.Fraudo [Ikarus] | 8 |
| Win-Trojan/Xema.variant [AhnLab] | 8 |
| Mal/Behav-238, Mal/FakeVirPk-A [Sophos] | 7 |
| Mal/Renos-D [Sophos] | 7 |
| Puper [McAfee] | 7 |
| Trojan.Monder.tqc [Ikarus] | 7 |
| Trojan.Win32.Monder.tqc [Kaspersky Lab] | 7 |
| Trojan-Downloader.Win32.FraudLoad [Ikarus] | 7 |
| Trojan-Dropper.Win32.Agent.zew [Kaspersky Lab] | 7 |
| Trojan-Proxy.Agent.BCB [Ikarus] | 7 |
| Mal/EncPk-CZ, Troj/Virtum-Gen [Sophos] | 6 |
| Packed.Win32.Katusha.b [Kaspersky Lab] | 6 |
| Troj/Agent-HYA [Sophos] | 6 |
| Trojan.Win32.Agent.agdd [Kaspersky Lab] | 6 |
| Trojan.Win32.BHO.hbs [Kaspersky Lab] | 6 |
| Trojan.Win32.BHOLamp.hcx [Kaspersky Lab] | 6 |
| Trojan-Downloader.Win32.FraudLoad.vbos [Kaspersky Lab] | 6 |
| Trojan-Dropper.Agent [Ikarus] | 6 |
| Generic FakeAlert.a [McAfee] | 5 |
| Generic PUP.z [McAfee] | 5 |
| Hoax.Win32.Renos.vavk [Kaspersky Lab] | 5 |
| Suspicious.Vundo [Symantec] | 5 |
| Troj/Virtum-Gen [Sophos] | 5 |
| Trojan.Win32.agent.akti [Kaspersky Lab] | 5 |
| Trojan.Win32.Agent.amzz [Kaspersky Lab] | 5 |
| Win32.SuspectCrc [Ikarus] | 5 |
| Hoax.Win32.Renos.evo [Kaspersky Lab] | 4 |
| Troj/Agent-HXG [Sophos] | 4 |
| Troj/BHO-LU [Sophos] | 4 |
| Troj/FakeVir-GR [Sophos] | 4 |
| Trojan.Vundo [Symantec] | 4 |
| Trojan.Win32.Agent.alts [Kaspersky Lab] | 4 |
| Trojan.Win32.Agent.amdr [Kaspersky Lab] | 4 |
| Trojan.Win32.Agent.aric [Kaspersky Lab] | 4 |
| Trojan.Win32.BHOLamp [Ikarus] | 4 |
| Trojan.Win32.FraudPack.krk [Kaspersky Lab] | 4 |
| Trojan.Win32.FraudPack.psk [Kaspersky Lab] | 4 |
| Vundo [McAfee] | 4 |
| Generic.dx [McAfee] | 3 |
| Mal/FakeAV-AM, Mal/FakeVirPk-A [Sophos] | 3 |
| Suspicious.Vundo.2 [Symantec] | 3 |