| Threat Alias | Number of Incidents |
| Worm.Win32.AutoRun [Ikarus] | 31 |
| Mal/Generic-A [Sophos] | 29 |
| W32.SillyFDC [Symantec] | 29 |
| Mal/EncPk-GH [Sophos] | 24 |
| Trojan Horse [Symantec] | 24 |
| Trojan-Dropper.Win32.Emold [Ikarus] | 24 |
| Generic Dropper [McAfee] | 18 |
| Trojan.Crypt [Ikarus] | 17 |
| Win32.Outbreak [Ikarus] | 15 |
| Emold.gen [McAfee] | 14 |
| Trojan.Win32.Dialer.exm [Kaspersky Lab] | 14 |
| Worm.AutoRun!sd6 [PC Tools] | 13 |
| W32/Autorun.worm.gen [McAfee] | 12 |
| Backdoor.Winnt [Ikarus] | 11 |
| Troj/Emold-C [Sophos] | 9 |
| W32.Auraax [Symantec] | 9 |
| Mal/EncPk-GL [Sophos] | 8 |
| Spy-Agent.bw [McAfee] | 8 |
| Dialer.Generic [Symantec] | 7 |
| W32/Autorun.worm.aah [McAfee] | 7 |
| Mal/EncPk-GC [Sophos] | 6 |
| Mal/Zbot-I [Sophos] | 6 |
| Worm.Autorun.LUY [PC Tools] | 6 |
| Generic PUP.x [McAfee] | 5 |
| Trojan.Win32.Agent.kkp [Kaspersky Lab] | 5 |
| Trojan-Spy.Win32.Zbot.soo [Kaspersky Lab] | 5 |
| Downloader [Symantec] | 4 |
| Mal/UnkPack-Fam [Sophos] | 4 |
| Net-Worm.SillyFDC [PC Tools] | 4 |
| Troj/Agent-HYP [Sophos] | 4 |
| Trojan.Generic [PC Tools] | 4 |
| W32.SillyDC [Symantec] | 4 |
| W32/Auraax.worm [McAfee] | 4 |
| Win-Trojan/Xema.variant [AhnLab] | 4 |
| Worm.Win32.AutoRun.qxq [Kaspersky Lab] | 4 |
| Emold.dr [McAfee] | 3 |
| Mal/EncPk-FS [Sophos] | 3 |
| Packed.Generic.206 [Symantec] | 3 |
| Trojan-Downloader.JLIS [Ikarus] | 3 |
| Downloader-AAP [McAfee] | 2 |
| Infostealer.Banker.C [Symantec] | 2 |
| Mal/EncPk-LT, Mal/FakeAV-BT [Sophos] | 2 |
| Mal/FakeVirPk-A, Mal/TibsPk-A [Sophos] | 2 |
| Mal/Zbot-F [Sophos] | 2 |
| Mal/Zbot-I, Mal/EncPk-FS [Sophos] | 2 |
| Packed.Generic.233 [Symantec] | 2 |
| Troj/Agent-IAJ [Sophos] | 2 |
| Trojan.Win32.Agent.asli [Kaspersky Lab] | 2 |
| Trojan.Win32.AgentBypass [Ikarus] | 2 |
| Trojan.Win32.Inject [Ikarus] | 2 |
| Trojan-Dropper.Agent [Ikarus] | 2 |
| Trojan-Dropper.Win32.Small [Ikarus] | 2 |
| Trojan-Spy.Win32.Zbot [Ikarus] | 2 |
| W32.Virut.CF [Symantec] | 2 |
| W32/Autorun.worm!bt [McAfee] | 2 |
| W32/AutoRun-QQ [Sophos] | 2 |
| Win32.SuspectCrc [Ikarus] | 2 |
| Win-Trojan/Agent.26112.HM [AhnLab] | 2 |
| Win-Trojan/Agent.26624.GW [AhnLab] | 2 |
| Worm.AutoRun.GEN [PC Tools] | 2 |
| Worm.Win32.AutoRun.fdf [Kaspersky Lab] | 2 |
| Worm.Win32.AutoRun.soy [Kaspersky Lab] | 2 |
| Worm.Win32.Downloader.wh [Kaspersky Lab] | 2 |
| Backdoor.Trojan [Symantec] | 1 |
| Downloader-BTR.a [McAfee] | 1 |
| Dropper/Agent.26112.M [AhnLab] | 1 |
| Dropper/Downloader.25555 [AhnLab] | 1 |
| Dropper/Downloader.29678 [AhnLab] | 1 |
| FakeAlert-AB.dldr [McAfee] | 1 |
| Generic Dropper!df [McAfee] | 1 |
| Generic Dropper!ia [McAfee] | 1 |
| Generic Dropper!q [McAfee] | 1 |
| Generic Dropper.dn [McAfee] | 1 |
| Generic Obfuscated.a [McAfee] | 1 |
| Generic PWS.y!r [McAfee] | 1 |
| Generic QHosts.e [McAfee] | 1 |
| HeurEngine.MaliciousPacker [PC Tools] | 1 |
| Mal/Bredo-E, Mal/Bredo-E, Mal/Bredo-F [Sophos] | 1 |
| Mal/EncPk-CZ [Sophos] | 1 |
| Mal/EncPk-FS, W32/Scribble-B [Sophos] | 1 |
| Mal/EncPk-IF [Sophos] | 1 |
| Mal/EncPk-IV, Mal/EncPk-IF [Sophos] | 1 |
| Mal/EncPk-JB [Sophos] | 1 |
| Mal/FakeVirPk-A, Mal/TibsPk-A, W32/Scribble-B [Sophos] | 1 |
| Mal/Generic-A, Mal/EncPk-JB, Mal/EncPk-KK [Sophos] | 1 |
| Mal/Generic-A, Mal/EncPk-LT [Sophos] | 1 |
| Mal/Generic-A, Mal/EncPk-LT, Mal/FakeAV-BT [Sophos] | 1 |
| New Malware.bl [McAfee] | 1 |
| Packed.Win32.Katusha.c [Kaspersky Lab] | 1 |
| Packed.Win32.Krap.w [Kaspersky Lab] | 1 |
| PE_VIRUX.F-2 [Trend Micro] | 1 |
| Rootkit.Win32.Bezopi.e [Kaspersky Lab] | 1 |
| Suspicious.Vundo [Symantec] | 1 |
| Troj/Agent-IAO [Sophos] | 1 |
| Troj/Agent-IGP [Sophos] | 1 |
| Troj/Agent-IIJ [Sophos] | 1 |
| Troj/Agent-IKA [Sophos] | 1 |
| Troj/Agent-LVZ [Sophos] | 1 |
| Troj/Dloadr-BVC [Sophos] | 1 |
| Troj/Merein-Gen [Sophos] | 1 |
