Just got a response from Avira:
Please find a detailed report concerning each individual sample below:
Filename Result
PreStartupFileDelete.exe FALSE POSITIVE
The file 'PreStartupFileDelete.exe' has been determined to be 'FALSE POSITIVE'. In particular this means that this file is not malicious but a false alarm. Detection will be removed from our virus definition file (VDF) with one of the next updates.