How to tell if NAV was tampered with

I have asked this question in various forms at various times. But with this conflicker thing and the reports that it turns off one's security-

If my NAV2008 was tampered with or turned off, how would I know? The reports on this comnflicker seem to indicate that it has the power to do so

 

But I was wondering, as simple as this thought is- If my NAV 2008 was turned off, the green secure indications would be gone right? Or can conflicker go ahead and "mimic" that all is ok?

 

I know NAV2008 has updated defs to defend against the current known forms of conflicker. But what it an unknown form has gooten on my comp and messsed with my NAV2008?

 

I'm able to get def updates and do scans that stil catch tracking cookies