Lsass problems

[Guest]

I've searched everywhere without any luck so here goes..

Problem: Lsass hogs all the CPU when exiting from IE. This only
happens on my account.

System: Running XP with SP1, 2 accounts on the system.

I've scanned for Sasser, system shows clean. I have remote desk
turned off. This seems to have started a few months ago, I tried using
system restore to go back without success, perhaps after I downloaded
the security update kb828741 or the BITS and WinHTTP5.1 update kb842773.

I've even scanned the lsass.exe itself and NAV says it's clean.

Ideas?

 

[David H. Lipman]

1) Download the following four items...

McAfee Stinger
http://vil.nai.com/vil/stinger/

Trend Sysclean Package
http://www.trendmicro.com/download/dcs.asp

Latest Trend Pattern File.
http://www.trendmicro.com/download/pattern.asp

Adaware SE (free personal version v1.05)
http://www.lavasoftusa.com/

Create a directory.
On drive "C:\"
(e.g., "c:\New Folder")
or the desktop
(e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")

Download Sysclean.com and place it in that directory.
Download the Trend Pattern File by obtaining the ZIP file.
For example; lpt287.zip

Extract the contents of the ZIP file and place the contents in the same directory as
sysclean.com.

2) Update Adaware with the latest definitions.
3) Disable System Restore
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
4) Reboot your PC into Safe Mode
5) Using Trend Sysclean, Stinger and Adaware, perform a Full Scan of your
platform and clean/delete any infectors/parasites found.
(a few cycles may be needed)
6) Restart your PC and perform a "final" Full Scan of your platform using the three
utilities; Trend Sysclean, Stinger and Adaware
7) Re-enable System Restore and re-apply any System Restore preferences,
(e.g. HD space to use suggested 400 ~ 600MB),
8) Reboot your PC.
9) Create a new Restore point



* * * Please report your results ! * * *

Dave




| I've searched everywhere without any luck so here goes..
|
| Problem: Lsass hogs all the CPU when exiting from IE. This only
| happens on my account.
|
| System: Running XP with SP1, 2 accounts on the system.
|
| I've scanned for Sasser, system shows clean. I have remote desk
| turned off. This seems to have started a few months ago, I tried using
| system restore to go back without success, perhaps after I downloaded
| the security update kb828741 or the BITS and WinHTTP5.1 update kb842773.
|
| I've even scanned the lsass.exe itself and NAV says it's clean.
|
| Ideas?