I say you must have a firewall (a hardware one or a thirdy party). Windows internal firewall just blocks the inbound attacks and not the outbound connections.

When you have an installed firewall (ZoneAlarm or Outpost if you don’t want Sygate), allow avast.setup to connect the Internet. If not, you won’t be able to update avast.