Maybe I am wrong, but I always thought even though your virus definitions may be updated to the second. If the virus hadnt been reported and looked at by Mcaffe/Norton, then it would pass the virus...