lsass.exe using cpu time

Question

I'm using Windows 7 SP1 on a single user desktop.

I am experiencing the high cpu usage, 25 to 50 % problem. Really slows the computer at times After doing some research I see the size of the lsass.exe usually between 27 & 50k but 'should' be somewhere around 13k. I can reboot and sometimes it drops to around 5k other times it stays at the 30k size.

I have tried several virus/malware, (including Malwarebytes) programs,  all to no avail. Is there not a M/S upgrade/fix for replacing/repairing this problem?

Any suggestions gratefully appreciated.

Answer 1

In order to diagnose your problem we need to run Windows performance toolkit the instructions for which can be found in this wiki

If you have any questions feel free to ask

---

Please run the trace when you are experiencing the problem

Answer 2

Unfortunately the process that is driving lsass.exe to use excess cpu is labeled "unknown".  It has something to do with security and my first suspect would be McAfee.  For it to be labeled unknown it has to be malware or a 3rd party driver.

I would run Malwarebytes and disable McAfee to see if it fixes the problem.  I would also run a system file check to find the state of the OS

Please download the free version of Malwarebytes.

Update it immediately.

Do a full system scan

Let us know the results at the end.

http://www.malwarebytes.org/products

Please run a system file check (SFC) & DISM  if you are on win 8 or higher

---

All instructions are in our Wiki article below...

Should you have any questions please ask us.

System file check (SFC) Scan and Repair System Files

Answer 3

One more attempt.

https://onedrive.live.com/redir?resid=AABE03E53409C55C!159&authkey=!AHD1uAvrcW7Nh34&ithint=file%2czip

Answer 4

BS

Nope.  Those are the symbols.  We need the very large file that ends in "ETL"  Be sure to zip it as it will save you a ton of time in uploading it

Answer 5

Here is the link to my One Drive with the trace file on it.......I hope.

https://onedrive.live.com/redir?resid=AABE03E53409C55C!107&authkey=!AHr\_mODR9D4rqnE&ithint=folder%2c