I'm currently evaluating NOD32 and I'm just noticing something funky. For a couple of my clients (one a server and one a workstation), the "Last Connected" field is much larger than the other two and the virus definitions it reports are a couple of updates old. Both of the clients have the latest definition file when I check them and both have different policies. Why the discrepancy? I have the client update interval at 5 minutes for both machines.