re registry entries
Judging by what you did to get rid of them, it’s very possible SAS put them there to prevent access. When you restored the defaults in SAS, the list was cleared.
You could try submitting the files to virustotal ( http://www.virustotal.com/ ) and see if any thing shows up. It’s possible that it was a false positive that was corrected by the last vps update. You will have to move them out of the chest to a temp folder to submit them.
