Windows Forum

Ask something
Discussion Locked

lsass.exe high cpu usage

0 helpful
10 replies

by pagogrp 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Machine running XP Pro - all cuurent patches & service packs installed - every 20-30 seconds hits 100% CPU usage as result of Lsass.exe, loogui.exe & logon.scr consuming all available CPU resources. The machine has been scanned with BitDefender & Trend Micro Housecall - no viruses detected.

Anyone with an idea as to what might be causing the high CPU usage

10 replies

by raunak2811

You may have to edit the registry of your computer. Try this . Open up regedit
2. Goto HKEY_CLASSES_ROOT\\SystemFileAssociations\\.avi\\shellex\\PropertyHandler
3. Delete the "Default" value which should be "{87D62D94-71B3-4b9a-9489-5FE6850DC73E}". BEFOR MAKING ANY CHANGES IN THE REGISTRY ALWAYS CREATE A RESTORE POINT. Let me know if this helps. raunak2811

by pagogrp

Poster rated this answer.
Thanks for the answer. I made the suggested registry change & restarted the machine but Lsass.exe continues with high CPU usage

by pagogrp

Poster rated this answer.
Thanks for the answer but I had previously run two anti-virus products that offered spyware checking. I have run Counterspy on the machine today with no spyware detected

by pagogrp

Poster rated this answer.
Hal 9000 I thank you for your input - As a result of your insistence that it was some sort of infection, I ran PestPatrol - again there was nothing reported!! I now know what the issue was & it was definitely NOT any sort of infection.

by shelli_2005

Did you really mean "loogui.exe " because I have never heard of that.
All profiles have the same problem?
A good place to start is here: http://support.microsoft.com/default.aspx?scid=kb;en-us;198038
Get filemon that will help you trace the processes.Silly question but Im betting its just fine in safe mode? If so standard troubleshooting techniques apply..kill all the non essential startup progs and services, run sfc /scannow, hijackthis couldnt hurt as it generates a good startup programs list.

by pagogrp

Poster rated this answer.
Thanks for the answser - I finally tried something that I had been trying to do for some time but since I had not been on-site, windows would not let me carry out the reconfiguration remotely. The answer was that there were some 24 user accounts on the machine & Fast switching was turned on. After turning of Fast switching, the machine returned to normal. Interestingly, a mail server package that would not operate properly as a service now runs as a service without a problem. It was logonui that led me to trying this - it only runs when fast switching is activated.

This discussion is closed to new replies.