Hmm, my test/devel site runs on a windows machine. The session files will be hit whenever a user requests a page, but that's definitely not the norm to take up that much CPU. Do you have a busy site? Can you give some info on your version of PHP and MySQL?