Hi Ronnie,
I took your question to be a bit more than you intended but I think my response is still correct. The program has been designed to recognize 'bad' software and eliminate it. Just as it has been designed to recognize good software and allow it. A false positive is usually a new version of a program that the security program is unsure of.
Hope this helps, if not, I can try again