signalguy

I'd suggest checking the authorization list under your Antivirus policy. That .exe might be listed under both suspicious files and behavior.

I would suspect the issue resides in your AntiSpam Allow List. People using PureMessage 2.6 generally needed to add their own domains into the whitelist to get everything working. I would export out your allow list and save changes. Adding recipient validation will also increase your spam catch rate.