Just a suggestion for the avast team, with regard to the options presented, when the rootkit mechanism finds something suspicious: please replace "delete" with "move to quarantine". Or augment "delete" with another "move to quarantine" option. In either case, make "move to quarantine" the default option.
In general, if a heuristics mechanism finds something suspicious then by all means do provide a "move to quarantine" action and make that action the default one.