Yes its indeed a false positive. KILL_CIH.exe is a repair tool for CIH aka Chernobyl virus. Also path points to the Symantec folder…