This may not be a false positive as google desktop is the latest hidey hole for the ZA malware. Do you use google desktop ?