| Threat Alias | Number of Incidents |
| Backdoor.Tidserv [Symantec] | 5,267 |
| W32/Autorun-AFM [Sophos] | 4,458 |
| Backdoor.Tidserv!sd6 [PC Tools] | 3,511 |
| Trojan.Win32.Patched.go [Kaspersky Lab] | 3,186 |
| Win-Trojan/DNSChanger.343040 [AhnLab] | 1,454 |
| DNSChanger!d [McAfee] | 730 |
| DNSChanger!q [McAfee] | 124 |
| DNSChanger!n [McAfee] | 28 |
| Trojan.Win32.Alureon [Ikarus] | 9 |
| DNSChanger!bl [McAfee] | 7 |
| Trojan.Win32.Patched [Ikarus] | 5 |
| Backdoor.Tidserv [PC Tools] | 4 |
| DNSChanger!h [McAfee] | 1 |
| DNSChanger!j [McAfee] | 1 |
| DNSChanger!k [McAfee] | 1 |
|