If those files were faked then the system would misbehaving and Avast would be giving continual alerts especially with regards to the network ones

As seen by the Blackbeard Trojan, this is based on an altered system file which Avast did not detect at the time. However, it did detect and block the consequences
http://blog.avast.com/2014/01/15/win3264blackbeard-pigeon-stealthiness-techniques-in-64-bit-windows-part-1/