I am seeing a similar issue with a group of WinXP clients connecting to 10.1.6.6 System Center, I have some remote clients that are on a wide range of virus defs from a few days behind to almost a full year behind yet they are connecting into the SAV server daily. I have one of the clients exhibiting being "stuck" on virus defs from October that I can physically sit in front of and snoop around on, this machine in the event log states "Virus Definitions are Current" yet when I pop open the SAV screen it is still showing "10/08/08" as the current virus definition on the machine. I have tried the following 2 things so far with no results:
1. Stop SAV service, Delete the I2_LDVP.VDB & I2_LDVP.TMP files from the 7.5 folder, restart SAV service.
2. Copy the GRC.DAT file from the SAV server into the 7.5 folder and restart SAV to "pull in" the GRC.DAT settings.
The fact that the event log states the "virus definitions are current" is really confusing/troubling to me, any other suggestions/advice?