system boots unexpected

Question

Every evening at 22:00 a backup is made, after the backup the following command is issued : "shutdown /f /s". So the system is down.
In one night every 2 weeks at 3:00 the system is booted. Unattended
What could be the reason of the boot?

Answer 1

@Hans van der Aa

Blockquote

De geplande taak NT TASK\2BrightSparks\SyncBackProx64\AAWRK01-Hans\SyncBackPro PLEX_DATA wordt uitgevoerd, waarmee het inschakelen van de computer wordt aangevraagd.

Blockquote

We have the culprit here

Check with SyncBackPro options and remove the task.
This one should be found also on Scheduled Tasks.

Answer 2

PS C:\WINDOWS\system32> powercfg -lastwake
Wake History Count - 0
PS C:\WINDOWS\system32> powercfg -waketimers
Timer set by [SERVICE] \Device\HarddiskVolume2\Windows\System32\svchost.exe (SystemEventsBroker) expires at 11:59:30 on 2020-11-01.
Reason: De geplande taak NT TASK\2BrightSparks\SyncBackProx64\AAWRK01-Hans\SyncBackPro PLEX_DATA wordt uitgevoerd, waarmee het inschakelen van de computer wordt aangevraagd.

Timer set by [SERVICE] \Device\HarddiskVolume2\Program Files (x86)\EaseUS\Todo Backup\bin\Agent.exe (EaseUS Agent) expires at 10:59:00 on 2020-11-08.

Timer set by [SERVICE] \Device\HarddiskVolume2\Program Files (x86)\EaseUS\Todo Backup\bin\Agent.exe (EaseUS Agent) expires at 21:59:00 on 2020-11-01.

Timer set by [PROCESS] \Device\HarddiskVolume2\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe expires at 21:59:00 on 2020-11-01.
PS C:\WINDOWS\system32> powercfg -devicequery wake_armed
Realtek PCIe GbE Family Controller
HID-toetsenbordapparaat
HID-muis

Answer 3

This solved the issue
Thanks @Spigolo

Answer 4

You're very welcome @Hans van der Aa