lsass.exe process use too much CPU?

I am also using XP SP3 on my IBM ThinkPad computer at home, and am
experiencing similar issues. A few days ago I noticed my computer was using a
significant amount of CPU even though no applications
were running. Using task manager I discovered that lsass.exe was using 30 %
- 80% of my CPU constantly. I installed Microsoft Windows Defender and found
this Trojan: Win32/Wundo.HJ which the Defender removed, I also found some
interesting information about lsass.exe: (File Name: lsass.exe, File Size:
13312, File Version: 5.1.2600.5512 (xpsp.080413-2113), Date Installed:
1/1/1980 2:00:00 AM).

CA Security Center also removed few Trojans, but my PC behaved as if it
would explode from all the unnecessary CPU usage which is directly caused by
lsass.exe. Since I installed SP3 should the lassas.exe be a different version
then the one I have installed now?

Is there a way to copy or replace this version of lsass.exe with a different
or newer version of lsass.exe, and how do you do it?

I tried few of the suggestion provided by Leonard Grey to no avail,
lsass.exe is still domination the CPU usage, Windows Defender and CA Security
Center are useless at this point, any suggestion please respond.

From: "FordPrefect"

| I am also using XP SP3 on my IBM ThinkPad computer at home, and am
| experiencing similar issues. A few days ago I noticed my computer was using a
| significant amount of CPU even though no applications
| were running. Using task manager I discovered that lsass.exe was using 30 %
| - 80% of my CPU constantly. I installed Microsoft Windows Defender and found
| this Trojan: Win32/Wundo.HJ which the Defender removed, I also found some
| interesting information about lsass.exe: (File Name: lsass.exe, File Size:
| 13312, File Version: 5.1.2600.5512 (xpsp.080413-2113), Date Installed:
| 1/1/1980 2:00:00 AM).

| CA Security Center also removed few Trojans, but my PC behaved as if it
| would explode from all the unnecessary CPU usage which is directly caused by
| lsass.exe. Since I installed SP3 should the lassas.exe be a different version
| then the one I have installed now?

| Is there a way to copy or replace this version of lsass.exe with a different
| or newer version of lsass.exe, and how do you do it?

| I tried few of the suggestion provided by Leonard Grey to no avail,
| lsass.exe is still domination the CPU usage, Windows Defender and CA Security
| Center are useless at this point, any suggestion please respond.





Download and execute HiJack This! (HJT)
http://www.trendsecure.com/portal/en...HJTInstall.exe

Then post the contents of the HJT log in your post in one of the below expert forums...

{ Please - Do NOT post the HJT Log here ! }

Forums where you can get expert advice for HiJack This! (HJT) Logs.

NOTE: Registration is REQUIRED in any of the below before posting a log

Suggested primary:
http://www.thespykiller.co.uk/index.php?board=3.0

Suggested secondary:
http://www.bleepingcomputer.com/forums/forum22.html
http://castlecops.com/forum67.html
http://www.malwarebytes.org/forums/i...hp?showforum=7

Suggested tertiary:
http://www.dslreports.com/forum/cleanup
http://www.cybertechhelp.com/forums/...splay.php?f=25
http://www.atribune.org/forums/index.php?showforum=9
http://www.geekstogo.com/forum/Malwa..._Here-f37.html
http://gladiator-antivirus.com/forum...?showforum=170
http://forum.networktechs.com/forumdisplay.php?f=130
http://forums.maddoktor2.com/index.php?showforum=17
http://www.spywarewarrior.com/viewforum.php?f=5
http://forums.spywareinfo.com/index.php?showforum=18
http://forums.techguy.org/f54-s.html
http://forums.tomcoyote.org/index.php?showforum=27
http://forums.subratam.org/index.php?showforum=7
http://www.5starsupport.com/ipboard/...p?showforum=18
http://aumha.net/viewforum.php?f=30
http://makephpbb.com/phpbb/viewforum.php?f=2
http://forums.techguy.org/54-security/
http://forums.security-central.us/forumdisplay.php?f=13

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp

Well good news, after downloading a few of the suggested tools, I am happy
to report that lsass.exe is no longer hogging the CPU, I found four more
Trojans, two which were on my jump drive, the combination of
SUPERAntiSpyware, CA Security Center, Windows Defender, RogueRemover, and few
others.

Which also led me to also solve the Firefox 3.0 browser hogging CPU as well
in the range of 30% to 100% of CPU usage, the latter required turning java,
and java scripting off and installing a Flashblock which is an extension for
the Mozilla, Firefox, and Netscape browsers? Now I have to repeat this
process for the Opera browser, Apple Safari browser seems to be immune to
this behavior. Microsoft Internet Explorer I have not used for over 6 years
now (I have the latest version installed just in case the other do not work),
I am afraid to use it every time I use it some weird pop-up or new windows is
opened offering me virus protection or tool to fix my system…despite the fact
that I am using a verity of protection packages, firewall, anti-virus,
anti-spyware, etc…at the moment I have 31 tabs open in Firefox and no hogging
of the CPU, I have 6 tabs opened in Safari…all quite as it should be.

I would like to thank everyone that contributed in getting this issue
resolved, thank you all very much.


"David H. Lipman" wrote:

From: "FordPrefect"

| I am also using XP SP3 on my IBM ThinkPad computer at home, and am
| experiencing similar issues. A few days ago I noticed my computer was using a
| significant amount of CPU even though no applications
| were running. Using task manager I discovered that lsass.exe was using 30 %
| - 80% of my CPU constantly. I installed Microsoft Windows Defender and found
| this Trojan: Win32/Wundo.HJ which the Defender removed, I also found some
| interesting information about lsass.exe: (File Name: lsass.exe, File Size:
| 13312, File Version: 5.1.2600.5512 (xpsp.080413-2113), Date Installed:
| 1/1/1980 2:00:00 AM).

| CA Security Center also removed few Trojans, but my PC behaved as if it
| would explode from all the unnecessary CPU usage which is directly caused by
| lsass.exe. Since I installed SP3 should the lassas.exe be a different version
| then the one I have installed now?

| Is there a way to copy or replace this version of lsass.exe with a different
| or newer version of lsass.exe, and how do you do it?

| I tried few of the suggestion provided by Leonard Grey to no avail,
| lsass.exe is still domination the CPU usage, Windows Defender and CA Security
| Center are useless at this point, any suggestion please respond.





Download and execute HiJack This! (HJT)
http://www.trendsecure.com/portal/en...HJTInstall.exe

Then post the contents of the HJT log in your post in one of the below expert forums...

{ Please - Do NOT post the HJT Log here ! }

Forums where you can get expert advice for HiJack This! (HJT) Logs.

NOTE: Registration is REQUIRED in any of the below before posting a log

Suggested primary:
http://www.thespykiller.co.uk/index.php?board=3.0

Suggested secondary:
http://www.bleepingcomputer.com/forums/forum22.html
http://castlecops.com/forum67.html
http://www.malwarebytes.org/forums/i...hp?showforum=7

Suggested tertiary:
http://www.dslreports.com/forum/cleanup
http://www.cybertechhelp.com/forums/...splay.php?f=25
http://www.atribune.org/forums/index.php?showforum=9
http://www.geekstogo.com/forum/Malwa..._Here-f37.html
http://gladiator-antivirus.com/forum...?showforum=170
http://forum.networktechs.com/forumdisplay.php?f=130
http://forums.maddoktor2.com/index.php?showforum=17
http://www.spywarewarrior.com/viewforum.php?f=5
http://forums.spywareinfo.com/index.php?showforum=18
http://forums.techguy.org/f54-s.html
http://forums.tomcoyote.org/index.php?showforum=27
http://forums.subratam.org/index.php?showforum=7
http://www.5starsupport.com/ipboard/...p?showforum=18
http://aumha.net/viewforum.php?f=30
http://makephpbb.com/phpbb/viewforum.php?f=2
http://forums.techguy.org/54-security/
http://forums.security-central.us/forumdisplay.php?f=13

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp