REGEDIT4

[HKEY_LOCAL_MACHINE\Software\Network Instruments\Observer\Filters\(Virus) Lovgate.AB]
"FilterBuffer"=hex:e7,00,00,00,03,00,00,00,17,00,00,00,1f,00,20,00,01,49,00,06,\
  00,50,00,00,00,00,00,00,00,00,00,78,00,97,00,00,00,1f,00,00,d8,3b,00,01,00,\
  01,00,06,00,02,00,00,78,05,00,2c,49,66,20,79,6f,75,20,63,61,6e,20,6b,65,65,\
  70,20,79,6f,75,72,20,68,65,61,64,20,77,68,65,6e,20,61,6c,6c,20,61,62,6f,75,\
  74,20,79,6f,75,01,00,06,00,02,00,00,78,05,00,28,41,72,65,20,6c,6f,73,69,6e,\
  67,20,74,68,65,69,72,73,20,61,6e,64,20,62,6c,61,6d,69,6e,67,20,69,74,20,6f,\
  6e,20,79,6f,75,3b,50,00,00,00,00,00,1f,00,00,f6,00,00,00,00,01,00,06,00,02,\
  00,00,78,05,00,37,49,74,27,73,20,74,68,65,20,6c,6f,6e,67,2d,61,77,61,69,74,\
  65,64,20,66,69,6c,6d,20,76,65,72,73,69,6f,6e,20,6f,66,20,74,68,65,20,42,72,\
  6f,61,64,77,61,79,20,68,69,74,2e
"szDescr"="The sending machine may be infected with the Lovgate.AB virus."
"RGBValue"=dword:00800080
"szFolder"="Virus Filters"
"bFilterBasedAlarm"=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Network Instruments\Observer\ProtocolPresetsV9]