false positive?

don't know if this has been reported before?
as this is an old file;

The update file from this MS page:

http://support.microsoft.com/kb/124345

file name is: ww1138.exe

update for win3.1x calculator

detected as Win32.Monderb.aqpu

how can it have a win32. infection if it's an MS file from their servers
and a 16-bit DOS file not 32-bit

I just DL it again and rescanned it and got the same result

any ideas?