REGEDIT4

[HKEY_LOCAL_MACHINE\Software\Network Instruments\Observer\Filters\(Virus) MyDoom.o]
"FilterBuffer"=hex:99,00,00,00,02,00,00,00,44,00,4c,00,00,00,1f,00,00,50,19,00,\
  01,00,01,00,00,00,01,28,00,00,00,01,0a,47,45,54,20,2f,73,65,61,72,63,01,00,\
  00,00,01,de,00,00,00,01,16,48,6f,73,74,3a,20,77,77,77,2e,67,6f,6f,67,6c,65,\
  2e,63,6f,6d,0d,0a,4d,00,00,00,00,00,1f,00,00,eb,1f,00,01,00,01,00,00,00,01,\
  28,00,00,00,01,10,47,45,54,20,2f,77,65,62,2f,72,65,73,75,6c,74,73,00,00,01,\
  00,01,da,00,00,00,01,19,48,6f,73,74,3a,20,77,77,77,2e,61,6c,74,61,76,69,73,\
  74,61,2e,63,6f,6d,0d,0a
"szDescr"="The sending machine may be infected with the MyDoom.o virus."
"szFolder"="Virus Filters"
"RGBValue"=dword:00800080
"bFilterBasedAlarm"=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Network Instruments\Observer\ProtocolPresetsV9]