Re: Word 2003 Global template and "Running Virus Scan

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

Graham Mayor,

I am sending this reply to all who gave me suggestions. Please use the
information to help anyone who reports this problem.

OCT. 28, 2006

MY "WORD 2003" IS FINALLY RID OF THE "RUNNING VIRUS SCAN" MESSAGE DISPLAYED
AT START-UP !!!

A great BIG thank you to all who gave suggestions. I do appreciate your
time and help.

The short story:

I can say the message was associated with "some" Norton program, probably an
antivirus program. Which one? I do not know. I was knowingly only running
1 NAV, the Corporate Edition (version 7.5). I "proved" the NAV corporate
edition does not affect WORD. See The Long Story for details.
I had used Norton AV programs in the 2002-2003 time frame but
"removed/deleted" them when Symantec took over Norton and started all of
their shenanigans of 2 year sunset, and poor customer service.
Turns out I had over 1200 entries in my Registry for the word "NORTON" even
after I had removed previous Norton programs. I did some research on the
Symantec site and found three programs that are to be used to completely
remove all traces of Norton/Symantec programs.
I ran the three programs and my registry count for the word NORTON dropped
to 205. Also, when I open WORD the "Running Virus Scan" does not appear and
WORD opens in a flash. I can not identify which Norton program was causing
the problem; my guess is the remnant of some program that did not completely
uninstall.

The LONG STORY

I have WINDOWS 2000 PRO and WORD 2003.

Many comments said the "Running Virus Scan" message displayed at WORD
startup is the result of a non Microsoft antivirus program. The only
antivirus program I thought I was running was the Norton Corporate AV, which
had been shown not to have a WORD plug in. I had used Norton AV programs in
the past, 2002- 2003 time frame, but had removed the programs. Or so I
thought.

I used a very good Registry program called jv16 Power Tools 2006,
http://www.macecraft.com/ to scan my Registry for the word "NORTON". Over
1200 entries were reported with the word "NORTON". I could see remnants of
long ago deleted Norton and Symantec programs.

A search of the Symantec web site turned up two programs to be used to
remove all traces of just about all past Norton and Symantec programs from
your hard drive and Registry. Be advised, do not run the programs unless you
have the install disks or move the downloaded original install files to a CD
or DVD if you want to re-install any of the programs. The uninstall programs
seem to do a total cleansing of your hard drive and Registry of
Norton/Symantec products. The programs are: SYMClean for pre 2003 products
http://service1.symantec.com/SUPPORT//nsw.nsf/docid/2001101612274407
and NORTON_REMOVAL_TOOL for 2003 and later products.
http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2005033108162039?Open

There is a "final clean up" registey cleaner, SYMMSICLEANUP.reg to remove
any left over registry entries, download the Symantec Norton MSI cleanup file
(SYMMSICLEANUP.reg) at http://www.schrockinnovations.com/removenav.php
page 4. There is also a good tutorial on how to use the NORTON removal file.

My Registry count for "NORTON" entries dropped from 1220 to about 300 after
running these three programs. More importantly, WORD now opens in a flash
without the "Running Virus Scan" message and long delay.

I reinstalled the Norton Corporate AntiVirus version 7.5. I can say that
the version 7.5 DOES NOT affect WORD with the "Running Virus Scan" message.
I have reinstalled all of the global templates and restored my copy of WORD
to the condition that was producing the "Running Virus Scan" and there is NO
"Running Virus Scan " message with NAV Corporate 7.5 installed.

krazykat

"Graham Mayor" wrote:

Have you ever had any other AV application on this PC that still has its
office checking dll in place eg

The popular free ediition of Grisoft's AVG antivirus software

"C:\Program Files\Grisoft\AVG Free\avgoff2k.dll"

This message is caused by a product of your AV software and it should be to
AV software past and present that you should be looking. If you have only
had the Norton product on your PC, then check out Symantec's forum -
Norton's product has tentacles that extend all over your PC :(
--
<>>< ><<> ><<> <>>< ><<> <>>< <>><<>
Graham Mayor - Word MVP

My web site www.gmayor.com
Word MVP web site http://word.mvps.org
<>>< ><<> ><<> <>>< ><<> <>>< <>><<>



krazykat wrote:
Graham,

I did a search of both my hard drive AND my registery for the
"officeav.dll" file.
The scan produced negatve results --- the file is not present.

I had also seen Beth's comment about .wll files. Again a scan of my
hard drive did produce one .wll file. The file was not associated
with end notes (I have never used end notes) but with a program
called PROCite (program for formating footnotes and end notes). I
renamed the .wll file to .wlx (rather than remove). Results were the
same --- "Running Virus Scan" at sratr up as long as there is a .dot
file in the global templates window.

So there appears to be some type of connection between the .dot files
in the global templates window and the "Running Virus Scan" that is
not related to Anti Virus program. No one seems to know the
connection.

I am open to any other suggestion to try.




"Graham Mayor" wrote:

With some versions of the Norton product it may be necessary to
unregister the calling DLL by running the following command line
from Windows > Start > Run

regsvr32 /u "c:\program files\norton antivirus\officeav.dll"
or
regsvr32 /u "c:\program files\norton systemworks\norton
antivirus\officeav.dll"

Office MVP Beth Melton recently reported her discovery that "If
there are any WLL add-ins in the Startup folders they will trigger
this message even if the user doesn't have any type of virus scanner
enabled. Apparently, MS is using the virus scanning engine to check
for macros in WLL files and as a result it triggers the message.
Note other than checking for macros it isn't actually performing a
virus scan....One add-in I know of that still uses a WLL is
EndNote." So you might check your Word and Office Startup folders
for ..wll files.


--
<>>< ><<> ><<> <>>< ><<> <>>< <>><<>
Graham Mayor - Word MVP

My web site www.gmayor.com
Word MVP web site http://word.mvps.org
<>>< ><<> ><<> <>>< ><<> <>>< <>><<>

krazykat wrote:
Tony,


Thanks for the tip. I did check the (Start > Run > enter,
"services.msc".

There was one "service" running for Norton AV CORPORATE EDITION". I
have all ready verified that the CORPORATE EDITION does not have the
"office plug in" and does not interact with WORD.

But, as a check, I disabled the service for Norton AV CORPORATE
EDITION and started WORD. Same results ----- "Running Virus Scan".
Restarted the Norton AV CORPORATE EDITION, same results ----
"Running ...."

There were no other "SERVICES" running that I could identify as
belonging to any Anti Virus programs.

May be someone can suggest othe things to try. ANY ONE?

Does WORD produce a "start up log" file that logs the detail steps
and sequence of events at WORD start?

"Tony Jollans" wrote:

Clearly you have some sort of AV program running scan on demand. If
not Norton or Grisoft it must be some other.

I am not very knowledgeable about this so someone may correct me,
but I don't think that there is any need for an office-specific
addin to enable this so if Norton is on your machine it may well
scan all files in all applications; there is probably an option (in
the AV program) to switch the scan off. It should be possible to
check what you have somehow in Windows but I don't know how - you
could try looking at the running services to see if there is
anything identifiable as scan on demand (Start > Run > enter
"services.msc" without the quotes and hit enter to get the list).

--
Enjoy,
Tony

"krazykat" <krazykat@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:A2FCFA68-E6DB-42E0-9486-B19BD5C85BA9@xxxxxxxxxxxxxxxx
Cindy,

Thanks for the reply. I removed each file 1 by 1. I received the
"Running Virus Scan" at start up at each removal; i.e. with 4,
then 3, then 2, etc. With none, there was no "Runnibg Virus Scan"
and WORD opens in a flash. I added 1 back in and received the
"Running Virus Scan". In fact, it does not matter which of the 5
is added, any one of the 5 produce the "Running ......". Any
conclusions?

Thanks

"Cindy M." wrote:

Hi =?Utf-8?B?a3JhenlrYXQ=?=,

What is the connection between the "/a" switch and/ or having an
empty Global Templates window and removal of the "Running Virus
Scan" message at WORD start??

The /a switch prevents all Addins from loading. This includes
global templates, your Normal.dot and any COM Addins you may have
installed.

I can achieve the same affect by removing the 5 global template
files from the Global Templates and addin window (Tools,
Templates and ADD-IN, Global templates and Add-in window). None
of the 5 files in the Global templates and Add-in window appear
to be associated with any AV program, but they do reside in
Windows\startup and OFFICE11\START up sub folders.

Do you know what each of these global templates if for? Try
removing them all, the move them back in, one at a time. When the
message comes back, you'll know which one is responsible.

Cindy Meister
INTER-Solutions, Switzerland
http://homepage.swissonline.ch/cindymeister (last update Jun 17
2005) http://www.word.mvps.org

This reply is posted in the Newsgroup; please post any follow
question or reply in the newsgroup and not by e-mail :-)



.

Quantcast