REGEDIT4

[HKEY_LOCAL_MACHINE\Software\Network Instruments\Observer\Filters\(Virus) Beagle.aa / Bagle.aa]
"FilterBuffer"=hex:43,00,00,00,02,00,00,00,17,00,00,00,1f,00,20,00,00,8f,00,06,\
  00,50,00,00,00,00,00,00,00,00,00,24,00,00,00,00,00,1f,00,00,39,00,00,00,00,\
  01,00,00,00,01,28,00,00,00,01,0b,47,45,54,20,2f,35,2e,70,68,70,3f
"szDescr"="The sending machien may be infected with the Beagle.aa virus"
"RGBValue"=dword:00800080
"szFolder"="Virus Filters"
"bFilterBasedAlarm"=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Network Instruments\Observer\ProtocolPresetsV9]