elsyd,
except for #4, it's quite unlikely that avast actually did that. Really, avast doesn't do anything like you're describing.
As for #4, this is how the Internet Mail protection works. It changes the mail servers to 127.0.0.1, which is in fact the machine itself, and routes the mail messages through its mini-servers (SMTP, POP3, IMAP4).
Vlk