REGEDIT4

[HKEY_LOCAL_MACHINE\Software\Network Instruments\Observer\Filters\(Virus) Zotob.E]
"szFolder"="Virus Filters"
"szDescr"="The sending machien may be infected with the Zotob.E virus."
"RGBValue"=dword:00800080
"dwVersion"=dword:00000000
"bDeleted"=dword:00000000
"FilterBuffer"=hex:31,00,00,00,02,00,00,00,12,00,00,00,1a,00,01,00,10,c8,00,00,\
  48,14,1b,73,00,00,17,00,00,00,00,00,1e,00,00,7a,00,06,00,90,1f,00,00,00,00,\
  00,00,00,00
"bFilterBasedAlarm"=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Network Instruments\Observer\ProtocolPresetsV9]