MBAM scan fails due to system suddenly powering off

eidairaman1 · Jan 15, 2020

Dealing with an older APU system, which at some point during a full scan using latest mbam the system powers off, turn back on windows states wasn't shut down properly.

I will provide a hwinfo64 snapshot and pwr supply later, system has been around since 2013, i know it has tons of PUPs/PUMs, trying to clean it. I'm unsure if it is overheating but i will get a temperature reading before and during the scan. I will try to get a event viewer too.

Im just unsure if its the os or if hardware at this rate.

Any ideas?

er557 · Jan 15, 2020

hard drive?? does it power off at any other scenario? does it work steady when idle and keeps functioning? You could try to make an offline rescue disc and scan from there to clean it, also with old systems it is hard to tell.

kapone32 · Jan 15, 2020

That is funny I am having the exact same problem with my Sister's APU based PC.

Jose Jeswin · Jan 15, 2020

MBAM scans used to increase processor temps for me......try HWMonitor perhaps.......i would check windows reliability monitor for any error messages...the third option would be an overloaded PSU..

Bill_Bright · Jan 15, 2020

You say "at some point", is it always the same point or different points?

I recommend you run Windows Disk Cleanup (or CCleaner) before scanning. No need to scan potentially 1000s of temp files. You might also try running Malwarebytes in Safe Mode.

Jose Jeswin said:
MBAM scans used to increase processor temps for me....

I see that as normal - regardless the scanner. While scanning should not max out CPU utilization, it does use it, and for more than a few seconds.

Solaris17 · Jan 15, 2020

I didn’t quite understand this. Are you saying it does it consistently?

eidairaman1 · Jan 15, 2020

Solaris17 said:
I didn’t quite understand this. Are you saying it does it consistently?

Yes each scan it has shut down.

@Bill_Bright Also some point means I'm afk, I will get full specs later today, las i recall its using stock hsf.

Im wondering if I should just pull the drive and hook it along side a rig that is fully patched and secure and do the scan...

jsfitz54 · Jan 15, 2020

eidairaman1 said:
Im wondering if I should just pull the drive and hook it along side a rig that is fully patched and secure and do the scan...

Yes, pull the drive: if "ransom ware" is found on "C" , the OS backup partition is most likely infected as well. Have had luck with Windows Security cleaning this up.
Wipe and restore maybe the only solution as much as it's a "pita".

Vayra86 · Jan 15, 2020

Hard drive itself or PSU is suspect. In the case of PSU it would be voltage out of spec... but then it would have to also happen with other loads, not just scanning.

If its just scanning, good chance the HDD is dead or close to it. Had something along those lines and the behaviour looks similar.

Not a believer in temps being an issue... you already get elevated temps when you go through the BIOS and boot up.

Ransomware is def also possible here.

Bill_Bright · Jan 15, 2020

I wouldn't bother pulling the drive unless cleaning the clutter and running in safe mode fails. Or, there is a flash drive version of Malwarebytes you can try too.

Solaris17 · Jan 15, 2020

I know you haven’t witnessed it in action but if other modes of investigation come up puzzling it may be an access violation and you may want to scan it with a root kit scanner.

Steevo · Jan 15, 2020

Solaris17 said:
I know you haven’t witnessed it in action but if other modes of investigation come up puzzling it may be an access violation and you may want to scan it with a root kit scanner.

Pull the drive and put it into an enclosure. Its either a serious infection, or a dying drive or other hardware, if its other hardware doing it more will only kill the system, if its the drive doing more will only kill it, and if its an infection that has access to reboot or shutdown the system you will need an offline scan.

eidairaman1 · Jan 15, 2020

Vayra86 said:
Hard drive itself or PSU is suspect. In the case of PSU it would be voltage out of spec... but then it would have to also happen with other loads, not just scanning.

If its just scanning, good chance the HDD is dead or close to it. Had something along those lines and the behaviour looks similar.

Not a believer in temps being an issue... you already get elevated temps when you go through the BIOS and boot up.

Ransomware is def also possible here.

The hdd doesnt lock up and os runs ok, just believe now either psu or cpu overheat...

Steevo said:
Pull the drive and put it into an enclosure. Its either a serious infection, or a dying drive or other hardware, if its other hardware doing it more will only kill the system, if its the drive doing more will only kill it, and if its an infection that has access to reboot or shutdown the system you will need an offline scan.

Its not a soft off like windows goes through a shut down sequence, the system just goes poof like the power switch on the psu was actuated. And it is infected because of the pups/pums, so im trying to clean this bugger up.

Solaris17 said:
I know you haven’t witnessed it in action but if other modes of investigation come up puzzling it may be an access violation and you may want to scan it with a root kit scanner.

Mbam has that built in

Solaris17 · Jan 15, 2020

eidairaman1 said:
The hdd doesnt lock up and os runs ok, just believe now either psu or cpu overheat...

Its not a soft off like windows goes through a shut down sequence, the system just goes poof like the power switch on the psu was actuated. And it is infected because of the pups/pums, so im trying to clean this bugger up.

Mbam has that built in

that’s true they also have the standalone tool too. But where one fails another may succeed. Was just pointing it out. An access violation to tampered memory address space usually ends with reboot or shutdown without warning.

eidairaman1 · Jan 15, 2020

Yeah i need to give this thing a thorough dusting, it is bad, and yes the stock cooler is being used. The psu is a macron mpt 400 (probably no good)

Normal use it doesnt just suddenly power off...

Bill_Bright · Jan 15, 2020

Well, it is not a PSU I would buy, but if it has been working fine, I would not replace it over this. This does not sound like a PSU problem to me. Shutdowns caused by power are not so specific - that is, they would not happen only when doing a specific task with a specific program. They would seem to be more random, or when tasking the computer with any program.

I might suspect RAM, but again, at this point, I would clean out the clutter and scan again, either in safe mode, or via a thumb drive. Dust can sure cause heat related shutdowns, but again, not with just one specific program. And you can always monitor your temps with CoreTemp or some other monitor to see if dust, in the middle of Winter is causing problems.

eidairaman1 · Jan 15, 2020

Bill_Bright said:
Well, it is not a PSU I would buy, but if it has been working fine, I would not replace it over this. This does not sound like a PSU problem to me. Shutdowns caused by power are not so specific - that is, they would not happen only when doing a specific task with a specific program. They would seem to be more random, or when tasking the computer with any program.

I might suspect RAM, but again, at this point, I would clean out the clutter and scan again, either in safe mode, or via a thumb drive. Dust can sure cause heat related shutdowns, but again, not with just one specific program. And you can always monitor your temps with CoreTemp or some other monitor to see if dust, in the middle of Winter is causing problems.

Im getting hwinfo to see if any anomalies are spotted

Bill_Bright · Jan 15, 2020

I'm holding my breath.

Not really. I'm sipping my martini and waiting for the Pizza Hut delivery driver to get here.

eidairaman1 · Jan 15, 2020

Ok after i was about to start a benchmark in hwinfo the rig shut off, i powered it on trying to get into bios, shut down again. I think it maybe temperature related...

Yeah the cpu is way too hot. Bios reports at 78°

So yeah thats my starting point, it needs a dusting bad

I just hope this drive isnt so full of crap that a mbam scan causes shutdown

http://www.cpu-world.com/CPUs/K10/AMD-A-Series%20A6-3650%20AD3650WNZ43GX%20(AD3650WNGXBOX).html

Bill_Bright · Jan 16, 2020

eidairaman1 said:
Yeah the cpu is way too hot. Bios reports at 78°

Since running the BIOS Setup Menu is just about the least demanding task we can ask of our systems, yeah 78° is way too hot (assuming that's 78°C and not 78°F). You should check to make sure your case fans are spinning up and providing a good "flow" of air through the case too.

eidairaman1 said:
I just hope this drive isnt so full of crap that a mbam scan causes shutdown

Even if the drive is, I don't see why or how that would cause Malwarebytes to shut the computer down. I can see it bogging Malwarebytes down and slowing the system down to a crawl, but it should still trudge along and eventually complete.

Something else is going on. Hopefully a good clean will take care of it. Remember to take the necessary ESD precautions to discharge your body of any static.

Did you run Windows Disk Cleanup (or CCleaner) yet? You don't want to be running critically low on free disk space either.

eidairaman1 · Jan 16, 2020

C in degrees

Bill_Bright · Jan 16, 2020

Let us know how it goes after cleaning out the dust (and clutter).

eidairaman1 · Jan 31, 2020

Bill_Bright said:
Let us know how it goes after cleaning out the dust (and clutter).

The whole case has been cleaned, temperatures are way better.

jsfitz54 · Jan 31, 2020

eidairaman1 said:
The whole case has been cleaned, temperatures are way better.

So was this just a slowdown due to dirt? 1st post indicated that MBAN quit but did you determine this as just overheating or virus or some other mechanical or software problem?

rtwjunkie · Jan 31, 2020

eidairaman1 said:
The whole case has been cleaned, temperatures are way better.

Does. MBAM work without the system shutting down, now?

System Name	PCGOD
Processor	AMD FX 8350@ 5.0GHz
Motherboard	Asus TUF 990FX Sabertooth R2 2901 Bios
Cooling	Scythe Ashura, 2×BitFenix 230mm Spectre Pro LED (Blue,Green), 2x BitFenix 140mm Spectre Pro LED
Memory	16 GB Gskill Ripjaws X 2133 (2400 OC, 10-10-12-20-20, 1T, 1.65V)
Video Card(s)	AMD Radeon 290 Sapphire Vapor-X
Storage	Samsung 840 Pro 256GB, WD Velociraptor 1TB
Display(s)	NEC Multisync LCD 1700V (Display Port Adapter)
Case	AeroCool Xpredator Evil Blue Edition
Audio Device(s)	Creative Labs Sound Blaster ZxR
Power Supply	Seasonic 1250 XM2 Series (XP3)
Mouse	Roccat Kone XTD
Keyboard	Roccat Ryos MK Pro
Software	Windows 7 Pro 64

System Name	future xeon II
Processor	DUAL SOCKET xeon e5 2686 v3 , 36c/72t, hacked all cores @3.5ghz, TDP limit hacked
Motherboard	asrock rack ep2c612 ws
Cooling	case fans,liquid corsair h100iv2 x2
Memory	96 gb ddr4 2133mhz gskill+corsair
Video Card(s)	2x 1080 sc acx3 SLI, @STOCK
Storage	Hp ex950 2tb nvme+ adata xpg sx8200 pro 1tb nvme+ sata ssd's+ spinners
Display(s)	philips 40" bdm4065uc 4k @60
Case	silverstone temjin tj07-b
Audio Device(s)	sb Z
Power Supply	corsair hx1200i
Mouse	corsair m95 16 buttons
Keyboard	microsoft internet keyboard pro
Software	windows 10 x64 1903 ,enterprise
Benchmark Scores	fire strike ultra- 10k time spy- 15k cpu z- 400/15000

System Name	Best AMD Computer
Processor	AMD 7900X3D
Motherboard	Asus X670E E Strix
Cooling	In Win SR36
Memory	GSKILL DDR5 32GB 5200 30
Video Card(s)	Sapphire Pulse 7900XT (Watercooled)
Storage	Corsair MP 700, Seagate 530 2Tb, Adata SX8200 2TBx2, Kingston 2 TBx2, Micron 8 TB, WD AN 1500
Display(s)	GIGABYTE FV43U
Case	Corsair 7000D Airflow
Audio Device(s)	Corsair Void Pro, Logitch Z523 5.1
Power Supply	Deepcool 1000M
Mouse	Logitech g7 gaming mouse
Keyboard	Logitech G510
Software	Windows 11 Pro 64 Steam. GOG, Uplay, Origin
Benchmark Scores	Firestrike: 46183 Time Spy: 25121

System Name	Blackbelt 2
Processor	AMD FX 8350
Motherboard	ASUS M5A99FX PRO R 2.0
Cooling	Cooler Master Hyper TX3 evo
Memory	8GB Corsair Value Select DDR3
Video Card(s)	ASUS R7260X DC2OC 2GB
Storage	INTEL 530 series SSD 120 GB, Seagate Barracuda 1 TB 7200 RPM
Display(s)	DELL ST 2240L
Case	Cooler Master Elite 311
Power Supply	CORSAIR VS Series 550W
Software	Windows 7 Ultimate 64 Bit
Benchmark Scores	3DMark 11 6532

System Name	Brightworks Systems BWS-6 E-IV
Processor	Intel Core i5-6600 @ 3.9GHz
Motherboard	Gigabyte GA-Z170-HD3 Rev 1.0
Cooling	Quality case, 2 x Fractal Design 140mm fans, stock CPU HSF
Memory	32GB (4 x 8GB) DDR4 3000 Corsair Vengeance
Video Card(s)	EVGA GEForce GTX 1050Ti 4Gb GDDR5
Storage	Samsung 850 Pro 256GB SSD, Samsung 860 Evo 500GB SSD
Display(s)	Samsung S24E650BW LED x 2
Case	Fractal Design Define R4
Power Supply	EVGA Supernova 550W G2 Gold
Mouse	Logitech M190
Keyboard	Microsoft Wireless Comfort 5050
Software	W10 Pro 64-bit

MBAM scan fails due to system suddenly powering off

eidairaman1

The Exiled Airman

er557

kapone32

Jose Jeswin

Bill_Bright

Solaris17

Super Dainty Moderator

eidairaman1

The Exiled Airman

jsfitz54

Vayra86

Bill_Bright

Solaris17

Super Dainty Moderator

Steevo

eidairaman1

The Exiled Airman

Solaris17

Super Dainty Moderator

eidairaman1

The Exiled Airman

Bill_Bright

eidairaman1

The Exiled Airman

Bill_Bright

eidairaman1

The Exiled Airman

Bill_Bright

eidairaman1

The Exiled Airman

Bill_Bright

eidairaman1

The Exiled Airman

jsfitz54

rtwjunkie

PC Gaming Enthusiast

System Name	Rocinante
Processor	I9 14900KS
Motherboard	EVGA z690 Dark KINGPIN (modded BIOS)
Cooling	EK-AIO Elite 360 D-RGB
Memory	64GB Gskill Trident Z5 DDR5 6000 @6400
Video Card(s)	MSI SUPRIM Liquid X 4090
Storage	1x 500GB 980 Pro \| 1x 1TB 980 Pro \| 1x 8TB Corsair MP400
Display(s)	Odyssey OLED G9 G95SC
Case	Lian Li o11 Evo Dynamic White
Audio Device(s)	Moondrop S8's on Schiit Hel 2e
Power Supply	Bequiet! Power Pro 12 1500w
Mouse	Lamzu Atlantis mini (White)
Keyboard	Monsgeek M3 Lavender, Akko Crystal Blues
VR HMD	Quest 3
Software	Windows 11
Benchmark Scores	I dont have time for that.

Processor	Intel i7 970 // Intel i7 2600K
Motherboard	Asus Rampage III Formula // Asus P8P67 Deluxe
Cooling	Zalman CNPS9900MaxB // Zalman CNPS11X
Memory	GSkill 2133 12GB // Corsair V 2400 32GB
Video Card(s)	ASUS GTX1080 // MSI GTX1070
Storage	Samsung 870EVO // Samsung 840P
Display(s)	HP w2207h
Case	CoolerMaster Stacker 830se // Lian Li PC-9F
Audio Device(s)	onboard
Power Supply	Seasonic X 850w Gold // EVGA 850w G2
Mouse	Logitech G502SE HERO, G9
Keyboard	Dell
Software	W10 Pro 22H2

Processor	i7 8700k 4.6Ghz @ 1.24V
Motherboard	AsRock Fatal1ty K6 Z370
Cooling	beQuiet! Dark Rock Pro 3
Memory	16GB Corsair Vengeance LPX 3200/C16
Video Card(s)	ASRock RX7900XT Phantom Gaming
Storage	Samsung 850 EVO 1TB + Samsung 830 256GB + Crucial BX100 250GB + Toshiba 1TB HDD
Display(s)	Gigabyte G34QWC (3440x1440)
Case	Fractal Design Define R5
Audio Device(s)	Harman Kardon AVR137 + 2.1
Power Supply	EVGA Supernova G2 750W
Mouse	XTRFY M42
Keyboard	Lenovo Thinkpad Trackpoint II
Software	W10 x64

System Name	Compy 386
Processor	7800X3D
Motherboard	Asus
Cooling	Air for now.....
Memory	64 GB DDR5 6400Mhz
Video Card(s)	7900XTX 310 Merc
Storage	Samsung 990 2TB, 2 SP 2TB SSDs and over 10TB spinning
Display(s)	56" Samsung 4K HDR
Audio Device(s)	ATI HDMI
Mouse	Logitech MX518
Keyboard	Razer
Software	A lot.
Benchmark Scores	Its fast. Enough.

System Name	Bayou Phantom
Processor	Core i7-8700k 4.4Ghz @ 1.18v
Motherboard	ASRock Z390 Phantom Gaming 6
Cooling	All air: 2x140mm Fractal exhaust; 3x 140mm Cougar Intake; Enermax T40F Black CPU cooler
Memory	2x 16GB Mushkin Redline DDR-4 3200
Video Card(s)	EVGA RTX 2080 Ti Xc
Storage	1x 500 MX500 SSD; 2x 6TB WD Black; 1x 4TB WD Black; 1x400GB VelRptr; 1x 4TB WD Blue storage (eSATA)
Display(s)	HP 27q 27" IPS @ 2560 x 1440
Case	Fractal Design Define R4 Black w/Titanium front -windowed
Audio Device(s)	Soundblaster Z
Power Supply	Seasonic X-850
Mouse	Coolermaster Sentinel III (large palm grip!)
Keyboard	Logitech G610 Orion mechanical (Cherry Brown switches)
Software	Windows 10 Pro 64-bit (Start10 & Fences 3.0 installed)