I've got WIN XP with SP1. Now, I just upgraded my memory, but there is a process LSASS.EXE that is sucking up 141,568 KB of memory. That's quite a bit, especially considering it never use to do this before. I've checked microsoft's help center thing (that really helped ) and I've googled it and can't come up with a really good answer as to why it's using so much memory. Any help will be much appriciated.

 

Not sure what that process is, but you could always just try killing it & see if your PC crashes. Just checked my wifes XP machine, and whatever it is, she has it too. Only using 1,200 k on hers though. Hopefully someone else will know what it really is.

 

Mine too is using 1,236.

You may have a virus.
http://www.iamnotageek.com/a/119-p1.php

Update your virus DATs and do a scan.

 

Ok, so mcafee showed no sign of an infection. I restarted my computor, and now explorer is running at 83,772 KB and LSASS is running at 36,588 KB. Something is going on here and I know it isn't right. I can't find any thing on the net as to the cause of this. Any other suggestions?

 

26,964 for my Exploder shell.
That is weird what is going on.

Sorry I do not have an answer.

 

I found this on the web:

Today I'm going to explain to you guys what lsass is.

What is it?
Local Security Authentication Server

What does it do?
It generates the process responsible for authenticating users for the Winlogon service. This process is performed by using authentication packages such as the default Msgina.dll. If authentication is successful, Lsass generates the user's access token, which is used to launch the initial shell. Other processes that the user initiates inherit this token.

You will not be able to end this through task manager!
If yours is using that much memory, I would be concerned about a virus. My Win XP PC is using 00 for lsass.exe I use Zone Alarm, AdAware, McAfee VirusScan 7.1 and MS Firewall and don't have it running. I also remove MS File and Printer Sharing. Good luck.

 

Greetings,
Sounds like the "Sasser" worm might be your problem. Go to your virus scanner support and download the instructions on removal. There is a tool I believe. Then boot into safe mode without net support (no authentication) and have at it.
My opinion, take your valuables off, repartition, reformat, reinstall.

FYI...http://securityresponse.symantec.com...oval.tool.html


MV

 

My lsass is 1,480 k

 

This inspired me to run a scan on my computer. Had a trojan horse lurking in one of my son's folders. McAffee took it out.

He hasn't used my computer in months, and previous scans had not shown it!