| Threat Alias | Number of Incidents |
| W32.Chir.B@mm [Symantec] | 282 |
| Exploit.HTML.Iframe.FileDownload.bp [Kaspersky Lab] | 201 |
| W32/Chir-B [Sophos] | 182 |
| Exploit.IFrame.B [PC Tools] | 180 |
| Exploit.HTML.Iframe [Ikarus] | 130 |
| JS.Chir.B [PC Tools] | 96 |
| Email-Worm.Win32.Runouce.b [Kaspersky Lab] | 95 |
| Exploit.HTML.Iframe.FileDownload.bd [Kaspersky Lab] | 90 |
| Exploit.HTML.Iframe.FileDownload [Ikarus] | 36 |
| Exploit.HTML.Iframe.FileDownload.bd [Ikarus] | 31 |
| Exploit.IFrame [PC Tools] | 8 |
| W32.Chir.B.enc [Symantec] | 5 |
| HTML_IFRMEXP.GEN [Trend Micro] | 3 |
| Net-Worm.Win32.Nimda [Kaspersky Lab] | 3 |
| W32.Nimda.A@mm (dll) [Symantec] | 1 |
| W32.Nimda.A@mm [Symantec] | 1 |
