| Threat Alias | Number of Incidents |
| Mal/EncPk-KP [Sophos] | 132 |
| TrojanDownloader:Win32/Renos [Microsoft] | 99 |
| TrojanDownloader:Win32/FakeRean [Microsoft] | 82 |
| Packed.Generic.233 [Symantec] | 57 |
| Downloader [Symantec] | 56 |
| Trojan-Downloader.Win32.FraudLoad.fsd [Kaspersky Lab] | 56 |
| Mal/EncPk-IF [Sophos] | 53 |
| Win-Trojan/Bredolab.13312.F [AhnLab] | 32 |
| Packed.Win32.Krap.ah [Kaspersky Lab] | 18 |
| Trojan.Win32.Vilsel.ibk [Kaspersky Lab] | 6 |
| Trojan-Downloader.Win32.FakeRean [Ikarus] | 6 |
| Trojan-Downloader.Win32.Renos [Ikarus] | 6 |
| TROJ_FAKEALE.SMB [Trend Micro] | 5 |
| FakeAlert-IX [McAfee] | 4 |
| Mal/EncPk-KP, Mal/EncPk-IF [Sophos] | 4 |
| Troj/FakeRean-E [Sophos] | 4 |
| Trojan.FakeAV [Symantec] | 4 |
| Trojan.Win32.Vilsel.huw [Kaspersky Lab] | 4 |
| Win32.KME.Based [Ikarus] | 4 |
| Generic FakeAlert!co [McAfee] | 3 |
| Packed.Generic.258 [Symantec] | 3 |
| Trojan-Downloader.Win32.FraudLoad.wswk [Kaspersky Lab] | 3 |
| Win-Trojan/Fraudload.13824.R [AhnLab] | 3 |
| FakeAlert-XPSecCenter [McAfee] | 2 |
| HeurEngine.MaliciousPacker [PC Tools] | 2 |
| Packed.Win32.Krap [Ikarus] | 2 |
| Trojan.Win32.Vilsel [Ikarus] | 2 |
| Trojan.Win32.Vilsel.iop [Kaspersky Lab] | 2 |
| Trojan-Downloader.Win32.FraudLoad.frn [Kaspersky Lab] | 2 |
| Trojan-Downloader.Win32.FraudLoad.wstm [Kaspersky Lab] | 2 |
| Win32.Outbreak [Ikarus] | 2 |
| AntiVirus2009 [Symantec] | 1 |
| AntiVirusPro [Symantec] | 1 |
| Downloader.MisleadApp [Symantec] | 1 |
| Generic Downloader.x!bla [McAfee] | 1 |
| Generic FakeAlert!9F6E4576 [McAfee] | 1 |
| Generic FakeAlert!cm [McAfee] | 1 |
| Generic FakeAlert!cp [McAfee] | 1 |
| Generic FakeAlert!cr [McAfee] | 1 |
| Mal/EncPk-LT, Mal/EncPk-IF, Mal/EncPk-KP [Sophos] | 1 |
| Mal/EncPk-MP, Mal/EncPk-LT, Mal/EncPk-IF, Mal/Bredo-C, Mal/EncPk-KP [Sophos] | 1 |
| Mal/Generic-A [Sophos] | 1 |
| Packed.Win32.Krap.ad [Kaspersky Lab] | 1 |
| Troj/Agent-LIW [Sophos] | 1 |
| Troj/Dloadr-CVD [Sophos] | 1 |
| Troj/FakeAv-ADU [Sophos] | 1 |
| Trojan.FakeAV [PC Tools] | 1 |
| Trojan.Fakeavalert!gen [Symantec] | 1 |
| Trojan.Win32.Ertfor [Ikarus] | 1 |
| Trojan.Win32.FakeAV [Ikarus] | 1 |
| Trojan.Win32.Vilsel.hrk [Kaspersky Lab] | 1 |
| Trojan.Win32.Vilsel.hsw [Kaspersky Lab] | 1 |
| Trojan.Win32.Vilsel.hud [Kaspersky Lab] | 1 |
| Trojan.Win32.Vilsel.hwz [Kaspersky Lab] | 1 |
| Trojan.Win32.Vilsel.hxf [Kaspersky Lab] | 1 |
| Trojan.Win32.Vilsel.ijw [Kaspersky Lab] | 1 |
| Trojan.Win32.Vilsel.ikl [Kaspersky Lab] | 1 |
| Trojan.Win32.Vilsel.imd [Kaspersky Lab] | 1 |
| Trojan.Win32.Vilsel.imq [Kaspersky Lab] | 1 |
| Trojan.Win32.Vilsel.iua [Kaspersky Lab] | 1 |
| Trojan-Downloader.Win32.FakeVimes [Ikarus] | 1 |
| Trojan-Downloader.Win32.FraudLoad [Ikarus] | 1 |
| Trojan-Downloader.Win32.FraudLoad.fra [Kaspersky Lab] | 1 |
| Trojan-Downloader.Win32.FraudLoad.frd [Kaspersky Lab] | 1 |
| Trojan-Downloader.Win32.FraudLoad.fsy [Kaspersky Lab] | 1 |
| Trojan-Downloader.Win32.FraudLoad.wsut [Kaspersky Lab] | 1 |
| Trojan-Downloader.Win32.FraudLoad.wsvi [Kaspersky Lab] | 1 |
| Trojan-Downloader.Win32.FraudLoad.wswm [Kaspersky Lab] | 1 |
| Trojan-Downloader.Win32.Harnig [Ikarus] | 1 |
| TrojanDownloader:Win32/FakeVimes [Microsoft] | 1 |
| W32.Toal.A@mm [Symantec] | 1 |
| W32/Agent-LIL [Sophos] | 1 |
| Win-Trojan/Agent.266752.N [AhnLab] | 1 |
| Win-Trojan/Fakeav.13824 [AhnLab] | 1 |
| Win-Trojan/Fakeav.15360.D [AhnLab] | 1 |
| Win-Trojan/Fakeav.15872 [AhnLab] | 1 |
| Win-Trojan/FakeAv.21504 [AhnLab] | 1 |
| Win-Trojan/Fakeav.39936.B [AhnLab] | 1 |
| Win-Trojan/FakeAv.45056 [AhnLab] | 1 |
| Win-Trojan/Fakeav.Gen [AhnLab] | 1 |
| Win-Trojan/FraudLoad.264704 [AhnLab] | 1 |
| Win-Trojan/Krap.17408.D [AhnLab] | 1 |