# EVIDENCE ELIMINATOR
#
#  Current patterns.
#
#  Updated and verified 5/28/04
#
LOCALSCORE=-1000

:0
* $ ${LOCALSCORE}^0
*  1100^0   ^From:.*[^-_0-9a-z]Protection Alarm([^a-z0-9.]|\. |\.$|$)
*  1100^0   ^Subject:.*[^-_0-9a-z]Download EE([^a-z0-9.]|\. |\.$|$)
*  1100^0   ^Subject:.*[^-_0-9a-z]EE([^a-z0-9.]|\. |\.$|$)
*  1100^0   ^Subject:.*[^-_0-9a-z]Evidence Eliminator([^a-z0-9.]|\. |\.$|$)
*  1100^0   ^Subject:.*[^-_0-9a-z]Illegal Content Violation - Message([^a-z0-9.]|\. |\.$|$)
*  1100^0   ^Subject: Is your Computer Safe\?\?
*  1100^0   ^Subject: Don't lose your job([^a-z0-9.]|\. |\.$|$)
{
 :0
 * $ ${LOCALSCORE}^0
 * 800^0
 { LOCALSCORE=$= }
}

:0
* LEANTAG ?? no
{
 :0 B
 * !--.*forwarded message --
 * !^forwarded message:
 * $ ${LOCALSCORE}^0
 *  -200^1   ^[:;#>]
 *   300^0   (^|[^-_0-9a-z])Deleting internet history is not enough([^a-z0-9.]|\. |\.$|$)
 *   600^1   (^|[^-_0-9a-z])Download EE now([^a-z0-9.]|\. |\.$|$)
 *   250^0.5 (^|[^-_0-9a-z=])EE([^a-z0-9.]|\. |\.$|$)
 *   600^0   (^|[^-_0-9a-z])Eliminate all of your tracks([^a-z0-9.]|\. |\.$|$)
 *   600^0   (^|[^-_0-9a-z])Ever realize how easy it is([^a-z0-9.]|\. |\.$|$)
 *   600^1   (^|[^-_0-9a-z])Evidence Eliminator([^a-z0-9.]|\. |\.$|$)
 *   300^0   (^|[^-_0-9a-z])for others to find out([^a-z0-9.]|\. |\.$|$)
 *   600^0   (^|[^-_0-9a-z])of you viewing pornography\?([^a-z0-9.]|\. |\.$|$)
 *   300^0   (^|[^-_0-9a-z])that you.?re looking at porn([^a-z0-9.]|\. |\.$|$)
 *   600^0   (^|[^-_0-9a-z])What does the mother of your children think([^a-z0-9.]|\. |\.$|$)
 *   600^0   ^You are at risk\.$
 *   600^0   (^|[^-_0-9a-z])Eliminate all of your tracks with a click([^a-z0-9.]|\. |\.$|$)
 {
  LT2=yes

  SBLOG="C3R-${TESTNAME} (Subject/Message Body: Pattern Match)"
  INCLUDERC=${SBDIR}/functions/loglevel.rc
 }
}