We are tracking an issue where Norman updates on Forefront Protection for Exchange are failing with a version downloaded is older than the local version message. Event ID 6014, Source GetEngineFiles.
The workaround for this issue is to delete the numbered folder in the Data\Engines\x86\Norman\Package\ directory located in "c:\Program Files(x86)\Microsoft Forefront Protection for Exchange Server\" by default
The first update can fail with a 404 file not found but the 2nd update will work.
We are investigating the cause of this issue.
All updates to this issue will be updated on http://social.technet.microsoft.com/wiki/contents/articles/norman-engine-issue-since-the-9th-of-september-2010-on-forefront-protection-for-exchange-server.aspx
Information and links on this wiki page.
http://social.technet.microsoft.com/wiki/contents/articles/worm-win32-vb-wf-forefront-and-antigen-mitigation.aspx
This is spreading quickly. I expect that most Antigen users are already filtering but if you have 2007 or 2010 there is some more information there.