| Threat Alias | Number of Incidents |
| Troj/AdvHack-A [Sophos] | 7,540 |
| Backdoor.Tidserv!inf [Symantec] | 6,920 |
| Trojan:Win32/Alureon.BB [Microsoft] | 6,560 |
| DNSChanger.o [McAfee] | 5,700 |
| Trojan.Fakeavalert!sd6 [PC Tools] | 5,620 |
| Trojan.Win32.Patched.dy [Kaspersky Lab] | 5,000 |
| Packed.Win32.PePatch [Ikarus] | 3,520 |
| Generic.dx [McAfee] | 3,260 |
| Trojan.Fakeavalert [Symantec] | 2,600 |
| Trojan.Patched.CL [Ikarus] | 2,480 |
| Worm.Win32.AutoRun.nuu [Kaspersky Lab] | 2,068 |
| Generic!atr [McAfee] | 1,936 |
| Trojan.FakeAlert [PC Tools] | 1,840 |
| Trojan.SillyWorm [PC Tools] | 1,724 |
| Worm.Win32.AutoRun [Ikarus] | 1,628 |
| Trojan:Win32/Alureon!inf [Microsoft] | 1,496 |
| Trojan.Win32.Patched [Ikarus] | 1,440 |
| Generic BackDoor.t [McAfee] | 720 |
| Packed.Win32.PePatch.lb [Kaspersky Lab] | 620 |
| Trojan.Patched.CK [Ikarus] | 320 |
| Trojan.Knowedel [Symantec] | 200 |
| Worm.Autorun.ABH [PC Tools] | 180 |
| Backdoor.Tidserv [Symantec] | 132 |
| Trojan.TDSServ [PC Tools] | 60 |
