[Graham Mayor]

The implication and much suspected outcome is that the Norton product causes
as many problems as the viruses it is supposed to eliminate

--

Graham Mayor - Word MVP

My web site www.gmayor.com
Word MVP web site http://word.mvps.org


krazykat wrote:
Graham Mayor,

I am sending this reply to all who gave me suggestions. Please use the
information to help anyone who reports this problem.

OCT. 28, 2006

MY "WORD 2003" IS FINALLY RID OF THE "RUNNING VIRUS SCAN" MESSAGE
DISPLAYED AT START-UP !!!

A great BIG thank you to all who gave suggestions. I do appreciate
your time and help.

The short story:

I can say the message was associated with "some" Norton program,
probably an antivirus program. Which one? I do not know. I was
knowingly only running 1 NAV, the Corporate Edition (version 7.5). I
"proved" the NAV corporate edition does not affect WORD. See The
Long Story for details.
I had used Norton AV programs in the 2002-2003 time frame but
"removed/deleted" them when Symantec took over Norton and started all
of their shenanigans of 2 year sunset, and poor customer service.
Turns out I had over 1200 entries in my Registry for the word
"NORTON" even after I had removed previous Norton programs. I did
some research on the Symantec site and found three programs that are
to be used to completely remove all traces of Norton/Symantec
programs.
I ran the three programs and my registry count for the word NORTON
dropped to 205. Also, when I open WORD the "Running Virus Scan" does
not appear and WORD opens in a flash. I can not identify which Norton
program was causing the problem; my guess is the remnant of some
program that did not completely uninstall.

The LONG STORY

I have WINDOWS 2000 PRO and WORD 2003.

Many comments said the "Running Virus Scan" message displayed at WORD
startup is the result of a non Microsoft antivirus program. The only
antivirus program I thought I was running was the Norton Corporate
AV, which had been shown not to have a WORD plug in. I had used
Norton AV programs in the past, 2002- 2003 time frame, but had
removed the programs. Or so I thought.

I used a very good Registry program called jv16 Power Tools 2006,
http://www.macecraft.com/ to scan my Registry for the word "NORTON".
Over 1200 entries were reported with the word "NORTON". I could see
remnants of long ago deleted Norton and Symantec programs.

A search of the Symantec web site turned up two programs to be used to
remove all traces of just about all past Norton and Symantec programs
from your hard drive and Registry. Be advised, do not run the
programs unless you have the install disks or move the downloaded
original install files to a CD or DVD if you want to re-install any
of the programs. The uninstall programs seem to do a total cleansing
of your hard drive and Registry of Norton/Symantec products. The
programs a SYMClean for pre 2003 products
http://service1.symantec.com/SUPPORT...01101612274407
and NORTON_REMOVAL_TOOL for 2003 and later products.
http://service1.symantec.com/SUPPORT...108162039?Open

There is a "final clean up" registey cleaner, SYMMSICLEANUP.reg to
remove any left over registry entries, download the Symantec Norton
MSI cleanup file (SYMMSICLEANUP.reg) at
http://www.schrockinnovations.com/removenav.php
page 4. There is also a good tutorial on how to use the NORTON
removal file.

My Registry count for "NORTON" entries dropped from 1220 to about
300 after running these three programs. More importantly, WORD now
opens in a flash without the "Running Virus Scan" message and long
delay.

I reinstalled the Norton Corporate AntiVirus version 7.5. I can say
that the version 7.5 DOES NOT affect WORD with the "Running Virus
Scan" message. I have reinstalled all of the global templates and
restored my copy of WORD to the condition that was producing the
"Running Virus Scan" and there is NO "Running Virus Scan " message
with NAV Corporate 7.5 installed.

krazykat

"Graham Mayor" wrote:

Have you ever had any other AV application on this PC that still has
its office checking dll in place eg

The popular free ediition of Grisoft's AVG antivirus software

"C:\Program Files\Grisoft\AVG Free\avgoff2k.dll"

This message is caused by a product of your AV software and it
should be to AV software past and present that you should be
looking. If you have only had the Norton product on your PC, then
check out Symantec's forum - Norton's product has tentacles that
extend all over your PC --

Graham Mayor - Word MVP

My web site www.gmayor.com
Word MVP web site http://word.mvps.org




krazykat wrote:
Graham,

I did a search of both my hard drive AND my registery for the
"officeav.dll" file.
The scan produced negatve results --- the file is not present.

I had also seen Beth's comment about .wll files. Again a scan of my
hard drive did produce one .wll file. The file was not associated
with end notes (I have never used end notes) but with a program
called PROCite (program for formating footnotes and end notes). I
renamed the .wll file to .wlx (rather than remove). Results were
the same --- "Running Virus Scan" at sratr up as long as there is a
.dot file in the global templates window.

So there appears to be some type of connection between the .dot
files in the global templates window and the "Running Virus Scan"
that is not related to Anti Virus program. No one seems to know the
connection.

I am open to any other suggestion to try.




"Graham Mayor" wrote:

With some versions of the Norton product it may be necessary to
unregister the calling DLL by running the following command line
from Windows Start Run

regsvr32 /u "c:\program files\norton antivirus\officeav.dll"
or
regsvr32 /u "c:\program files\norton systemworks\norton
antivirus\officeav.dll"

Office MVP Beth Melton recently reported her discovery that "If
there are any WLL add-ins in the Startup folders they will trigger
this message even if the user doesn't have any type of virus
scanner enabled. Apparently, MS is using the virus scanning engine
to check for macros in WLL files and as a result it triggers the
message. Note other than checking for macros it isn't actually
performing a virus scan....One add-in I know of that still uses a
WLL is EndNote." So you might check your Word and Office Startup
folders for ..wll files.


--

Graham Mayor - Word MVP

My web site www.gmayor.com
Word MVP web site http://word.mvps.org


krazykat wrote:
Tony,


Thanks for the tip. I did check the (Start Run enter,
"services.msc".

There was one "service" running for Norton AV CORPORATE EDITION".
I have all ready verified that the CORPORATE EDITION does not
have the "office plug in" and does not interact with WORD.

But, as a check, I disabled the service for Norton AV CORPORATE
EDITION and started WORD. Same results ----- "Running Virus
Scan". Restarted the Norton AV CORPORATE EDITION, same results
---- "Running ...."

There were no other "SERVICES" running that I could identify as
belonging to any Anti Virus programs.

May be someone can suggest othe things to try. ANY ONE?

Does WORD produce a "start up log" file that logs the detail steps
and sequence of events at WORD start?

"Tony Jollans" wrote:

Clearly you have some sort of AV program running scan on demand.
If not Norton or Grisoft it must be some other.

I am not very knowledgeable about this so someone may correct me,
but I don't think that there is any need for an office-specific
addin to enable this so if Norton is on your machine it may well
scan all files in all applications; there is probably an option
(in the AV program) to switch the scan off. It should be
possible to check what you have somehow in Windows but I don't
know how - you could try looking at the running services to see
if there is anything identifiable as scan on demand (Start Run
enter "services.msc" without the quotes and hit enter to get
the list).

--
Enjoy,
Tony

"krazykat" wrote in message
...
Cindy,

Thanks for the reply. I removed each file 1 by 1. I received
the "Running Virus Scan" at start up at each removal; i.e. with
4, then 3, then 2, etc. With none, there was no "Runnibg Virus
Scan" and WORD opens in a flash. I added 1 back in and
received the "Running Virus Scan". In fact, it does not matter
which of the 5 is added, any one of the 5 produce the "Running
......". Any conclusions?

Thanks

"Cindy M." wrote:

Hi ?B?a3JhenlrYXQ=?=,

What is the connection between the "/a" switch and/ or having
an empty Global Templates window and removal of the "Running
Virus Scan" message at WORD start??

The /a switch prevents all Addins from loading. This includes
global templates, your Normal.dot and any COM Addins you may
have installed.

I can achieve the same affect by removing the 5 global
template files from the Global Templates and addin window
(Tools, Templates and ADD-IN, Global templates and Add-in
window). None of the 5 files in the Global templates and
Add-in window appear to be associated with any AV program,
but they do reside in Windows\startup and OFFICE11\START up
sub folders.

Do you know what each of these global templates if for? Try
removing them all, the move them back in, one at a time. When
the message comes back, you'll know which one is responsible.

Cindy Meister
INTER-Solutions, Switzerland
http://homepage.swissonline.ch/cindymeister (last update Jun 17
2005) http://www.word.mvps.org

This reply is posted in the Newsgroup; please post any follow
question or reply in the newsgroup and not by e-mail :-)