I changed the service settings for VMWare from “Automatic” to “Manual” on Win7Pro 64bit (use VMWare occasionally, didn’t want the 4 processes taking up resources). A few minutes later, Avast popped up “ROOTKIT FOUND” with the rootkits of “SVC: VMnetDHCP … Rootkit: hidden service” and “SVC: VMware NAT Service … Rootkit: hidden service”
Given the timing, I would guess it’s because I changed the setting in MMC, but I wouldn’t mind a second opinion before choosing “ignore”