I would not make the virus definition updates a part of the login script at all. Depending on the size of the organization, you should have one (or a few) admin servers downloading the updates and then running a script to distribute it to all of the clients. This has nothing to do with a login.

Brad