| Threat Alias | Number of Incidents |
| Mal/Generic-A [Sophos] | 16 |
| Trojan-Downloader.Win32.Harnig [Ikarus] | 16 |
| Packed.Generic.237 [Symantec] | 6 |
| Downloader [Symantec] | 4 |
| Mal/EncPk-JB [Sophos] | 4 |
| Trojan-Downloader.Win32.Genome.sun [Kaspersky Lab] | 4 |
| Mal/EncPk-KP [Sophos] | 3 |
| Packed.Generic.243 [Symantec] | 3 |
| Packed.Win32.Krap.x [Kaspersky Lab] | 3 |
| Worm.Win32.AdwareAgent.a [Kaspersky Lab] | 3 |
| Packed.Generic.233 [Symantec] | 2 |
| Trojan.Crypt [Ikarus] | 2 |
| Trojan-Dropper.Agent [Ikarus] | 2 |
| Generic Downloader.x!du [McAfee] | 1 |
| Generic Downloader.x!ka [McAfee] | 1 |
| Generic Dropper.qo [McAfee] | 1 |
| Hacktool [Symantec] | 1 |
| Hacktool.Generic [PC Tools] | 1 |
| Mal/Behav-116, Mal/Behav-242 [Sophos] | 1 |
| Mal/EncPk-IF [Sophos] | 1 |
| Mal/EncPk-JX, Mal/BredoPk-B [Sophos] | 1 |
| Mal/FakeAV-AX [Sophos] | 1 |
| Packed.Win32.Krap.w [Kaspersky Lab] | 1 |
| Possible_Virus [Trend Micro] | 1 |
| Suspicious.MH690 [Symantec] | 1 |
| Troj/Agent-KZG [Sophos] | 1 |
| Trojan Horse [Symantec] | 1 |
| Trojan.Fakeavalert [Symantec] | 1 |
| Trojan.Vundo [Symantec] | 1 |
| Trojan.Win32.Agent2.lbl [Kaspersky Lab] | 1 |
| Trojan-Downloader.LoadAdv [Ikarus] | 1 |
| Trojan-Downloader.Win32.Agent.cipy [Kaspersky Lab] | 1 |
| Trojan-Downloader.Win32.Agent.cnhj [Kaspersky Lab] | 1 |
| Trojan-Downloader.Win32.Genome.rnq [Kaspersky Lab] | 1 |
| Trojan-Downloader.Win32.Genome.scu [Kaspersky Lab] | 1 |
| Trojan-Downloader.Win32.Genome.siy [Kaspersky Lab] | 1 |
| Trojan-Downloader.Win32.Genome.skj [Kaspersky Lab] | 1 |
| Trojan-Downloader.Win32.Small.kdj [Kaspersky Lab] | 1 |
| Trojan-Downloader.Win32.Small.kge [Kaspersky Lab] | 1 |
| Trojan-Dropper.Win32.Agent.azbh [Kaspersky Lab] | 1 |
| Trojan-PSW.Win32.Papras.tz [Kaspersky Lab] | 1 |
| Win-Trojan/Downloader.13824.OC [AhnLab] | 1 |
| Win-Trojan/Harnig.12800 [AhnLab] | 1 |
| Win-Trojan/Harnig.16384.H [AhnLab] | 1 |
| Win-Trojan/Loadadv.10240.AU [AhnLab] | 1 |