I know that for nod32 at least, someone setup a mirror site with all the updates.Don't forget that you are constantly connecting to their servers for updated virus definitions, I wouldn't be surprised if they could validate your registration information when you do that.