Computer Shuts Down Improperly During Sleep Mode

[zbook]

1) Run the Windows 7 power troubleshooter and post images of the results.

View these links:
https://support.microsoft.com/en-us/help/980869/about-how-to-troubleshoot-power-plans-in-windows-7
HP PCs - Troubleshooting sleep and hibernate issues (Windows 7) | HP® Customer Support

2) Do the unexpected shutdowns only occur during sleep or do they occur too while the computer is in use?

3) For the next unexpected shutdown run the Sysnative log collector and upload results into this thread.

4) Post a share link with Speccy results: Download Speccy | Find your computer specs, free!

5) Run the Lenovo custom scan (all box and full scans) > post images of the results into this thread
desktops and all in ones :: thinkcentre e series desktops :: thinkcentre e93z Lenovo PC Support - AE

6) The computer has mismatched RAM. When was the second RAM module added?

Run Memtest86 version 8.4 (or newer version if available) for four passes.
Repeat the test so that eight passes are performed.

MemTest86 - Official Site of the x86 Memory Testing Tool

Use a camera or smart phone camera to take pictures and post images into the thread.
In case there are any problems uploading images use share links (one drive, drop box, or google drive)

Memtest86 has a feature to produce a text report.
Please post this in addition to the images.

 

[Barrymer]

1) I ran the Windows 7 Power Troubleshooter and this was the only issue found:
View attachment 61658
Actually, the time before the computer goes to sleep had been set to 20 minutes and it changed it to 30 minutes.

2) The unexpected shutdowns only occur at some point during the time the computer is in sleep mode. It never shuts down when it's in use.

3) Sysnative Log Results for unexpected shutdown. (Note: I had my computer in Sleep mode last night before I went to bed. This morning I saw that it had shut down unexpectedly as it has been doing. I ran the PowerShell this morning as you requested. I notice the report says: "Time Generated: 8/6/2020". I have no idea why the date shown is from 3 days ago.)



4) Speccy results:



5) Results of Lenovo Custom Scan Diagnostics is shown below. As you can see, it did not detect any issues.



6) The RAM module was installed at least 3 years ago. I used Crucial's program to determine what was appropriate for my computer.
I ran the MemTest86 program today. It's a l-o-n-g test. I'm attaching pictures. I had checked the box for a text report but if there was one, I don't know where it went. I thought it should have been on my desktop but it wasn't there.
The bottom line was there were zero errors found. I'm not going to do another series of 4 passes tonight. Since there doesn't seem to be any indication of a problem in this area, I wonder if it's even necessary. In addition, after spending an exorbitant amount of time on this today, I'm spent and my head aches. Please let me know if you still want me to do another 4 passes and I'll do them tomorrow. Also, if you have an idea where else I might find the text report, that would be helpful as well.

Thanks for your help and I appreciate your patience.

 

[zbook]

The first link (power troubleshooter) displayed:
Oops! We ran into some problems.
The requested page could not be found.

When available:
a) upload a new attachment for the power troubleshooter
b) run the Sysnative log collector and upload directly into this thread
Blue Screen of Death (BSOD) Posting Instructions - Windows 10, 8.1, 8, 7 + Vista
c) post a share link for the speccy report
d) Memtest86 does not test for incompatible RAM. It should test for malfunctioning RAM.
Incompatible RAM can cause unexpected shutdowns and restarts.
It can be a confounding factor. The logs need to be scanned to see any problems after the windows troubleshoting.

 

[Barrymer]

a) I'm not clear on exactly what you want me to run. Please give specific directions.
b) Is the Sysnative log collector the same as the BSOD?
c) I don't know how to "post a share link" for the speccy report.

 

[zbook]

1) For Speccy;
a) launch the application
b) click file
c) click save as text file
d) post a share link into the thread using one drive, drop box, or google drive

2) Open event viewer > windows logs > system > search for event #41 > click details tab > friendly view > copy and paste the most recent five or six #41 events > post a share link into the thread
Date: 2020-08-09T09:03:14.259
Date: 2020-08-07T19:15:21.902
Date: 2020-08-07T07:09:44.479
Date: 2020-08-06T21:25:52.871
Date: 2020-08-02T22:06:23.027

3) If you have access to the RAM modules please remove one module, identify the manufacturer or model of the working module > observe for unexpected shutdowns and restarts for several days.

CT102464BF160B.M16
HMT41GS6AFR8A-PB

4) Replace the RAM module so that testing is in the same DIMM > observe for unexpected shutdowns and restarts for several days

 

[Barrymer]

1) Link to Speccy text file:

2) Event 41 details
Log Name: System
Source: Microsoft-Windows-Kernel-Power
Date: 8/9/2020 9:03:14 AM
Event ID: 41
Task Category: (63)
Level: Critical
Keywords: (2)
User: SYSTEM
Computer: THINK
Description:
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />
<EventID>41</EventID>
<Version>2</Version>
<Level>1</Level>
<Task>63</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000002</Keywords>
<TimeCreated SystemTime="2020-08-09T13:03:14.259606600Z" />
<EventRecordID>545175</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="8" />
<Channel>System</Channel>
<Computer>THINK</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="BugcheckCode">0</Data>
<Data Name="BugcheckParameter1">0x0</Data>
<Data Name="BugcheckParameter2">0x0</Data>
<Data Name="BugcheckParameter3">0x0</Data>
<Data Name="BugcheckParameter4">0x0</Data>
<Data Name="SleepInProgress">true</Data>
<Data Name="PowerButtonTimestamp">0</Data>
</EventData>
</Event>

Log Name: System
Source: Microsoft-Windows-Kernel-Power
Date: 8/7/2020 7:15:21 PM
Event ID: 41
Task Category: (63)
Level: Critical
Keywords: (2)
User: SYSTEM
Computer: THINK
Description:
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />
<EventID>41</EventID>
<Version>2</Version>
<Level>1</Level>
<Task>63</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000002</Keywords>
<TimeCreated SystemTime="2020-08-07T23:15:21.902404200Z" />
<EventRecordID>544737</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="8" />
<Channel>System</Channel>
<Computer>THINK</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="BugcheckCode">0</Data>
<Data Name="BugcheckParameter1">0x0</Data>
<Data Name="BugcheckParameter2">0x0</Data>
<Data Name="BugcheckParameter3">0x0</Data>
<Data Name="BugcheckParameter4">0x0</Data>
<Data Name="SleepInProgress">true</Data>
<Data Name="PowerButtonTimestamp">0</Data>
</EventData>
</Event>

Log Name: System
Source: Microsoft-Windows-Kernel-Power
Date: 8/7/2020 7:09:44 AM
Event ID: 41
Task Category: (63)
Level: Critical
Keywords: (2)
User: SYSTEM
Computer: THINK
Description:
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />
<EventID>41</EventID>
<Version>2</Version>
<Level>1</Level>
<Task>63</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000002</Keywords>
<TimeCreated SystemTime="2020-08-07T11:09:44.479605200Z" />
<EventRecordID>544507</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="8" />
<Channel>System</Channel>
<Computer>THINK</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="BugcheckCode">0</Data>
<Data Name="BugcheckParameter1">0x0</Data>
<Data Name="BugcheckParameter2">0x0</Data>
<Data Name="BugcheckParameter3">0x0</Data>
<Data Name="BugcheckParameter4">0x0</Data>
<Data Name="SleepInProgress">true</Data>
<Data Name="PowerButtonTimestamp">0</Data>
</EventData>
</Event>

Log Name: System
Source: Microsoft-Windows-Kernel-Power
Date: 8/6/2020 9:25:52 PM
Event ID: 41
Task Category: (63)
Level: Critical
Keywords: (2)
User: SYSTEM
Computer: THINK
Description:
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />
<EventID>41</EventID>
<Version>2</Version>
<Level>1</Level>
<Task>63</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000002</Keywords>
<TimeCreated SystemTime="2020-08-07T01:25:52.871204100Z" />
<EventRecordID>544300</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="8" />
<Channel>System</Channel>
<Computer>THINK</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="BugcheckCode">0</Data>
<Data Name="BugcheckParameter1">0x0</Data>
<Data Name="BugcheckParameter2">0x0</Data>
<Data Name="BugcheckParameter3">0x0</Data>
<Data Name="BugcheckParameter4">0x0</Data>
<Data Name="SleepInProgress">true</Data>
<Data Name="PowerButtonTimestamp">0</Data>
</EventData>
</Event>

Log Name: System
Source: Microsoft-Windows-Kernel-Power
Date: 8/2/2020 10:06:23 PM
Event ID: 41
Task Category: (63)
Level: Critical
Keywords: (2)
User: SYSTEM
Computer: THINK
Description:
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />
<EventID>41</EventID>
<Version>2</Version>
<Level>1</Level>
<Task>63</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000002</Keywords>
<TimeCreated SystemTime="2020-08-03T02:06:23.027204400Z" />
<EventRecordID>543230</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="8" />
<Channel>System</Channel>
<Computer>THINK</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="BugcheckCode">0</Data>
<Data Name="BugcheckParameter1">0x0</Data>
<Data Name="BugcheckParameter2">0x0</Data>
<Data Name="BugcheckParameter3">0x0</Data>
<Data Name="BugcheckParameter4">0x0</Data>
<Data Name="SleepInProgress">true</Data>
<Data Name="PowerButtonTimestamp">0</Data>
</EventData>
</Event>

3) Going inside my AIO computer to get at the DIMM modules would be a project. To do it would entail disconnecting all the wires, taking it off its stand, removing the back, dealing with the DIMM modules and reassembling everything. Doing that multiple times is not something I would relish undertaking except as a last resort. And the computer works perfectly well in every other respect. Sleep mode is the only issue.... and only for the last few weeks.

 

[zbook]

These are trial and error steps:

1) Check the status of Intel drivers
Intel® Driver & Support Assistant
Download Intel® Driver & Support Assistant

2) Uninstall Kaspersky AV with the applicable uninstall tool:
Removal tool for Kaspersky applications (kavremover)

3) Place the computer into clean startup:
Troubleshoot Application Conflicts by Performing a Clean Startup - Windows 7 Help Forums

4) Overnight see whether there is or is not an unexpected shutdown and restart

5) Reinstall Kaspersky the next day

6) Place the computer in safe mode > overnight see whether there is or is not an unexpected shutdown and restart


7) The computer has Acronis backup images

8) Consider performing a free in place upgrade repair to Windows 10 > observe whether there is or is not an unexpected shutdown and restart
9) Consider performing a Windows 7 reset save files > observe whether there is or is not an unexpected shutdown and restart
10) Restore the image after either or both 8 and 9

 

[Barrymer]

1) Ran Intel Driver and Support Assistant. The result said:
"Your Intel® drivers and software are up to date."

2,3,4,5) I uninstalled Kaspersky antivirus, followed the steps to put the computer into clean startup, and put it into sleep mode overnight. In the morning I found it had unexpectedly rebooted.

6) I put the computer in safe mode overnight. I found that in safe mode there was no option for "Sleep," only "Dim Screen," and I set it to dim the screen. In the morning I found the screen had not dimmed. Again it had automoatically rebooted. There was a message that said: "Not completed - no connections available." I don't know what that's about.

All the startup items had been enabled. So I went through them and disabled those not needed at this time. I also uninstalled a number of programs I no longer use and no longer need.

8) I'm not inclined to put windows 10 on this computer. My computer is 6 years old. If I go to Win 10 I'd get a new computer with Win 10 installed.

9) I don't know what's involved with a "Windows 7 reset save files." Is this a big project? If the files are saved, why would I need to restore an image from Acronis?

 

[zbook]

For reset save files or custom install drivers and applications need to be reinstalled.
Custom Install Windows 7 - Windows 7 Help Forums
If there are no unexpected restarts then the problem was/is related to Windows.
Applications and drivers are unlikely as there was an unexpected restart during clean startup and safe mode.
If there are unexpected restarts with a fresh windows installation (custom install) then the next step is to rule in / out hardware.
So the image can be restored so that you're back to where you were before the reset save files.
In case you prefer new windows customizations, drivers, and applications then you wouldn't need to restore.

For hardware these can be stress tested using third party software: CPU, GPU, Drive, RAM

 

[zbook]

These are hardware stress testing links:
Test RAM With Memtest86+
Hard Drive (HDD) Diagnostics (Sea Tools for DOS) & SSD Test
FurMark Display Card Stress Test
CPU STRESS testing: Mersenne.org Prime95 and Intel Processor Diagnostic Tool (IPDT)

If the custom install or clean install and hardware testing do not find something then I'm out of ideas.
Some hardware testing was done with the lenovo diagnostics.
The above tests are generally more rigorous.

 

[plodr]

Sorry to but in but

There was a message that said: "Not completed - no connections available."

that seems to me that something is scheduled to perhaps check for updates when the computer is asleep or at a time in the wee hours of the morning. Have you looked at scheduled tasks?

 

[xrobwx71]

Sorry to but in but that seems to me that something is scheduled to perhaps check for updates when the computer is asleep or at a time in the wee hours of the morning. Have you looked at scheduled tasks?

Good idea @plodr :
Here's how: Open an elevated command prompt and enter this-- schtasks /query >c:\tasks.txt > 0 & notepad 0 Hit Enter.

Notepad will open with the scheduled tasks, copy and paste here.

Credit @Jenae for the script.

 

[Barrymer]

At your suggestion, I did run the program to check for scheduled tasks and there were indeed many of them. (See result below.) But how would they cause the computer to shut down unexpectedly?


Folder: \
TaskName Next Run Time Status
======================================== ====================== ===============
Adobe Acrobat Update Task 8/17/2020 12:00:00 AM Unknown
Adobe Flash Player NPAPI Notifier 8/21/2020 8:55:00 PM Ready
Adobe Flash Player Updater 8/16/2020 12:47:00 AM Ready
AdobeAAMUpdater-1.0-THINK-Barry M N/A Could not start
AdobeGCInvoker-1.0 8/16/2020 1:05:00 AM Ready
G2MUpdateTask-S-1-5-21-389322585-1760336 8/16/2020 12:09:00 AM Ready
G2MUploadTask-S-1-5-21-389322585-1760336 8/16/2020 12:30:00 AM Ready
GarminUpdaterTask 8/16/2020 4:24:23 AM Ready
GoogleUpdateTaskMachineCore 8/16/2020 8:37:11 PM Ready
GoogleUpdateTaskMachineUA 8/16/2020 12:37:11 AM Ready
IntelSURQC-Upgrade-86621605-2a0b-4128-8f 8/16/2020 12:01:17 PM Ready
IntelSURQC-Upgrade-86621605-2a0b-4128-8f N/A Ready
IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 8/16/2020 1:01:20 PM Ready
IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 N/A Ready
Kaspersky_Upgrade_Launcher_{278ADC42-419 N/A Ready
OneDrive Standalone Update Task-S-1-5-21 8/16/2020 10:38:27 AM Could not start
RtHDVBg_Dolby N/A Running
RTKCPL N/A Running
USER_ESRV_SVC_WILLAMETTE Disabled
{9E915ABE-0826-4515-8DD3-A75BDC3D1A4D} N/A Ready
{DA8B0F1B-9478-400B-88DE-0AE327E8FACB} N/A Ready

Folder: \Lenovo
TaskName Next Run Time Status
======================================== ====================== ===============
Lenovo Customer Feedback Program 64 8/16/2020 2:47:12 PM Ready
Lenovo Customer Feedback Program 64 35 8/16/2020 2:58:45 PM Could not start

Folder: \Lenovo\Lenovo Service Bridge
TaskName Next Run Time Status
======================================== ====================== ===============
S-1-5-21-389322585-1760336699-2718007874 N/A Unknown

Folder: \Microsoft
TaskName Next Run Time Status
======================================== ====================== ===============
INFO: There are no scheduled tasks presently available at your access level.

Folder: \Microsoft\Office
TaskName Next Run Time Status
======================================== ====================== ===============
Office Automatic Updates 8/16/2020 5:57:49 AM Ready
Office ClickToRun Service Monitor 8/16/2020 5:38:51 AM Ready

Folder: \Microsoft\Windows
TaskName Next Run Time Status
======================================== ====================== ===============
INFO: There are no scheduled tasks presently available at your access level.

Folder: \Microsoft\Windows\Active Directory Rights Management Services Client
TaskName Next Run Time Status
======================================== ====================== ===============
AD RMS Rights Policy Template Management Disabled
AD RMS Rights Policy Template Management N/A Ready

Folder: \Microsoft\Windows\AppID
TaskName Next Run Time Status
======================================== ====================== ===============
PolicyConverter Disabled
VerifiedPublisherCertStoreCheck N/A Ready

Folder: \Microsoft\Windows\Application Experience
TaskName Next Run Time Status
======================================== ====================== ===============
AitAgent 8/16/2020 2:30:00 AM Ready
Microsoft Compatibility Appraiser 8/16/2020 4:20:09 AM Ready
ProgramDataUpdater 8/16/2020 11:51:21 PM Ready

Folder: \Microsoft\Windows\Autochk
TaskName Next Run Time Status
======================================== ====================== ===============
Proxy N/A Ready

Folder: \Microsoft\Windows\Bluetooth
TaskName Next Run Time Status
======================================== ====================== ===============
UninstallDeviceTask N/A Ready

Folder: \Microsoft\Windows\CertificateServicesClient
TaskName Next Run Time Status
======================================== ====================== ===============
SystemTask N/A Ready
UserTask N/A Ready
UserTask-Roam Disabled

Folder: \Microsoft\Windows\Customer Experience Improvement Program
TaskName Next Run Time Status
======================================== ====================== ===============
Consolidator 8/16/2020 7:00:00 AM Could not start
KernelCeipTask 8/20/2020 3:30:00 AM Ready
UsbCeip 8/17/2020 1:30:00 AM Ready

Folder: \Microsoft\Windows\Defrag
TaskName Next Run Time Status
======================================== ====================== ===============
ScheduledDefrag 8/19/2020 1:00:00 AM Ready

Folder: \Microsoft\Windows\Diagnosis
TaskName Next Run Time Status
======================================== ====================== ===============
Scheduled 8/16/2020 1:00:00 AM Ready

Folder: \Microsoft\Windows\DiskDiagnostic
TaskName Next Run Time Status
======================================== ====================== ===============
Microsoft-Windows-DiskDiagnosticDataColl Disabled
Microsoft-Windows-DiskDiagnosticResolver Disabled

Folder: \Microsoft\Windows\Location
TaskName Next Run Time Status
======================================== ====================== ===============
Notifications N/A Ready

Folder: \Microsoft\Windows\Maintenance
TaskName Next Run Time Status
======================================== ====================== ===============
WinSAT 8/16/2020 1:00:00 AM Ready

Folder: \Microsoft\Windows\Media Center
TaskName Next Run Time Status
======================================== ====================== ===============
ActivateWindowsSearch N/A Ready
ConfigureInternetTimeService N/A Ready
DispatchRecoveryTasks N/A Ready
ehDRMInit N/A Ready
InstallPlayReady N/A Ready
mcupdate N/A Ready
MediaCenterRecoveryTask N/A Ready
ObjectStoreRecoveryTask N/A Ready
OCURActivate N/A Ready
OCURDiscovery N/A Ready
PBDADiscovery N/A Ready
PBDADiscoveryW1 N/A Ready
PBDADiscoveryW2 N/A Ready
PeriodicScanRetry Disabled
PvrRecoveryTask N/A Ready
PvrScheduleTask N/A Ready
RecordingRestart Disabled
RegisterSearch N/A Ready
ReindexSearchRoot N/A Ready
SqlLiteRecoveryTask N/A Ready
UpdateRecordPath N/A Ready

Folder: \Microsoft\Windows\MemoryDiagnostic
TaskName Next Run Time Status
======================================== ====================== ===============
CorruptionDetector N/A Ready
DecompressionFailureDetector N/A Ready

Folder: \Microsoft\Windows\MobilePC
TaskName Next Run Time Status
======================================== ====================== ===============
HotStart N/A Ready

Folder: \Microsoft\Windows\MUI
TaskName Next Run Time Status
======================================== ====================== ===============
LPRemove N/A Ready

Folder: \Microsoft\Windows\Multimedia
TaskName Next Run Time Status
======================================== ====================== ===============
SystemSoundsService N/A Running

Folder: \Microsoft\Windows\NetTrace
TaskName Next Run Time Status
======================================== ====================== ===============
GatherNetworkInfo N/A Ready

Folder: \Microsoft\Windows\Offline Files
TaskName Next Run Time Status
======================================== ====================== ===============
Background Synchronization Disabled
Logon Synchronization Disabled

Folder: \Microsoft\Windows\PerfTrack
TaskName Next Run Time Status
======================================== ====================== ===============
BackgroundConfigSurveyor Disabled

Folder: \Microsoft\Windows\PLA
TaskName Next Run Time Status
======================================== ====================== ===============
LSC Memory N/A Ready

Folder: \Microsoft\Windows\Power Efficiency Diagnostics
TaskName Next Run Time Status
======================================== ====================== ===============
AnalyzeSystem 8/25/2020 12:15:44 PM Ready

Folder: \Microsoft\Windows\RAC
TaskName Next Run Time Status
======================================== ====================== ===============
RacTask 8/16/2020 1:02:26 AM Ready

Folder: \Microsoft\Windows\Ras
TaskName Next Run Time Status
======================================== ====================== ===============
MobilityManager N/A Ready

Folder: \Microsoft\Windows\Registry
TaskName Next Run Time Status
======================================== ====================== ===============
RegIdleBackup 8/25/2020 12:59:48 AM Ready

Folder: \Microsoft\Windows\RemoteAssistance
TaskName Next Run Time Status
======================================== ====================== ===============
RemoteAssistanceTask N/A Ready

Folder: \Microsoft\Windows\Setup
TaskName Next Run Time Status
======================================== ====================== ===============
EOSNotify N/A Ready
EOSNotify2 8/16/2020 12:21:45 PM Ready

Folder: \Microsoft\Windows\Shell
TaskName Next Run Time Status
======================================== ====================== ===============
WindowsParentalControls Disabled
WindowsParentalControlsMigration Disabled

Folder: \Microsoft\Windows\SideShow
TaskName Next Run Time Status
======================================== ====================== ===============
AutoWake Disabled
GadgetManager N/A Ready
SessionAgent Disabled Could not start
SystemDataProviders Disabled Could not start

Folder: \Microsoft\Windows\SoftwareProtectionPlatform
TaskName Next Run Time Status
======================================== ====================== ===============
SvcRestartTask Disabled

Folder: \Microsoft\Windows\SystemRestore
TaskName Next Run Time Status
======================================== ====================== ===============
SR 8/17/2020 12:00:00 AM Unknown

Folder: \Microsoft\Windows\Task Manager
TaskName Next Run Time Status
======================================== ====================== ===============
Interactive N/A Ready

Folder: \Microsoft\Windows\Tcpip
TaskName Next Run Time Status
======================================== ====================== ===============
IpAddressConflict1 N/A Ready
IpAddressConflict2 N/A Ready

Folder: \Microsoft\Windows\TextServicesFramework
TaskName Next Run Time Status
======================================== ====================== ===============
MsCtfMonitor N/A Running

Folder: \Microsoft\Windows\Time Synchronization
TaskName Next Run Time Status
======================================== ====================== ===============
SynchronizeTime 8/16/2020 1:00:00 AM Ready

Folder: \Microsoft\Windows\UPnP
TaskName Next Run Time Status
======================================== ====================== ===============
UPnPHostConfig N/A Ready

Folder: \Microsoft\Windows\User Profile Service
TaskName Next Run Time Status
======================================== ====================== ===============
HiveUploadTask Disabled

Folder: \Microsoft\Windows\WDI
TaskName Next Run Time Status
======================================== ====================== ===============
ResolutionHost N/A Ready

Folder: \Microsoft\Windows\Windows Activation Technologies
TaskName Next Run Time Status
======================================== ====================== ===============
ValidationTask 8/29/2020 10:58:02 PM Ready
ValidationTaskDeadline 9/8/2020 10:58:02 PM Ready

Folder: \Microsoft\Windows\Windows Error Reporting
TaskName Next Run Time Status
======================================== ====================== ===============
QueueReporting N/A Ready

Folder: \Microsoft\Windows\Windows Filtering Platform
TaskName Next Run Time Status
======================================== ====================== ===============
BfeOnServiceStartTypeChange N/A Ready

Folder: \Microsoft\Windows\Windows Media Sharing
TaskName Next Run Time Status
======================================== ====================== ===============
UpdateLibrary N/A Ready

Folder: \Microsoft\Windows\WindowsBackup
TaskName Next Run Time Status
======================================== ====================== ===============
ConfigNotification 8/16/2020 10:00:00 AM Ready

Folder: \Microsoft\Windows\WindowsColorSystem
TaskName Next Run Time Status
======================================== ====================== ===============
Calibration Loader Disabled

Folder: \Microsoft\Windows\Wininet
TaskName Next Run Time Status
======================================== ====================== ===============
CacheTask N/A Running

Folder: \Microsoft\Windows Defender
TaskName Next Run Time Status
======================================== ====================== ===============
MP Scheduled Scan 8/16/2020 3:44:32 AM Ready

Folder: \Mozilla
TaskName Next Run Time Status
======================================== ====================== ===============
Firefox Default Browser Agent E7CF176E11 8/16/2020 7:25:31 AM Ready

Folder: \OfficeSoftwareProtectionPlatform
TaskName Next Run Time Status
======================================== ====================== ===============
SvcRestartTask Disabled

Folder: \Safer-Networking
TaskName Next Run Time Status
======================================== ====================== ===============
INFO: There are no scheduled tasks presently available at your access level.

Folder: \TVT
TaskName Next Run Time Status
======================================== ====================== ===============
TVSUUpdateTask 8/18/2020 1:23:45 PM Ready
TVSUUpdateTask_UserLogOn N/A Ready

Folder: \WPD
TaskName Next Run Time Status
======================================== ====================== ===============
SqmUpload_S-1-5-21-389322585-1760336699- N/A Ready

 

[xrobwx71]

You could look for a match in the Event Viewer to determine a possible cause and stop cause from starting in the Scheduled Task. Or match time of shutdown to a time in scheduled tasks.

Open an elevated Powershell: Hit start, type Powershell, right-click the choice and choose run as admin.

copy and paste this: Get-EventLog -LogName system -Source user32 | Select TimeGenerated, Message |

When you right-click in Powershell, it will auto append the script so hit enter. It will pause so copy and paste this sort message | ft -Wrap

Hit enter. It should output your shutdown events and times.

 

[plodr]

But how would they cause the computer to shut down unexpectedly?

Are you sure it is unexpected? I have programs that run that give me the option to turn off the computer when it is finished. If that's what is selected, then the computer shuts down.

For troubleshooting purposes, you could disable any scheduled tasks between 1am and 4 am and see what happens.

Also a bit off topic, Adobe flash doesn't need to be set to check for updates. It generally updates once a month on patch Tuesday. In December 2020 it will be stopped and people have been advised to remove it. I removed it from my Windows 7 computers in September 2019 in preparation for no longer being supported in browsers.

 

[Barrymer]

To Plodr-
It appears that no scheduled actions are set to shut down my computer. Below is a screen shot of the scheduler. I would think if a shut down was scheduled, it would show up under the "Actions" tab. I checked each scheduled event. Thank you for your input.

 

[Barrymer]

xrobwx71-
I believe zbook already checked the Event Viewer he had me do and didn't find anything of import.

 

[zbook]

The Sysnative log collector collected
34,999 + 16,583 = 51,582 events as text entries.

These were scanned for specific key words.

Please perform the scans as per xrobwx71 in the earlier post.

An alternative is a clean install (removes any non-default scheduled tasks) > monitor for unexpected shutdowns > collect new logs as needed > test hardware as needed > restore the image when troubleshooting has completed

 

[Barrymer]

The Powershell EventLog is not working for me. I tried a number of times and this is what I got:



What am I doing wrong?

 

[xrobwx71]

The Powershell EventLog is not working for me. I tried a number of times and this is what I got:

View attachment 61843

What am I doing wrong?

Are you doing them separately? Get-EventLog -LogName system -Source user32 | Select TimeGenerated, Message | this line first and hit enter.

sort message | ft -Wrap
then this line and hit enter

I just tested it on my machine and it works.