What is Pccntmon.exe

OfficeScanNT Monitor - Trend Micro OfficeScan - Trend Micro Inc.

File description

Pccntmon.exe with description OfficeScanNT Monitor is a process file from company Trend Micro Inc. belonging to product Trend Micro OfficeScan.
The file is digitally signed from Trend Micro, Inc. - VeriSign Time Stamping Services Signer - G2
We do not recommend removing digitally signed files from Trend Micro, Inc.

What is pccntmon.exe?
This is the Trend Micro OfficeScan Antivirus Real-Time Scan Monitor. It is the part of Trend Micro OfficeScan that is responsible for staying resident in memory to protect against viruses as they enter your system.

This process is not essential to the operation of the system; however, it should not be disabled or removed unless absolutely necessary. If you wish to disable this process, you should do so by uninstalling Trend Micro OfficeScan. If you wish to simply disable background scanning, you should change the respective setting in OfficeScan. Note that disabling this process in any way will disable your background virus protection.

Dangers of pccntmon
As this is a legitimate process that is installed on any system with Trend Micro OfficeScan, it is possible for virus writers and spyware vendors to disguise their malware as the genuine one.

Some malicious files may have the same name as this process but be stored somewhere other than in %ProgramFiles%\Trend Micro\OfficeScan Client. Other malware may use a name that appears similar to that of the legitimate one but with slight differences in spelling or with appended digits. While there are currently no known viruses, Trojans, or adware applications that disguise themselves as this process, you should look out for the presence of this file in an incorrect location or with a slightly different name.

There is typically only one instance of this process running at a given time on a system. The presence of multiple instances may be an indicator of a malware infection. If you do not have Trend Micro OfficeScan installed, the presence of this process is a strong indicator of a malware infection.

Common problems
  • "pccntmon.exe is not a valid Win32 application"
    • This often occurs when a virus tries to disable all anti-virus programs. You should reboot into safe mode to perform a virus scan and then reinstall the software.

Automatic startup locations

001 Running Processes
002 Autorun registry entries local machine

Digital signatures found for this file

144 Trend Micro, Inc. - VeriSign Time Stamping Services Signer - G2
56 Trend Micro, Inc. - COMODO Time Stamping Signer
10 Trend Micro, Inc. - VeriSign Time Stamping Services Signer
8 Trend Micro, Inc. - Symantec Time Stamping Services Signer - G3
8 Trend Micro, Inc. - COMODO SHA-1 Time Stamping Signer
3 Trend Micro, Inc. - Symantec Time Stamping Services Signer - G4

MD5 security rating in our database

89 files (Not yet rated and not signed)
42 files (Not yet rated and digitally signed)
192 files (Safe and digitally signed)
Some versions of this filename have not yet been checked for safety.
Warning: Some malware might rename itself to pccntmon.exe. Always make sure that your file is from a verified publisher.

User ratings for this file

File rating: Average rating of pccntmon.exe: by 323 files and users.

Application errors

Fix pccntmon.exe application error:  Run a FREE registry scan

User comments

There are no user comments yet for this file.

Please add your comments if you have more information about this file or if you know how to solve pccntmon.exe application errors.

File safety :

File security rating :

Are you human? How much is 11+6:

Like this page?

Please support this free service by giving us a Google+1

Browse files by letter


More system processes

pccntupd.exe pccofferdrv.sys pcconfidential.exe
pccontrol.exe PccPfw.exe pccplusv.exe
pCCPPlayer.ocx pccs.sys pccsmcfd.sys
pcctlcom.exe PCCTool.exe pccupdui.exe

Lansweeper computer inventory From the creator of Runscanner:

is an automated IT asset management tool. It can quickly scan your computers and has over 250 default reports available.

There is no need to install any agents on the scanned computers, all hardware and software inventory scanning is done by standard build-in functionality.