Alert: Outbound message contains malware triggers for incoming external mails

[Ivan Unger]

I have configured a policy to alert me when an outbound message contains malware. but this rule constantly fires on incoming Messages, which I don't understand:

Here is the rule:

And here is the message I receive