REGEDIT4

[HKEY_LOCAL_MACHINE\Software\Network Instruments\Observer\Filters\(Virus) Sbdot Trojan]
"FilterBuffer"=hex:33,00,00,00,02,00,00,00,19,00,00,00,21,00,21,00,00,7f,00,00,\
  00,00,01,00,02,00,00,00,00,00,00,00,00,12,00,00,00,00,00,01,00,10,f4,00,00,\
  42,62,da,2e,00,00
"szDescr"="The sending machine may be infected with the Sbdot Trojan"
"RGBValue"=dword:00800080
"szFolder"="Virus Filters"
"bFilterBasedAlarm"=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Network Instruments\Observer\ProtocolPresetsV9]