Share via

How can you find the cause of unexpected shutdown after you put your computer to sleep?

Anonymous
2015-08-17T02:06:08+00:00

I have Windows 7 64-bit. Lately, i have been noticing that i put my computer to sleep and then when i try to awake it has actually been shutdown. How can i find out what is causing this behavior? It is not BSOD. When i start windows normally i get the message in windows environment "Windows shutdown unexpectedly Windows will try to find solution if can..." etc?

Windows for home | Previous Windows versions | Windows update

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments No comments
Answer accepted by question author
  1. Anonymous
    2015-09-16T07:14:16+00:00

    Hi,

    Sorry for the delay in response.

    Thank you for posting your query at Microsoft community.

    You may use the

    Press the Windows + R keys to open the Run dialog, type eventvwr.msc, and press Enter.

     If prompted by UAC, then click/tap on Yes

    In the left pane of Event Viewer, double click/tap on Windows Logs to expand it, click on System to select it, then right click on System, and click/tap on Filter Current Log.

    To See the Dates and Times of All User Shut Downs of the Computer

    Click/tap on the drop down arrow to the right of Event sources, check the USER32 box, and click/tap in the <All Event IDs> field.

    In the <All Event IDs> field, type 1074, then click/tap on OK

    ****This will give you a list of power off (shutdown) and restart Shutdown Type of events at the top of the middle pane in Event Viewer.

    You can scroll through these listed events to find the events with power off as the Shutdown Type. You will notice the date and time, and what user was responsible for shutting down the computer per power off event listed.

    To See the Dates and Times of All Unexpected Shut Downs of the Computer

    In the <All Event IDs> field, type 6008, then click/tap on OK.

    This will give you a list of unexpected shutdown events at the top of the middle pane in Event Viewer. You can scroll through these listed events to see the the date and time of each one.

    When finished, you can close Event Viewer.

    Hope the information provided was helpful and do let us know if you need any assistance in the future. We will be glad to help.

    200+ people found this answer helpful.
    0 comments No comments

7 additional answers

Sort by: Most helpful
  1. Anonymous
    2016-11-19T16:43:11+00:00

    I have the same problem, as my PC has taken to rebooting itself with no reason known to me.

    I had already identified before searching and finding this page from the Event Viewer that these shutdowns were classed as 6008: Windows shutdown (unexpectedly). I also know when they occurred, but that is of no interest.

    The help needed is to identify WHY this is happening in order to take the required steps to prevent something that is causing huge problems and days of extra work.

    Thank you.

    40+ people found this answer helpful.
    0 comments No comments
  2. Anonymous
    2016-12-12T13:00:11+00:00

    Thank you for your reply, however this occurred a month ago and if it hadn't been resolved now I would have had to replace my hardware just to get around it. I have been working on this day and night for weeks and no information that I found was particularly helpful.

    I am aware that it "can be caused by both hardware and software issues", but it was pretty clear that it was a result of upgrading to Windows 10 in some way. However trial and error for adjusting settings all over the place seemed the only option as unfortunately I was too late to go back to Windows 7.

    No hardware changes were needed in fixing this, however one option to be seriously considered will be new hardware with Windows 7 installed in order to avoid the incredibly annoying and time-wasting "improvements" of Windows 10. The insistence of Microsoft now in treating their customers as babies and not allowing us to control how our own systems operate and meet our requirements makes me really want to look at alternatives to Windows altogether. Sadly this is likely to be prohibitive (in time, if not financially), especially following the wasted weeks following this "upgrade".

    20+ people found this answer helpful.
    0 comments No comments
  3. Anonymous
    2017-07-04T16:03:38+00:00

    Well I followed these steps and opened the event log using the filter user32 and code 6008 - keep in mind my computer just told me it had recovered from an unexpected shutdown after I found it turned off after leaving it in sleep mode - but it does not list any events here. Nada. Zip. Zilch. What do you suppose this could mean?

    10+ people found this answer helpful.
    0 comments No comments
  4. Anonymous
    2017-07-04T16:05:33+00:00

    I am using a Lenovo ThinkPad running Windows 7 Pro 64 bit.

    2 people found this answer helpful.
    0 comments No comments