| Threat Alias | Number of Incidents |
| Mal/FakeAV-AH [Sophos] | 22 |
| Packed.Win32.Katusha.a [Kaspersky Lab] | 6 |
| Downloader.MisleadApp [Symantec] | 5 |
| Trojan.Win32.WinSpywareProtect [Ikarus] | 4 |
| Trojan:Win32/WinSpywareProtect [Microsoft] | 4 |
| Virus.Packed.Win32.Katusha [Ikarus] | 3 |
| Mal/EncPk-GZ [Sophos] | 2 |
| Mal/EncPk-HM, Mal/EncPk-FX [Sophos] | 1 |
| Mal/Generic-A [Sophos] | 1 |
| Packed.Generic.187 [Symantec] | 1 |
| PCAntiSpyware [Symantec] | 1 |
| Troj/FakeAV-LU [Sophos] | 1 |
| TROJ_FAKEAV.API [Trend Micro] | 1 |
| Trojan Horse [Symantec] | 1 |
| Trojan.Win32.FraudPack.kwz [Kaspersky Lab] | 1 |
| Trojan.Win32.FraudPack.lee [Kaspersky Lab] | 1 |
| Trojan-Downloader.Win32.FraudLoad [Ikarus] | 1 |
| Trojan-Downloader.Win32.FraudLoad.vley [Kaspersky Lab] | 1 |
| TrojanDownloader:Win32/Renos.BAP [Microsoft] | 1 |
| Win-Trojan/Agent.81931.N [AhnLab] | 1 |
| Win-Trojan/Fakeav.73227 [AhnLab] | 1 |
| Win-Trojan/Fraudload.81931.N [AhnLab] | 1 |
| Win-Trojan/Katusha.70667.D [AhnLab] | 1 |
| Win-Trojan/Xema.variant [AhnLab] | 1 |
| XPAntivirus [Symantec] | 1 |
