Not sure what it is yet other than we saw a few runaway scripts on a user account that required a reboot to gain access. We rebooted it and it is taking a while to come back online. I'll update when I know more.