| Threat Alias | Number of Incidents |
| Hacktool.Rootkit [Symantec] | 699 |
| TROJ_ROOTKIT.CY [Trend Micro] | 385 |
| Rootkit.Renos.Gen.11 [PC Tools] | 353 |
| Mal/FakeAle-C [Sophos] | 323 |
| VirTool:WinNT/Xantvi.gen!A [Microsoft] | 261 |
| Backdoor.Win32.UltimateDefender [Ikarus] | 215 |
| Backdoor.Win32.UltimateDefender.igv [Kaspersky Lab] | 194 |
| Trojan.Virantix.C [Symantec] | 91 |
| not-a-virus:FraudTool.Win32.UltimateDefender.cm [Kaspersky Lab] | 65 |
| Adware.Agent.ZO [PC Tools] | 62 |
| Backdoor.Win32.UltimateDefender.xm [Kaspersky Lab] | 50 |
| Backdoor.Win32.UltimateDefender.a [Kaspersky Lab] | 46 |
| VirTool:WinNT/Xantvi.A [Microsoft] | 43 |
| SpywareProtect2009 [Symantec] | 36 |
| Troj/KillAV-EM [Sophos] | 27 |
| TROJ_NURECH.AF [Trend Micro] | 25 |
| Troj/FakeAle-MC [Sophos] | 16 |
| Troj/Agent-HHC [Sophos] | 13 |
| not-a-virus:.FraudTool.Win32.UltimateDefender.cm [Ikarus] | 10 |
| Hacktool.Rootkit!sd5 [PC Tools] | 9 |
| not-a-virus:FraudTool.Win32.UltimateDefender.cm [Ikarus] | 9 |
| RTKT_AGENT.BFR [Trend Micro] | 8 |
| TROJ_RENOS.AKQ [Trend Micro] | 8 |
| Trojan.Win32.FraudPack [Ikarus] | 8 |
| Trojan.Win32.FraudPack.ase [Kaspersky Lab] | 8 |
| TROJ_NURECH.AD [Trend Micro] | 4 |
| TROJ_VIRANTIX.AQ [Trend Micro] | 4 |
| Win-Trojan/Rootkit.29184.C [AhnLab] | 4 |
| TROJ_NURECH.AC [Trend Micro] | 3 |
| Trojan:Win32/Tibs.IT [Microsoft] | 3 |
| Adware.UltimateDefend.B [PC Tools] | 2 |
| Backdoor.Win32.UltimateDefender.ict [Kaspersky Lab] | 2 |
| RTKT_AGENT.AGPQ [Trend Micro] | 2 |
| TROJ_VIRANTIX.BP [Trend Micro] | 2 |
| TROJ_VIRANTIX.C [Trend Micro] | 2 |
| Trojan.Win32.Tibs [Ikarus] | 2 |
| Win-Trojan/Ultimatedefender.28160.AT [AhnLab] | 2 |
| Win-Trojan/Xema.variant [AhnLab] | 2 |
| Adware.UltimateDefend.E [PC Tools] | 1 |
| Backdoor.Hupigon!sd6 [PC Tools] | 1 |
| Backdoor.Win32.Hupigon [Ikarus] | 1 |
| Backdoor.Win32.Hupigon.gbuo [Kaspersky Lab] | 1 |
| Backdoor.Win32.Hupigon.gimd [Kaspersky Lab] | 1 |
| Backdoor.Win32.UltimateDefender.ifz [Kaspersky Lab] | 1 |
| Backdoor.Win32.UltimateDefender.igl [Kaspersky Lab] | 1 |
| Downloader [Symantec] | 1 |
| not-a-virus:FraudTool.Win32.UltimateDefender.bf [Kaspersky Lab] | 1 |
| not-a-virus:FraudTool.Win32.UltimateDefender.bi [Kaspersky Lab] | 1 |
| RogueAntiSpyware.XPAntispyware [PC Tools] | 1 |
| Rootkit.Zlob.ITS [PC Tools] | 1 |
| RTKT_AGENT.AKTZ [Trend Micro] | 1 |
| Troj/FakeAle-DQ [Sophos] | 1 |
| Troj/FakeVir-KR [Sophos] | 1 |
| TROJ_FAKEAV.E [Trend Micro] | 1 |
| TROJ_FAKEAV.L [Trend Micro] | 1 |
| TROJ_NURECH.AE [Trend Micro] | 1 |
| Trojan.Fakeavalert [Symantec] | 1 |
| VirTool.WinNT.Xantvi [Ikarus] | 1 |
| Win-Trojan/Agent.36352.DP [AhnLab] | 1 |
| Win-Trojan/Downloader.364040 [AhnLab] | 1 |
| Win-Trojan/Hupigon.364560.G [AhnLab] | 1 |
| Win-Trojan/Rootkit.27136.B [AhnLab] | 1 |
| Win-Trojan/Ultimatedefender.27136.O [AhnLab] | 1 |
| Win-Trojan/Ultimatedefender.27648.BX [AhnLab] | 1 |
| Win-Trojan/Ultimatedefender.28160.D [AhnLab] | 1 |
| Win-Trojan/Ultimatedefender.29184.M [AhnLab] | 1 |
| Win-Trojan/Ultimatedefender.32768.J [AhnLab] | 1 |
| Win-Trojan/Xantvi.29184 [AhnLab] | 1 |
| Win-Trojan/Xantvi.29184.B [AhnLab] | 1 |
