The following was found by SAS on a scan right after the update for spybot came down. I always download from the same web site.

C:\Program Files\Spybotportable\App\Spybot\Update\Sdhelper
and another

C:\Program Files\Spybotportable\App\Spybot\Update\

Was quaranteed by SAS and am wondering if I should delete them or are they a part of spybot program? Am waiting to find out what to do. I re-ran another scan with SAS and found nothing.