REGEDIT4

[HKEY_LOCAL_MACHINE\Software\Network Instruments\Observer\Filters\(Virus) Sbdot.uh Trojan]
"FilterBuffer"=hex:48,00,00,00,02,00,00,00,17,00,00,00,1f,00,1e,00,00,1f,00,06,\
  00,0b,1a,00,00,00,00,00,00,00,00,29,00,00,00,00,00,1f,00,00,6a,00,00,00,00,\
  01,00,06,00,01,00,00,00,00,00,10,3a,69,72,63,2e,74,33,6d,75,73,73,6f,2e,6e,\
  65,74
"szDescr"="The sending machine may be infected with the SBDOT.UH Trojan"
"RGBValue"=dword:00800080
"szFolder"="Virus Filters"
"bFilterBasedAlarm"=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Network Instruments\Observer\ProtocolPresetsV9]