| Threat Alias | Number of Incidents |
| Infostealer.Banker.C [Symantec] | 141 |
| PWS:Win32/Zbot.gen!R [Microsoft] | 141 |
| PWS:Win32/Zbot.G [Microsoft] | 100 |
| Trojan-Spy.Win32.Zbot.gen [Kaspersky Lab] | 65 |
| Troj/ZbotPP-Fam [Sophos] | 63 |
| Mal/EncPk-CZ [Sophos] | 58 |
| Trojan:Win32/Zbot.BX [Microsoft] | 49 |
| Trojan Horse [Symantec] | 39 |
| Troj/ZbotPP-Fam, Mal/EncPk-CZ [Sophos] | 32 |
| Win32/IRCBot.worm.variant [AhnLab] | 25 |
| Spy-Agent.bw.gen.i [McAfee] | 24 |
| Infostealer [Symantec] | 18 |
| Mal/EncPk-HJ [Sophos] | 16 |
| Mal/FakeVirPk-A [Sophos] | 16 |
| Trojan.Win32.Zbot [Ikarus] | 15 |
| Suspicious.MH690 [Symantec] | 14 |
| TSPY_ZBOT.CAR [Trend Micro] | 14 |
| Mal/Zbot-I, Mal/EncPk-FS [Sophos] | 12 |
| PWS-Zbot [McAfee] | 12 |
| PWS-Zbot.gen.i [McAfee] | 11 |
| TSPY_ZBOT.SM [Trend Micro] | 11 |
| Trojan-Spy.Win32.Zbot.soo [Kaspersky Lab] | 9 |
| Win-Trojan/Zbot.66048 [AhnLab] | 9 |
| PWS:Win32/Zbot.R [Microsoft] | 8 |
| VirTool:Win32/CeeInject.gen!J [Microsoft] | 8 |
| Mal/EncPk-HJ, Mal/EncPk-HJ [Sophos] | 7 |
| Trojan.Win32.Obfuscater [Ikarus] | 7 |
| Mal/EncPk-HZ [Sophos] | 6 |
| Mal/Zbot-I [Sophos] | 6 |
| Spy-Agent.bw [McAfee] | 6 |
| Trojan.Generic [PC Tools] | 6 |
| Trojan-Dropper.Delf [Ikarus] | 6 |
| Trojan-Dropper.Win32.Pincher [Ikarus] | 5 |
| Trojan-PSW.Banker [PC Tools] | 5 |
| Win32.SuspectCrc [Ikarus] | 5 |
| Win-Trojan/Zbot.60416 [AhnLab] | 5 |
| Win-Trojan/Zbot.73216 [AhnLab] | 5 |
| Backdoor.Trojan [Symantec] | 4 |
| Downloader [Symantec] | 4 |
| Downloader-BON [McAfee] | 4 |
| Mal/Dropper-T [Sophos] | 4 |
| Mal/WaledPak-A [Sophos] | 4 |
| Mal/Zbot-J [Sophos] | 4 |
| Packed.Generic.196 [Symantec] | 4 |
| Trojan.Win32.FakeXPA [Ikarus] | 4 |
| Trojan:Win32/Malat [Microsoft] | 4 |
| Trojan-Spy.Win32.Zbot.kbi [Kaspersky Lab] | 4 |
| Trojan-Spy.Win32.Zbot.oob [Kaspersky Lab] | 4 |
| Infostealer.Bzup [Symantec] | 3 |
| Mal/EncPk-FS [Sophos] | 3 |
| New Malware.ix [McAfee] | 3 |
| Trojan.Win32.Zlob [Ikarus] | 3 |
| Trojan-PSW.Generic [PC Tools] | 3 |
| Trojan-Spy.Win32.Zbot.qds [Kaspersky Lab] | 3 |
| VirTool:Win32/DelfInject.gen!AC [Microsoft] | 3 |
| Virus.Win32.Delf.EQM [Ikarus] | 3 |
| Win-Trojan/Zbot.98304.B [AhnLab] | 3 |
| Downloader.Delphi [Ikarus] | 2 |
| Generic Dropper.gr [McAfee] | 2 |
| Generic Dropper.kj [McAfee] | 2 |
| Infostealer.Bancos [Symantec] | 2 |
| Mal/DlfInj-A [Sophos] | 2 |
| Mal/EncPk-CK [Sophos] | 2 |
| Mal/EncPk-HH [Sophos] | 2 |
| Mal/EncPk-HP [Sophos] | 2 |
| Mal/EncPk-HZ, Mal/Zbot-J [Sophos] | 2 |
| Mal/EncPk-IF [Sophos] | 2 |
| Mal/EncPk-KH [Sophos] | 2 |
| Mal/Zbot-G [Sophos] | 2 |
| Packed.Win32.Krap.m [Kaspersky Lab] | 2 |
| PWS:Win32/Zbot.WB [Microsoft] | 2 |
| PWS:Win32/Zbot.WC [Microsoft] | 2 |
| Spy-Agent.dp.gen [McAfee] | 2 |
| Troj/Agent-IOU [Sophos] | 2 |
| Troj/Inject-ES [Sophos] | 2 |
| Troj/Zbot-DI [Sophos] | 2 |
| Trojan.Obfuscater.MB2 [Ikarus] | 2 |
| Trojan.Win32.Agent [Ikarus] | 2 |
| Trojan.Win32.Agent.bqte [Kaspersky Lab] | 2 |
| Trojan.Win32.Antavmu [Ikarus] | 2 |
| Trojan:Win32/Zbot.CA [Microsoft] | 2 |
| Trojan-Downloader [Ikarus] | 2 |
| Trojan-Spy.Win32.Zbot.abia [Kaspersky Lab] | 2 |
| Trojan-Spy.Win32.Zbot.jve [Kaspersky Lab] | 2 |
| Trojan-Spy.Win32.Zbot.niu [Kaspersky Lab] | 2 |
| Trojan-Spy.Win32.Zbot.nnm [Kaspersky Lab] | 2 |
| Trojan-Spy.Win32.Zbot.ogz [Kaspersky Lab] | 2 |
| Trojan-Spy.Win32.Zbot.owa [Kaspersky Lab] | 2 |
| Trojan-Spy.Win32.Zbot.rvd [Kaspersky Lab] | 2 |
| Trojan-Spy.Win32.Zbot.rxh [Kaspersky Lab] | 2 |
| Trojan-Spy.Win32.Zbot.tpw [Kaspersky Lab] | 2 |
| Trojan-Spy.Win32.Zbot.xnc [Kaspersky Lab] | 2 |
| VirTool.Win32.DelfInject [Ikarus] | 2 |
| VirTool:Win32/CeeInject.gen!AA [Microsoft] | 2 |
| Virus.Win32.DelfInject [Ikarus] | 2 |
| W32.IRCBot [Symantec] | 2 |
| W32/Waledac.gen.d [McAfee] | 2 |
| Win-Trojan/Agent.75264.BR [AhnLab] | 2 |
| Win-Trojan/Krap.77312.C [AhnLab] | 2 |
| Win-Trojan/Zbot.70144.F [AhnLab] | 2 |