| Threat Alias | Number of Incidents |
| Hacktool.Rootkit [Symantec] | 79,749 |
| Troj/RKProc-Fam [Sophos] | 74,932 |
| Rootkit.Win32.Agent [Ikarus] | 73,494 |
| VirTool:WinNT/Rootkitdrv.DH [Microsoft] | 71,771 |
| Win-Trojan/Agent.11904.C [AhnLab] | 66,967 |
| Troj/AdvHack-A [Sophos] | 61,452 |
| Backdoor.Tidserv!inf [Symantec] | 56,399 |
| Trojan:Win32/Alureon.BB [Microsoft] | 53,465 |
| Exploit.Win32.IMG-WMF.fk [Kaspersky Lab] | 50,625 |
| Trojan.Fakeavalert!sd6 [PC Tools] | 47,394 |
| DNSChanger.o [McAfee] | 46,455 |
| Trojan-Downloader.Win32.Geral.ad [Kaspersky Lab] | 41,499 |
| Trojan.Win32.Patched.dy [Kaspersky Lab] | 40,750 |
| Rootkit.Agent!sd6 [PC Tools] | 39,259 |
| Troj/PWS-AXY [Sophos] | 38,700 |
| Trojan Horse [Symantec] | 38,256 |
| Hacktool [Symantec] | 36,900 |
| Email-Worm.Zhelatin [PC Tools] | 36,689 |
| Packed.Win32.Tibs.ap [Kaspersky Lab] | 36,666 |
| W32/AutoRun-MO [Sophos] | 35,175 |
| Backdoor.IRC.Bot [Symantec] | 33,151 |
| TROJ_AGENT.VJC [Trend Micro] | 32,940 |
| Exploit.Win32.IMG-WMF [Ikarus] | 32,402 |
| TROJ_AGENT.ZLH [Trend Micro] | 30,996 |
| Trojan-Downloader.Win32.Agent.bfj [Kaspersky Lab] | 30,744 |
| Packed.Win32.PePatch [Ikarus] | 28,692 |
| Rootkit.Win32.Agent.fkt [Kaspersky Lab] | 27,666 |
| Exploit.IMG-WMF!sd6 [PC Tools] | 26,775 |
| Bloodhound.Unknown [Symantec] | 25,074 |
| Trojan.Fakeavalert [Symantec] | 24,565 |
| Exploit.IMG-WMF [PC Tools] | 23,400 |
| TROJ_AGENT.ACSF [Trend Micro] | 23,319 |
| Rootkit.Farfli.GEN [PC Tools] | 22,458 |
| Trojan.Win32.Agent.cmn [Kaspersky Lab] | 20,544 |
| Trojan.Patched.CL [Ikarus] | 20,212 |
| Trojan-Downloader.Agent!sd5 [PC Tools] | 18,913 |
| Backdoor.Trojan [Symantec] | 17,984 |
| Win-Trojan/ExploitTool.3740 [AhnLab] | 17,775 |
| Packed.Generic.181 [Symantec] | 16,349 |
| Trojan.FakeAlert [PC Tools] | 15,003 |
| Trojan.Zlob [Ikarus] | 14,829 |
| Adware.Agent!sd5 [PC Tools] | 14,426 |
| Trojan.Adclicker [Symantec] | 14,407 |
| Trojan.SillyWorm [PC Tools] | 13,692 |
| TROJ_WANTVI.E [Trend Micro] | 13,110 |
| Trojan.Win32.Patched [Ikarus] | 11,830 |
| Mal/Generic-A [Sophos] | 9,953 |
| BKDR_CIADOOR.EA [Trend Micro] | 9,866 |
| Trojan.DL.VB.AAVI [PC Tools] | 9,290 |
| Trojan-Downloader.Win32.VB.bsa [Kaspersky Lab] | 7,442 |
| Worm.AutoRun.GEN [PC Tools] | 7,019 |
| Rootkit.Agent!sd5 [PC Tools] | 7,007 |
| Packed/Upack [AhnLab] | 6,910 |
| Mal/Packer, Mal/EncPk-BW [Sophos] | 6,569 |
| Trojan-PWS.Win32.Small [Ikarus] | 6,346 |
| Rootkit.Win32.Agent.jj [Kaspersky Lab] | 6,210 |
| Generic BackDoor.t [McAfee] | 5,868 |
| Trojan-GameThief.Win32.OnLineGames.abrf.a [Kaspersky Lab] | 5,840 |
| Trojan-Dropper.Agent [Ikarus] | 5,733 |
| BKDR_MIRCHACK.CE [Trend Micro] | 5,110 |
| TROJ_PEACOMM.BQ [Trend Micro] | 5,103 |
| Packed.Win32.PePatch.lb [Kaspersky Lab] | 5,053 |
| Rootkit.Win32.Agent.fia [Kaspersky Lab] | 5,044 |
| Trojan.Zapchast [PC Tools] | 4,698 |
| Trojan.BAT.Runner.i [Kaspersky Lab] | 4,270 |
| Hacktool.Rootkit!sd6 [PC Tools] | 4,056 |
| TROJ_AGENT.ZNH [Trend Micro] | 3,657 |
| Troj/NTRootK-CG [Sophos] | 3,519 |
| Trojan:Win32/Rootkit.J [Microsoft] | 3,450 |
| Troj/Agent-FWS [Sophos] | 3,290 |
| W32/Autorun-KO [Sophos] | 3,260 |
| Trojan.Patched.CK [Ikarus] | 2,609 |
| Trojan.BAT.Runner [Ikarus] | 2,450 |
| Mal/FakeVirPk-A, Mal/TibsPk-A [Sophos] | 2,307 |
| Trojan.Agent!sd5 [PC Tools] | 2,189 |
| Win-Trojan/Xema.variant [AhnLab] | 1,929 |
| Trojan.Win32.AutoRun [Ikarus] | 1,925 |
| Trojan.Win32.Inject.ks [Kaspersky Lab] | 1,890 |
| Infostealer.Gampass [Symantec] | 1,872 |
| TROJ_INJECT.DE [Trend Micro] | 1,820 |
| Downloader.gen.a [McAfee] | 1,699 |
| Generic Rootkit.d [McAfee] | 1,664 |
| Trojan.Knowedel [Symantec] | 1,630 |
| BackDoor-CJV [McAfee] | 1,583 |
| Application.Whitelist [PC Tools] | 1,575 |
| Trojan-Downloader.Win32.Agent.dbt [Kaspersky Lab] | 1,521 |
| Trojan.Peacomm.D [Symantec] | 1,516 |
| Worm.Autorun.ABH [PC Tools] | 1,467 |
| Win32.SuspectCrc [Ikarus] | 1,458 |
| Win-Trojan/Xema.149742 [AhnLab] | 1,400 |
| Downloader [Symantec] | 1,385 |
| Exploit.Win32.IMG-WMF.ex [Kaspersky Lab] | 1,350 |
| Trojan.Zlob [Symantec] | 1,329 |
| Backdoor.Win32.Frauder.fc [Kaspersky Lab] | 1,281 |
| Win-Trojan/Agent.18944.DS [AhnLab] | 1,242 |
| Packed/FSG [PC Tools] | 1,208 |
| Mal/Packer [Sophos] | 1,172 |
| not-a-virus:AdWare.Win32.Agent.zo [Kaspersky Lab] | 1,144 |
| Trojan-Downloader.Win32.FraudLoad.vkwp [Kaspersky Lab] | 1,131 |
| Trojan.StartPage.AKF [PC Tools] | 1,125 |
|