What is system32 lsass exe. Related posts. Problems with the Google Chrome browser

The question of why Lsass.exe loads the Windows 7 processor is of interest to many. The answer can only be a complete analysis of this process in the system. Sometimes the problem can spread to the entire computer, but there are cases of high loads when the browser is running. For each specific case, users were able to find a solution.

Lsass.exe what is this process

First you need to understand that Lsass.exe it's just an abbreviation. In reality the name is: Local Security Authority Subsystem Service or LSA Shell. And if you have noticed, “Security” is already shedding light on the activities of this process. Lsass.exe is responsible for the security of your OS. Through it, the user, using a password, if available, logs into his account. Windows entry.

Local Security Authority Subsystem Service process in Windows 10

In the task manager, this process runs on behalf of the system. It cannot be completed like other actions. The location of the file becomes a folder System32(on drive C).

Most often, the problem of loads by this process occurs due to viruses or when launching browsers. Next we will look at the two most suitable solutions that are suitable for Windows XP/7/8/10.

We check the authenticity of the process

It is viruses that most often try to introduce themselves on behalf of Lsass.exe. After all, if you remember, he is responsible for logging into the operating system as a specific user. Therefore, hackers thus try to hack into a computer to intercept valuable user information. Trojans and worms can pose as administrators and operate on behalf of the user.

Lsass.exe load due to browsers

If the problem is only in the browser (usually when it is launched), then you should look for the cause directly in it. It is its conflicts that cause high load on Windows. The fact that Lsass.exe takes over them does not mean anything. Users most often encounter this situation Google Chrome (less often Opera).

Recommended delete your browser from your computer. It's better to do this with CCleaner. There you can erase any information about the operation of this utility - clean the registry.
Reinstall it again. Try it work without extensions. It is their large number that sometimes leads to system failures.
Let's raise the issue of viruses again. When the browser opens, the installed viruses try to perform some actions, but Lsass.exe blocks them. This conflict creates a download CPU. Make sure there is no Trojans.

The problem where Lsass.exe loads the Windows 7 processor and leads to a system error does not occur very often. If you are unlucky, the main thing is to remain calm. Don’t forget that you can always check your computer for viruses online or from a flash drive. Not always one antivirus can cope with all hacker attacks.

There are quite a lot of situations where increased load on computer system resources appears. One of the services that has been seen most often in such situations is LSASS.exe. Not everyone knows what this process is. Some try to terminate it immediately, others assume it is a virus and scan the system. But what is it really? Let's figure it out.

LSASS.exe: what is this process?

Yes, indeed, the appearance of a virus of the same name in the system is not excluded. But first, let's talk about the original LSASS.exe component. What is this process?

It is believed that this system tool is a kind of intelligent tool that constantly monitors all actions of the Windows user and independently decides to enable or disable some protective measures. Naturally, the functioning of this service implies a load on resources, but in the standard version it should be short-term (this module is activated for a maximum of ten minutes), and the peak load should not exceed 40-70%. Not a hundred.

If the use of system resources is higher than the specified values, and the list of processes contains several identical ones, you can be sure that this is a virus, and a rather dangerous virus, belonging to the class of spies and rootkits. However, you can get rid of it quite simply (we will focus on this separately).

Why does LSASS.exe load the processor in Windows 7?

But even the original system component is capable of delivering excessive loads. Why is this happening? Yes, only because the above values apply, so to speak, for ideal cases of system downtime.

If many user programs are running in Windows, and even background components from startup are running, starting along with the operating system, the user gets a situation where the use of the processor or RAM goes through the roof, and even a huge number of svchost.exe processes appear, which are only indirectly related to this service.

But you shouldn’t be upset, because you can use a fairly simple and universal solution, which is to deactivate this system process and the service responsible for it. This can be done quite simply, and, by and large, this will not particularly affect the stability of the operating system.

How to disable the standard service?

So, we assume that the standard LSASS.exe process loads the processor too much. The situation can be corrected by simply disabling this component, although it is not recommended to deactivate system services. However, with a weak processor, this option will be the only way to reduce the load:

First you need to use the “Run” console and enter the line services.msc in it to enter the services section.
On the right in the list you need to find the “Credential Manager” service (the LSASS.exe service loads the processor just when it is in an active state and starts automatically).
Double-click to open the menu for editing parameters, click the button to stop the process (this is required), set the startup type to “Disabled,” save the changes and reboot the system. Reboot in in this case is prerequisite to apply new user settings.

Note: In some cases, you may need to first terminate the lsass.exe process in the Task Manager or stop again after disabling the service in the above section.

What to do if it's a virus?

But sometimes the load may not be related specifically to the LSASS.exe system component. What is this process in this case? As you probably already guessed, this is a real virus masquerading as a system process.

You can verify that it is a virus by the presence of several identical processes in the Task Manager. You can also use the RMB menu to go to the location of the file (the original object is located in the System32 directory and nowhere else).

When a threat is identified, we do the following:

First, it is recommended to find the AppData directory in the user folder. It may have a hidden attribute, so you will first have to enable the display of such objects in the Explorer view menu.
In the specified folder, through the Local directory, you need to get to the Temp directory and completely clear its contents.
After this, it is recommended to check the system with some anti-advertising utility like AdwCleaner, and also use a special UnHackMe applet (a program for identifying spyware and rootkits) to rescan the system.
After removing threats, it is advisable to clean the system, for which you can at least use the universal CCleaner application.

Brief summary

In principle, it is not recommended to disable the above service, like any other system component of this plan. But if the load increases to such an extent that it becomes impossible to work on the computer, then, alas, you will have to work without it, relying on other means of protection, including system services and third-party programs (at least the same standard antivirus).

It is unusual for most Windows processes to have high CPU usage at all times, especially for system components like lsass.exe. Its usual completion does not help in this situation, so users have a question - how to solve this problem?

First, a few words about the process itself: the lsass.exe component appeared in Windows Vista and is part of the security system, namely the user authorization check service, which makes it similar to WINLOGON.exe.

This service is characterized by a CPU load of about 50% during the first 5-10 minutes of system boot. A constant load of more than 60% indicates a failure, which can be eliminated in several ways.

Method 1: Install Windows Updates

In most cases, the problem is caused by an outdated version of the system: if there are no updates, the Windows security system may not work properly. The OS update process is not difficult for the average user.

Method 2: Reinstalling the browser

Sometimes lsass.exe does not load the processor all the time, but only when the web browser is running - this means that the security of one or another program component is compromised. The most reliable solution to the problem is to completely reinstall the browser, which should be done like this:

As a rule, this manipulation fixes the failure with lsass.exe, but if the problem is still observed, read on.

Method 3: Virus cleaning

In some cases, the cause of the problem may be a virus infection of the executable file or the replacement of a system process by a third party. You can determine the authenticity of lsass.exe as follows:

If any other directory opens instead of the specified one, you are faced with a virus attack. On our website we have a detailed guide to what to do in such a case, so we recommend that you familiarize yourself with it.

Conclusion

To summarize, we note that problems with lsass.exe are most often observed on Windows 7. Please note that official support for this version has been discontinued by the OS, so we recommend switching to current Windows 8 or 10 if possible.