Constant hard drive access - LSASS.EXE process

[frank]

Hello. I have an IBM T22 with recently loaded XP Pro
(virgin load as well as SP1). The HD never stops running.
All IBM updates have been applied, power mgmt is on, no
background programs are running (auto update, file
indexing) and I went to MSCONFIG and turned all programs
off there as well. I ran AdAware 6 in case there was some
spyware. Still, the HD is being accessed each second.
In checking TASK MANAGER, I found a PROCESS-- LSASS.EXE
that shows I/O access each time the HD LCD goes on. Nothing
else is showing such frequent access. Unfortunately, it
cannot be stopped in task manager.
Does anyone know of a program that would pinpoint why this
is running or can tell me what it is doing?

 

[Dragonteeth]

Hello. I have an IBM T22 with recently loaded XP Pro
(virgin load as well as SP1). The HD never stops running.
All IBM updates have been applied, power mgmt is on, no
background programs are running (auto update, file
indexing) and I went to MSCONFIG and turned all programs
off there as well. I ran AdAware 6 in case there was some
spyware. Still, the HD is being accessed each second.
In checking TASK MANAGER, I found a PROCESS-- LSASS.EXE
that shows I/O access each time the HD LCD goes on. Nothing
else is showing such frequent access. Unfortunately, it
cannot be stopped in task manager.
Does anyone know of a program that would pinpoint why this
is running or can tell me what it is doing?

Hi Frank
If you are*not* on a Domain, or a VPN, then:
1) put 'services.msc' in your Run field, and press enter....
2) scroll down the list of services to the IPSEC Service, right-click it,
and change it to "Manual"

That should keep it from pestering your CPU, without causing you any
problems.

 

[frank]

Hi,

Well, I tried it -- changed it to manual. Unfortunately,
it did not fix the problem -- I still see once-per-second
I/O hits on LSASS.EXE, and of course hits to the HD.

Thank you for the suggestion. Any other ideas? Anyone?

Frank

 

[Dragonteeth]

Hi,

Well, I tried it -- changed it to manual. Unfortunately,
it did not fix the problem -- I still see once-per-second
I/O hits on LSASS.EXE, and of course hits to the HD.

Thank you for the suggestion. Any other ideas? Anyone?

Frank

Sorry.... it'll take some research.
That method resolved the same problem for me, on a previous machine.
So.. it *could* have worked. |

 

[Dragonteeth]

Hi,

Well, I tried it -- changed it to manual. Unfortunately,
it did not fix the problem -- I still see once-per-second
I/O hits on LSASS.EXE, and of course hits to the HD.

Thank you for the suggestion. Any other ideas? Anyone?

Frank

Do you have antivirus software with the latest updates?
Try shutting down the lsass process, then running your AV program.

It's a possibility that should be eliminated - that you could have the
Lovgate Worm.
It's spreading rapidly on the net, and injects itself into the lsass
process.

As it is growing more prevalent, it's worth looking into.

 

[frank]

I am running Norton AntiVirus 2003 with auto-updates so I
believe that is not the issue. As mentioned, I also ran the
newest AdAware 6 (with update) to make sure it was not
spyware. This is most perplexing.

Thank you for all your help.

Frank