What is ofcdog.exe?

The .exe extension on a filename indicates an executable file. Executable files may, in some cases, harm your computer. Therefore, please read below to decide for yourself whether the ofcdog.exe on your computer is a Trojan that you should remove, or whether it is a file belonging to the Windows operating system or to a trusted application.

Click to Run a Free Scan for ofcdog.exe related errors

Ofcdog.exe file information

Windows Task Manager with ofcdog
Ofcdog.exe process in Windows Task Manager

The process known as ofcdog.exe belongs to software Trend Micro OfficeScan Client or Trend Micro OfficeScan WinNT by Trend Micro (

Description: Ofcdog.exe is not essential for the Windows OS and causes relatively few problems. Ofcdog.exe is located in a subfolder of "C:\Program Files" or sometimes in a subfolder of C:\ (normally C:\OfficeScan NT\ or C:\Program Files\Trend Micro\OfficeScan Client\). Known file sizes on Windows 10/8/7/XP are 135,235 bytes (57% of all occurrences) or 135,168 bytes. 
There is no description of the program. The program is not visible. The file is not a Windows system file. Ofcdog.exe is able to record keyboard and mouse inputs, hide itself and monitor applications. Therefore the technical security rating is 50% dangerous; however you should also read the user reviews.

Uninstalling this variant: There is a possibility to uninstall Trend Micro OfficeScan Client or Trend Micro OfficeScan WinNT from your computer using the Control Panel applet Uninstall a Program.

Recommended: Identify ofcdog.exe related errors

Important: Some malware camouflages itself as ofcdog.exe, particularly when located in the C:\Windows or C:\Windows\System32 folder. Therefore, you should check the ofcdog.exe process on your PC to see if it is a threat. We recommend Security Task Manager for verifying your computer's security. This was one of the Top Download Picks of The Washington Post and PC World.


User Comments

Part of TrendMicro Officescan
  Paul   (further information)
Office Scan runtime
It creates a copy of its self in memory that is named BFG56.exe or something similar. If you kill the process, it comes back as another file similar to bgf65.exe. This is malware like, and I don't like it.
I've seen it in action. it always starts with a different name slowing down the PC. I highly recommend to kill this process before Copying CDs or DVDs. Checking it existence from time to time because it restarts after a while.
my observations about ofcdog.exe, in every reboot PC, this file(ofcdog.exe) copied itself randomly by default to windows\Temp folder as different names; for example, CL7A35.EXE, RP4F50.EXE,SB10B7.EXE, OX97E2.EXE...etc And then, this renamed file has been executing .you can also see this file(for example, CL7A35.EXE, RP4F50.EXE, SB10B7.EXE,OX97E2.EXE...etc) in Task Manager, but you can't see ofcdog.exe file. it is very interest, is it?
  Lutfi Baran  
my observations about ofcdog.exe, in every reboot PC, this file(ofcdog.exe) copied itself randomly by default to windows\Temp folder as different names; for example, CL7A35.EXE, RP4F50.EXE, SB10B7.EXE, OX97E2.EXE...etcAnd then, this renamed file has been executing . you can also see this file in Task Manager.very interest, is it?
  Lutfi Baran  
my observations, in every reboot PC, this file(ofcdog.exe) copied itself randomly by default to windows\Temp folder as different names; for example, CL7A35.EXE, RP4F50.EXE, SB10B7.EXE, OX97E2.EXE...etc.. And then, this renamed file has been executing. you can also see this file in Task Manager... very interest, is it?
  Lutfi Baran  
Trend Micro's watchdog to keep AntiVirus running should it be killed
  David Soussan   (further information)
Trend Micro OfficeScan
it remakes it self as an EXE in the %system%\temp folder. This makes it look more like spyware
allows admins to monitor workstation activities
  John J   (further information)
I have Trend micro in my machine. But if the file size is 172,099 bytes probably it is a malware. It stays in the memory an replicates itselft with same size, and directes to IE to some Adware sites
It only comes as ofcdog.exe - it IS BSB1A3-virus!
I've guessed that there is an executable file in the C:\Windows\temp folder with the same name as the 'strange' process,, RP4F50.EXE. Denying writing permisions on this folder prevents the process to be created. On the other hand, I saw some time ago a PC full of virus, and Office Scan made a dog-file for each infected file. Thus I think it is malware. Not 100% sure but almost.
That file belongs to TrendMicro, it's their watchdog to evade detection from viruses they have to act like one. It populates is selv with a random name and is added to the temp folder in order to catch viruses. Viruses which turns off antiviruses won't be able to detect TrendMicro's random file in the temp folder. Source:
We have been using Trend Micro products from some time now. And this process has never been identified as being a threat in any form. It is also known as the "WatchDog Process" and forms the underlying layer of the virus application on workstations.
  Brendan Williams  
This file is by TrendMicro, a reputable antivirus company. It copies itself as it is the watchdog to keep trendmicro on assuming a virus tries to kill it. Gotta act like a virus to beat a virus.

Rating chart

Summary: Average user rating of ofcdog.exe: based on 24 votes with 17 user comments. 11 users think ofcdog.exe is essential for Windows or an installed application. 2 users think it's probably harmless. 6 users think it's neither essential nor dangerous. 5 users suspect danger.

Do you have additional information?
What do you know about ofcdog.exe:
How would you rate it:
Link for more info:
Your Name:

Best practices for resolving ofcdog issues

A clean and tidy computer is the key requirement for avoiding problems with ofcdog. This means running a scan for malware, cleaning your hard drive using cleanmgr and sfc /scannow, uninstalling programs that you no longer need, checking for Autostart programs (using msconfig) and enabling Windows' Automatic Update. Always remember to perform periodic backups, or at least to set restore points.

Should you experience an actual problem, try to recall the last thing you did, or the last thing you installed before the problem appeared for the first time. Use the resmon command to identify the processes that are causing your problem. Even for serious problems, rather than reinstalling Windows, you are better off repairing of your installation or, for Windows 8 and later versions, executing the DISM.exe /Online /Cleanup-image /Restorehealth command. This allows you to repair the operating system without losing data.

To help you analyze the ofcdog.exe process on your computer, the following programs have proven to be helpful: Security Task Manager displays all running Windows tasks, including embedded hidden processes, such as keyboard and browser monitoring or Autostart entries. A unique security risk rating indicates the likelihood of the process being potential spyware, malware or a Trojan. Malwarebytes Anti-Malware detects and removes sleeping spyware, adware, Trojans, keyloggers, malware and trackers from your hard drive.

Other processes

ofcdog.exe [all]