| Threat Alias | Number of Incidents |
| Backdoor:Win32/Refpron.gen!C [Microsoft] | 62 |
| Backdoor.Win32.Refpron [Ikarus] | 25 |
| Mal/Generic-A [Sophos] | 16 |
| Win-Trojan/Xema.variant [AhnLab] | 9 |
| Packed.Win32.Koblu [Ikarus] | 8 |
| Refpron.gen.c [McAfee] | 7 |
| Refpron.gen [McAfee] | 5 |
| W32/DelpBck-Gen [Sophos] | 5 |
| Generic BackDoor!v [McAfee] | 3 |
| Trojan-Downloader.Win32.Delf.ttv [Kaspersky Lab] | 2 |
| Trojan-Downloader.Win32.DlfBfkg.ds [Kaspersky Lab] | 2 |
| Backdoor.Win32.Delf.ous [Kaspersky Lab] | 1 |
| Dropper/Refpron.157184 [AhnLab] | 1 |
| Mal/PWS-Fam [Sophos] | 1 |
| Packed.Win32.Koblu.b [Kaspersky Lab] | 1 |
| Refpron.gen.g [McAfee] | 1 |
| Spyware.Screenspy [Symantec] | 1 |
| Trojan.Win32.Agent.cgrz [Kaspersky Lab] | 1 |
| Trojan.Win32.Delf.mob [Kaspersky Lab] | 1 |
| Trojan.Win32.Delf.mou [Kaspersky Lab] | 1 |
| Trojan.Win32.Delf.mpv [Kaspersky Lab] | 1 |
| Trojan.Win32.Delf.mqj [Kaspersky Lab] | 1 |
| Trojan.Win32.Delf.mre [Kaspersky Lab] | 1 |
| Trojan.Win32.Delf.mwm [Kaspersky Lab] | 1 |
| Trojan-Downloader.Win32.Delf.tqv [Kaspersky Lab] | 1 |
| Trojan-Downloader.Win32.Delf.uel [Kaspersky Lab] | 1 |
| Trojan-Downloader.Win32.Delf.uhf [Kaspersky Lab] | 1 |
| Trojan-Downloader.Win32.DlfBfkg.ajm [Kaspersky Lab] | 1 |
| Trojan-Downloader.Win32.DlfBfkg.bb [Kaspersky Lab] | 1 |
| Trojan-Downloader.Win32.DlfBfkg.ca [Kaspersky Lab] | 1 |
| Trojan-Downloader.Win32.DlfBfkg.cf [Kaspersky Lab] | 1 |
| Trojan-Downloader.Win32.DlfBfkg.dx [Kaspersky Lab] | 1 |
| Trojan-Downloader.Win32.DlfBfkg.lp [Kaspersky Lab] | 1 |
| Trojan-Downloader.Win32.DlfBfkg.ml [Kaspersky Lab] | 1 |
| Virus.Win32.Refpron [Ikarus] | 1 |
| Win-Trojan/Agent.157696.AK [AhnLab] | 1 |
| Win-Trojan/Koblu.156160.B [AhnLab] | 1 |
| Win-Trojan/Koblu.210944.J [AhnLab] | 1 |
| Win-Trojan/Refpron.134656 [AhnLab] | 1 |
| Win-Trojan/Refpron.157696 [AhnLab] | 1 |
| Win-Trojan/Refpron.157696.E [AhnLab] | 1 |
| Win-Trojan/Refpron.158720 [AhnLab] | 1 |