| Threat Alias | Number of Incidents |
| VirTool:WinNT/Xantvi.gen!A [Microsoft] | 239 |
| Mal/FakeAle-C [Sophos] | 233 |
| Hacktool.Rootkit [Symantec] | 225 |
| Rootkit.Renos.Gen.11 [PC Tools] | 202 |
| NTRootKit-AC [McAfee] | 176 |
| Backdoor.Win32.UltimateDefender [Ikarus] | 68 |
| not-a-virus:FraudTool.Win32.UltimateDefender.cm [Ikarus] | 53 |
| FakeAlert-C.dr [McAfee] | 46 |
| not-a-virus:.FraudTool.Win32.UltimateDefender.cm [Ikarus] | 45 |
| Adware.Agent.ZO [PC Tools] | 34 |
| Trojan.Virantix.C [Symantec] | 19 |
| Troj/KillAV-EM [Sophos] | 11 |
| TROJ_ROOTKIT.CY [Trend Micro] | 11 |
| not-a-virus:FraudTool.Win32.UltimateDefender.cm [Kaspersky Lab] | 7 |
| VirTool:WinNT/Xantvi.A [Microsoft] | 7 |
| not-a-virus:.FraudTool [Ikarus] | 5 |
| Troj/Agent-HHC [Sophos] | 5 |
| TROJ_RENOS.AKQ [Trend Micro] | 4 |
| TROJ_VIRANTIX.AQ [Trend Micro] | 4 |
| Backdoor.UltimateDefender [PC Tools] | 3 |
| Hacktool.Rootkit!sd6 [PC Tools] | 3 |
| Backdoor.UltimateDefender!sd6 [PC Tools] | 2 |
| Generic BackDoor!l [McAfee] | 2 |
| Win-Trojan/Ultimatedefender.20992.B [AhnLab] | 2 |
| Win-Trojan/Ultimatedefender.28160.AT [AhnLab] | 2 |
| Win-Trojan/Ultimatedefender.28672.B [AhnLab] | 2 |
| Win-Trojan/Xema.variant [AhnLab] | 2 |
| Backdoor.Win32.Small.gjm [Kaspersky Lab] | 1 |
| Downloader.MisleadApp [Symantec] | 1 |
| not-a-virus:Downloader.Win32.Agent.bs [Kaspersky Lab] | 1 |
| Troj/FakeAle-DQ [Sophos] | 1 |
| TROJ_VIRANTIX.BP [Trend Micro] | 1 |
| TROJ_VIRANTIX.C [Trend Micro] | 1 |
| Trojan-Dropper.Win32.Agent.xsb [Kaspersky Lab] | 1 |
| Win-Trojan/Agent.36352.DP [AhnLab] | 1 |
| Win-Trojan/Ultimatedefender.27136.O [AhnLab] | 1 |
| Win-Trojan/Ultimatedefender.27648.AB [AhnLab] | 1 |
| Win-Trojan/Ultimatedefender.27648.AM [AhnLab] | 1 |
| Win-Trojan/Ultimatedefender.27648.BP [AhnLab] | 1 |
| Win-Trojan/Ultimatedefender.28160.D [AhnLab] | 1 |