Are these false positives

I’m getting a malware alert from my host for wizard.php and mscan.php saying exploit found php.string.multipart.form.move.upload.file – is this a false positive