I'm a little puzzled by the fact that AMON keeps scanning running processes over and over again. My personal firewall (smc.exe), for example, is scanned every couple of seconds (apparently every time the firewall processes incoming or outgoing data). Right now, my machine has been running for approx. 8 hours and AMON reports having scanned more than 155000 files! Isn't that a bit excessive? I understand that IMON needs to scan an executable before it is loaded into memory. But why re-scan the executable of an already running process over and over again?