AVG was the problem then as the firewall notified you. It would have gotten through firewall or no firewall, it was AVG's fault that it didn't pick it up. A better AV program like Avast or MSE as you mentioned should have stopped it.
You can install a 3rd party firewall and disable Windows Firewall, but it will only slow the system down more than it needs to.