Single post in False positive virus alert

hold on - am I understanding it right that the false-positive happened, because a user added links to a perfectly safe file, but from a domain that also includes malicious files, that weren't linked on here at all?