| Threat Alias | Number of Incidents |
| Mal/EncPk-JY [Sophos] | 30 |
| Trojan.Zbot [PC Tools] | 18 |
| Trojan.Zbot!gen3 [Symantec] | 17 |
| Mal/EncPk-LE [Sophos] | 13 |
| Packed.Win32.Krap [Ikarus] | 12 |
| Mal/Generic-A [Sophos] | 10 |
| Trojan.Win32.FraudPack.uod [Kaspersky Lab] | 5 |
| Trojan:Win32/FakeXPA [Microsoft] | 4 |
| PWS:Win32/Zbot.RS [Microsoft] | 3 |
| Trojan-Spy.Win32.Zbot.gen [Kaspersky Lab] | 3 |
| Downloader.MisleadApp [Symantec] | 2 |
| Downloader-BWS [McAfee] | 2 |
| FakeAlert-IH [McAfee] | 2 |
| Mal/FakeVirPk-A [Sophos] | 2 |
| Mal/Generic-A, Mal/EncPk-LE [Sophos] | 2 |
| Trojan Horse [Symantec] | 2 |
| Trojan.Generic [PC Tools] | 2 |
| Trojan.Win32.Agent.cwri [Kaspersky Lab] | 2 |
| Trojan.Win32.Ertfor [Ikarus] | 2 |
| Trojan.Zbot!gen2 [Symantec] | 2 |
| Trojan:Win32/Yektel.A [Microsoft] | 2 |
| Worm:Win32/Sirefef.gen!A [Microsoft] | 2 |
| Backdoor.Bifrose [PC Tools] | 1 |
| Backdoor.Bifrose [Symantec] | 1 |
| FakeAlert-EQ [McAfee] | 1 |
| FakeAlert-JZ.dll [McAfee] | 1 |
| Generic PWS.y!brn [McAfee] | 1 |
| Generic.dx!nkc [McAfee] | 1 |
| Generic.dx!npm [McAfee] | 1 |
| Infostealer.Banker.C [Symantec] | 1 |
| Packed.Win32.Krap.x [Kaspersky Lab] | 1 |
| PWS:Win32/Zbot [Microsoft] | 1 |
| PWS:Win32/Zbot.gen!R [Microsoft] | 1 |
| PWS:Win32/Zbot.QV [Microsoft] | 1 |
| PWS-Zbot.gen.x [McAfee] | 1 |
| RogueAntiSpyware.AlphaAV [PC Tools] | 1 |
| Troj/FakeVir-PJ [Sophos] | 1 |
| Trojan.Adclicker [Symantec] | 1 |
| Trojan.CyberSecurity.a.gen [PC Tools] | 1 |
| Trojan.FakeAV [Symantec] | 1 |
| Trojan.FakeAV!gen [Symantec] | 1 |
| Trojan.FakeAV!gen5 [Symantec] | 1 |
| Trojan.Generic.IS [Ikarus] | 1 |
| Trojan.RogueAV.a.gen [PC Tools] | 1 |
| Trojan.Win32.FakeAV [Ikarus] | 1 |
| TrojanDownloader:Win32/Renos.GW [Microsoft] | 1 |
| W32/Sality.dll!dam [McAfee] | 1 |
| Win-Trojan/Bholamp.271364 [AhnLab] | 1 |
| Win-Trojan/Zbot.132096.B [AhnLab] | 1 |