need a regular expression to create

[vodamailshiva]

Hi,
One of spammers is killing our SMTP servers.
in the content of e-mail, he is mentioning 2 e-mails addresses.
i need to create a rule to black the spammer.
he is using [EMAIL PROTECTED],  [EMAIL PROTECTED] ,i need to black
the spam e-mails using content of e-mail.
please help me..