REGEDIT4

[HKEY_LOCAL_MACHINE\Software\Network Instruments\Observer\Filters\(Virus) Bofra (A through E)]
"FilterBuffer"=hex:6d,05,00,00,18,00,00,00,17,00,52,00,1f,00,20,00,00,ba,00,06,\
  00,19,00,00,00,00,00,00,00,00,00,33,00,d5,00,69,00,1f,00,00,6c,12,00,02,00,\
  01,00,06,00,02,00,00,90,01,00,03,48,69,21,01,00,06,00,02,00,00,90,01,00,0c,\
  43,6f,6e,66,69,72,6d,61,74,69,6f,6e,17,00,52,03,16,03,1e,00,00,05,00,06,00,\
  0b,1a,00,00,00,00,00,00,00,00,6c,00,7e,01,0d,01,1f,00,00,57,39,00,02,00,01,\
  00,06,00,02,00,00,78,05,00,2a,58,2d,41,6e,74,69,56,69,72,75,73,3a,20,73,63,\
  61,6e,6e,65,64,20,66,6f,72,20,76,69,72,75,73,65,73,20,62,79,20,41,4d,61,56,\
  69,53,01,00,06,00,02,00,00,78,05,00,1e,58,2d,41,6e,74,69,56,69,72,75,73,3a,\
  20,43,68,65,63,6b,65,64,20,62,79,20,44,72,2e,57,65,62,38,00,f9,02,69,00,1f,\
  00,00,0e,1e,00,02,00,01,00,06,00,02,00,00,90,01,00,0f,66,75,6e,6e,79,20,70,\
  68,6f,74,6f,73,20,3a,29,01,00,06,00,02,00,00,90,01,00,05,68,65,6c,6c,6f,71,\
  00,ba,01,00,00,1f,00,00,a0,3e,00,01,00,01,00,06,00,02,00,00,78,05,00,2f,4c,\
  6f,6f,6b,20,61,74,20,6d,79,20,68,6f,6d,65,70,61,67,65,20,77,69,74,68,20,6d,\
  79,20,6c,61,73,74,20,77,65,62,63,61,6d,20,70,68,6f,74,6f,73,21,00,00,01,00,\
  02,00,00,78,05,00,1e,46,52,45,45,20,41,44,55,4c,54,20,56,49,44,45,4f,21,20,\
  53,49,47,4e,20,55,50,20,4e,4f,57,21,3c,00,00,00,0d,01,1f,00,00,23,00,00,00,\
  00,01,00,06,00,02,00,00,78,05,00,23,58,2d,41,6e,74,69,56,69,72,75,73,3a,20,\
  43,68,65,63,6b,65,64,20,66,6f,72,20,76,69,72,75,73,65,73,20,62,79,58,00,12,\
  02,00,00,1f,00,00,13,30,00,02,00,01,00,06,00,02,00,00,78,05,00,21,48,69,21,\
  20,49,20,61,6d,20,6c,6f,6f,6b,69,6e,67,20,66,6f,72,20,6e,65,77,20,66,72,69,\
  65,6e,64,73,2e,01,00,06,00,02,00,00,78,05,00,13,49,20,61,6d,20,66,72,6f,6d,\
  20,4d,69,61,6d,69,2c,20,46,4c,80,00,92,02,00,00,1f,00,00,3e,44,00,02,00,01,\
  00,06,00,02,00,00,78,05,00,35,43,6f,6e,67,72,61,74,75,6c,61,74,69,6f,6e,73,\
  21,20,50,61,79,50,61,6c,20,68,61,73,20,73,75,63,63,65,73,73,66,75,6c,6c,79,\
  20,63,68,61,72,67,65,64,20,24,31,37,35,01,00,06,00,02,00,00,78,05,00,27,44,\
  4f,20,4e,4f,54,20,52,45,50,4c,59,20,54,4f,20,54,48,49,53,20,4d,45,53,53,41,\
  47,45,20,56,49,41,20,45,4d,41,49,4c,21,67,00,00,00,00,00,1f,00,00,d0,34,00,\
  02,00,01,00,06,00,02,00,00,78,05,00,25,54,6f,20,73,65,65,20,64,65,74,61,69,\
  6c,73,20,70,6c,65,61,73,65,20,63,6c,69,63,6b,20,74,68,69,73,20,6c,69,6e,6b,\
  01,00,06,00,02,00,00,78,05,00,1e,53,65,65,20,6d,79,20,68,6f,6d,65,70,61,67,\
  65,20,77,69,74,68,20,6d,79,20,77,65,62,6c,6f,67,1d,00,00,00,69,00,1f,00,00,\
  4f,00,00,00,00,01,00,06,00,02,00,00,90,01,00,04,68,65,79,21,3c,00,00,00,69,\
  03,1f,00,00,52,1f,00,02,00,00,00,01,00,02,00,00,1e,00,00,10,2e,65,75,2e,75,\
  6e,64,65,72,6e,65,74,2e,6f,72,67,01,00,06,00,02,00,00,1e,00,00,08,2e,64,61,\
  6c,2e,6e,65,74,17,00,07,05,dd,04,1e,00,00,f6,00,06,00,71,00,00,00,00,00,00,\
  00,00,00,3d,00,a6,03,00,00,1f,00,00,c0,1d,00,01,00,01,00,06,00,02,00,00,1e,\
  00,00,0e,62,72,6f,61,64,77,61,79,2e,6e,79,2e,75,73,01,00,06,00,02,00,00,1e,\
  00,00,0b,62,72,75,73,73,65,6c,73,2e,62,65,33,00,d9,03,00,00,1f,00,00,9c,15,\
  00,02,00,01,00,06,00,02,00,00,1e,00,00,06,71,69,73,2e,6d,64,01,00,06,00,02,\
  00,00,1e,00,00,09,76,61,6e,63,6f,75,76,65,72,33,00,0c,04,00,00,1f,00,00,24,\
  17,00,02,00,00,00,01,00,02,00,00,1e,00,00,08,6c,75,6c,65,61,2e,73,65,01,00,\
  06,00,02,00,00,1e,00,00,07,6f,7a,62,79,74,65,73,3b,00,47,04,00,00,1f,00,00,\
  d6,18,00,02,00,01,00,06,00,02,00,00,1e,00,00,09,6c,6f,6e,64,6f,6e,2e,75,6b,\
  01,00,06,00,02,00,00,1e,00,00,0e,6c,6f,73,2d,61,6e,67,65,6c,65,73,2e,63,61,\
  36,00,7d,04,00,00,1f,00,00,ea,1a,00,02,00,01,00,06,00,02,00,00,1e,00,00,0b,\
  66,6c,61,6e,64,65,72,73,2e,62,65,01,00,06,00,02,00,00,1e,00,00,07,67,72,61,\
  7a,2e,61,74,2e,00,ab,04,00,00,1f,00,00,9d,16,00,02,00,01,00,06,00,02,00,00,\
  1e,00,00,07,63,61,65,6e,2e,66,72,01,00,06,00,02,00,00,1e,00,00,03,63,65,64,\
  32,00,00,00,00,00,1f,00,00,dd,14,00,02,00,01,00,06,00,02,00,00,1e,00,00,05,\
  63,6f,69,6e,73,01,00,06,00,02,00,00,1e,00,00,09,64,69,65,6d,65,6e,2e,6e,6c,\
  2a,00,00,00,00,00,1f,00,00,73,12,00,02,00,01,00,06,00,02,00,00,78,05,00,03,\
  49,52,43,01,00,06,00,02,00,00,78,05,00,03,69,72,63,17,00,56,05,1e,05,1e,00,\
  00,c5,00,06,00,67,06,00,00,00,00,00,00,00,00,38,00,00,00,00,00,1f,00,00,f7,\
  1a,00,02,00,01,00,06,00,02,00,00,1e,00,00,0b,72,65,61,63,74,6f,72,2e,68,74,\
  6d,01,00,06,00,02,00,00,1e,00,00,09,69,6e,64,65,78,2e,68,74,6d,17,00,00,00,\
  1e,05,1e,00,00,17,00,06,00,68,06,00,00,00,00,00,00,00,00
"szDescr"="The sending or receiving machine may be infected with the Bofra virus. This looks for variants a through e of this virus."
"RGBValue"=dword:00800080
"szFolder"="Virus Filters"
"bFilterBasedAlarm"=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Network Instruments\Observer\ProtocolPresetsV9]