Home > Solved Why > Solved: Why Does Lsass.exe R/W HDD Each Second?

Solved: Why Does Lsass.exe R/W HDD Each Second?

I checked on my Windows 7 system. eg _REGISTRY_MACHINE_SOFTARE copy over ' software ' Above are all the files that Microsoft recommends you overwrite..... He was saying 'Update 5 of 98'. If the value for Autorun is 1, right-click Autorun, and then click Modify. http://realink.org/solved-why/solved-why-does-my-ip-change-to-169-200-32-44.html

It says the same thing and yes it does say Lsass.exe. The same problem that originated this thread, namely, the tremendous hdd activity during the first half an hour after booting. Any way to defeat it? When I click ok nothing further happens and I have to do a hard shutdown to turn off the computer.Hope you can direct me to a solution.Thanksantondls dawgg 24.01.2010 03:55 Can https://forums.techguy.org/threads/solved-why-does-lsass-exe-r-w-hdd-each-second.577417/

You should check the file path on those to make sure one isn't malware wearing a false label. antondls 25.01.2010 17:46 QUOTE(dawgg @ 24.01.2010 20:36) Boot up using the Windows XP CD.Click R to enter the Recovery Console (when it asks).Type inCODEren C:\WINDOWS\system32\Lsass.exe Lsass.exe.oldcopy C:\WINDOWS\ServicePackFiles\i386\Lsass.exe C:\WINDOWS\system32\exit(note the space after I did a google-search about lsass.exe and found out that it can be stopped from doing constant I/O reads by disabling the Terminal Services service. http://it.angarka.ru/viewtopic.php?f=3&t=3 0 LVL 1 Overall: Level 1 Message Expert Comment by:DJM2009 ID: 246331252009-06-15 I understand you have found a solution to the problem, but I would question the need to

I selected 'Turn off automatic updates' instead. I'll try to uninstall the DNA part. Advertisements do not imply our endorsement of that product or service. You will have to restart your XP to get the new settings loaded.

I thought of it myself and it works but then again I have 2GB of ram and disabling the virtual memory is not a problem for me. That will turn on a column so you can see how much memory each process is using. Sign in to continue to Docs Enter your email Find my account Sign in with a different account Create account One Google Account for everything Google About Google Privacy Terms Help http://www.tomshardware.com/forum/275475-32-constant-disk-activity-computer I would appreciate some ideas.

But this did not prevent lsass.exe from reading and writing to my HD 3x/sec. tj tjesh, Jun 19, 2007 #6 Ram Bo Joined: Jun 19, 2008 Messages: 1 I too have the same problem and followed advice in this forum (having failed to find Strangley, what it did do was dampen down the strength of the constant LED response to the event with less attendant noise. Nothing looks amiss here.And you didn't write what is wrong now.After all these posts you could have some XP machine with an IDE drive that has suffered from the old XP

If you like, and you tell me where to, I could save Process Explorer output and send a link to it. http://www.techsupportforum.com/forums/f10/solved-hirens-cd-fix-for-lsass-needed-step-by-step-392716.html At present I have only one machine able to host XP. The I/O access of lsass will ofcourse continue but instead of accessing the virtual memory file on the disk, it will access the ram instead. Downloading files from this or any torrent can cause many problems.SUPERAntiSpyware is fine, and is not malware.But why are you using those other two suspect and nasty titles?

Since this change in system behavior, I've never remained more than 5 m in WinXP. navigate to this website I was terrified because it would last until judgment day. Flag Permalink This was helpful (0) Collapse - The terrible SVCHOST.EXE by ENRIQUESTEFANINI / September 4, 2011 2:19 PM PDT In reply to: Process Explorer Process Explorer is now running. Which is another way of saying: why are you so sure it's a virus.

by R. I have figured everything out , I did use the Hiren's Boot Cd to repair the lsass exe. in which case you won't be able to use Hiren. 07-07-2009, 09:22 PM #3 AgentFoxx Registered Member Join Date: Jul 2009 Posts: 5 OS: XP PRO Thanks atavist, More about the author by ENRIQUESTEFANINI / September 4, 2011 6:17 AM PDT * Windows XP Service Pack 3, v5.1.2600.5512.Hi:I'm being haunted by the terrible svchost.exe virus.

But my machine always ran with a CPU load near 4%after boot. by MarkFlax Forum moderator / September 4, 2011 6:24 AM PDT In reply to: The terrible SVCHOST.EXE haunts my system. It relies even more on services than Windows XP, so it has 12 instances of svchost.exe.

An error (403 Forbidden) has occurred in response to this request.

Locate and then click the following registry subkey: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\CDRom d. Having only 3 instances for Windows XP seems quite reasonable. Requirements: 1) System Restore enabled in windows. 2) NTFS Dos Pro and a Boot CD/Disk - Preferabbly Hiren's Boot C (which is loaded with all the apps you need). Hiren's Boot CD (http://thanki.tk or torrentspy.com) 3) Don't use the system.bak file located in windows\repair. 4) Don't assume that either of the _regis~1, ~2, ~3 or ~4 files in a RP\Snapshot

Stay logged in Sign up now! zilch. The Hiren's Boot CD is a god send The original instructions posted didn't quite work for me (see above post),you need to say yes to chkdsk and yes to mount ntfs, http://realink.org/solved-why/solved-why-don-t-these-work.html The fact that UPHCLEAN.EXE is running suggests something you installed has make some bad changes to the registry.

By default it will install to C:\Program Files\HijackThis. Process Explorer output follows: [code]Process PID CPU Private Bytes Working Set Description Company NameSystem Idle Process 0 36.19 0 K 16 KInterrupts n/a 32.38 0 K 0 K Hardware Interrupts and Proffitt Forum moderator / September 5, 2011 2:17 AM PDT In reply to: Intel 1100A/256/100/1.475 - CELERON SL5ZE is on top of the Let's see. Click Save to save the log file and then the log will open in notepad.

gtsamour, Jul 16, 2008 #8 Sponsor This thread has been Locked and is not open to further replies. Are you looking for the solution to your computer problem? For this was the true symptom, and I did not do it explicit, because its aftermath was keyboard and mouse input almost blocked. There is always the ultimate resource: backup non-operanting system files and reformat the partition, a very lengthy process due to the fact I should first determine what to backup.

If they are all in your system32 folder then they are legitimate processes and you need to look for something else. Let things as they are now or, enable updates when I go to sleep. Not a big deal.BUT that disk IO could be a sign of the old XP DMA BUG. Tech Support Guy is completely free -- paid for by advertisers and donations.

McAfee W32.Sasser.E.Worm (Lsasss.exe) 0 LVL 6 Overall: Level 6 Windows Vista 1 Windows OS 1 Message Author Comment by:rknetwork ID: 241263202009-04-12 No Viruses found 0 LVL 6 Overall: Level