REGEDIT4

[HKEY_LOCAL_MACHINE\Software\Network Instruments\Observer\Filters\(Virus) Netsky.p]
"FilterBuffer"=hex:62,04,00,00,0e,00,00,00,17,00,00,00,1f,00,20,00,00,4a,00,06,\
  00,19,00,00,00,00,00,00,00,00,00,3b,00,be,00,5a,00,1f,00,00,f6,1e,00,02,00,\
  01,00,06,00,02,00,00,dc,05,00,0f,53,74,6f,6c,65,6e,20,64,6f,63,75,6d,65,6e,\
  74,01,00,06,00,02,00,00,dc,05,00,08,52,65,3a,48,65,6c,6c,6f,64,00,df,00,00,\
  00,1f,00,00,26,2f,00,02,00,01,00,06,00,02,00,00,dc,05,00,20,49,20,66,6f,75,\
  6e,64,20,74,68,69,73,20,64,6f,63,75,6d,65,6e,74,20,61,62,6f,75,74,20,79,6f,\
  75,2e,01,00,06,00,02,00,00,dc,05,00,20,49,20,68,61,76,65,20,61,74,74,61,63,\
  68,65,64,20,69,74,20,74,6f,20,74,68,69,73,20,6d,61,69,6c,2e,21,00,56,03,5a,\
  00,1f,00,00,a1,00,00,00,00,01,00,06,00,02,00,00,dc,05,00,08,50,6f,73,74,63,\
  61,72,64,a4,00,83,01,00,00,1f,00,00,27,6e,00,01,00,01,00,06,00,02,00,00,dc,\
  05,00,5f,49,66,20,74,68,65,20,6d,65,73,73,61,67,65,20,77,69,6c,6c,20,6e,6f,\
  74,20,64,69,73,70,6c,61,79,65,64,20,61,75,74,6f,6d,61,74,69,63,61,6c,6c,79,\
  2c,20,66,6f,6c,6c,6f,77,20,74,68,65,20,6c,69,6e,6b,20,74,6f,20,72,65,61,64,\
  20,74,68,65,20,64,65,6c,69,76,65,72,65,64,20,6d,65,73,73,61,67,65,2e,01,00,\
  06,00,02,00,00,dc,05,00,21,52,65,63,65,69,76,65,64,20,6d,65,73,73,61,67,65,\
  20,69,73,20,61,76,61,69,6c,61,62,6c,65,20,61,74,3a,6a,00,ed,01,00,00,1f,00,\
  00,8f,32,00,02,00,01,00,06,00,02,00,00,dc,05,00,23,43,6f,6e,67,72,61,74,75,\
  6c,61,74,69,6f,6e,73,21,2c,20,79,6f,75,72,20,62,65,73,74,20,66,72,69,65,6e,\
  64,2e,01,00,06,00,02,00,00,dc,05,00,23,47,72,65,65,74,69,6e,67,73,20,66,72,\
  6f,6d,20,66,72,61,6e,63,65,2c,20,79,6f,75,72,20,66,72,69,65,6e,64,2e,62,00,\
  4f,02,00,00,1f,00,00,0d,25,00,01,00,01,00,06,00,02,00,00,dc,05,00,16,59,6f,\
  75,72,20,66,69,6c,65,20,69,73,20,61,74,74,61,63,68,65,64,2e,01,00,06,00,02,\
  00,00,dc,05,00,28,46,6f,72,20,66,75,72,74,68,65,72,20,64,65,74,61,69,6c,73,\
  20,73,65,65,20,74,68,61,74,20,61,74,74,61,63,68,6d,65,6e,74,2e,52,00,a1,02,\
  00,00,1f,00,00,86,27,00,02,00,01,00,06,00,02,00,00,dc,05,00,18,48,65,72,65,\
  20,69,73,20,6d,79,20,70,68,6f,6e,65,20,6e,75,6d,62,65,72,2e,01,00,06,00,02,\
  00,00,dc,05,00,16,49,20,63,61,6e,6e,6f,74,20,62,65,6c,69,65,76,65,20,74,68,\
  61,74,2e,65,00,06,03,00,00,1f,00,00,0c,2d,00,02,00,01,00,06,00,02,00,00,dc,\
  05,00,1e,50,72,6f,74,65,63,74,65,64,20,6d,65,73,73,61,67,65,20,69,73,20,61,\
  76,61,69,6c,61,62,6c,65,01,00,06,00,02,00,00,dc,05,00,23,44,6f,20,6e,6f,74,\
  20,76,69,73,69,74,20,74,68,69,73,20,69,6c,6c,65,67,61,6c,20,77,65,62,73,69,\
  74,65,73,21,50,00,00,00,00,00,1f,00,00,9e,2c,00,02,00,01,00,06,00,02,00,00,\
  dc,05,00,1d,57,61,69,74,69,6e,67,20,66,6f,72,20,61,75,74,68,65,6e,74,69,66,\
  69,63,61,74,69,6f,6e,2e,01,00,06,00,02,00,00,dc,05,00,0f,50,6c,65,61,73,65,\
  20,63,6f,6e,66,69,72,6d,21,3f,00,95,03,5a,00,1f,00,00,65,1a,00,02,00,01,00,\
  06,00,02,00,00,dc,05,00,0b,52,65,3a,51,75,65,73,74,69,6f,6e,01,00,06,00,02,\
  00,00,dc,05,00,10,50,72,69,76,61,74,65,20,64,6f,63,75,6d,65,6e,74,54,00,e9,\
  03,5a,00,1f,00,00,d9,26,00,02,00,01,00,06,00,02,00,00,dc,05,00,17,52,65,3a,\
  45,78,74,65,6e,64,65,64,20,4d,61,69,6c,20,53,79,73,74,65,6d,01,00,06,00,02,\
  00,00,dc,05,00,19,52,65,3a,50,72,6f,63,74,65,63,74,65,64,20,4d,61,69,6c,20,\
  53,79,73,74,65,6d,41,00,2a,04,5a,00,1f,00,00,d5,1c,00,02,00,01,00,06,00,02,\
  00,00,dc,05,00,0d,4d,61,69,6c,20,44,65,6c,69,76,65,72,79,01,00,06,00,02,00,\
  00,dc,05,00,10,50,72,69,76,61,74,65,20,64,6f,63,75,6d,65,6e,74,38,00,00,00,\
  5a,00,1f,00,00,5a,18,00,02,00,01,00,06,00,02,00,00,dc,05,00,09,52,65,3a,4e,\
  6f,74,69,66,79,01,00,06,00,02,00,00,dc,05,00,0b,52,65,3a,64,6f,63,75,6d,65,\
  6e,74
"szDescr"="The sending machine may be infected with the Netsky.p virus."
"RGBValue"=dword:00800080
"szFolder"="Virus Filters"
"bFilterBasedAlarm"=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Network Instruments\Observer\ProtocolPresetsV9]