| Threat Alias | Number of Incidents |
| Packed.Win32.TDSS.aa [Kaspersky Lab] | 126 |
| Mal/FakeAV-BP [Sophos] | 122 |
| Trojan.Vundo [Symantec] | 118 |
| Worm:Win32/Vundo.B [Microsoft] | 61 |
| Trojan.Vundo [PC Tools] | 56 |
| Trojan:Win32/FakeSpyguard [Microsoft] | 24 |
| Packed.Generic.254 [Symantec] | 7 |
| Suspicious.MH690 [Symantec] | 4 |
| Troj/Virtum-Gen [Sophos] | 3 |
| Mal/FakeAV-BP, Mal/EncPk-MQ, Mal/TDSSPack-Q [Sophos] | 2 |
| Mal/Krap-D, Mal/FakeAV-BP, Troj/Virtum-Gen [Sophos] | 2 |
| Packed.Win32.Tdss [Ikarus] | 2 |
| Application.Maybe_RogueAV [PC Tools] | 1 |
| Downloader.MisleadApp [PC Tools] | 1 |
| Downloader.MisleadApp [Symantec] | 1 |
| HeurEngine.MaliciousPacker [PC Tools] | 1 |
| Mal/FakeAV-BP, Mal/EncPk-MQ [Sophos] | 1 |
| Mal/Krap-D, Mal/FakeAV-BP [Sophos] | 1 |
| Trojan.FakeAlert [PC Tools] | 1 |
| Trojan.Win32.FakeSpyguard [Ikarus] | 1 |
| Trojan.Win32.Pakes.nse [Kaspersky Lab] | 1 |
| Trojan-Downloader.Win32.Agent.bqxc [Kaspersky Lab] | 1 |
| Trojan-Downloader.Win32.FraudLoad.fyg [Kaspersky Lab] | 1 |
| Trojan-Downloader.Win32.FraudLoad.wwlg [Kaspersky Lab] | 1 |
| TrojanDownloader:Win32/FakeSmoke [Microsoft] | 1 |
| Win-Trojan/BypassAgent.52736.DS [AhnLab] | 1 |
| Win-Trojan/BypassAgent.52736.DT [AhnLab] | 1 |