Is both program update and virus DB update set to “manual”?
I mean, isn’t it set to “Ask”? Because “ask” of course implies network activity (the program has to query for the new version).

Cheers
Vlk