-
Still running Windows 7 or earlier? Support for Windows 7 ended on January 14th 2020. Please review the thread here for more details.
Computer Shuts Down Improperly During Sleep Mode
- Thread starter Barrymer
- Start date
You can select the text in Powershell just like any other copy-paste procedure. Once you select the text, hit Ctrl-C to copy, then in your next post, hit Ctrl-V to paste or right click-paste.
Method 2: Right-click at the top of the Powershell Window after running the script. Choose edit-select all-copy and then paste it into your next post.
Method 2: Right-click at the top of the Powershell Window after running the script. Choose edit-select all-copy and then paste it into your next post.
Last edited:
Here's what I got.
Windows PowerShell
Copyright (C) 2009 Microsoft Corporation. All rights reserved.
PS C:\Windows\system32> Get-EventLog -LogName system -Source user32 | Select TimeGenerated, Message |sort message | ft
-Wrap
TimeGenerated Message
------------- -------
12/12/2019 8:48:12 AM The attempt by user THINK\Barry M to restart/shutdown compu
ter THINK failed
8/9/2020 11:43:27 PM The attempt by user THINK\Barry M to restart/shutdown compu
ter THINK failed
2/2/2020 12:29:26 AM The process C:\ProgramData\Kaspersky Lab Setup Files\KAV20.
0.14.1085.0.3031.0\au_setup_B5F4E511-457B-11EA-AA40-00C2C65
A883F\startup.exe (THINK) has initiated the restart of comp
uter THINK on behalf of user THINK\Barry M for the followin
g reason: Legacy API shutdown
Reason Code: 0x80070000
Shutdown Type: restart
Comment:
2/2/2020 12:24:23 AM The process C:\ProgramData\Kaspersky Lab Setup Files\KAV20.
0.14.1085.0.3031.0\au_setup_B5F4E511-457B-11EA-AA40-00C2C65
A883F\startup.exe (THINK) has initiated the restart of comp
uter THINK on behalf of user THINK\Barry M for the followin
g reason: Legacy API shutdown
Reason Code: 0x80070000
Shutdown Type: restart
Comment:
2/2/2020 12:22:35 AM The process C:\ProgramData\Kaspersky Lab Setup Files\KAV20.
0.14.1085.0.3031.0\au_setup_B5F4E511-457B-11EA-AA40-00C2C65
A883F\startup.exe (THINK) has initiated the restart of comp
uter THINK on behalf of user THINK\Barry M for the followin
g reason: Legacy API shutdown
Reason Code: 0x80070000
Shutdown Type: restart
Comment:
8/6/2020 1:58:31 PM The process C:\Users\Barry M\Desktop\FRST64.exe (THINK) has
initiated the restart of computer THINK on behalf of user
THINK\Barry M for the following reason: Other (Planned)
Reason Code: 0x80000000
Shutdown Type: restart
Comment:
12/12/2019 8:50:36 AM The process C:\Windows\servicing\TrustedInstaller.exe (THIN
K) has initiated the restart of computer THINK on behalf of
user NT AUTHORITY\SYSTEM for the following reason: Operati
ng System: Upgrade (Planned)
Reason Code: 0x80020003
Shutdown Type: restart
Comment:
8/13/2020 12:00:07 AM The process C:\Windows\system32\msconfig.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x40000
Shutdown Type: restart
Comment:
8/15/2020 3:11:52 PM The process C:\Windows\system32\msconfig.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x40000
Shutdown Type: restart
Comment:
8/13/2020 11:01:49 AM The process C:\Windows\system32\msconfig.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x40000
Shutdown Type: restart
Comment:
11/18/2019 10:30:03 AM The process C:\Windows\system32\msconfig.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x40000
Shutdown Type: restart
Comment:
7/21/2020 1:59:22 PM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the power off of computer THINK on behalf of user T
HINK\Barry M for the following reason: No title for this re
ason could be found
Reason Code: 0x500ff
Shutdown Type: power off
Comment:
7/17/2020 1:44:12 PM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the power off of computer THINK on behalf of user T
HINK\Barry M for the following reason: No title for this re
ason could be found
Reason Code: 0x500ff
Shutdown Type: power off
Comment:
12/20/2019 11:19:58 AM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the power off of computer THINK on behalf of user T
HINK\Barry M for the following reason: No title for this re
ason could be found
Reason Code: 0x500ff
Shutdown Type: power off
Comment:
8/13/2020 11:04:08 AM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the restart of computer THINK on behalf of user NT
AUTHORITY\SYSTEM for the following reason: No title for thi
s reason could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
5/11/2020 10:33:32 PM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
5/7/2020 9:23:42 PM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
3/20/2020 8:40:55 PM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
3/26/2020 11:43:51 AM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
4/21/2020 5:39:13 PM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
11/1/2019 9:35:46 AM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
6/7/2020 9:04:18 PM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
11/13/2019 7:30:12 AM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
11/18/2019 10:01:50 AM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
5/24/2020 10:51:25 PM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
6/1/2020 12:58:17 AM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
12/12/2019 8:48:58 AM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
11/18/2019 10:31:49 AM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
12/23/2019 7:22:20 PM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
1/14/2020 2:29:51 PM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
1/14/2020 2:47:21 PM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
2/4/2020 10:13:22 PM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
3/3/2020 1:38:01 PM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
3/8/2020 9:20:22 PM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
2/20/2020 8:40:11 PM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
2/9/2020 12:31:24 AM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
11/18/2019 10:09:50 AM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
8/14/2020 10:13:26 PM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
7/26/2020 10:54:34 PM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
7/23/2020 11:11:52 AM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
8/12/2020 11:51:59 PM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
8/14/2020 9:58:49 PM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
8/14/2020 7:30:57 AM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
8/6/2020 12:06:02 PM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
7/29/2020 12:40:54 AM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
8/14/2020 12:15:19 AM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
8/16/2020 8:08:55 PM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
7/20/2020 12:42:15 AM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
8/9/2020 12:42:19 PM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
8/10/2020 12:00:50 AM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
7/22/2020 5:51:33 PM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
7/27/2020 8:07:07 PM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the shutdown of computer THINK on behalf of user TH
INK\Barry M for the following reason: No title for this rea
son could be found
Reason Code: 0x500ff
Shutdown Type: shutdown
Comment:
7/21/2020 1:59:18 PM The process Explorer.EXE has initiated the power off of com
puter THINK on behalf of user THINK\Barry M for the followi
ng reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: power off
Comment:
7/17/2020 1:44:06 PM The process Explorer.EXE has initiated the power off of com
puter THINK on behalf of user THINK\Barry M for the followi
ng reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: power off
Comment:
12/20/2019 11:19:43 AM The process Explorer.EXE has initiated the power off of com
puter THINK on behalf of user THINK\Barry M for the followi
ng reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: power off
Comment:
1/14/2020 2:29:45 PM The process Explorer.EXE has initiated the restart of compu
ter THINK on behalf of user THINK\Barry M for the following
reason: Operating System: Recovery (Planned)
Reason Code: 0x80020002
Shutdown Type: restart
Comment:
12/12/2019 8:48:54 AM The process Explorer.EXE has initiated the restart of compu
ter THINK on behalf of user THINK\Barry M for the following
reason: Operating System: Recovery (Planned)
Reason Code: 0x80020002
Shutdown Type: restart
Comment:
12/12/2019 8:47:47 AM The process Explorer.EXE has initiated the restart of compu
ter THINK on behalf of user THINK\Barry M for the following
reason: Operating System: Recovery (Planned)
Reason Code: 0x80020002
Shutdown Type: restart
Comment:
11/13/2019 7:30:08 AM The process Explorer.EXE has initiated the restart of compu
ter THINK on behalf of user THINK\Barry M for the following
reason: Operating System: Recovery (Planned)
Reason Code: 0x80020002
Shutdown Type: restart
Comment:
12/23/2019 7:22:05 PM The process Explorer.EXE has initiated the restart of compu
ter THINK on behalf of user THINK\Barry M for the following
reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment:
1/14/2020 2:47:18 PM The process Explorer.EXE has initiated the restart of compu
ter THINK on behalf of user THINK\Barry M for the following
reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment:
8/14/2020 12:15:15 AM The process Explorer.EXE has initiated the restart of compu
ter THINK on behalf of user THINK\Barry M for the following
reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment:
8/16/2020 8:08:51 PM The process Explorer.EXE has initiated the restart of compu
ter THINK on behalf of user THINK\Barry M for the following
reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment:
11/18/2019 10:09:48 AM The process Explorer.EXE has initiated the restart of compu
ter THINK on behalf of user THINK\Barry M for the following
reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment:
5/24/2020 10:51:19 PM The process Explorer.EXE has initiated the restart of compu
ter THINK on behalf of user THINK\Barry M for the following
reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment:
11/18/2019 10:01:45 AM The process Explorer.EXE has initiated the restart of compu
ter THINK on behalf of user THINK\Barry M for the following
reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment:
8/14/2020 9:58:45 PM The process Explorer.EXE has initiated the restart of compu
ter THINK on behalf of user THINK\Barry M for the following
reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment:
8/14/2020 7:30:56 AM The process Explorer.EXE has initiated the restart of compu
ter THINK on behalf of user THINK\Barry M for the following
reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment:
8/14/2020 10:13:24 PM The process explorer.exe has initiated the restart of compu
ter THINK on behalf of user THINK\Barry M for the following
reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment:
11/18/2019 10:31:48 AM The process Explorer.EXE has initiated the restart of compu
ter THINK on behalf of user THINK\Barry M for the following
reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment:
4/21/2020 5:39:05 PM The process Explorer.EXE has initiated the restart of compu
ter THINK on behalf of user THINK\Barry M for the following
reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment:
5/7/2020 9:23:36 PM The process Explorer.EXE has initiated the restart of compu
ter THINK on behalf of user THINK\Barry M for the following
reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment:
3/26/2020 11:43:46 AM The process Explorer.EXE has initiated the restart of compu
ter THINK on behalf of user THINK\Barry M for the following
reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment:
3/20/2020 8:40:49 PM The process Explorer.EXE has initiated the restart of compu
ter THINK on behalf of user THINK\Barry M for the following
reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment:
7/29/2020 12:40:49 AM The process Explorer.EXE has initiated the restart of compu
ter THINK on behalf of user THINK\Barry M for the following
reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment:
7/26/2020 10:54:29 PM The process Explorer.EXE has initiated the restart of compu
ter THINK on behalf of user THINK\Barry M for the following
reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment:
7/22/2020 5:51:29 PM The process Explorer.EXE has initiated the restart of compu
ter THINK on behalf of user THINK\Barry M for the following
reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment:
6/7/2020 9:04:13 PM The process Explorer.EXE has initiated the restart of compu
ter THINK on behalf of user THINK\Barry M for the following
reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment:
6/1/2020 12:58:10 AM The process Explorer.EXE has initiated the restart of compu
ter THINK on behalf of user THINK\Barry M for the following
reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment:
5/11/2020 10:33:24 PM The process Explorer.EXE has initiated the restart of compu
ter THINK on behalf of user THINK\Barry M for the following
reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment:
7/23/2020 11:11:48 AM The process Explorer.EXE has initiated the restart of compu
ter THINK on behalf of user THINK\Barry M for the following
reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment:
2/4/2020 10:13:18 PM The process Explorer.EXE has initiated the restart of compu
ter THINK on behalf of user THINK\Barry M for the following
reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment:
7/20/2020 12:42:10 AM The process Explorer.EXE has initiated the restart of compu
ter THINK on behalf of user THINK\Barry M for the following
reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment:
8/9/2020 11:43:21 PM The process Explorer.EXE has initiated the restart of compu
ter THINK on behalf of user THINK\Barry M for the following
reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment:
8/12/2020 11:51:53 PM The process Explorer.EXE has initiated the restart of compu
ter THINK on behalf of user THINK\Barry M for the following
reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment:
8/9/2020 11:44:15 PM The process Explorer.EXE has initiated the restart of compu
ter THINK on behalf of user THINK\Barry M for the following
reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment:
2/9/2020 12:31:17 AM The process Explorer.EXE has initiated the restart of compu
ter THINK on behalf of user THINK\Barry M for the following
reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment:
8/6/2020 12:05:56 PM The process Explorer.EXE has initiated the restart of compu
ter THINK on behalf of user THINK\Barry M for the following
reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment:
3/8/2020 9:20:16 PM The process Explorer.EXE has initiated the restart of compu
ter THINK on behalf of user THINK\Barry M for the following
reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment:
3/3/2020 1:37:55 PM The process Explorer.EXE has initiated the restart of compu
ter THINK on behalf of user THINK\Barry M for the following
reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment:
8/9/2020 12:42:14 PM The process Explorer.EXE has initiated the restart of compu
ter THINK on behalf of user THINK\Barry M for the following
reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment:
2/20/2020 8:40:07 PM The process Explorer.EXE has initiated the restart of compu
ter THINK on behalf of user THINK\Barry M for the following
reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment:
PS C:\Windows\system32>
PS C:\Windows\system32> WWWW
Windows PowerShell
Copyright (C) 2009 Microsoft Corporation. All rights reserved.
PS C:\Windows\system32> Get-EventLog -LogName system -Source user32 | Select TimeGenerated, Message |sort message | ft
-Wrap
TimeGenerated Message
------------- -------
12/12/2019 8:48:12 AM The attempt by user THINK\Barry M to restart/shutdown compu
ter THINK failed
8/9/2020 11:43:27 PM The attempt by user THINK\Barry M to restart/shutdown compu
ter THINK failed
2/2/2020 12:29:26 AM The process C:\ProgramData\Kaspersky Lab Setup Files\KAV20.
0.14.1085.0.3031.0\au_setup_B5F4E511-457B-11EA-AA40-00C2C65
A883F\startup.exe (THINK) has initiated the restart of comp
uter THINK on behalf of user THINK\Barry M for the followin
g reason: Legacy API shutdown
Reason Code: 0x80070000
Shutdown Type: restart
Comment:
2/2/2020 12:24:23 AM The process C:\ProgramData\Kaspersky Lab Setup Files\KAV20.
0.14.1085.0.3031.0\au_setup_B5F4E511-457B-11EA-AA40-00C2C65
A883F\startup.exe (THINK) has initiated the restart of comp
uter THINK on behalf of user THINK\Barry M for the followin
g reason: Legacy API shutdown
Reason Code: 0x80070000
Shutdown Type: restart
Comment:
2/2/2020 12:22:35 AM The process C:\ProgramData\Kaspersky Lab Setup Files\KAV20.
0.14.1085.0.3031.0\au_setup_B5F4E511-457B-11EA-AA40-00C2C65
A883F\startup.exe (THINK) has initiated the restart of comp
uter THINK on behalf of user THINK\Barry M for the followin
g reason: Legacy API shutdown
Reason Code: 0x80070000
Shutdown Type: restart
Comment:
8/6/2020 1:58:31 PM The process C:\Users\Barry M\Desktop\FRST64.exe (THINK) has
initiated the restart of computer THINK on behalf of user
THINK\Barry M for the following reason: Other (Planned)
Reason Code: 0x80000000
Shutdown Type: restart
Comment:
12/12/2019 8:50:36 AM The process C:\Windows\servicing\TrustedInstaller.exe (THIN
K) has initiated the restart of computer THINK on behalf of
user NT AUTHORITY\SYSTEM for the following reason: Operati
ng System: Upgrade (Planned)
Reason Code: 0x80020003
Shutdown Type: restart
Comment:
8/13/2020 12:00:07 AM The process C:\Windows\system32\msconfig.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x40000
Shutdown Type: restart
Comment:
8/15/2020 3:11:52 PM The process C:\Windows\system32\msconfig.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x40000
Shutdown Type: restart
Comment:
8/13/2020 11:01:49 AM The process C:\Windows\system32\msconfig.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x40000
Shutdown Type: restart
Comment:
11/18/2019 10:30:03 AM The process C:\Windows\system32\msconfig.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x40000
Shutdown Type: restart
Comment:
7/21/2020 1:59:22 PM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the power off of computer THINK on behalf of user T
HINK\Barry M for the following reason: No title for this re
ason could be found
Reason Code: 0x500ff
Shutdown Type: power off
Comment:
7/17/2020 1:44:12 PM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the power off of computer THINK on behalf of user T
HINK\Barry M for the following reason: No title for this re
ason could be found
Reason Code: 0x500ff
Shutdown Type: power off
Comment:
12/20/2019 11:19:58 AM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the power off of computer THINK on behalf of user T
HINK\Barry M for the following reason: No title for this re
ason could be found
Reason Code: 0x500ff
Shutdown Type: power off
Comment:
8/13/2020 11:04:08 AM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the restart of computer THINK on behalf of user NT
AUTHORITY\SYSTEM for the following reason: No title for thi
s reason could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
5/11/2020 10:33:32 PM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
5/7/2020 9:23:42 PM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
3/20/2020 8:40:55 PM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
3/26/2020 11:43:51 AM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
4/21/2020 5:39:13 PM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
11/1/2019 9:35:46 AM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
6/7/2020 9:04:18 PM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
11/13/2019 7:30:12 AM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
11/18/2019 10:01:50 AM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
5/24/2020 10:51:25 PM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
6/1/2020 12:58:17 AM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
12/12/2019 8:48:58 AM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
11/18/2019 10:31:49 AM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
12/23/2019 7:22:20 PM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
1/14/2020 2:29:51 PM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
1/14/2020 2:47:21 PM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
2/4/2020 10:13:22 PM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
3/3/2020 1:38:01 PM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
3/8/2020 9:20:22 PM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
2/20/2020 8:40:11 PM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
2/9/2020 12:31:24 AM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
11/18/2019 10:09:50 AM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
8/14/2020 10:13:26 PM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
7/26/2020 10:54:34 PM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
7/23/2020 11:11:52 AM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
8/12/2020 11:51:59 PM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
8/14/2020 9:58:49 PM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
8/14/2020 7:30:57 AM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
8/6/2020 12:06:02 PM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
7/29/2020 12:40:54 AM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
8/14/2020 12:15:19 AM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
8/16/2020 8:08:55 PM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
7/20/2020 12:42:15 AM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
8/9/2020 12:42:19 PM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
8/10/2020 12:00:50 AM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
7/22/2020 5:51:33 PM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the restart of computer THINK on behalf of user THI
NK\Barry M for the following reason: No title for this reas
on could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
7/27/2020 8:07:07 PM The process C:\Windows\system32\winlogon.exe (THINK) has in
itiated the shutdown of computer THINK on behalf of user TH
INK\Barry M for the following reason: No title for this rea
son could be found
Reason Code: 0x500ff
Shutdown Type: shutdown
Comment:
7/21/2020 1:59:18 PM The process Explorer.EXE has initiated the power off of com
puter THINK on behalf of user THINK\Barry M for the followi
ng reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: power off
Comment:
7/17/2020 1:44:06 PM The process Explorer.EXE has initiated the power off of com
puter THINK on behalf of user THINK\Barry M for the followi
ng reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: power off
Comment:
12/20/2019 11:19:43 AM The process Explorer.EXE has initiated the power off of com
puter THINK on behalf of user THINK\Barry M for the followi
ng reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: power off
Comment:
1/14/2020 2:29:45 PM The process Explorer.EXE has initiated the restart of compu
ter THINK on behalf of user THINK\Barry M for the following
reason: Operating System: Recovery (Planned)
Reason Code: 0x80020002
Shutdown Type: restart
Comment:
12/12/2019 8:48:54 AM The process Explorer.EXE has initiated the restart of compu
ter THINK on behalf of user THINK\Barry M for the following
reason: Operating System: Recovery (Planned)
Reason Code: 0x80020002
Shutdown Type: restart
Comment:
12/12/2019 8:47:47 AM The process Explorer.EXE has initiated the restart of compu
ter THINK on behalf of user THINK\Barry M for the following
reason: Operating System: Recovery (Planned)
Reason Code: 0x80020002
Shutdown Type: restart
Comment:
11/13/2019 7:30:08 AM The process Explorer.EXE has initiated the restart of compu
ter THINK on behalf of user THINK\Barry M for the following
reason: Operating System: Recovery (Planned)
Reason Code: 0x80020002
Shutdown Type: restart
Comment:
12/23/2019 7:22:05 PM The process Explorer.EXE has initiated the restart of compu
ter THINK on behalf of user THINK\Barry M for the following
reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment:
1/14/2020 2:47:18 PM The process Explorer.EXE has initiated the restart of compu
ter THINK on behalf of user THINK\Barry M for the following
reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment:
8/14/2020 12:15:15 AM The process Explorer.EXE has initiated the restart of compu
ter THINK on behalf of user THINK\Barry M for the following
reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment:
8/16/2020 8:08:51 PM The process Explorer.EXE has initiated the restart of compu
ter THINK on behalf of user THINK\Barry M for the following
reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment:
11/18/2019 10:09:48 AM The process Explorer.EXE has initiated the restart of compu
ter THINK on behalf of user THINK\Barry M for the following
reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment:
5/24/2020 10:51:19 PM The process Explorer.EXE has initiated the restart of compu
ter THINK on behalf of user THINK\Barry M for the following
reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment:
11/18/2019 10:01:45 AM The process Explorer.EXE has initiated the restart of compu
ter THINK on behalf of user THINK\Barry M for the following
reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment:
8/14/2020 9:58:45 PM The process Explorer.EXE has initiated the restart of compu
ter THINK on behalf of user THINK\Barry M for the following
reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment:
8/14/2020 7:30:56 AM The process Explorer.EXE has initiated the restart of compu
ter THINK on behalf of user THINK\Barry M for the following
reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment:
8/14/2020 10:13:24 PM The process explorer.exe has initiated the restart of compu
ter THINK on behalf of user THINK\Barry M for the following
reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment:
11/18/2019 10:31:48 AM The process Explorer.EXE has initiated the restart of compu
ter THINK on behalf of user THINK\Barry M for the following
reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment:
4/21/2020 5:39:05 PM The process Explorer.EXE has initiated the restart of compu
ter THINK on behalf of user THINK\Barry M for the following
reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment:
5/7/2020 9:23:36 PM The process Explorer.EXE has initiated the restart of compu
ter THINK on behalf of user THINK\Barry M for the following
reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment:
3/26/2020 11:43:46 AM The process Explorer.EXE has initiated the restart of compu
ter THINK on behalf of user THINK\Barry M for the following
reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment:
3/20/2020 8:40:49 PM The process Explorer.EXE has initiated the restart of compu
ter THINK on behalf of user THINK\Barry M for the following
reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment:
7/29/2020 12:40:49 AM The process Explorer.EXE has initiated the restart of compu
ter THINK on behalf of user THINK\Barry M for the following
reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment:
7/26/2020 10:54:29 PM The process Explorer.EXE has initiated the restart of compu
ter THINK on behalf of user THINK\Barry M for the following
reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment:
7/22/2020 5:51:29 PM The process Explorer.EXE has initiated the restart of compu
ter THINK on behalf of user THINK\Barry M for the following
reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment:
6/7/2020 9:04:13 PM The process Explorer.EXE has initiated the restart of compu
ter THINK on behalf of user THINK\Barry M for the following
reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment:
6/1/2020 12:58:10 AM The process Explorer.EXE has initiated the restart of compu
ter THINK on behalf of user THINK\Barry M for the following
reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment:
5/11/2020 10:33:24 PM The process Explorer.EXE has initiated the restart of compu
ter THINK on behalf of user THINK\Barry M for the following
reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment:
7/23/2020 11:11:48 AM The process Explorer.EXE has initiated the restart of compu
ter THINK on behalf of user THINK\Barry M for the following
reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment:
2/4/2020 10:13:18 PM The process Explorer.EXE has initiated the restart of compu
ter THINK on behalf of user THINK\Barry M for the following
reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment:
7/20/2020 12:42:10 AM The process Explorer.EXE has initiated the restart of compu
ter THINK on behalf of user THINK\Barry M for the following
reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment:
8/9/2020 11:43:21 PM The process Explorer.EXE has initiated the restart of compu
ter THINK on behalf of user THINK\Barry M for the following
reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment:
8/12/2020 11:51:53 PM The process Explorer.EXE has initiated the restart of compu
ter THINK on behalf of user THINK\Barry M for the following
reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment:
8/9/2020 11:44:15 PM The process Explorer.EXE has initiated the restart of compu
ter THINK on behalf of user THINK\Barry M for the following
reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment:
2/9/2020 12:31:17 AM The process Explorer.EXE has initiated the restart of compu
ter THINK on behalf of user THINK\Barry M for the following
reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment:
8/6/2020 12:05:56 PM The process Explorer.EXE has initiated the restart of compu
ter THINK on behalf of user THINK\Barry M for the following
reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment:
3/8/2020 9:20:16 PM The process Explorer.EXE has initiated the restart of compu
ter THINK on behalf of user THINK\Barry M for the following
reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment:
3/3/2020 1:37:55 PM The process Explorer.EXE has initiated the restart of compu
ter THINK on behalf of user THINK\Barry M for the following
reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment:
8/9/2020 12:42:14 PM The process Explorer.EXE has initiated the restart of compu
ter THINK on behalf of user THINK\Barry M for the following
reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment:
2/20/2020 8:40:07 PM The process Explorer.EXE has initiated the restart of compu
ter THINK on behalf of user THINK\Barry M for the following
reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment:
PS C:\Windows\system32>
PS C:\Windows\system32> WWWW
The most recent restarts/shutdown in Aug gives a reason code 0x40000 which points to an application issue. msconfig.exe.
Has anyone had you do a clean boot? EDIT:8/17/20 8:25AM CST - I was re-reading the thread and saw where zbook requested a clean startup. Did you perform this per the instructions below? I apologize if I miss something as these threads get quite long and my ADHD kicks in. I also want to make sure we are performing each thing correctly so we do not miss something. I know how frustrating this can be and hope we find a cause and fix soon. The computer still shut down even in safe mode?
If not. https://support.microsoft.com/en-us/help/929135/how-to-perform-a-clean-boot-in-windows
Let it run a while with those non-MS drivers unchecked, then if no shutdown add one at a time and test. Keep note of the one that you check if the symptom comes back.
Has anyone had you do a clean boot? EDIT:8/17/20 8:25AM CST - I was re-reading the thread and saw where zbook requested a clean startup. Did you perform this per the instructions below? I apologize if I miss something as these threads get quite long and my ADHD kicks in. I also want to make sure we are performing each thing correctly so we do not miss something. I know how frustrating this can be and hope we find a cause and fix soon. The computer still shut down even in safe mode?
If not. https://support.microsoft.com/en-us/help/929135/how-to-perform-a-clean-boot-in-windows
Let it run a while with those non-MS drivers unchecked, then if no shutdown add one at a time and test. Keep note of the one that you check if the symptom comes back.
Last edited:
Hi,
Just two questions:
- If you manually put the system to Sleep and after lets say 5 minutes you awake the system it recovers normally?
- What type of power adapter the system uses? its a external transformer like the ones used on laptops or its internal?
Just two questions:
- If you manually put the system to Sleep and after lets say 5 minutes you awake the system it recovers normally?
- What type of power adapter the system uses? its a external transformer like the ones used on laptops or its internal?
Hi xrobwx71-
You said: "I apologize if I miss something as these threads get quite long and my ADHD kicks in."
No apology necessary. Believe me I feel the same way myself. My head is spinning and I'm yelling unprintable things at my computer that I would be embarrassed if anyone heard. It gets worse as the night goes on and eventually turns into early morning. My wife is begging me to just get a new computer and I'm tempted. But I'm no quitter.... or maybe I'm just masochistic.
To answer your question:
On August 10th, as you noted, zbook had me do a clean boot and this was the result. "I uninstalled Kaspersky antivirus, followed the steps to put the computer into clean startup, and put it into sleep mode overnight. In the morning I found it had unexpectedly rebooted."
As always, thank you for your assistance and patience.
You said: "I apologize if I miss something as these threads get quite long and my ADHD kicks in."
No apology necessary. Believe me I feel the same way myself. My head is spinning and I'm yelling unprintable things at my computer that I would be embarrassed if anyone heard. It gets worse as the night goes on and eventually turns into early morning. My wife is begging me to just get a new computer and I'm tempted. But I'm no quitter.... or maybe I'm just masochistic.
To answer your question:
On August 10th, as you noted, zbook had me do a clean boot and this was the result. "I uninstalled Kaspersky antivirus, followed the steps to put the computer into clean startup, and put it into sleep mode overnight. In the morning I found it had unexpectedly rebooted."
As always, thank you for your assistance and patience.
Hi SleepDude-
I haven't tried putting the computer to sleep for only 5 minutes to see if it would shut down in that short a time period. I don't know what amount of time in sleep mode is necessary before it shuts down. I'll experiment and let you know.
My computer is a 6 year old Lenovo All-In-One and the power adapter is internal. I'll just mention also that I have it plugged into a UPS back-up, so I'm pretty sure power fluctuations are not causing it to shut down.
I haven't tried putting the computer to sleep for only 5 minutes to see if it would shut down in that short a time period. I don't know what amount of time in sleep mode is necessary before it shuts down. I'll experiment and let you know.
My computer is a 6 year old Lenovo All-In-One and the power adapter is internal. I'll just mention also that I have it plugged into a UPS back-up, so I'm pretty sure power fluctuations are not causing it to shut down.
Continue addressing @SleepyDude 's advice and thank you for your kind words.
How old is the UPS? I have them go bad at my store about every 2-3 years. I've always used APC until recently, I've switched to Eaton to mitigate the every 2-3 year fail. (Not all have failed in the 3 years I mention but enough to piss me off)
How old is the UPS? I have them go bad at my store about every 2-3 years. I've always used APC until recently, I've switched to Eaton to mitigate the every 2-3 year fail. (Not all have failed in the 3 years I mention but enough to piss me off)
Hi SleepDude-
This was very interesting. For years I put my computer in sleep mode at night. Recently, in the morning I would see that it had rebooted at some point during the night. I assumed it had happened after an hour or two or maybe more. At your suggestion, I tried putting my computer to sleep for only 5 minutes to see if it would shut down in that short a time. It did. So I figured I'd shorten the time even more and see what would happen. Here are the results:
Unintended reboot in 10 seconds!?!?! Virtually as soon as it goes into sleep mode, it causes a reboot. This is very interesting! I had no idea! Perhaps it will trigger another area to investigate.
Thanks so much SleepDude for asking that productive question.
This was very interesting. For years I put my computer in sleep mode at night. Recently, in the morning I would see that it had rebooted at some point during the night. I assumed it had happened after an hour or two or maybe more. At your suggestion, I tried putting my computer to sleep for only 5 minutes to see if it would shut down in that short a time. It did. So I figured I'd shorten the time even more and see what would happen. Here are the results:
Unintended reboot in 10 seconds!?!?! Virtually as soon as it goes into sleep mode, it causes a reboot. This is very interesting! I had no idea! Perhaps it will trigger another area to investigate.
Thanks so much SleepDude for asking that productive question.
xrobwx71-
My UPS is an APC Model BR1000G that I purchased in June of 2016. I had a similar experience to yours with these backups going bad in about 3 years. This one, however has been fine and I've had no issues. My computer never reboots except in sleep mode, and now we know it's happening almost immediately when I put it in sleep mode. So I don't think the UPS is the culprit with my current issue.
By the way, do you think Eaton backups are better than APC?
My UPS is an APC Model BR1000G that I purchased in June of 2016. I had a similar experience to yours with these backups going bad in about 3 years. This one, however has been fine and I've had no issues. My computer never reboots except in sleep mode, and now we know it's happening almost immediately when I put it in sleep mode. So I don't think the UPS is the culprit with my current issue.
By the way, do you think Eaton backups are better than APC?
From my research, not experience yes. Tripp-Lite seems to be another good one if you're on a budget.
This might be my favorite quote on the internet, ever.
Last edited:
That makes sense. On 8/8/2020 I updated drivers prompted by my Lenovo software including:
- Desktop Power Manager
- Intel AHCI Driver - 7 /8.1
- BIOS
So I think the drivers are up to date. I guess the question is what software is involved and how to fix it. I would think it is something in Win 7. And if that's true, I'm thinking the easiest fix might be to do a "repair" using the DVD to install Win 7 I got with my computer.
It would seem that would be the easiest first step and not interfere with other programs and data on my computer. Does that make sense or do you have any other thoughts or suggestions?
Hi,
Did the problem start only after the update on 8/8/2020?
If the same problem happens also when booting in Clean Startup I think it would be difficult to find what is causing the problem but maybe some colleague know a way to find the source of the problem!
Did the problem start only after the update on 8/8/2020?
If the same problem happens also when booting in Clean Startup I think it would be difficult to find what is causing the problem but maybe some colleague know a way to find the source of the problem!
I wonder if it is possible to use the earlier version of Desktop Power Manager
Power Manager by Lenovo - Should I Remove It?
It has something called Doze Mode and perhaps this is not functioning correctly on a Windows 7 computer. The update might address something in Windows 10 that Windows 7 users don't need.
Power Manager by Lenovo - Should I Remove It?
It has something called Doze Mode and perhaps this is not functioning correctly on a Windows 7 computer. The update might address something in Windows 10 that Windows 7 users don't need.
And in safe mode, I believe.
I am still researching but am quickly realizing I'm not going to find a fix.
You're in a good place @Barrymer as we have some phenomenal and knowledgable people here.
To plodr:
I deleted Lenovo's power manager thinking perhaps it was conflicting with the Win 7 power manager. It didn't fix my problem. Actually, since the Win 7 OS already has a power manager, I don't know why Lenovo would install their own redundant version. Of course it had been there for 5 plus years without an issue.
I deleted Lenovo's power manager thinking perhaps it was conflicting with the Win 7 power manager. It didn't fix my problem. Actually, since the Win 7 OS already has a power manager, I don't know why Lenovo would install their own redundant version. Of course it had been there for 5 plus years without an issue.
All of the major manufacturers add their redundant programs. We call it "bloatware". Some of it does good and serves a purpose but there are also many built-in functions that come with Windows that work just as well and in some cases better as it's designed by the very people that built the OS in the first place.
Has Sysnative Forums helped you? Please consider donating to help us support the site!