| Threat Alias | Number of Incidents |
| TrojanDownloader:Win32/Cbeplay.E [Microsoft] | 27 |
| Mal/EncPk-DA [Sophos] | 21 |
| Downloader [Symantec] | 20 |
| Trojan.Erotpics [Symantec] | 16 |
| Trojan-Downloader.Exchanger!sd6 [PC Tools] | 16 |
| Mal/EncPk-DA, Mal/TibsPak [Sophos] | 11 |
| Trojan.Pandex [Symantec] | 9 |
| Trojan.Erotpics!sd6 [PC Tools] | 8 |
| Trojan-Downloader.Agent [PC Tools] | 8 |
| Trojan.Zlob [Symantec] | 7 |
| TROJ_NUWAR.GFZ [Trend Micro] | 6 |
| Trojan-Downloader.Win32.Exchanger [Ikarus] | 6 |
| Trojan-Downloader.Win32.Exchanger.la [Kaspersky Lab] | 6 |
| TrojanDropper:Win32/Nuwar.gen!ldt [Microsoft] | 6 |
| Infostealer [Symantec] | 5 |
| Mal/TibsPak, Mal/EncPk-DA [Sophos] | 5 |
| Trojan Horse [Symantec] | 5 |
| AntiVirusXP2008 [Symantec] | 4 |
| Backdoor.Win32.Agent.qud [Kaspersky Lab] | 4 |
| TROJ_AGENT.AIGA [Trend Micro] | 4 |
| TROJ_EXCHANGE.AF [Trend Micro] | 4 |
| Trojan.Zlob!sd6 [PC Tools] | 4 |
| Trojan-Downloader.Win32.Exchanger.rm [Kaspersky Lab] | 4 |
| Exploit.AdobeReader [PC Tools] | 3 |
| Trojan.DL.Exchanger.Gen [PC Tools] | 3 |
| Trojan.DL.Zlob.Gen!Pac.46 [PC Tools] | 3 |
| TrojanDownloader:Win32/Cbeplay.I [Microsoft] | 3 |
| Virus.Win32.PrefPoly [Ikarus] | 3 |
| Backdoor.Agent [PC Tools] | 2 |
| Backdoor.Trojan [Symantec] | 2 |
| Mal/Generic-A, Mal/EncPk-DA [Sophos] | 2 |
| Possible_Nucrp-6 [Trend Micro] | 2 |
| TROJ_AGENT.KBE [Trend Micro] | 2 |
| TROJ_NUWAR.UZ [Trend Micro] | 2 |
| TROJ_NUWAR.ZJ [Trend Micro] | 2 |
| Trojan.Pandex!sd6 [PC Tools] | 2 |
| Trojan-Downloader.Agent.EL [PC Tools] | 2 |
| Trojan-Downloader.Win32.Agent.yhp [Kaspersky Lab] | 2 |
| Trojan-Downloader.Win32.Exchanger.fd [Kaspersky Lab] | 2 |
| TrojanDownloader:Win32/Cbeplay.G [Microsoft] | 2 |
| Trojan-Dropper.Win32.Nuwar.JT [Ikarus] | 2 |
| TrojanSpy:Win32/Festeal.D [Microsoft] | 2 |
| WORM_NUCRP.GEN [Trend Micro] | 2 |
| Backdoor.Paproxy [Symantec] | 1 |
| Downloader.MisleadApp [Symantec] | 1 |
| MalwareScope.Worm.Nuwar-Glowa.1 [Ikarus] | 1 |
| Troj/Agent-HET [Sophos] | 1 |
| Troj/Agent-IBR [Sophos] | 1 |
| Troj/Cbeplay-A [Sophos] | 1 |
| Troj/Dload-CW [Sophos] | 1 |
| Troj/Dorf-BN [Sophos] | 1 |
| Troj/Dorf-BR [Sophos] | 1 |
| Troj/Tibs-UW [Sophos] | 1 |
| TROJ_AGENT.AFII [Trend Micro] | 1 |
| TROJ_AGENT.AFTY [Trend Micro] | 1 |
| TROJ_AGENT.AFYL [Trend Micro] | 1 |
| TROJ_AGENT.AKOC [Trend Micro] | 1 |
| TROJ_AGENT.AKUN [Trend Micro] | 1 |
| TROJ_AGENT.AOOQ [Trend Micro] | 1 |
| TROJ_AGENT.AOOR [Trend Micro] | 1 |
| TROJ_AGENT.ARVZ [Trend Micro] | 1 |
| TROJ_AGENT.HYU [Trend Micro] | 1 |
| TROJ_AGENT.IIP [Trend Micro] | 1 |
| TROJ_AGENT.IRR [Trend Micro] | 1 |
| TROJ_AGENT.ISU [Trend Micro] | 1 |
| TROJ_AGENT.LJY [Trend Micro] | 1 |
| TROJ_AGENT.MFS [Trend Micro] | 1 |
| TROJ_AGENT.QPF [Trend Micro] | 1 |
| TROJ_AGENT.QPJ [Trend Micro] | 1 |
| TROJ_AGENT.QWI [Trend Micro] | 1 |
| TROJ_AGENT.SPJ [Trend Micro] | 1 |
| TROJ_DLDER.AJ [Trend Micro] | 1 |
| TROJ_DLOADR.HF [Trend Micro] | 1 |
| TROJ_EXCHANGE.AC [Trend Micro] | 1 |
| TROJ_EXCHANGE.AJ [Trend Micro] | 1 |
| TROJ_EXCHANGE.AL [Trend Micro] | 1 |
| TROJ_EXCHANGE.AO [Trend Micro] | 1 |
| TROJ_EXCHANGER.F [Trend Micro] | 1 |
| TROJ_FAKEAV.FW [Trend Micro] | 1 |
| TROJ_NUWAR.AAU [Trend Micro] | 1 |
| TROJ_NUWAR.AEQ [Trend Micro] | 1 |
| TROJ_NUWAR.ALK [Trend Micro] | 1 |
| TROJ_NUWAR.CYA [Trend Micro] | 1 |
| TROJ_NUWAR.DII [Trend Micro] | 1 |
| TROJ_NUWAR.DQZ [Trend Micro] | 1 |
| TROJ_NUWAR.EJZ [Trend Micro] | 1 |
| TROJ_NUWAR.UH [Trend Micro] | 1 |
| TROJ_NUWAR.VA [Trend Micro] | 1 |
| TROJ_NUWAR.YT [Trend Micro] | 1 |
| TROJ_RENOS.AFD [Trend Micro] | 1 |
| TROJ_RENOS.AFT [Trend Micro] | 1 |
| TROJ_STATIK.A [Trend Micro] | 1 |
| TROJ_TIBS.BAD [Trend Micro] | 1 |
| TROJ_TIBS.BLL [Trend Micro] | 1 |
| TROJ_TIBS.CLZ [Trend Micro] | 1 |
| TROJ_TIBS.CSZ [Trend Micro] | 1 |
| TROJ_TIBS.QQ [Trend Micro] | 1 |
| TROJ_XCHANGER.B [Trend Micro] | 1 |
| TROJ_ZLOB.ASJ [Trend Micro] | 1 |
| Trojan.DL.Exchanger.AH [PC Tools] | 1 |
