What is PccNTMon.exe?

The genuine PccNTMon.exe file is a software component of Trend Micro OfficeScan by Trend Micro.
Trend Micro OfficeScan is a security suite that protects enterprise networks from malicious software. PccNTMon.exe runs the PC-Cillin network monitor that scans and detects for online threats. This is not an essential Windows process and can be disabled if known to create problems.

Trend Micro OfficeScan is a security solution for large and small corporate networks. The software is designed using a centralized cloud-client infrastructure that delivers security to endpoint systems managed with coordinated security policies. Trend Micro OfficeScan also features automatic deployment of pattern files, security settings, and software updates; outbreak prevention mechanisms, event notification, and reporting services.

Trend Micro Inc. is a Japanese company that develops and markets security software for home and corporate users. The company was founded in Los Angeles, California, USA in 1988 by Steve Chang, his wife, Jenny Chang, and her sister, Eva Chen. Soon after, the company moved to Taipei. After it acquired a Japanese software firm in 1992, it set up its main headquarters in Tokyo, Japan. In September 2014, Trend Micro announced a new partnership with Interpol with a mission to thwart cybercrimes worldwide.

PCCNtMon stands for PC-Cillin Network Monitor

The .exe extension on a filename indicates an executable file. Executable files may, in some cases, harm your computer. Therefore, please read below to decide for yourself whether the PccNTMon.exe on your computer is a Trojan that you should remove, or whether it is a file belonging to the Windows operating system or to a trusted application.

Click to Run a Free Scan for PccNTMon.exe related errors

PccNTMon.exe file information

Windows Task Manager with PccNTMon
PccNTMon.exe process in Windows Task Manager

The process known as Trend Micro OfficeScan Monitor or Trend Micro Security Agent Monitor or Trend Micro OfficeScan or Trend Micro Client/Server Security Agent Monitor belongs to software Trend Micro Worry-Free Business Security or Trend Micro OfficeScan Client or Trend Micro OfficeScan Agent by Trend Micro (

Description: PccNTMon.exe is not essential for the Windows OS and causes relatively few problems. PccNTMon.exe is located in a subfolder of "C:\Program Files (x86)"—mainly C:\Program Files (x86)\Trend Micro\OfficeScan Client\ or C:\Program Files (x86)\Trend Micro\Client Server Security Agent\. Known file sizes on Windows 10/8/7/XP are 849,192 bytes (20% of all occurrences), 1,837,632 bytes and 7 more variants. 
There is an icon for this program on the taskbar next to the clock. The file is not a Windows system file. PccNTMon.exe is a Verisign signed file. The file has a digital signature. PccNTMon.exe is able to record keyboard and mouse inputs and monitor applications. Therefore the technical security rating is 15% dangerous; but you should also compare this rating with the user reviews.

Uninstalling this variant: If problems with Trend Micro OfficeScan Client or Trend Micro Worry-Free Business Security come up, you can uninstall it from your computer using the Control Panel applet Uninstall a Program or visit the website.

Recommended: Identify PccNTMon.exe related errors

External information from Paul Collins:

Important: Some malware camouflages itself as PccNTMon.exe, particularly when located in the C:\Windows or C:\Windows\System32 folder. Therefore, you should check the PccNTMon.exe process on your PC to see if it is a threat. We recommend Security Task Manager for verifying your computer's security. This was one of the Top Download Picks of The Washington Post and PC World.


User Comments

Realtime monitoring for OfficeScan Virus Killer.
Trend Micro essential file.
application error
It's vital for Trend Micro OfficeScan client to run.
I encountered the same
  Anup Kumar Bal  

Rating chart

Summary: Average user rating of PccNTMon.exe: based on 11 votes with 5 user comments. 9 users think PccNTMon.exe is essential for Windows or an installed application. One user thinks it's probably harmless. One user thinks it's neither essential nor dangerous. One user is not sure about it.

Do you have additional information?

Best practices for resolving PccNTMon issues

A clean and tidy computer is the key requirement for avoiding problems with PccNTMon. This means running a scan for malware, cleaning your hard drive using 1cleanmgr and 2sfc /scannow, 3uninstalling programs that you no longer need, checking for Autostart programs (using 4msconfig) and enabling Windows' 5Automatic Update. Always remember to perform periodic backups, or at least to set restore points.

Should you experience an actual problem, try to recall the last thing you did, or the last thing you installed before the problem appeared for the first time. Use the 6resmon command to identify the processes that are causing your problem. Even for serious problems, rather than reinstalling Windows, you are better off repairing of your installation or, for Windows 8 and later versions, executing the 7DISM.exe /Online /Cleanup-image /Restorehealth command. This allows you to repair the operating system without losing data.

To help you analyze the PccNTMon.exe process on your computer, the following programs have proven to be helpful: ASecurity Task Manager displays all running Windows tasks, including embedded hidden processes, such as keyboard and browser monitoring or Autostart entries. A unique security risk rating indicates the likelihood of the process being potential spyware, malware or a Trojan. BMalwarebytes Anti-Malware detects and removes sleeping spyware, adware, Trojans, keyloggers, malware and trackers from your hard drive.

Other processes

PccNTMon.exe [all]