Network Control Rule No.5 Question

Hello everyone. In my Network Monitor under the Network Control Rules I have a list from 0 to 5 that is there by default. The last one which is no. 5 reads, BLOCK & LOG IP IN or OUT FROM IP [Any] TO IP [Any] WHERE IPROTO IS ANY. This somehow changed by itself recently to ALLOW and my IP Address was listed under SOURCE. I uninstalled CPF and reinstalled it again, because I couldn’t remember the correct default rule, and everything is fine now. However I’m not sure how this got changed. I did uninstall Antivir and then went into Component Monitor to remove left over Antivir Componenets, but other than that is there also anything I may have done to cause this? As I said everything is back to normal after new install, but I am a bit curious.