| Threat Alias | Number of Incidents |
| BackDoor-CVT [McAfee] | 222 |
| Troj/Geezo-F [Sophos] | 208 |
| Trojan-Dropper [Ikarus] | 195 |
| Trojan Horse [Symantec] | 184 |
| Generic.dx [McAfee] | 171 |
| Trojan.Nebuler [Symantec] | 123 |
| Trojan.Win32.Agent.vg [Kaspersky Lab] | 100 |
| Trojan.Win32.Dialer.yz [Kaspersky Lab] | 59 |
| Trojan.Win32.Dialer.qn [Kaspersky Lab] | 30 |
| Trojan.Win32.Agent.qt [Kaspersky Lab] | 8 |
| Downloader [Symantec] | 6 |
| Packed.Win32.Klone.t [Kaspersky Lab] | 5 |
| TROJ_AGENT.POG [Trend Micro] | 4 |
| TROJ_AGENT.RYU [Trend Micro] | 4 |
| Packed.Win32.Klone.g [Kaspersky Lab] | 3 |
| Troj/Nebule-Gen [Sophos] | 3 |
| Trojan.Win32.Agent [Ikarus] | 3 |
| Trojan:Win32/Adialer.OP [Microsoft] | 3 |
| Generic Dialer [McAfee] | 2 |
| Trojan.Win32.Agent.bnj [Kaspersky Lab] | 2 |
| Backdoor.Trojan [Symantec] | 1 |
| BKDR_NEBULE.AB [Trend Micro] | 1 |
| Dialer.Generic [Symantec] | 1 |
| Infostealer.Ldpinch [Symantec] | 1 |
| Infostealer.Ldpinch.B [Symantec] | 1 |
| Infostealer.Nailmews [Symantec] | 1 |
| Packed.Win32.Klone.g [Ikarus] | 1 |
| Troj/Bckdr-GIR [Sophos] | 1 |
| Troj/Nebuler-C [Sophos] | 1 |
| TROJ_AGENT.JZD [Trend Micro] | 1 |
| TROJ_AGENT.THD [Trend Micro] | 1 |
| TROJ_AGENT.XTK [Trend Micro] | 1 |
| TROJ_DIALER.VQ [Trend Micro] | 1 |
| TROJ_DIALER.WU [Trend Micro] | 1 |
| TROJ_SMALL.BZQ [Trend Micro] | 1 |
| Trojan.Abwiz [Symantec] | 1 |
| Trojan-Downloader.Win32.Small [Ikarus] | 1 |
| Trojan-Downloader.Win32.Small.cml [Kaspersky Lab] | 1 |
| TrojanDownloader:Win32/Small [Microsoft] | 1 |