anyone else seeing false positives on event 3327 after installing sig S190?

Alarm 3201 fired when user did a google search which included some words which are in the sig.Alarm is a false postive. Should sig fire when only keywords appear? Attachment contains alarm contents.

Implemented port security on C3500XL switch running following IOS;IOS (tm) C3500XL Software (C3500XL-C3H2S-M), Version 12.0(5)XU, RELEASE SOFTWARE (fc1) SWITCHA#sh run int fa0/39Building configuration...Current configuration:!interface FastEthernet...