#LAST UPDATED 08/30/2018
#SKIPIFWEIGHT 25
MINWEIGHTTOFAIL 10
#--------------------------------------------------------------------#
# EXCEPTIONS #
#--------------------------------------------------------------------#
TESTSFAILED END PCRE (IADB|BONDEDSENDER|GOOD-REVDNS)
#--------------------------------------------------------------------#
# SOFTWARE CONTENT INDICATORS #
#--------------------------------------------------------------------#
#ADOBE
BODY 1 PCRE (?i:Adobe In ?Design)
BODY 1 PCRE (?i:Ph[o0]t[o0]sh[o0]{1,2}p (?:[5678]|CS|Elements))
BODY 1 PCRE (?i:Adobe Acrobat \d\.?\d? Pro)
BODY 1 PCRE (?i:Adobe Creative Suite)
BODY 1 PCRE (?i:Adobe Illustrator \d\d)
BODY 1 PCRE (?i:Adobe Premiere)
BODY 1 PCRE (?i:Adobe Audition)
BODY 1 PCRE (?i:Adobe Encore)
BODY 0 PCRE (?i:Adobe Acrobat)
BODY 1 PCRE (?i:Adobe Photoshop)
BODY 1 PCRE (?i:Adobe PageMaker \d)
BODY 1 PCRE (?i:Illustrator CS)
BODY 1 PCRE (?i:Autodesk AutoCAD)
#MICROSOFT
BODY 1 PCRE (?i:(Microsoft|MS).Office.?(XP|200\d|Professional|))
BODY 1 PCRE (?i:Microsoft Vista Business)
BODY 1 PCRE (?i:(Microsoft|MS).Windows XP)
#MACROMEDIA
BODY 1 PCRE (?i:Macromedia Flash MX)
BODY 1 PCRE (?i:Macromedia Studio MX)
BODY 1 PCRE (?i:Macromedia Dreamweaver)
#--------------------------------------------------------------------#
# SOFTWARE PHRASE #
#--------------------------------------------------------------------#
ANYWHERE 3 PCRE (?i:[QO]EM software)
BODY 4 PCRE (?i:DVD Copying Software)
BODY 1 PCRE (?i:downloadable software)
BODY 15 PCRE (?i:cheap(-soft|.licensed software))
ANYWHERE 1 PCRE (?i:software titles)
ANYWHERE 1 PCRE (?i:Visit our Website)
ANYWHERE 1 PCRE (?i:reduced our prices)
#SOFTWARE
BODY 20 PCRE (?i:(?!windows)\b(ad0be|w(i|1)nd(o|0)ws)\b)
#--------------------------------------------------------------------#
# SOFTWARE CHARACTERISTICS #
#--------------------------------------------------------------------#
HEADERS 2 CONTAINS X-Mailer: The Bat
#BODY 1 CONTAINS http://
BODY 2 PCRE (?i:(Retail|Our) price:)
BODY 2 PCRE (?i:You save:)
#--------------------------------------------------------------------#
# SOFTWARE MASK #
#--------------------------------------------------------------------#
ANYWHERE 20 PCRE (?i:(\bpr1ce\b|s0ftware|\b[O0]ff1ce))
ANYWHERE 10 PCRE (?i:(?!adobe)\b(ad[0o]b[e3]\b))
ANYWHERE 10 PCRE (?i:(?!software)\bs[oftwar]{6,7}e\b)
#SOFTWARE
BODY 10 PCRE (?im:(You|Our|Retail).[ _-]pr{0,2}[\|li1í\!]ce[ :;-]+.{0,20}?(\$\d{1,4}(\.|,)\d{1,4}))
# MISC others
ANYWHERE 1 PCRE (?i:3D Studio Max)
ANYWHERE 1 PCRE (?i:AutoCAD \d{2,4})
BODY 10 PCRE (?im:(You|Our|Retail).[ _-]pr{0,2}[\|li1í\!]ce[ :;-]+.{0,20}?(\$\d{1,4}(\.|,)\d{1,4}))
BODY 4 PCRE (?i:(?:bargain|bucks|C.?h.?e.?a.?p|discount|expensive|p.?r.?i.?c.?e|s.?a.?v.?e|special\W*offer|spend).{1,30}software|s.?o.?f.?t.?w.?a.?r.?e.{1,30}(?:\%.off|at\W*only|bargain|bucks|c.?h.?e.?a.?p|deal|loww?.c.?o.?s.?t|price))
ANYWHERE 1 PCRE (?i:Macromedia Dreamwe?aver MX)
ANYWHERE 1 PCRE (?i:Fireworks MX)
ANYWHERE 1 PCRE (?i:Studio MX \d{4})
ANYWHERE 1 PCRE (?i:W[i|]nd[o0]ws (?:NT 4\.0|98 Second|2[0O]{2}3 Server|2[0O]{3} Pr[o0]|XP Media Center|XP (?:Pr[o0]|H[o0]me|C[o0]rp)|Small))
ANYWHERE 1 PCRE (?i:[O0]ff[i|]ce (?:XP|2[0O][0O]\d|Small|Publisher|System Pro))
ANYWHERE 1 PCRE (?i:(?:M[i|]cr[o0][s5\$][o0]ft|M[S\$]) Visual Studio)
ANYWHERE 1 PCRE (?i:(?:M[i|]cr[o0][s5\$][o0]ft|M[S\$]) Visio 200\d)
ANYWHERE 1 PCRE (?i:(?:M[i|]cr[o0][s5\$][o0]ft|M[S\$]) Money 200\d)
ANYWHERE 1 PCRE (?i:(?:M[i|]cr[o0][s5\$][o0]ft|M[S\$]) Project 200\d)
ANYWHERE 1 PCRE (?i:(?:M[i|]cr[o0][s5\$][o0]ft|M[S\$]) SQL Server (?:2000|7))
ANYWHERE 1 PCRE (?i:W[i|]nd[o0]w(?:XP|2[0o][0o]3))
ANYWHERE 1 PCRE (?i:(?:M[i|]cr[o0][s5\$][o0]ft|M[S\$]) FrontPage 2003)
ANYWHERE 1 PCRE (?i:N[o0]rt[o0]n Ant[i|](?:\s*)?v[i|]rus (?:Corporate|200\d|Pr[o0]))
ANYWHERE 1 PCRE (?i:System ?Works (?:Pro)? ?2[0O][0O][34])
# Catch OEM style price lines
ANYWHERE 1 PCRE (?i:windows.{4,40}\$\s?\d\d)
ANYWHERE 1 PCRE (?i:Photoshop.{4,40}\$\s?\d\d)
ANYWHERE 1 PCRE (?i:Creative.{4,40}\$\s?\d\d)
ANYWHERE 1 PCRE (?i:Acrobat.{4,40}\$\s?\d\d)
ANYWHERE 1 PCRE (?i:Illustrator.{4,40}\$\s?\d\d)s
# MISC others
ANYWHERE 1 PCRE (?i:3D Studio Max)
ANYWHERE 1 PCRE (?i:AutoCAD \d{2,4})
ANYWHERE 1 PCRE (?i:Chief Architect \d/)
ANYWHERE 1 PCRE (?i:Cool Edit Pro)
ANYWHERE 1 PCRE (?i:Corel ?Draw (?:\d{1,2}|Graphic))
ANYWHERE 1 PCRE (?i:Corel ?Painter 8)
ANYWHERE 1 PCRE (?i:Dragon Naturally Speaking)
ANYWHERE 1 PCRE (?i:DVDXCopy Platinum (?:\d|v))
ANYWHERE 1 PCRE (?i:EasyRecovery)
ANYWHERE 1 PCRE (?i:Mathematica \d)
ANYWHERE 1 PCRE (?i:Nero (?:Burning (?:Rom)?\s*\d|6 ultra))
ANYWHERE 1 PCRE (?i:PowerQuest Drive Image \d)
ANYWHERE 1 PCRE (?i:QuarkXpress \d)
ANYWHERE 1 PCRE (?i:QuickBooks Pro 200\d)
ANYWHERE 1 PCRE (?i:Sonic Foundry DVD)
ANYWHERE 1 PCRE (?i:Ulead DVD Workshop)
ANYWHERE 1 PCRE (?i:Winfax PRO \d\d)
ANYWHERE 1 PCRE (?i:WordPerfect (?:\d{2}|Office))
ANYWHERE 1 PCRE (?i:(?:normal|r.?e.?t.?a.?i.?l)\s*(?:p.?r.?i.?c.?e)?:?\s*(?:\$\s*)?\d)
ANYWHERE 1 PCRE (?i:(?:our|my)(?:\s*(?:low|online))?\s*p.?r.?i.?c.?e:?\s*(?:\$\s*)?\d)
ANYWHERE 1 PCRE (?i:you\s*s.?a.?v.?e:?\s*(?:\$\s*)?\d)
ANYWHERE 1 PCRE (?i:(?:normal|r.?e.?t.?a.?i.?l)\s*(?:p.?r.?i.?c.?e))
ANYWHERE 1 PCRE (?i:(?:our|my)(?:\s*(?:l[o0]w|online))?\s*p.?r.?i.?c.?e)
ANYWHERE 1 PCRE (?i:you\s*s.?a.?v.?e)
ANYWHERE 1 PCRE (?i:\boem.?cd)
ANYWHERE 1 PCRE (?i:\(OEM\))
ANYWHERE 1 PCRE (?i:\b(?:\bsoftware\b.{1,15}\b[OQ0]EM\b|\b[OQ0]EM\b.{1,15}\bsoftware\b)\b)
ANYWHERE 3 PCRE (?i:(?:(?!oem)\b[o0][e3]m |(?!soft ?wares?)\b[s5$].?[o0].?f.?t.?w.?[\@a].?r.?[e3].?[s5]?\b))
ANYWHERE 1 PCRE (?i:m{(?:[^\$]*?\$.*?|.*?\d+\.\d+.*?|text-decoration:\sline-through[^\$]{0,40}?\$|text-decoration:\sline-through.{0,40}\d+\.\d+)}i)
ANYWHERE 1 PCRE (?i:\.\w*price\s*{)