LSASS.exe 100% CPU usage

[Guest]

Greetings,

The last time I installed Live Messenger was a few months ago.

I installed it today and the same problem occurs. After logging in, (or
during the logging in final process before it gets to load your contacts),
LSASS.EXE goes to 100% CPU usage and nothing can stop it apart from ending
the Live Messenger task from the Task Manager.

For a 13kb program, LSASS is very annoying. I have checked and am not
infested with any Sasser or other virus.

Is there anything one can do?

Regards and thanks in advance.

I just tried signing in with a completely new MSN/Live/Hotmail.com address.

It's fine.

However with my well established address, with hundreds of contacts, it
doesn't want to play.

 

[Guest]

Greetings,

The last time I installed Live Messenger was a few months ago.

I installed it today and the same problem occurs. After logging in, (or
during the logging in final process before it gets to load your contacts),
LSASS.EXE goes to 100% CPU usage and nothing can stop it apart from ending
the Live Messenger task from the Task Manager.

For a 13kb program, LSASS is very annoying. I have checked and am not
infested with any Sasser or other virus.

Is there anything one can do?

Regards and thanks in advance.

I just tried signing in with a completely new MSN/Live/Hotmail.com address.

It's fine.

However with my well established address, with hundreds of contacts, it
doesn't want to play.

Hi Singapore,
It looks like you have winsock2 problem If I understood right,please go to
this link and try to repair the winsock2;
http://support.microsoft.com/?scid=kb;EN-US;Q321024
for winsock2 tool repair;
http://www.nasstec.co.uk/tools.html
hope this helps
please write back here and let us know
nass

 

[Guest]

Hi Nass,

I followed the steps in the Microsoft Knowledge Base link you gave, plus
downloaded the winsockfix.exe file from your website.

Alas, after installing Live Messenger again, the same problem ocurred. A 95
- 100% lsass.exe heating my Dell notebook to over 70C.

Do you have any other suggestions? Thanks for trying though.

Kind regards

 

[Guest]

Hi Nass,

I followed the steps in the Microsoft Knowledge Base link you gave, plus
downloaded the winsockfix.exe file from your website.

Alas, after installing Live Messenger again, the same problem ocurred. A 95
- 100% lsass.exe heating my Dell notebook to over 70C.

Do you have any other suggestions? Thanks for trying though.

Kind regards

Hi Singapore,
Is it Isass.exe or Lsass.exe!, they both diffrenet(althiough if the Virus
creat a processor with *L* as Small*l* will the same), My guess is your
machine is infected with a Virus.
Does the Behavoir start just when installing MS Messanger or on Either?.
Try scan on Line for Both Malware/Viruses from here:
http://www.pandasecurity.com
http://www.trendmicro.com
For malware download these Utilities:
http://www.lavasoftusa.com for SE for personale use
http://www.safer-networking.org for Spybot S&D
Also download this File and Run and send the Report to the Aumha Forum:
http://www.aumha.org/free.htm Look for HijackThis
If all fail try Run the Command from the Run Command by typing:
sfc /scannow Press OK and wait for it to finish and get your XP CD handy
to hand it in.
HTH.
Please let us know your findings.
Regards,
nass

 

[Guest]

Hi Nass,

It's definitely "el" LSASS.exe (in small letters) as when I alphabetically
list the processes it comes under L and before M.

I have scanned my computer and I don't have any viruses at all.

I'll do the SFC later as I have to burn the Windows XP CD image as my actual
CD is at home far away.

The behaviour of Lsass.exe going 100% CPU only occurs when signing in with
Windows Live Messenger. It generally occurs just before the contacts are
loaded. The contacts do load but since Lsass.exe is at 100%, the program is
unusable as you just can't do anything except end the Live Messenger
(msnmsgr.exe) task from the task manager.

Kind regards

 

[Guest]

Hi Nass,

It's definitely "el" LSASS.exe (in small letters) as when I alphabetically
list the processes it comes under L and before M.

I have scanned my computer and I don't have any viruses at all.

I'll do the SFC later as I have to burn the Windows XP CD image as my actual
CD is at home far away.

The behaviour of Lsass.exe going 100% CPU only occurs when signing in with
Windows Live Messenger. It generally occurs just before the contacts are
loaded. The contacts do load but since Lsass.exe is at 100%, the program is
unusable as you just can't do anything except end the Live Messenger
(msnmsgr.exe) task from the task manager.

Kind regards

Hi Singapore_Air,
I think if this issue just with Ms messanger then uninstall and you better
off without it.
If you like Ms Messanger and you would like to run, you may need to think
about this Option * Clean Install* that may or may not solve the problem with
Ms messanger.
Or you can post here on Messanger NG
http://www.microsoft.com/communitie...fce-c402-4cfa-bcf1-d6a224936908&lang=en&cr=US
Regards,
nass

 

[Grapestain]

I've a workaround for this problem, which helped me in the same situation.

First of all, log off, restart your computer and login to another user account which has administrative rights. (If your computer don’t have one, you should first create one before restarting.)

Now you are logged in to the other Administrative acc. Go to C:\Documents and Settings (or the same folder on your system drive) and rename your user account folder for example like this:

Before: User

After: User.bak

Then open the user accounts control panel, and delete your user account named: User. Delete your files too! (Of course nothing will be deleted due to the changed folder name. ) Now go back to the first page, and create an administrator user account named exactly the same, as your previous acc, in my example: User. If you had a password before set exactly the same pass for this acc!

Go back to logon screen, and logon to this acc. When all the actions are done by the first logon procedure simply log off!

Now login again to the other Admin acc, and delete the folder named User form C:\Documents and Settings and rename your previous folder like this:

Before: User.bak

After: User

If you set the right permissions (see below) you can leave this Admin acc, and return to your old acc.

Now launch WLM. It will be like a new install on a new machine. You have to type your logon and pass, set the options you want again, etc... But it’s starts normally again, with no problem, no 100% CPU allocated by lsass.exe.



I think the goal of this procedure is setting up a new SID for your account. SID is used for the identification of you on your computer, so after this you will have to take the ownership of your files again, re-add permissions for you on your files and your registry too!

Before you start the whole procedure please add permissions for Administrators on your files and on your registry too (By default the Administrators have the right permissions to your registry. If you not concerned about security you can ignore the inconsistency between your new SID and the permissions granted for your old SID on your registry, ‘cause you can acces itt anyway, if you are an administrator.), so you will be able to logon into your old renamed acc, ’cause you are an administrator. After this correct your permissions for security reasons! (Remove the unknown account’s permissions and add your’s!)



Be careful with this. You can seriously damage your account including your documents and other data!

If you use file-system encryption may your data will be lost!

If you use Outlook or Outlook Express your passwords will be deleted, so you’ll have to retype them! May other passwords will be deleted too!!!

I think there are 3rd party utilities to change SID. You may try to use one.



Don’t try to do this without being completely sure about what you’re about to do!

I’m not responsible for the damages ’caused by this!

And sorry for my pour English...



Good look!