When I update my NOD32 antivirus it automatically connects to a choice of several servers. I discovered that TCPView logged a connection to a server at lunarpages.com, is this a problem?
The link below points to the official Nod32 help forums where I'm sure they can help with your queery.