| Threat Alias | Number of Incidents |
| Mal/Generic-A [Sophos] | 24 |
| Win32/Ntfs [AhnLab] | 22 |
| Virus.Win32.Cutwail [Ikarus] | 21 |
| Win32/Ntfs.B [AhnLab] | 20 |
| Generic.dx!fhv [McAfee] | 16 |
| Rootkit.Win32.Agent.aaew [Kaspersky Lab] | 14 |
| Troj/Drop-EQ [Sophos] | 13 |
| Virus.Win32.Protector.c [Kaspersky Lab] | 12 |
| Virus.Win32.Protector [Ikarus] | 7 |
| Hacktool.Rootkit [Symantec] | 4 |
| Trojan.Fakeavalert [Symantec] | 4 |
| Hacktool.Rootkit [PC Tools] | 3 |
| Cutwail.gen.e [McAfee] | 1 |
| Downloader [Symantec] | 1 |
| Generic.dx!fia [McAfee] | 1 |
| Generic.dx!fzo [McAfee] | 1 |
| Troj/NTFSKit-B [Sophos] | 1 |