Windows 10 Windows 10 - PC suddenly restarts itself [Event 41, Kernel-Power: The system has rebooted without cleanly shutting down first./Event 1101: Audit event

[History776]

Hi all,


this is a follow up post from this thread: Blue Screen SYSTEM_SERVICE_EXCEPTION ntoskrnl.exe Windows 10


TLDR version of this previous thread is that I got bluescreens and did not know what to do to fix it. Now, these have gone away, but my PC still at times reboots itself automatically. I sometimes get a very brief blue screen before that, but it also happens (as it did just now) without a bluescreen.


I checked the event log and see the following around the time of the shutdown:


Error [event 6008, Eventlog]: The previous system shutdown at 8:18:38 pm on ‎27/‎2/‎2020 was unexpected.

Details:

- <Event xmlns="

http://schemas.microsoft.com/win/2004/08/events/event

">
- <System>
<Provider Name="EventLog" />
<EventID Qualifiers="32768">6008</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2020-02-27T12:52:50.384403800Z" />
<EventRecordID>8082</EventRecordID>
<Channel>System</Channel>
<Computer>DESKTOP-MJGJ562</Computer>
<Security />
</System>
- <EventData>
<Data>8:18:38 pm</Data>
<Data>‎27/‎2/‎2020</Data>
<Data />
<Data />
<Data>7211</Data>
<Data />
<Data />
<Binary>E407020004001B00140012002600D001E407020004001B000C0012002600D001600900003C000000010000006009000001000000B00400000100000000000000</Binary>
</EventData>
</Event>



Critical [Event 41, Kernel-Power]: The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.

Details:

- <Event xmlns="

http://schemas.microsoft.com/win/2004/08/events/event

">
- <System>
<Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331c3b3a-2005-44c2-ac5e-77220c37d6b4}" />
<EventID>41</EventID>
<Version>6</Version>
<Level>1</Level>
<Task>63</Task>
<Opcode>0</Opcode>
<Keywords>0x8000400000000002</Keywords>
<TimeCreated SystemTime="2020-02-27T12:52:42.299368800Z" />
<EventRecordID>8093</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="8" />
<Channel>System</Channel>
<Computer>DESKTOP-MJGJ562</Computer>
<Security UserID="S-1-5-18" />
</System>
- <EventData>
<Data Name="BugcheckCode">0</Data>
<Data Name="BugcheckParameter1">0x0</Data>
<Data Name="BugcheckParameter2">0x0</Data>
<Data Name="BugcheckParameter3">0x0</Data>
<Data Name="BugcheckParameter4">0x0</Data>
<Data Name="SleepInProgress">0</Data>
<Data Name="PowerButtonTimestamp">0</Data>
<Data Name="BootAppStatus">0</Data>
<Data Name="Checkpoint">0</Data>
<Data Name="ConnectedStandbyInProgress">false</Data>
<Data Name="SystemSleepTransitionsToOn">0</Data>
<Data Name="CsEntryScenarioInstanceId">0</Data>
<Data Name="BugcheckInfoFromEFI">false</Data>
<Data Name="CheckpointStatus">0</Data>
</EventData>
</Event>


Error [event 1101, Eventlog]: Audit events have been dropped by the transport. 0

Details:

- <Event xmlns="

http://schemas.microsoft.com/win/2004/08/events/event

">
- <System>
<Provider Name="Microsoft-Windows-Eventlog" Guid="{fc65ddd8-d6ef-4962-83d5-6e5cfe9ce148}" />
<EventID>1101</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>101</Task>
<Opcode>0</Opcode>
<Keywords>0x4020000000000000</Keywords>
<TimeCreated SystemTime="2020-02-27T12:52:50.696060700Z" />
<EventRecordID>179018</EventRecordID>
<Correlation />
<Execution ProcessID="1624" ThreadID="2540" />
<Channel>Security</Channel>
<Computer>DESKTOP-MJGJ562</Computer>
<Security />
</System>
- <UserData>
- <AuditEventsDropped xmlns="

Loading…

manifests.microsoft.com

">
<Reason>0</Reason>
</AuditEventsDropped>
</UserData>
</Event>

There is no dump file. Any idea what I could do?

Continue reading...