Hi!

We are seeing occasionally stations having multiple user profiles (different usernames) with the same timestamp and then filling up the HDD, we do have a GPO that cleans profiles over 7 days, has anyone else seen this, gut is telling me a virus/malware.

thanks!!

Steve