Well, I can't immediately see what's wrong with your regex, but if you want a quick solution, I've solved this problem for myself when someone was abusing my mailform using header injection:
http://www.bobulous.org.uk/misc/mailformAbuse.html
It works for me. I regularly get messages that report "feedback form abuse" and show me the illegal text and the email address of the spammer.