| Threat Alias | Number of Incidents |
| not-a-virus:Client-IRC.Win32.mIRC.603 [Kaspersky Lab] | 12 |
| not-a-virus:RiskTool.Win32.HideWindows [Kaspersky Lab] | 12 |
| Backdoor.IRC.Zapchast [Kaspersky Lab] | 9 |
| not-a-virus:Client-IRC.Win32.mIRC.601 [Kaspersky Lab] | 8 |
| Backdoor.Trojan [Symantec] | 4 |
| Mal/Generic-A [Sophos] | 4 |
| Win32.SuspectCrc [Ikarus] | 4 |
| Backdoor.IRC.Zapchast [Ikarus] | 3 |
| Net-Worm.Win32.Randon.ar [Kaspersky Lab] | 3 |
| not-a-virus:Client-IRC.Win32.mIRC [Ikarus] | 3 |
| not-a-virus:NetTool.Win32.Sniffer.c [Kaspersky Lab] | 3 |
| not-a-virus:PSWTool.Win32.PassView.162 [Kaspersky Lab] | 3 |
| Spyware.Perfect [Symantec] | 3 |
| Backdoor.IRC.Flood [Kaspersky Lab] | 2 |
| Backdoor.IRC.Sliv.d [Kaspersky Lab] | 2 |
| Generic BackDoor [McAfee] | 2 |
| Generic PUP.x [McAfee] | 2 |
| IRC Trojan [Symantec] | 2 |
| IRC-Worm.Momma.F [Ikarus] | 2 |
| not-a-virus:Client-IRC.Win32.mIRC.602 [Kaspersky Lab] | 2 |
| Backdoor.IRC.Cloner [Ikarus] | 1 |
| Backdoor.IRC.Flood [Ikarus] | 1 |
| Backdoor.IRC.Zapchast.a [Kaspersky Lab] | 1 |
| Dropper/Malware.682079 [AhnLab] | 1 |
| Dropper/Malware.682312 [AhnLab] | 1 |
| Generic BackDoor!bci [McAfee] | 1 |
| IRC-Worm.Win32.Tedeto.a [Ikarus] | 1 |
| Net-Worm.Win32.Randon [Kaspersky Lab] | 1 |
| not-a-virus:Client-IRC.Win32.mIRC.591 [Kaspersky Lab] | 1 |
| not-a-virus:PSWTool.Win32.PassView.bs [Kaspersky Lab] | 1 |
| not-a-virus:RiskTool.Win32.HideWindows [Ikarus] | 1 |
| Troj/Tagbot-A [Sophos] | 1 |
| Trojan.Dropper [Symantec] | 1 |
| Trojan.Script [Ikarus] | 1 |
| Trojan.Win32.KillFiles [Ikarus] | 1 |
| Trojan.Win32.Runner.x [Kaspersky Lab] | 1 |
| Trojan-Dropper.Win32.Agent.wcp [Kaspersky Lab] | 1 |
