1.    08 Sep 2016 #1
    Join Date : Sep 2016
    Posts : 2
    Windows 10

    LSASS.EXE produces memory leak on Windows 10


    Hi all,

    I'm experiencing a problem in the office's server since I installed Windows 10. The problem is a well-known one with LSASS.EXE, and I've found that it's docummented and there are patches for Windows Server 2012, Windows 8.1 and Windows 7: LINK

    My problem is there is no information about this problem on Windows 10.

    The computer works like a charm... until lsass.exe starts taking more and more RAM. When it takes the whole 16GB the computer works awful and has to be restarted.

    I attach some screenshots:

    Click image for larger version. 

Name:	1Sistema cargado.jpg 
Views:	1 
Size:	130.1 KB 
ID:	100412

    Memory Usage:

    Click image for larger version. 

Name:	2LSASS Memoria.jpg 
Views:	4 
Size:	313.4 KB 
ID:	100413

    CPU:

    Click image for larger version. 

Name:	3consumo de CPU.jpg 
Views:	2 
Size:	457.8 KB 
ID:	100414

    Click image for larger version. 

Name:	4Identificadores asociados.jpg 
Views:	1 
Size:	62.7 KB 
ID:	100416
    Click image for larger version. 

Name:	5modulos asociados.jpg 
Views:	1 
Size:	570.9 KB 
ID:	100417
    The computer is a server but has no active directory, it's a common lan with four computers and the server has (among other functions) a ERP that uses SQL 2016 with a database.

    Since I saw a reference to Named Pipes I tried to disable in "cliconf.exe" but it didn't solve the problem:
    Click image for larger version. 

Name:	cliconf.jpg 
Views:	18 
Size:	47.6 KB 
ID:	100418

    I Found some information about memory leaks in windows 10 (not related to LSASS but "Windows Network Data Usage Monitoring Driver", so I modified registry in this way:

    Navigate to Computer\HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Ndu and then from the right hand section of the window double click Start in order to be able to edit the Value data setting. It will probably be 2 but changing this to 4 will disable the ndu.

    Server specs:

    -i7 Haswell @4,5 ghz
    -Asrock Z97 extreme4 motherboard
    -16 GB RAM DDR3 2400mhz
    -Integrated VGA
    -Raid 0 SSDs

    Can anyone help me with this? I tryed Windows Performance Recorder Tool but it gave me not information to determine what is causing LSASS.EXE have this issue.

    Regards and many thanks in adavance.
      My ComputerSystem Spec
  2.    08 Sep 2016 #2

    Because lsass.exe is a crucial system file, its name is often faked by malware. The lsass.exe file used by Windows is located in the directory Windows\System32. If it is running from any other location, that lsass.exe is most likely a virus, spyware, trojan or worm. Due to the way some systems display fonts, malicious developers may name the file something like Isass.exe (capital "i" instead of a lowercase "L") in efforts to trick users into installing or executing a malicious file instead of the trusted system file.

    Download and run Anti MalwareBytes.

      My ComputerSystem Spec
  3.    09 Sep 2016 #3
    Join Date : Sep 2016
    Posts : 2
    Windows 10
    Thread Starter

    Quote Originally Posted by orlbuckeye View Post
    Because lsass.exe is a crucial system file, its name is often faked by malware. The lsass.exe file used by Windows is located in the directory Windows\System32. If it is running from any other location, that lsass.exe is most likely a virus, spyware, trojan or worm. Due to the way some systems display fonts, malicious developers may name the file something like Isass.exe (capital "i" instead of a lowercase "L") in efforts to trick users into installing or executing a malicious file instead of the trusted system file.

    Download and run Anti MalwareBytes.

    Many thanks for your answer, orlbuckeye,

    What you tell is the first thing I tried and checked. I ran Malwarebytes and checked the first letter was "L" and not "I". The problem is caused by the real "LSASS.EXE".

    Regards
      My ComputerSystem Spec
  4.    09 Sep 2016 #4
    Join Date : Jul 2015
    Posts : 3,548
    10 Pro

    Have you looked on the LSA providers tab of autoruns? Might be a place to start.

    windows 7 - lsass.exe causes memory leak - Super User
      My ComputerSystem Spec

 


Similar Threads
Thread Forum
Windows 10 Enterprise *Serious Memory leak.*
hiya, i been using windows 10 Enterprise for 3 day's now. all go's reasonable smooth. but i have discovered that this windows 10 have a HUGH memory issue. somehow it cant flush it's Pagefile so it keeps building up memory use. it's even so bad...
General Support
“Disk full” in Windows 10 – memory leak?
My C: drive is 3GB away from "disk full" It's a 750 GB disk. I am on Windows 10. This is especially remarkable, since I store very little of my "live" data on the computer -- almost everything is on USB drives and cloud. How do I find...
Performance & Maintenance
Slow Memory leak memory is increasing slowly after 1 week is 90%
we have windows 10 of a new hp pc prodesk 400 g3 mt business pc. we cannot identify the problem.. we used the hp drivers software and fully updated windows 10 and the latest drivers. Please recommend troubleshooting steps what is causing the...
Performance & Maintenance
Edge and Chrome memory leak ? Memory usage 80-97%
Now i'm using windows 10 but I had this problem also when using windows 8.1pro. The windows 81.pro I have the original dvd here and I tried few times to make clean install. Also windows 10 I got it free online and the same problem. For example...
Browsers and Email
High memory usage / Memory leak caused by Intel driver
Hello, I'm running a 64 bit Windows 10 laptop. On idle, the System process is showing a high memory usage of more than 150 MB, usually more than 200 MB. Using poolmon the pooltag SpDN showed up with a memory leak. It leads to the Intel Matrix...
Performance & Maintenance
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 04:17.
Find Us
Twitter Facebook Google+ Ten Forums iOS App Ten Forums Android App



Windows 10 Forums