Multiple user profiles with the same timestamp Windows 7/Domain

[itdirectorscut]

Hi!

 

We are seeing occasionally stations having multiple user profiles (different usernames) with the same timestamp and then filling up the HDD, we do have a GPO that cleans profiles over 7 days, has anyone else seen this, gut is telling me a virus/malware.

 

thanks!!

 

Steve