I have a remote server running Windows Server 2003 Std. Edition that periodically runs very slowly. Hardware-wise, it's running 3GHz Pentium 4, 2GB RAM with multi-GB free space on the single hard drive. Software-wise, the heaviest applications are SQL Server 2005 and our enterprise uses McAfee's products.
When the site reports a slowdown, I remote to the server and open Task Manager. There, I see multiple instances of various processes. For example: csrss.exe, explorer.exe, Mctray.exe, shstat.exe, SMax4.exe, sqlmangr.exe, TBMon.exe, winlogon.exe and others. I've not seen any messages in the Event Viewer that might explain why this is happening. The site doesn't report any problems other than the slowdown.
Am I correct in thinking this is an indication of the problem? Can anyone explain what might be causing the multiple instances? Can you give me some direction as to how to hunt this down?