Negative, they are not installed. However it did lead me to find a file in rc.d placed there by the cloud service. It acts like a back door. I called them and they confirmed it was their script.... re-installing from scratch now my image not theirs. grrrr
Thanks again for pointing me in the right direction before I started looking for bugs in sshd.