| Threat Alias | Number of Incidents |
| Mal/EncPk-DA [Sophos] | 70 |
| Tibs-Packed [McAfee] | 35 |
| Trojan.Erotpics [Symantec] | 35 |
| BackDoor-DNM [McAfee] | 27 |
| Downloader [Symantec] | 21 |
| Mal/EncPk-DA, Mal/TibsPak [Sophos] | 21 |
| Trojan.Pandex [Symantec] | 19 |
| Trojan-Downloader.Exchanger!sd6 [PC Tools] | 15 |
| Trojan-Downloader.Win32.Exchanger [Ikarus] | 12 |
| Downloader.MisleadApp [Symantec] | 9 |
| Trojan.Erotpics!sd6 [PC Tools] | 9 |
| TROJ_NUWAR.GFZ [Trend Micro] | 7 |
| Mal/TibsPak, Mal/EncPk-DA [Sophos] | 6 |
| Trojan-Downloader.Win32.Exchanger.la [Kaspersky Lab] | 6 |
| Infostealer [Symantec] | 5 |
| Downloader-ASH.gen.b [McAfee] | 4 |
| Mal/EncPk-GD [Sophos] | 4 |
| TROJ_EXCHANGE.AF [Trend Micro] | 4 |
| Trojan Horse [Symantec] | 4 |
| Trojan-Downloader.Win32.Exchanger.qg [Kaspersky Lab] | 4 |
| Trojan-Downloader.Win32.Exchanger.rm [Kaspersky Lab] | 4 |
| W32/Nuwar@MM [McAfee] | 4 |
| Backdoor.Trojan [Symantec] | 3 |
| Exploit.AdobeReader [PC Tools] | 3 |
| Mal/TibsPak [Sophos] | 3 |
| TROJ_EXCHANGE.AE [Trend Micro] | 3 |
| TROJ_RENOS.AFD [Trend Micro] | 3 |
| Trojan.Zlob [Symantec] | 3 |
| Trojan-Downloader.Exchanger [PC Tools] | 3 |
| Trojan-Downloader.Win32.Exchanger.pv [Kaspersky Lab] | 3 |
| AntiVirusXP2008 [Symantec] | 2 |
| Troj/Agent-HHE [Sophos] | 2 |
| Troj/Cbeplay-A [Sophos] | 2 |
| TROJ_AGENT.AWRZ [Trend Micro] | 2 |
| TROJ_AGENT.KBE [Trend Micro] | 2 |
| TROJ_EXCHANGE.AC [Trend Micro] | 2 |
| TROJ_EXCHANGE.Y [Trend Micro] | 2 |
| TROJ_EXCHANGER.Y [Trend Micro] | 2 |
| TROJ_FAKEAV.FP [Trend Micro] | 2 |
| TROJ_NUWAR.AHE [Trend Micro] | 2 |
| TROJ_NUWAR.EJZ [Trend Micro] | 2 |
| TROJ_TIBS.CLZ [Trend Micro] | 2 |
| TROJ_TIBS.CSZ [Trend Micro] | 2 |
| Trojan.Pandex!sd6 [PC Tools] | 2 |
| Trojan-Downloader.Agent.EL [PC Tools] | 2 |
| Trojan-Downloader.Win32.Agent.yhp [Kaspersky Lab] | 2 |
| Trojan-Downloader.Win32.Exchanger.fd [Kaspersky Lab] | 2 |
| Trojan-Downloader.Win32.Exchanger.gy [Kaspersky Lab] | 2 |
| Trojan-Downloader.Win32.Exchanger.mn [Kaspersky Lab] | 2 |
| Trojan-Downloader.Win32.Exchanger.pf [Kaspersky Lab] | 2 |
| Trojan-Downloader.Win32.Exchanger.pn [Kaspersky Lab] | 2 |
| Trojan-Dropper.Agent [Ikarus] | 2 |
| Trojan-Dropper.Win32.Nuwar.JT [Ikarus] | 2 |
| Virus.Win32.PrefPoly [Ikarus] | 2 |
| BackDoor-DNM.gen [McAfee] | 1 |
| Downloader.gen.a [McAfee] | 1 |
| Generic Downloader.ab [McAfee] | 1 |
| Generic Downloader.x [McAfee] | 1 |
| Generic Downloader.z [McAfee] | 1 |
| Mal/TibsPak, Mal/EncPk-CG [Sophos] | 1 |
| MalwareScope.Worm.Nuwar-Glowa.1 [Ikarus] | 1 |
| Possible_Nucrp-6 [Trend Micro] | 1 |
| Troj/Dorf-BN [Sophos] | 1 |
| Troj/Dorf-BR [Sophos] | 1 |
| Troj/DwnLdr-HHD [Sophos] | 1 |
| Troj/Tibs-UU [Sophos] | 1 |
| TROJ_AGENT.AKCF [Trend Micro] | 1 |
| TROJ_AGENT.AKOC [Trend Micro] | 1 |
| TROJ_AGENT.AOOQ [Trend Micro] | 1 |
| TROJ_AGENT.AXAS [Trend Micro] | 1 |
| TROJ_AGENT.AYZO [Trend Micro] | 1 |
| TROJ_DLOAD.CW [Trend Micro] | 1 |
| TROJ_DLOADR.EB [Trend Micro] | 1 |
| TROJ_DLOADR.GH [Trend Micro] | 1 |
| TROJ_EXCHANGE.AI [Trend Micro] | 1 |
| TROJ_EXCHANGE.AJ [Trend Micro] | 1 |
| TROJ_EXCHANGE.AK [Trend Micro] | 1 |
| TROJ_EXCHANGE.AN [Trend Micro] | 1 |
| TROJ_EXCHANGE.AO [Trend Micro] | 1 |
| TROJ_EXCHANGE.AZ [Trend Micro] | 1 |
| TROJ_EXCHANGER.U [Trend Micro] | 1 |
| TROJ_FAKEALER.EY [Trend Micro] | 1 |
| TROJ_FAKEAV.CK [Trend Micro] | 1 |
| TROJ_FAKEAV.FW [Trend Micro] | 1 |
| TROJ_NUWAR.ALK [Trend Micro] | 1 |
| TROJ_NUWAR.BDZ [Trend Micro] | 1 |
| TROJ_NUWAR.CYA [Trend Micro] | 1 |
| TROJ_NUWAR.DII [Trend Micro] | 1 |
| TROJ_NUWAR.DQZ [Trend Micro] | 1 |
| TROJ_NUWAR.GGZ [Trend Micro] | 1 |
| TROJ_NUWAR.GXZ [Trend Micro] | 1 |
| TROJ_NUWAR.UW [Trend Micro] | 1 |
| TROJ_TIBS.ANZ [Trend Micro] | 1 |
| TROJ_TIBS.BAD [Trend Micro] | 1 |
| TROJ_TIBS.DFZ [Trend Micro] | 1 |
| TROJ_TIBS.QQ [Trend Micro] | 1 |
| TROJ_XCHANGER.B [Trend Micro] | 1 |
| TROJ_ZLOB.CBG [Trend Micro] | 1 |
| TROJ_ZLOB.GBA [Trend Micro] | 1 |
| Trojan.Crypt.XPACK [Ikarus] | 1 |
