Hi Ford,
Note LSASS.EXE and lsass.exe are legitimate Processes! But isass.exe and
Isass.exe not legit they are Trojans.
Run a search for lsass.exe and copy it to the %SystemRoot%\
Mine located he
Version: 5.1.2600.1106
C:\Windows\$NtServicePackUninstall$
C:\Windows\ServicePackFiles\i386
C:\Windows\SoftwareDistribution\SelfUpdate\16b2... ..
c:\windows\system32

copy from:
C:\Windows\ServicePackFiles\i386
To: c:\windows\system32

Please run a thorough scan with an Anti-Virus software and anti-malware like
superantispyware and Malwarebytes in Both Normal Mode and safe Mode after
updating their definitions.
Or you can contact me with your Hijackthis log if the above didn't solve
your issue.
HTH,
nass
---
http://www.nasstec.co.uk

"FordPrefect" wrote:

I am also using XP SP3 on my IBM ThinkPad computer at home, and am
experiencing similar issues. A few days ago I noticed my computer was using a
significant amount of CPU even though no applications
were running. Using task manager I discovered that lsass.exe was using 30 %
- 80% of my CPU constantly. I installed Microsoft Windows Defender and found
this Trojan: Win32/Wundo.HJ which the Defender removed, I also found some
interesting information about lsass.exe: (File Name: lsass.exe, File Size:
13312, File Version: 5.1.2600.5512 (xpsp.080413-2113), Date Installed:
1/1/1980 2:00:00 AM).

CA Security Center also removed few Trojans, but my PC behaved as if it
would explode from all the unnecessary CPU usage which is directly caused by
lsass.exe. Since I installed SP3 should the lassas.exe be a different version
then the one I have installed now?

Is there a way to copy or replace this version of lsass.exe with a different
or newer version of lsass.exe, and how do you do it?

I tried few of the suggestion provided by Leonard Grey to no avail,
lsass.exe is still domination the CPU usage, Windows Defender and CA Security
Center are useless at this point, any suggestion please respond.


"Eric Kolotyluk" wrote:

I'm using XP SP3 on my computer at home. A few weeks ago I noticed my
computer was using a significant amount of CPU even though no applications
were running. Using task manager I discovered that lsass.exe was using 30 % -
50% of my CPU constantly. I have never seen this behavior before. Overall
performance on my computer has been abysmal since then.

Is there any valid reason why this process is using so much CPU?

I've browsed the web and found lots of articles on viruses using lsass.exe
as as vector, but nothing the seems to be helpful. Using Process Explorer I
tried to validate the process, and Process Explore thinks it's a valid
Microsoft process.

I've been in touch with Bit Defender, my security software provider, but
they have not really been of use.

I'm still convinced there is something not quite right with my system, but
the virus scans don't turn up anything. I have notice the for some reason the
latest Windows updates seem to fail. My disk keeps getting full even though I
am not adding any files, and routinely cleaning out temporary and cache files.

Any help or thoughts would be greatly appreciated.

--
Eric Kolotyluk
Software Developer