REGEDIT4

[HKEY_LOCAL_MACHINE\Software\Network Instruments\Observer\Filters\(Virus) Mimail.i]
"FilterBuffer"=hex:68,00,00,00,02,00,00,00,30,00,38,00,00,00,1f,00,00,1c,19,00,\
  01,00,01,00,07,00,01,1a,00,00,00,00,0a,63,65,6e,74,72,75,6d,2e,63,7a,01,00,\
  07,00,01,26,00,00,00,01,02,00,0f,30,00,00,00,00,00,1f,00,00,c8,19,00,01,00,\
  00,00,01,00,01,2c,00,00,00,00,0a,6d,61,69,6c,31,35,2e,63,6f,6d,01,00,07,00,\
  01,26,00,00,00,01,02,00,0f
"szDescr"="The sending machine may be infected with the Mimail.i virus."
"bFilterBasedAlarm"=dword:00000001
"RGBValue"=dword:00800080
"szFolder"="Virus Filters"

[HKEY_LOCAL_MACHINE\Software\Network Instruments\Observer\ProtocolPresetsV9]