Word 2003 Global template and "Running Virus Scan

[krazykat]

Word 2003 Global template and "Running Virus Scan"

When I start word 2003 I see the message at the bottom of the screen
"running virus scan" and there is a delay in opening to a blank document. I
want to get rid of the "Running Virus Scan" and the delay.


WHAT I HAVE DONE:

My web and Microsoft searches indicate the "Running virus scan is associated
with commercial anti virus programs, e.g. Norton AV or Grisoft AV. I do not
have either on my machine (WIN2k PRO) and I have verified nether of the files
officeav.dll or avgoff2k.dll exist on my hard drive or in my Registry. I do
use the Norton Corporate AV security program but it does not have a "office
plug" capability. I also use Zone alarm pro which has an anti-spam
capability and an anti virus feature. The Zone Alarm AV feature is just a
monitor of the workings of any other AV programs. I turned off both features
in Zone Alarm with no affect to the Word 2003 "Running Virus Scan".

I CAN remove the "Running Virus Scan" by using the "/a" switch in the WORD
start command. With this switch included, WORD starts in a flash with NO
"Running Virus Scan". The /a switch disables running global templates and
macros at WORD start up.

I can achieve the same affect by removing the 5 global template files from
the Global Templates and addin window (Tools, Templates and ADD-IN, Global
templates and Add-in window). None of the 5 files in the Global templates
and Add-in window appear to be associated with any AV program, but they do
reside in Windows\startup and OFFICE11\START up sub folders.




Changed the macro security to "LOW".

Added the /m switch to the start command.

This reduced the delay in opening but the "running virus scan" is still
there with a delay.


I do not have NORTON AV installed

WHAT I WANT TO DO:

Find a way to start Word without the "running virus scan" message and delay.

What is the connection between the "/a" switch and/ or having an empty
Global Templates window and removal of the "Running Virus Scan" message at
WORD start??

I have run out of things to try and need need more horsepower and experience
to solve this problem.

What is the solution?

THANKS!!

 

[Cindy M.]

Hi =?Utf-8?B?a3JhenlrYXQ=?=,

What is the connection between the "/a" switch and/ or having an empty
Global Templates window and removal of the "Running Virus Scan" message at
WORD start??

The /a switch prevents all Addins from loading. This includes global
templates, your Normal.dot and any COM Addins you may have installed.

I can achieve the same affect by removing the 5 global template files from
the Global Templates and addin window (Tools, Templates and ADD-IN, Global
templates and Add-in window). None of the 5 files in the Global templates
and Add-in window appear to be associated with any AV program, but they do
reside in Windows\startup and OFFICE11\START up sub folders.

Do you know what each of these global templates if for? Try removing them
all, the move them back in, one at a time. When the message comes back,
you'll know which one is responsible.

Cindy Meister
INTER-Solutions, Switzerland
http://homepage.swissonline.ch/cindymeister (last update Jun 17 2005)
http://www.word.mvps.org

This reply is posted in the Newsgroup; please post any follow question or
reply in the newsgroup and not by e-mail

 

[krazykat]

Cindy,

Thanks for the reply. I removed each file 1 by 1. I received the "Running
Virus Scan" at start up at each removal; i.e. with 4, then 3, then 2, etc.
With none, there was no "Runnibg Virus Scan" and WORD opens in a flash. I
added 1 back in and received the "Running Virus Scan". In fact, it does not
matter which of the 5 is added, any one of the 5 produce the "Running .....".
Any conclusions?

Thanks

 

[Tony Jollans]

Clearly you have some sort of AV program running scan on demand. If not
Norton or Grisoft it must be some other.

I am not very knowledgeable about this so someone may correct me, but I
don't think that there is any need for an office-specific addin to enable
this so if Norton is on your machine it may well scan all files in all
applications; there is probably an option (in the AV program) to switch the
scan off. It should be possible to check what you have somehow in Windows
but I don't know how - you could try looking at the running services to see
if there is anything identifiable as scan on demand (Start > Run > enter
"services.msc" without the quotes and hit enter to get the list).

 

[krazykat]

Tony,


Thanks for the tip. I did check the (Start > Run > enter, "services.msc".

There was one "service" running for Norton AV CORPORATE EDITION". I have
all ready verified that the CORPORATE EDITION does not have the "office plug
in" and does not interact with WORD.

But, as a check, I disabled the service for Norton AV CORPORATE EDITION and
started WORD. Same results ----- "Running Virus Scan". Restarted the
Norton AV CORPORATE EDITION, same results ---- "Running ...."

There were no other "SERVICES" running that I could identify as belonging to
any Anti Virus programs.

May be someone can suggest othe things to try. ANY ONE?

Does WORD produce a "start up log" file that logs the detail steps and
sequence of events at WORD start?

 

[Graham Mayor]

With some versions of the Norton product it may be necessary to unregister
the calling DLL by running the following command line from Windows > Start >
Run

regsvr32 /u "c:\program files\norton antivirus\officeav.dll"
or
regsvr32 /u "c:\program files\norton systemworks\norton
antivirus\officeav.dll"

Office MVP Beth Melton recently reported her discovery that "If there are
any WLL add-ins in the Startup folders they will trigger this message even
if the user doesn't have any type of virus scanner enabled. Apparently, MS
is using the virus scanning engine to check for macros in WLL files and as a
result it triggers the message. Note other than checking for macros it isn't
actually performing a virus scan....One add-in I know of that still uses a
WLL is EndNote." So you might check your Word and Office Startup folders for
..wll files.


--
<>>< ><<> ><<> <>>< ><<> <>>< <>><<>
Graham Mayor - Word MVP


<>>< ><<> ><<> <>>< ><<> <>>< <>><<>

 

[krazykat]

Graham,

I did a search of both my hard drive AND my registery for the "officeav.dll"
file.
The scan produced negatve results --- the file is not present.

I had also seen Beth's comment about .wll files. Again a scan of my hard
drive did produce one .wll file. The file was not associated with end notes
(I have never used end notes) but with a program called PROCite (program for
formating footnotes and end notes). I renamed the .wll file to .wlx (rather
than remove). Results were the same --- "Running Virus Scan" at sratr up as
long as there is a .dot file in the global templates window.

So there appears to be some type of connection between the .dot files in the
global templates window and the "Running Virus Scan" that is not related to
Anti Virus program. No one seems to know the connection.

I am open to any other suggestion to try.

 

[Graham Mayor]

Have you ever had any other AV application on this PC that still has its
office checking dll in place eg

The popular free ediition of Grisoft's AVG antivirus software

"C:\Program Files\Grisoft\AVG Free\avgoff2k.dll"

This message is caused by a product of your AV software and it should be to
AV software past and present that you should be looking. If you have only
had the Norton product on your PC, then check out Symantec's forum -
Norton's product has tentacles that extend all over your PC
--
<>>< ><<> ><<> <>>< ><<> <>>< <>><<>
Graham Mayor - Word MVP


<>>< ><<> ><<> <>>< ><<> <>>< <>><<>

 

[krazykat]

Graham,

No, I have never used the Grisodt AVG. So htat is not the problem.

I will do some research on the Symantec web site. I have used various Norton
products way back when they were decent products before Symantec purchase,
but that is another story.

Question: Since WORD is displaying the message at start up, "something" must
be telling WORD to display. Is there any way to track the sequence of events
at WORD start up and discover what is happening? For example, you can tell
WIN200 or WIN XP to write a "boot log" to a text file. The "boot log" records
each and every step during boot up and can be used to see which program loads
what.

Anyone have any suggestions on Symantec or a WORD woot log??

Thnaks!!

 

[krazykat]

Cindy,

I am sending this reply to all who had suggestions. Please use my
information to help others.
OCT. 28, 2006

MY "WORD 2003" IS FINALLY RID OF THE "RUNNING VIRUS SCAN" MESSAGE DISPLAYED
AT START-UP !!!

A great BIG thank you to all who gave suggestions. I do appreciate your
time and help.

The short story:

I can say the message was associated with "some" Norton program, probably an
antivirus program. Which one? I do not know. I was knowingly only running
1 NAV, the Corporate Edition (version 7.5). I "proved" the NAV corporate
edition does not affect WORD. See The Long Story for details.
I had used Norton AV programs in the 2002-2003 time frame but
"removed/deleted" them when Symantec took over Norton and started all of
their shenanigans of 2 year sunset, and poor customer service.
Turns out I had over 1200 entries in my Registry for the word "NORTON" even
after I had removed previous Norton programs. I did some research on the
Symantec site and found three programs that are to be used to completely
remove all traces of Norton/Symantec programs.
I ran the three programs and my registry count for the word NORTON dropped
to 205. Also, when I open WORD the "Running Virus Scan" does not appear and
WORD opens in a flash. I can not identify which Norton program was causing
the problem; my guess is the remnant of some program that did not completely
uninstall.

The LONG STORY

I have WINDOWS 2000 PRO and WORD 2003.

Many comments said the "Running Virus Scan" message displayed at WORD
startup is the result of a non Microsoft antivirus program. The only
antivirus program I thought I was running was the Norton Corporate AV, which
had been shown not to have a WORD plug in. I had used Norton AV programs in
the past, 2002- 2003 time frame, but had removed the programs. Or so I
thought.

I used a very good Registry program called jv16 Power Tools 2006,
http://www.macecraft.com/ to scan my Registry for the word "NORTON". Over
1200 entries were reported with the word "NORTON". I could see remnants of
long ago deleted Norton and Symantec programs.

A search of the Symantec web site turned up two programs to be used to
remove all traces of just about all past Norton and Symantec programs from
your hard drive and Registry. Be advised, do not run the programs unless you
have the install disks or move the downloaded original install files to a CD
or DVD if you want to re-install any of the programs. The uninstall programs
seem to do a total cleansing of your hard drive and Registry of
Norton/Symantec products. The programs are: SYMClean for pre 2003 products
http://service1.symantec.com/SUPPORT//nsw.nsf/docid/2001101612274407
and NORTON_REMOVAL_TOOL for 2003 and later products
http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2005033108162039?Open
There is a "final clean up" registey cleaner, SYMMSICLEANUP.reg to remove
any left over registry entries, download the Symantec Norton MSI cleanup file
(SYMMSICLEANUP.reg) at http://www.schrockinnovations.com/removenav.php page
4. There is also a good tutorial on how to use the NORTON removal file.

My Registry count for "NORTON" entries dropped from 1220 to about 300 after
running these three programs. More importantly, WORD now opens in a flash
without the "Running Virus Scan" message and long delay.

I reinstalled the Norton Corporate AntiVirus version 7.5. I can say that
the version 7.5 DOES NOT affect WORD with the "Running Virus Scan" message.
I have reinstalled all of the global templates and restored my copy of WORD
to the condition that was producing the "Running Virus Scan" and there is NO
"Running Virus Scan " message with NAV Corporate 7.5 installed.

krazykat

 

[krazykat]

Tony,

I am sending this reply to all who gave me suggestions.

OCT. 28, 2006

MY "WORD 2003" IS FINALLY RID OF THE "RUNNING VIRUS SCAN" MESSAGE DISPLAYED
AT START-UP !!!

A great BIG thank you to all who gave suggestions. I do appreciate your
time and help.

The short story:

I can say the message was associated with "some" Norton program, probably an
antivirus program. Which one? I do not know. I was knowingly only running
1 NAV, the Corporate Edition (version 7.5). I "proved" the NAV corporate
edition does not affect WORD. See The Long Story for details.
I had used Norton AV programs in the 2002-2003 time frame but
"removed/deleted" them when Symantec took over Norton and started all of
their shenanigans of 2 year sunset, and poor customer service.
Turns out I had over 1200 entries in my Registry for the word "NORTON" even
after I had removed previous Norton programs. I did some research on the
Symantec site and found three programs that are to be used to completely
remove all traces of Norton/Symantec programs.
I ran the three programs and my registry count for the word NORTON dropped
to 205. Also, when I open WORD the "Running Virus Scan" does not appear and
WORD opens in a flash. I can not identify which Norton program was causing
the problem; my guess is the remnant of some program that did not completely
uninstall.

The LONG STORY

I have WINDOWS 2000 PRO and WORD 2003.

Many comments said the "Running Virus Scan" message displayed at WORD
startup is the result of a non Microsoft antivirus program. The only
antivirus program I thought I was running was the Norton Corporate AV, which
had been shown not to have a WORD plug in. I had used Norton AV programs in
the past, 2002- 2003 time frame, but had removed the programs. Or so I
thought.

I used a very good Registry program called jv16 Power Tools 2006,
http://www.macecraft.com/ to scan my Registry for the word "NORTON". Over
1200 entries were reported with the word "NORTON". I could see remnants of
long ago deleted Norton and Symantec programs.

A search of the Symantec web site turned up two programs to be used to
remove all traces of just about all past Norton and Symantec programs from
your hard drive and Registry. Be advised, do not run the programs unless you
have the install disks or move the downloaded original install files to a CD
or DVD if you want to re-install any of the programs. The uninstall programs
seem to do a total cleansing of your hard drive and Registry of
Norton/Symantec products. The programs are: SYMClean for pre 2003 products
http://service1.symantec.com/SUPPORT//nsw.nsf/docid/2001101612274407
and NORTON_REMOVAL_TOOL for 2003 and later products
http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2005033108162039?Open

There is a "final clean up" registey cleaner, SYMMSICLEANUP.reg to remove
any left over registry entries, download the Symantec Norton MSI cleanup file
(SYMMSICLEANUP.reg) at http://www.schrockinnovations.com/removenav.php
page 4. There is also a good tutorial on how to use the NORTON removal file.

My Registry count for "NORTON" entries dropped from 1220 to about 300 after
running these three programs. More importantly, WORD now opens in a flash
without the "Running Virus Scan" message and long delay.

I reinstalled the Norton Corporate AntiVirus version 7.5. I can say that
the version 7.5 DOES NOT affect WORD with the "Running Virus Scan" message.
I have reinstalled all of the global templates and restored my copy of WORD
to the condition that was producing the "Running Virus Scan" and there is NO
"Running Virus Scan " message with NAV Corporate 7.5 installed.
krazykat

 

[krazykat]

Graham Mayor,

I am sending this reply to all who gave me suggestions. Please use the
information to help anyone who reports this problem.

OCT. 28, 2006

MY "WORD 2003" IS FINALLY RID OF THE "RUNNING VIRUS SCAN" MESSAGE DISPLAYED
AT START-UP !!!

A great BIG thank you to all who gave suggestions. I do appreciate your
time and help.

The short story:

I can say the message was associated with "some" Norton program, probably an
antivirus program. Which one? I do not know. I was knowingly only running
1 NAV, the Corporate Edition (version 7.5). I "proved" the NAV corporate
edition does not affect WORD. See The Long Story for details.
I had used Norton AV programs in the 2002-2003 time frame but
"removed/deleted" them when Symantec took over Norton and started all of
their shenanigans of 2 year sunset, and poor customer service.
Turns out I had over 1200 entries in my Registry for the word "NORTON" even
after I had removed previous Norton programs. I did some research on the
Symantec site and found three programs that are to be used to completely
remove all traces of Norton/Symantec programs.
I ran the three programs and my registry count for the word NORTON dropped
to 205. Also, when I open WORD the "Running Virus Scan" does not appear and
WORD opens in a flash. I can not identify which Norton program was causing
the problem; my guess is the remnant of some program that did not completely
uninstall.

The LONG STORY

I have WINDOWS 2000 PRO and WORD 2003.

Many comments said the "Running Virus Scan" message displayed at WORD
startup is the result of a non Microsoft antivirus program. The only
antivirus program I thought I was running was the Norton Corporate AV, which
had been shown not to have a WORD plug in. I had used Norton AV programs in
the past, 2002- 2003 time frame, but had removed the programs. Or so I
thought.

I used a very good Registry program called jv16 Power Tools 2006,
http://www.macecraft.com/ to scan my Registry for the word "NORTON". Over
1200 entries were reported with the word "NORTON". I could see remnants of
long ago deleted Norton and Symantec programs.

A search of the Symantec web site turned up two programs to be used to
remove all traces of just about all past Norton and Symantec programs from
your hard drive and Registry. Be advised, do not run the programs unless you
have the install disks or move the downloaded original install files to a CD
or DVD if you want to re-install any of the programs. The uninstall programs
seem to do a total cleansing of your hard drive and Registry of
Norton/Symantec products. The programs are: SYMClean for pre 2003 products
http://service1.symantec.com/SUPPORT//nsw.nsf/docid/2001101612274407
and NORTON_REMOVAL_TOOL for 2003 and later products.
http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2005033108162039?Open

There is a "final clean up" registey cleaner, SYMMSICLEANUP.reg to remove
any left over registry entries, download the Symantec Norton MSI cleanup file
(SYMMSICLEANUP.reg) at http://www.schrockinnovations.com/removenav.php
page 4. There is also a good tutorial on how to use the NORTON removal file.

My Registry count for "NORTON" entries dropped from 1220 to about 300 after
running these three programs. More importantly, WORD now opens in a flash
without the "Running Virus Scan" message and long delay.

I reinstalled the Norton Corporate AntiVirus version 7.5. I can say that
the version 7.5 DOES NOT affect WORD with the "Running Virus Scan" message.
I have reinstalled all of the global templates and restored my copy of WORD
to the condition that was producing the "Running Virus Scan" and there is NO
"Running Virus Scan " message with NAV Corporate 7.5 installed.

krazykat

 

[Graham Mayor]

The implication and much suspected outcome is that the Norton product causes
as many problems as the viruses it is supposed to eliminate

--
<>>< ><<> ><<> <>>< ><<> <>>< <>><<>
Graham Mayor - Word MVP


<>>< ><<> ><<> <>>< ><<> <>>< <>><<>

 

[Tony Jollans]

Thank you, krazykay,

I've never used Norton and see so many people having problem with it that
I'm unlikely to. I consider this kind of behaviour (actually exhibited by
many programs) to be symptomatic of malware. That said, all AV programs seem
to be determined to stay on your computer, no matter what, and interfere
with whatever you do. Just last week I had to help out my father (an
intelligent, but non-technical, user who would probably have had to give up
with his computer long ago if hadn't got me) who had innocently managed to
get two AV programs fighting each other.