MS-Office Integration ?????

  • Thread starter Thread starter Patrick Schmid
  • Start date Start date
P

Patrick Schmid

Whenever I open Word, my status bar displays "Running virus scan...". I know
that this is connected to one particular Word add-in I'm using (EndNote 7).
It wouldn't be too bad, if it only displayed the message. Unfortuntaly it
also causes my CPU to spike to >90% for 20-30 seconds and freezes Word
completely during that time.
I never could understand the message, because my virus scanner (Symantec
AntiVirus Corporate Edition 10.02) DOES NOT integrate with Office. With help
from the MS-Office team, I finally found the program responsible for my
dilemma:
Windows Defender IOfficeAntiVirus implementation
C:\Program Files\Windows Defender\MpOAV.dll

I had no idea that Windows Defender integrates with Office! I couldn't
figure that out from the settings nor from the help (this applies to beta 1
as well).
How do I switch this off?

If this is really a feature of Windows Defender and you intend to keep this,
then please change the message to "Running spyware scan...". That would have
told me at least which program was causing my troubles and not sent me on a
wild goose chase.

Thanks,

Patrick Schmid
 
If you search this group, either using that DLL name as a key, or Mike Treit
as a sender, or [Msft]--you can find a couple of messages from Mike Treit of
Microsoft explaining the use of this .dll file.

I would say that the effect you are seeing is clearly a bug, however. I'd
consider doing an update install of Windows Defender to see if that helps
any--start, control panel, add or remove programs, Windows Defender, change,
update.
 
Hi Bill,

thanks! So this DLL is a general hook into Office (or any other app that
offers it)
As for Word, it hooks into it using the following (info from MS):
The AV category has a guid {56FFCC30-D398-11D0-B2AE-00A0C908FA49}. The
user has to find the AV control that is still registered that says it
implements that category. [That's HKCR\CLSID\<theircontrol>\Implemented
Categories\{56FF...49} ]

There doesn't seem to be a way though to get rid of this behavior. I
couldn't unregister the dll using regsvr32. Manually deleting it out of the
registry didn't help either. It didn't even help to rename the DLL itself.
Uninstalling Defender wasn't helpful either. It nicely disappeared from
Add/Remove programs, but it's still on my machine and active.
Once I am home again, I'll try to install and then uninstall it again. Maybe
that will help.

How do I get this bugged? I am not on connect/betaplace (whatever defender
uses) for defender. I could of course try to get it resolved from the part
of MS where I got help from.

Thanks,

Patrick


Bill Sanderson said:
If you search this group, either using that DLL name as a key, or Mike
Treit as a sender, or [Msft]--you can find a couple of messages from Mike
Treit of Microsoft explaining the use of this .dll file.

I would say that the effect you are seeing is clearly a bug, however. I'd
consider doing an update install of Windows Defender to see if that helps
any--start, control panel, add or remove programs, Windows Defender,
change, update.



--

Patrick Schmid said:
Whenever I open Word, my status bar displays "Running virus scan...". I
know that this is connected to one particular Word add-in I'm using
(EndNote 7). It wouldn't be too bad, if it only displayed the message.
Unfortuntaly it also causes my CPU to spike to >90% for 20-30 seconds and
freezes Word completely during that time.
I never could understand the message, because my virus scanner (Symantec
AntiVirus Corporate Edition 10.02) DOES NOT integrate with Office. With
help from the MS-Office team, I finally found the program responsible for
my dilemma:
Windows Defender IOfficeAntiVirus implementation
C:\Program Files\Windows Defender\MpOAV.dll

I had no idea that Windows Defender integrates with Office! I couldn't
figure that out from the settings nor from the help (this applies to beta
1 as well).
How do I switch this off?

If this is really a feature of Windows Defender and you intend to keep
this, then please change the message to "Running spyware scan...". That
would have told me at least which program was causing my troubles and not
sent me on a wild goose chase.

Thanks,

Patrick Schmid
Click to expand...
Click to expand...
 
Something is very wrong. Uninstall should be fully effective--I have, for
example, switched back and forth between Microsoft Antispyware (beta1) and
Windows defender multiple times on a VPC for testing reasons.

The last person who had this sort of problem--and he had it with
beta1--found that it was an active-protection portion of another antispyware
program--can't recall which it was--which was causing the unwanted product
to remain active. Are you running other antispyware apps with add-ons that
provide active protection?

--

Patrick Schmid said:
Hi Bill,

thanks! So this DLL is a general hook into Office (or any other app that
offers it)
As for Word, it hooks into it using the following (info from MS):
The AV category has a guid {56FFCC30-D398-11D0-B2AE-00A0C908FA49}. The
user has to find the AV control that is still registered that says it
implements that category. [That's HKCR\CLSID\<theircontrol>\Implemented
Categories\{56FF...49} ]

There doesn't seem to be a way though to get rid of this behavior. I
couldn't unregister the dll using regsvr32. Manually deleting it out of
the registry didn't help either. It didn't even help to rename the DLL
itself.
Uninstalling Defender wasn't helpful either. It nicely disappeared from
Add/Remove programs, but it's still on my machine and active.
Once I am home again, I'll try to install and then uninstall it again.
Maybe that will help.

How do I get this bugged? I am not on connect/betaplace (whatever defender
uses) for defender. I could of course try to get it resolved from the part
of MS where I got help from.

Thanks,

Patrick


Bill Sanderson said:
If you search this group, either using that DLL name as a key, or Mike
Treit as a sender, or [Msft]--you can find a couple of messages from Mike
Treit of Microsoft explaining the use of this .dll file.

I would say that the effect you are seeing is clearly a bug, however.
I'd consider doing an update install of Windows Defender to see if that
helps any--start, control panel, add or remove programs, Windows
Defender, change, update.



--

Patrick Schmid said:
Whenever I open Word, my status bar displays "Running virus scan...". I
know that this is connected to one particular Word add-in I'm using
(EndNote 7). It wouldn't be too bad, if it only displayed the message.
Unfortuntaly it also causes my CPU to spike to >90% for 20-30 seconds
and freezes Word completely during that time.
I never could understand the message, because my virus scanner (Symantec
AntiVirus Corporate Edition 10.02) DOES NOT integrate with Office. With
help from the MS-Office team, I finally found the program responsible
for my dilemma:
Windows Defender IOfficeAntiVirus implementation
C:\Program Files\Windows Defender\MpOAV.dll

I had no idea that Windows Defender integrates with Office! I couldn't
figure that out from the settings nor from the help (this applies to
beta 1 as well).
How do I switch this off?

If this is really a feature of Windows Defender and you intend to keep
this, then please change the message to "Running spyware scan...". That
would have told me at least which program was causing my troubles and
not sent me on a wild goose chase.

Thanks,

Patrick Schmid
Click to expand...
Click to expand...
Click to expand...
 
I'll give uninstalling it on my tablet I try. Maybe it works there.

Patrick

Bill Sanderson said:
Something is very wrong. Uninstall should be fully effective--I have, for
example, switched back and forth between Microsoft Antispyware (beta1) and
Windows defender multiple times on a VPC for testing reasons.

The last person who had this sort of problem--and he had it with
beta1--found that it was an active-protection portion of another
antispyware program--can't recall which it was--which was causing the
unwanted product to remain active. Are you running other antispyware apps
with add-ons that provide active protection?

--

Patrick Schmid said:
Hi Bill,

thanks! So this DLL is a general hook into Office (or any other app that
offers it)
As for Word, it hooks into it using the following (info from MS):
The AV category has a guid {56FFCC30-D398-11D0-B2AE-00A0C908FA49}. The
user has to find the AV control that is still registered that says it
implements that category. [That's HKCR\CLSID\<theircontrol>\Implemented
Categories\{56FF...49} ]

There doesn't seem to be a way though to get rid of this behavior. I
couldn't unregister the dll using regsvr32. Manually deleting it out of
the registry didn't help either. It didn't even help to rename the DLL
itself.
Uninstalling Defender wasn't helpful either. It nicely disappeared from
Add/Remove programs, but it's still on my machine and active.
Once I am home again, I'll try to install and then uninstall it again.
Maybe that will help.

How do I get this bugged? I am not on connect/betaplace (whatever
defender uses) for defender. I could of course try to get it resolved
from the part of MS where I got help from.

Thanks,

Patrick


Bill Sanderson said:
If you search this group, either using that DLL name as a key, or Mike
Treit as a sender, or [Msft]--you can find a couple of messages from
Mike Treit of Microsoft explaining the use of this .dll file.

I would say that the effect you are seeing is clearly a bug, however.
I'd consider doing an update install of Windows Defender to see if that
helps any--start, control panel, add or remove programs, Windows
Defender, change, update.



--

Whenever I open Word, my status bar displays "Running virus scan...". I
know that this is connected to one particular Word add-in I'm using
(EndNote 7). It wouldn't be too bad, if it only displayed the message.
Unfortuntaly it also causes my CPU to spike to >90% for 20-30 seconds
and freezes Word completely during that time.
I never could understand the message, because my virus scanner
(Symantec AntiVirus Corporate Edition 10.02) DOES NOT integrate with
Office. With help from the MS-Office team, I finally found the program
responsible for my dilemma:
Windows Defender IOfficeAntiVirus implementation
C:\Program Files\Windows Defender\MpOAV.dll

I had no idea that Windows Defender integrates with Office! I couldn't
figure that out from the settings nor from the help (this applies to
beta 1 as well).
How do I switch this off?

If this is really a feature of Windows Defender and you intend to keep
this, then please change the message to "Running spyware scan...". That
would have told me at least which program was causing my troubles and
not sent me on a wild goose chase.

Thanks,

Patrick Schmid
Click to expand...
Click to expand...
Click to expand...
 
Back
Top