| Threat Alias | Number of Incidents |
| Mal/EncPk-EQ [Sophos] | 62 |
| TrojanDownloader:Win32/Renos [Microsoft] | 32 |
| Generic FakeAlert.d [McAfee] | 30 |
| Backdoor.Tidserv [Symantec] | 27 |
| Backdoor.Win32.UltimateDefender [Ikarus] | 25 |
| DNSChanger.gen [McAfee] | 21 |
| Trojan:Win32/Alureon.gen!N [Microsoft] | 20 |
| Trojan.TDSServ [PC Tools] | 16 |
| Trojan:Win32/Alureon.gen!J [Microsoft] | 7 |
| Downloader.MisleadApp [Symantec] | 5 |
| Trojan:Win32/Wantvi.I [Microsoft] | 5 |
| FakeAlert-AP [McAfee] | 4 |
| Hoax.Win32.Renos.ebd [Kaspersky Lab] | 4 |
| TROJ_DLOADR.RS [Trend Micro] | 4 |
| Trojan.Virantix.C [Symantec] | 3 |
| Adware.Agent.ZO [PC Tools] | 2 |
| Backdoor.Tidserv!sd6 [PC Tools] | 2 |
| Generic.dx [McAfee] | 2 |
| TROJ_RENOS.AKY [Trend Micro] | 2 |
| TROJ_VIRANTIX.BF [Trend Micro] | 2 |
| Backdoor.UltimateDefender!sd6 [PC Tools] | 1 |
| FakeAlert-AB [McAfee] | 1 |
| Generic BackDoor [McAfee] | 1 |
| Generic Downloader.x [McAfee] | 1 |
| Infostealer.Banker.C [Symantec] | 1 |
| Mal/EncPk-EQ, Mal/Basine-C [Sophos] | 1 |
| New Win32.g2 [McAfee] | 1 |
| TROJ_FAKEAV.JV [Trend Micro] | 1 |
| TROJ_RENOS.AG [Trend Micro] | 1 |
| TROJ_RENOS.AJR [Trend Micro] | 1 |
| TROJ_RENOS.EA [Trend Micro] | 1 |
| TROJ_VIRANTIX.BD [Trend Micro] | 1 |
| Trojan Horse [Symantec] | 1 |
| Trojan.Fakeavalert [Symantec] | 1 |
| Trojan.Win32.Alureon.J [Ikarus] | 1 |
| Trojan:Win32/Ogpha.A [Microsoft] | 1 |
| Trojan:Win32/Zbot.AY [Microsoft] | 1 |
| Trojan-Downloader.Win32.Renos [Ikarus] | 1 |