REGEDIT4

[HKEY_LOCAL_MACHINE\Software\Network Instruments\Observer\Filters\(Virus) Netsky.ag]
"FilterBuffer"=hex:52,03,00,00,12,00,00,00,17,00,00,00,1f,00,20,00,00,a4,00,06,\
  00,19,00,00,00,00,00,00,00,00,00,32,00,7d,00,51,00,1f,00,00,61,16,00,02,00,\
  01,00,06,00,02,64,00,90,01,00,07,56,61,64,69,61,7a,21,01,00,06,00,02,64,00,\
  90,01,00,07,73,61,6d,70,61,21,21,2c,00,b5,00,00,00,1f,00,00,32,13,00,02,00,\
  01,00,06,00,02,64,00,90,01,00,04,2e,7a,69,70,01,00,06,00,02,64,00,90,01,00,\
  04,2e,70,69,66,38,00,0d,01,51,00,1f,00,00,65,17,00,02,00,01,00,06,00,02,64,\
  00,90,01,00,08,6c,6f,74,65,72,69,61,73,01,00,06,00,02,64,00,90,01,00,0c,4d,\
  73,6e,4d,73,67,72,73,2e,65,78,65,2c,00,e1,00,00,00,1f,00,00,d3,13,00,02,00,\
  01,00,06,00,02,64,00,90,01,00,04,2e,73,63,72,01,00,06,00,02,64,00,90,01,00,\
  04,2e,62,61,74,2c,00,00,00,00,00,1f,00,00,b7,13,00,02,00,01,00,06,00,02,64,\
  00,90,01,00,04,2e,63,6f,6d,01,00,06,00,02,64,00,90,01,00,04,2e,65,78,65,2f,\
  00,3c,01,51,00,1f,00,00,cf,14,00,02,00,01,00,06,00,02,64,00,90,01,00,05,66,\
  6c,69,70,65,01,00,06,00,02,64,00,90,01,00,06,7a,65,61,72,64,6f,2f,00,6b,01,\
  51,00,1f,00,00,4d,16,00,02,00,01,00,06,00,02,64,00,90,01,00,07,69,6d,70,6f,\
  73,74,6f,01,00,06,00,02,64,00,90,01,00,04,64,69,67,61,2d,00,98,01,51,00,1f,\
  00,00,89,14,00,02,00,01,00,06,00,02,64,00,90,01,00,05,77,61,72,33,21,01,00,\
  06,00,02,64,00,90,01,00,04,76,61,63,61,2f,00,c7,01,51,00,1f,00,00,1a,14,00,\
  02,00,01,00,06,00,02,64,00,90,01,00,05,6a,6f,67,6f,21,01,00,06,00,02,64,00,\
  90,01,00,06,72,6f,62,6f,73,21,30,00,f7,01,51,00,1f,00,00,a6,16,00,02,00,01,\
  00,06,00,02,64,00,90,01,00,07,66,65,73,74,61,21,21,01,00,06,00,02,64,00,90,\
  01,00,05,67,72,61,6e,61,35,00,2c,02,51,00,1f,00,00,2f,17,00,02,00,01,00,06,\
  00,02,64,00,90,01,00,08,64,6f,63,73,2e,7a,69,70,01,00,06,00,02,64,00,90,01,\
  00,09,65,6d,61,69,6c,2e,7a,69,70,2e,00,5a,02,51,00,1f,00,00,91,14,00,02,00,\
  01,00,06,00,02,64,00,90,01,00,05,61,71,75,61,21,01,00,06,00,02,64,00,90,01,\
  00,05,41,49,44,53,21,32,00,8c,02,51,00,1f,00,00,10,16,00,02,00,01,00,06,00,\
  02,64,00,90,01,00,07,63,61,72,72,6f,73,21,01,00,06,00,02,64,00,90,01,00,07,\
  61,67,72,61,64,6f,75,30,00,bc,02,51,00,1f,00,00,95,15,00,02,00,01,00,06,00,\
  02,64,00,90,01,00,06,3a,28,2e,7a,69,70,01,00,06,00,02,64,00,90,01,00,06,62,\
  61,6e,63,6f,21,31,00,ed,02,51,00,1f,00,00,c7,14,00,02,00,01,00,06,00,02,64,\
  00,90,01,00,05,74,65,74,61,73,01,00,06,00,02,64,00,90,01,00,08,63,69,72,63,\
  75,6c,61,72,2f,00,1c,03,51,00,1f,00,00,4b,14,00,02,00,01,00,06,00,02,64,00,\
  90,01,00,05,76,69,70,73,21,01,00,06,00,02,64,00,90,01,00,06,6c,75,6c,61,6f,\
  21,36,00,00,00,51,00,1f,00,00,ae,19,00,02,00,01,00,06,00,02,64,00,90,01,00,\
  0a,30,31,32,33,34,35,36,37,38,39,01,00,06,00,02,64,00,90,01,00,08,4c,49,4e,\
  55,53,54,4f,52
"szDescr"="The sending machine may be infected with the Netsky.ag virus."
"RGBValue"=dword:00800080
"szFolder"="Virus Filters"
"bFilterBasedAlarm"=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Network Instruments\Observer\ProtocolPresetsV9]