| Threat Alias | Number of Incidents |
| IM-Worm.Win32.Sohanad.bh [Kaspersky Lab] | 12 |
| Trojan.Win32.Disabler.i [Kaspersky Lab] | 12 |
| WORM_FLASHY.B [Trend Micro] | 8 |
| BackDoor-DIY [McAfee] | 7 |
| W32/Glupzy-B [Sophos] | 7 |
| W32.Glupzy.A [Symantec] | 6 |
| W32/Dzan.b [McAfee] | 6 |
| PE_DZAN.A [Trend Micro] | 5 |
| W32.Dizan [Symantec] | 5 |
| W32.Yautoit [Symantec] | 5 |
| WORM_DELF.FKZ [Trend Micro] | 4 |
| WORM_SOHANAD.DX [Trend Micro] | 4 |
| Bloodhound.Unknown [Symantec] | 3 |
| Trojan.Win32.Disabler [Ikarus] | 3 |
| Virus.Win32.Dzan.a [Kaspersky Lab] | 3 |
| W32/YahLover.worm [McAfee] | 3 |
| Win-Trojan/Disabler.21185 [AhnLab] | 3 |
| Generic.dx [McAfee] | 2 |
| IM-Worm.Win32.Sohanad [Ikarus] | 2 |
| Mal/Airworm-A [Sophos] | 2 |
| TROJ_DISABLER.AD [Trend Micro] | 2 |
| Trojan.Win32.Autoit.ci [Kaspersky Lab] | 2 |
| Virus.Win32.Virut.q [Kaspersky Lab] | 2 |
| W32.Imaut [Symantec] | 2 |
| W32.Pitin.C [Symantec] | 2 |
| W32/Sohana-AO [Sophos] | 2 |
| W32/YahLover.worm.gen [McAfee] | 2 |
| Worm.Nuqel.D [PC Tools] | 2 |
| Worm:Win32/Nuqel.S [Microsoft] | 2 |
| WORM_SOHANAD.ED [Trend Micro] | 2 |
| Email-Worm.Win32.Brontok.N [Ikarus] | 1 |
| PE_DZAN.A-O [Trend Micro] | 1 |
| PE_DZAN.C [Trend Micro] | 1 |
| Possible_AUMAL-2 [Trend Micro] | 1 |
| Virus.Win32.Rontokbr.I2 [Ikarus] | 1 |
| Virus.Win32.Virut.o [Kaspersky Lab] | 1 |
| Virus:Win32/Dzan.A [Microsoft] | 1 |
| Virus:Win32/Virut.gen!A [Microsoft] | 1 |
| W32.Dzan [Ikarus] | 1 |
| W32.Virut.U [Symantec] | 1 |
| W32/Dzan.c [McAfee] | 1 |
| W32/Dzan-A [Sophos] | 1 |
| W32/Virut.remnants [McAfee] | 1 |
| Win32/Dzan [AhnLab] | 1 |
| WORM_DISABLER.AK [Trend Micro] | 1 |
| WORM_IMAUT.E [Trend Micro] | 1 |