Just referring to your self proclaimed screen name
That is always going to be the problem when you dig too deep or set heuristics too sensitive you get things reported that you otherwise wouldn't get.
So what is wrong with the custom scan, not knowing what kind of results you are going to get when changing or setting options and when you get them knowing why it happened. Clearly this was the case here. That is why I feel that the Quick and Full System pre-defined scans are more than adequate.
They aren't false positives, how do you think that the sandbox or safezone work to protect you from malware, by isolating (effectively hiding) them from others.