| Threat Alias | Number of Incidents |
| Generic Rootkit.d [McAfee] | 21,842 |
| Hacktool.Rootkit [Symantec] | 21,334 |
| Rootkit.Win32.Agent.ex [Kaspersky Lab] | 21,324 |
| TrojanSpy:Win32/Ursnif [Microsoft] | 21,168 |
| TROJ_ROOTKIT.FX [Trend Micro] | 20,286 |
| Rootkit.Agent.EX [PC Tools] | 20,210 |
| Troj/Rootkit-DK [Sophos] | 20,139 |
| Rootkit.Win32.Agent.ex [Ikarus] | 17,168 |
| Win-Trojan/Agent.8192.BP [AhnLab] | 7,056 |
| Rootkit.Agent.CZBC [PC Tools] | 882 |
| Infostealer.Snifula [Symantec] | 728 |
| TROJ_AGENT.CWT [Trend Micro] | 644 |
| Rootkit.Win32.Agent.sz [Kaspersky Lab] | 448 |
| Mal/Generic-A [Sophos] | 170 |
| VirTool:WinNT/Ursnif.A [Microsoft] | 168 |
| Win-Trojan/Agent.7680.CN [AhnLab] | 112 |
| Generic RootKit.a [McAfee] | 42 |
| Rootkit.Agent!ct [PC Tools] | 28 |
| Rootkit.Win32.Agent.ef [Kaspersky Lab] | 21 |
| RTKT_AGENT.ADRX [Trend Micro] | 20 |
| Infostealer.Snifula.B [Symantec] | 16 |
| PWS-LDPinch [McAfee] | 16 |
| TROJ_SMALL.EME [Trend Micro] | 16 |
| Trojan-PSW.LdPinch!sd5 [PC Tools] | 16 |
| Trojan-PSW.Win32.Small.bs [Kaspersky Lab] | 16 |
| TROJ_ROOTKIT.CA [Trend Micro] | 12 |
| Trojan.Win32.Agent [Ikarus] | 12 |
| Trojan-PSW.Win32.Papras.ch [Kaspersky Lab] | 12 |
| TROJ_AGENT.TEL [Trend Micro] | 9 |
| Generic PWS.y [McAfee] | 4 |
| Generic.dx [McAfee] | 4 |
| PWS:Win32/Ldpinch.W [Microsoft] | 4 |
| Rootkit.Win32.Agent.hl [Kaspersky Lab] | 4 |
| Troj/LdPinch-QZ [Sophos] | 4 |
| Troj/Rootkit-FB [Sophos] | 4 |
| Trojan-PSW.Win32.LdPinch.dvx [Kaspersky Lab] | 4 |
| Win32.SuspectCrc [Ikarus] | 4 |
| Rootkit.Agent!sd5 [PC Tools] | 2 |
| VirTool:WinNT/Ursnif.B [Microsoft] | 2 |
| Win-Trojan/Agent.6688.B [AhnLab] | 2 |
| Hacktool.Rootkit!sd5 [PC Tools] | 1 |
| TROJ_ROOTKIT.DJ [Trend Micro] | 1 |