lsass.exe hogging cpu

[venisles]

Have a machine running xp where lsass.exe uses 70% to 90% of the cpu for the first 15 to 20 minutes after startup. During this time anything else is very slow but still operates. After that it drops down to 0 to 4% and everthing is fine. No other problems noted and I have run virus scans with norton especially looking for sasser but nothing shows. Any ideas?

 

[linney]

How is it from Safe Mode, or from Normal Mode but as a different user?

310353 - How to Perform a Clean Boot in Windows XP

http://support.microsoft.com/default.aspx?scid=kb;en-us;310353&FR=1&PA=1&SD=HSCH

316434 - HOW TO: Perform Advanced Clean-Boot Troubleshooting in Windows XP

http://support.microsoft.com/default.aspx?scid=kb;en-us;316434&FR=1&PA=1&SD=HSCH

310560 - How to Troubleshoot By Using the Msconfig Utility in Windows XP

http://support.microsoft.com/default.aspx?scid=kb;en-us;310560&FR=1&PA=1&SD=HSCH

Have a look in your Event Viewer for any further clues or errors.



Removing adware & spyware
faq608-4650

Try the free version of "Ewido" now called "AVG Anti-Spyware 7.5"

http://www.ewido.net/

Windows Defender

http://www.microsoft.com/athome/security/spyware/software/default.mspx

Some general things to try.

See if System Restore will get you back to a restore point before your problem with Explorer.

Try running ChkDsk to check your drive for errors. Right-click your Drive icon/ Properties/ Tools/ Error Checking. Select both boxes.

Run the System File Checker program from the Run Box by typing.....Sfc /Scannow in it and have your XP CD handy.

HOW TO: Verify Unsigned Device Drivers in Windows XP

http://support.microsoft.com/support/kb/articles/q308/5/14.asp

If they don't work you could try repairing windows by running it over itself. You will lose all your windows updates but your files will be untouched.

How to Perform an In-Place Upgrade (Reinstallation) of Windows XP (Q315341)

http://support.microsoft.com/support/kb/articles/q315/3/41.asp

 

[ASG0856]

Another thing to check. Is this LSASS.EXE, which is the XP shutdown program or [red]ISASS.EXE[/red] which is a virus? Because XP list in lower case lsass and isass look the same

 

[ASG0856]

Another Check. How are Updates set. If they are set to check but not download, then the computer will be busy checking the MS site. The Same would go for Norton (if you use it) and possibly other Anti-Virus/Internet Security programs that you may be using.