outlook.exe runs at 100% in strange context (services.exe > svchost.exe > outlook.exe)

got a very strange effect on a large number of clients.

a separate outlook.exe process is running in the context of services.exe > svchost.exe. the process is completely independent of any other "regular" outlook instances.

killing the process will (of course) help but the problem will reoccur the next day.

does anyone have an idea what's spawning the process and how this might be prevented?

thanks alot
- Boris
procexp.gif
vischer-itAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Mohamed OsamaSenior IT ConsultantCommented:
try using Procmon , also from Sysinternals, to check what File system access, registry entries , network traffic and process activity , this Outlook instance is related to.

http://technet.microsoft.com/en-us/sysinternals/bb896645.aspx

This could be a bad add-on for outlook, I doubt this is malware related, since KAV seems up & running, however please post a Hijack this log

http://www.trendsecure.com/portal/en-US/threat_analytics/hijackthis.php?page=download
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
vischer-itAuthor Commented:
procmon led me to the "bad add-on for outlook". which in our case was the symantec enterprise vault outlook add-in. it's been communicating with the server as often and fast as possible and writing tons of data to the local log files. have opened a case with symantec and am waiting for their response.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows XP

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.