ciaXPRegSvr20.dll is flagged by the heuristic scan but ciaSCls20.dll and ciaXPButton30.ocx are not.

Can some one explain this. I have quarantined the first one for now manually but am not sure how to deal with the total potential threat.