Trojan Vundo false reaction

Hi,

 

NAV2009 16.5.0.134, XP Pro SP3

 

I just moved a folder with lately downloaded files, where NAV now found a keygen and removed this file without any warning.

 

How could I set NAV to ask a confirmation before deleting anything?

 

Next things looks rather weird, NAV states a reboot is required  - because there was 147 affected registry entries with Trojan.Vundo as well.

That doesn't look logical, how this never touched file could distribute itself?

 

The original file is gone and I'm not evene able to check what I really was as NAV doesn't offer a restore funtcion.

Now NAV asks me to restart PC .... I can't do without any sufficient reason as there are running  other long time projects.

 

Any suggestions, how to understand situation?

While being a PC professional and providing help for other people, I still can't understand the situation.

But I'm 100% sure there couldn't be any infection in registry.

Does NAV just expected these to be in registry, while there weren't there?

 

The main question remains, how could I set NAV to ask a confirmation before deleting anything?