Windows 7 + AVG update

[SomeUserName]

I have my computer set to not reboot after updates. Earlier today Im guessing around 1pm AVG did updates and needed a reboot. I jut got back and did a reboot. The fact that the computer needed a rebbot while I was away ins't sitting well with me. I looked t the AVG firewall log and the is 0 activity from 1pm until the time I did the reboot a few mins ago. Of course there would be no activity because the firewall and identity section was sitting there with a big "!" saying to reboot or is inactive.

Since there is no firwall activity in the AVG log is there any where/any way within Windows 7 that I can see or tell any suspicious activity or attempts on my machine during the 9 hours the firewall was in "!" status?

I'm currently running a full scan on my machine now.

 

[Callender]

AVG Virus Definitions Database update - should not require a reboot

AVG Software Update - might require a reboot to replace files that are in use.

 

[SomeUserName]

Yes but for the 9 hours that AVG firewall and identity was in "!" status, where the firewall log was not recording any events (I assume "!" means that my firewall is wide open because thats what happens when I have to temp disable AVG).

For the 9 hours that the firewall was open and not recording activity, where in Windows can I see if any intrusion attempts were made on my computer?

AVG is done and say 0 results but if my firewall was down and someone was in my computer they could have put something on that is invisible to AVG.

Where can I find logs within the windows system to tell me if any attempts were made on my machine in the 9 hours the firewall was down or showing as "!"?

Kind of like the event viewer for windows. Once it logs an error that error message cannot be removed from the event viewer log.

Im not trusting AVG O scan results after my firewall was open for 9 hours yesteday.

 

[Callender]

Connection history

The short answer is that I don't know how you can get that information from windows. On my machine I have additional software that logs all connections and stores them for later viewing if required. Also if your router supports logging you might find the info there. Not all routers support logging. You might possibly get the information from your ISP if you're willing to pay for it.

If you're worried that something sneaked through you can always try ThreatCheck and leave it running overnight. If anything dodgy shows up - check it out.

http://www.sevenforums.com/software/348608-threatcheck-released.html

For monitoring current connections try the other utility mentioned - CrowdInspect:

Community Tools | CrowdStrike - scroll down to CrowdInspect. Any suspicious connections will be flagged up.