• Properties:

• System Process: No
• Background Process: Yes
• Application Process:Yes
• Common Path:
  C:\ Program Files\ icmon.exe
• Uses Network:Yes
• Uses Internet:Yes

Description:

The icmon.exe file is also referred to as Sophos Anti-Virus InterCheck activity monitor (ENG) process. The Sophos Anti-virus program has a built-in feature called on-access virus scanning, and the functions for this particular feature are embedded on the icmon.exe file. The icmon.exe file is automatically installed and activated on your computer once the Sophos Anti-virus program is installed.

The icmon.exe file displays an icon on the system tray where in the user can click on the monitor to:

check that the on-access virus scanning is enabled or active;

check the number of files that have been scanned for virus starting from the computers last boot;

and view what was the latest file that has been scanned.

On-access Virus Scanning means that files are being scanned for viruses in the background and when the files are accessed or used. The icmon.exe file only grants access to files that do not present any threats to the computer or are permitted by the user.

The icon on the Windows system tray appears as a blue shield. If the icon is blue in color it means that the on-access scanning is active. To determine if the icmon.exe process is running, the shield icon should be gray in color. If the shield is gray with a white cross on top of a red circle, the update feature of the program along with the icmon.exe process is not active. In addition, if the icmon.exe file is running, the computer is protected and this will show in the status of the Sophos Anti-virus application.

If you have enabled on-access scanning in the On-access scan settings for this computer dialog box before turning off or restarting the machine, the icmon.exe file will still automatically run once the computer has started.

The icmon.exe file can also block specific applications from running. This can be configured by the user or an administrator in case the Sophos Anti-virus application is an Enterprise edition or if it is used in a networked environment.

Recommendations:

This is a safe process. There is no necessity to remove this process from your system or change it in any way.