lsass.exe and csrss.exe causing constant hard drive usage.

Soldato
Joined
5 Jul 2005
Posts
2,985
Hello. I've got a very strange problem on my hands here. I recently upgraded my case and to go with my new case I got a SATA Sony DRU-190S DVD-writer to replace my IDE writer. After completing the transfer to my new case I noticed that my hard drive light was flickering every second. It was pretty noticable as the Antec 900 HD light is very bright.

Upon investigating further I noticed that lsass.exe and csrss.exe were constantly producing many I/O reads and writes to the hard drive. After googling lsass.exe and csrss.exe I discovered that these two processes have caused other Windows users to experience the same problem, but every cause seems different e.g. A virus, CPU utilization issue, corrupt profile etc. and I couldn't find one that matched mine.

I managed to find a thread that mentioned a Microsoft service called Terminal Service, which I disabled, and that seemed to tame lsass.exe. The problem is csrss.exe remains and is reading the hard drive many times an hour causing the hard drive to flicker every second.

I found a thread that told me to use Disk Monitor and Process Monitor together to try and capture what exactly is accessing the hard drive. Unfortunately I couldn't get Process Monitor to work it just came up with an error 'unable to allocate memory with a block size 4000', I tried googling that error but found nothing that could fix Process Monitor. I tried using filemon and process explorer, but its not really giving me the information that I need and I don't really know how to use them properly.

I've used KAV7, Ccleaner, Spybot, Ad-aware, Spyware Terminator - All came back clean. I even cleaned out my nvidia drivers and reinstalled them - still the same. Unfortunately the solution seems to evade those that it afflicts and a fix is usually never found according to the threads I've read.

So I'm still stuck as to what to do next. I'm going to try and repair my XP installation tonight, failing that I will try a clean installation tomorrow using first my SATA writer and then if that fails revert back to my IDE writer and see if that makes a difference.

I'm on windows XP SP3.

Has anyone suffered anything similar?
 
Last edited:
Hello Swinnie.

I've briefly read something along those lines, but because it isn't affecting the CPU I didn't try it. It is just reading bytes from the hard drive every second, the CPU isn't affected as its on 00%.

I will give it a go later and if that doesn't work I'm going to try and disconnect the SATA optical drive and try my old IDE optical drive. The reason is someone on CD Freaks forum had the exact same problem as me about a year ago. Installed a Sony Optiarc SATA Optical drive and this problem started to affect him in the same way as it is affecting me now.

In the end he couldn't find the problem so I'm not too happy at this moment.

I will try that profile solution and see if it makes a difference cheers.
 
Hello.

Reinstalled XP and its sort of the same. Instead of csrss.exe always reading bytes every second, it only happens when I move the mouse - weird. As I mentioned in my previouse post lsass.exe managed to be slowed down by stopping terminal services. My hard drive is still blinking every second though like before which is weird.

try finding process explorer and seeing what processes are running under lsass and csrss.

Hang on a sec - you can get it here

I tried to use Process monitor but it wouldn't work, but I read that Kaspersky doesn't get along to great with it so I uninstalled KAV7 and it worked, but by that time my computer was downstairs and I was tinkering about with it and ready to reinstall XP so I didn't really clean much from it. Will try it tonight again.

Could it be Windows Defender?

I will have a look tonight and see if its turned on. Is defender active in the background then?

I've got a feeling it could be my hard drive knackered as it was making a weird clicking noise on saturday.
 
Last edited:
Back
Top Bottom