PC shuts down

[noob00224]

Hello,

Can't remember when this started, but the PC shuts down randomly. Power does not cut off, Windows behaves as if it was told to shut down. Happens once a month/two mounts.

Don't believe there is a overheating issue. Sleep/hibernate are disabled.

I've noted the time and date and looked in Event Viewer, but didn't find anything for that time. Not sure where to look though.

It's a desktop. The PSU is more than enough for the hardware's requirements.

Any ideas?

[noob00224]

Win10x64 Pro 1909 18363.778.

I've noted the time and date and looked in Event Viewer. There are multiple entries at the time when this happened, but I think this is the one (?):

There are a few threads on this topic but no solution:

- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="User32" Guid="{b0aa8734-56f7-41cc-b2f4-de228e98b946}" EventSourceName="User32" />
  <EventID Qualifiers="32768">1074</EventID>
  <Version>0</Version>
  <Level>4</Level>
  <Task>0</Task>
  <Opcode>0</Opcode>
  <Keywords>0x8080000000000000</Keywords>
  <TimeCreated SystemTime="2020-05-18T12:43:50.910592000Z" />
  <EventRecordID>81091</EventRecordID>
  <Correlation />
  <Execution ProcessID="680" ThreadID="5996" />
  <Channel>System</Channel>
  <Computer>DESKTOP-</Computer>
  <Security UserID="S-1-5-18" />
  </System>
- <EventData>
  <Data Name="param1">C:\WINDOWS\system32\winlogon.exe (DESKTOP-)</Data>
  <Data Name="param2">DESKTOP-</Data>
  <Data Name="param3">No title for this reason could be found</Data>
  <Data Name="param4">0x500ff</Data>
  <Data Name="param5">power off</Data>
  <Data Name="param6" />
  <Data Name="param7">NT AUTHORITY\SYSTEM</Data>
  </EventData>
  </Event>

 

 

[homeap5]

You have process ID so find that process in task manager. Also use Autoruns to check what unwanted program or task is present in your system.

[noob00224]

14 hours ago, homeap5 said:

You have process ID so find that process in task manager. Also use Autoruns to check what unwanted program or task is present in your system.

 

ProcessID=680

csrss.exe
Client Server Runtime Process

 

What does this mean?

[homeap5]

4 hours ago, noob00224 said:

 

ProcessID=680

csrss.exe
Client Server Runtime Process

 

What does this mean?

Not so much in your case, but I also give you info about Autoruns.

[noob00224]

Happened again, with the same code. Is there something different from last time that stands out?

 

The process C:\WINDOWS\system32\winlogon.exe (DESKTOP-) has initiated the power off of computer DESKTOP- on behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for this reason could be found
 Reason Code: 0x500ff
 Shutdown Type: power off
 Comment:

 

- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

- <System>

  <Provider Name="User32" Guid="{b0aa8734-56f7-41cc-b2f4-de228e98b946}" EventSourceName="User32" />

  <EventID Qualifiers="32768">1074</EventID>

  <Version>0</Version>

  <Level>4</Level>

  <Task>0</Task>

  <Opcode>0</Opcode>

  <Keywords>0x8080000000000000</Keywords>

  <TimeCreated SystemTime="2020-06-30T18:48:14.986117200Z" />

  <EventRecordID>101057</EventRecordID>

  <Correlation />

  <Execution ProcessID="720" ThreadID="736" />

  <Channel>System</Channel>

  <Computer>DESKTOP-</Computer>

  <Security UserID="S-1-5-18" />

  </System>

- <EventData>

  <Data Name="param1">C:\WINDOWS\system32\winlogon.exe (DESKTOP-)</Data>

  <Data Name="param2">DESKTOP-</Data>

  <Data Name="param3">No title for this reason could be found</Data>

  <Data Name="param4">0x500ff</Data>

  <Data Name="param5">power off</Data>

  <Data Name="param6" />

  <Data Name="param7">NT AUTHORITY\SYSTEM</Data>

  </EventData>

  </Event>