body SOFTWARE_AD
/(?:|\bbezahlen.*runterladen|Windows\bund\bmit\bMacintosh|\bOriginalversionen\b.*\blegal\b)/i
You probably want to adjust this a little bit. There are a few things here
that make me think you aren't getting quite what you expect.
1. Remove that first vertical bar. It serves no purpose.
2. You probably do not want \b between the words. This is a word-break
"zero length character". You almost certainly don't want a zero-length
character, you want a space or something like that.
So the rule should probably look more like:
body SOFTWARE_AD
/(?:\bbezahlen.{0,50}runterladen|Windows\s+und\s+mit\s+Macintosh|\bOriginalversionen\b.{0,100}\blegal\b)/i
Loren