REGEDIT4

[HKEY_LOCAL_MACHINE\Software\Network Instruments\Observer\Filters\(Virus) MyDoom.ai]
"FilterBuffer"=hex:11,02,00,00,07,00,00,00,17,00,00,00,1f,00,20,00,00,e7,00,06,\
  00,19,00,00,00,00,00,00,00,00,00,33,00,c3,00,52,00,1f,00,00,6d,12,00,02,00,\
  01,00,06,00,02,00,00,dc,05,00,03,48,69,21,01,00,06,00,02,00,00,dc,05,00,0c,\
  43,6f,6e,66,69,72,6d,61,74,69,6f,6e,71,00,00,00,fb,00,1f,00,00,20,3e,00,02,\
  00,01,00,06,00,02,00,00,dc,05,00,2f,4c,6f,6f,6b,20,61,74,20,6d,79,20,68,6f,\
  6d,65,70,61,67,65,20,77,69,74,68,20,6d,79,20,6c,61,73,74,20,77,65,62,63,61,\
  6d,20,70,68,6f,74,6f,73,21,01,00,06,00,02,00,00,dc,05,00,1e,46,52,45,45,20,\
  41,44,55,4c,54,20,56,49,44,45,4f,21,20,53,49,47,4e,20,55,50,20,4e,4f,57,21,\
  38,00,f4,01,52,00,1f,00,00,a9,1e,00,02,00,01,00,06,00,02,00,00,dc,05,00,0f,\
  66,75,6e,6e,79,20,70,68,6f,74,6f,73,20,3a,29,01,00,06,00,02,00,00,dc,05,00,\
  05,68,65,6c,6c,6f,a0,00,9b,01,00,00,1f,00,00,c2,55,00,02,00,01,00,06,00,02,\
  00,00,dc,05,00,46,58,2d,41,6e,74,69,56,69,72,75,73,3a,20,73,63,61,6e,6e,65,\
  64,20,66,6f,72,20,76,69,72,75,73,65,73,20,62,79,20,41,4d,61,56,69,53,20,30,\
  2e,32,2e,31,20,28,68,74,74,70,3a,2f,20,2f,61,6d,61,76,69,73,2e,6f,72,67,2f,\
  29,01,00,06,00,02,00,00,dc,05,00,36,58,2d,41,6e,74,69,56,69,72,75,73,3a,20,\
  43,68,65,63,6b,65,64,20,62,79,20,44,72,2e,57,65,62,20,28,68,74,74,70,3a,2f,\
  20,2f,77,77,77,2e,64,72,77,65,62,2e,6e,65,74,29,59,00,00,00,00,00,1f,00,00,\
  11,00,00,00,00,01,00,06,00,02,00,00,dc,05,00,40,58,2d,41,6e,74,69,56,69,72,\
  75,73,3a,20,43,68,65,63,6b,65,64,20,66,6f,72,20,76,69,72,75,73,65,73,20,62,\
  79,20,47,6f,72,64,61,6e,6f,27,73,20,41,6e,74,69,56,69,72,75,73,20,53,6f,66,\
  74,77,61,72,65,1d,00,00,00,52,00,1f,00,00,db,00,00,00,00,01,00,06,00,02,00,\
  00,dc,05,00,04,68,65,79,21
"szDescr"="The sending machine may be infected with the MyDoom.ai virus."
"RGBValue"=dword:00800080
"szFolder"="Virus Filters"
"bFilterBasedAlarm"=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Network Instruments\Observer\ProtocolPresetsV9]