REGEDIT4

[HKEY_LOCAL_MACHINE\Software\Network Instruments\Observer\Filters\(Virus) Beagle.ag / Bagle.ag]
"FilterBuffer"=hex:42,00,00,00,02,00,00,00,17,00,00,00,1f,00,20,00,00,4a,00,06,\
  00,50,00,00,00,00,00,00,00,00,00,23,00,00,00,00,00,1f,00,00,47,00,00,00,00,\
  01,00,00,00,01,28,00,00,00,01,0a,47,45,54,20,2f,6f,2e,70,68,70
"szDescr"="The sending machine may be infected with the Beagle.ag virus. "
"RGBValue"=dword:00800080
"szFolder"="Virus Filters"
"bFilterBasedAlarm"=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Network Instruments\Observer\ProtocolPresetsV9]