Level Date and Time Source Event ID

Task Category
Information
10/09/2014 21:43:06
USER32 1074
None
"The process C:\
Windows\system32\winlogon.exe (USER-PC) has initiated the power off of computer
USER-PC on behalf of user User-PC\User for the following reason: No title for th
is reason could be found
Reason Code: 0x500ff
Shutdown Type: power off
Comment: "
Information
10/09/2014 21:41:57
USER32 1074
None
"The process Exp
lorer.EXE has initiated the power off of computer USER-PC on behalf of user User
-PC\User for the following reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: power off
Comment: "
Information
09/09/2014 17:11:38
USER32 1074
None
"The process C:\
Windows\system32\winlogon.exe (USER-PC) has initiated the power off of computer
USER-PC on behalf of user User-PC\User for the following reason: No title for th
is reason could be found
Reason Code: 0x500ff
Shutdown Type: power off
Comment: "
Information
09/09/2014 17:11:32
USER32 1074
None
"The process Exp
lorer.EXE has initiated the power off of computer USER-PC on behalf of user User
-PC\User for the following reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: power off
Comment: "
Information
09/09/2014 16:55:04
USER32 1074
None
"The process C:\
Windows\system32\winlogon.exe (USER-PC) has initiated the restart of computer US
ER-PC on behalf of user User-PC\User for the following reason: No title for this
reason could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment: "
Information
09/09/2014 16:54:57
USER32 1074
None
"The process exp
lorer.exe has initiated the restart of computer USER-PC on behalf of user User-P
C\User for the following reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment: "
Information
09/09/2014 10:28:51
USER32 1074
None
"The process C:\
Windows\system32\winlogon.exe (USER-PC) has initiated the restart of computer US
ER-PC on behalf of user User-PC\User for the following reason: No title for this
reason could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment: "
Information
09/09/2014 10:28:04
USER32 1074
None
"The process Exp
lorer.EXE has initiated the restart of computer USER-PC on behalf of user User-P
C\User for the following reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment: "
Information
08/09/2014 7:01:57
USER32 1074
None
"The process C:\
Windows\system32\winlogon.exe (USER-PC) has initiated the power off of computer
USER-PC on behalf of user User-PC\User for the following reason: No title for th
is reason could be found
Reason Code: 0x500ff
Shutdown Type: power off
Comment: "

Information
08/09/2014 7:00:57
USER32 1074
None
"The process Exp
lorer.EXE has initiated the power off of computer USER-PC on behalf of user User
-PC\User for the following reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: power off
Comment: "
Information
03/09/2014 20:52:10
USER32 1074
None
"The process C:\
Windows\system32\winlogon.exe (USER-PC) has initiated the power off of computer
USER-PC on behalf of user User-PC\User for the following reason: No title for th
is reason could be found
Reason Code: 0x500ff
Shutdown Type: power off
Comment: "
Information
03/09/2014 20:51:16
USER32 1074
None
"The process Exp
lorer.EXE has initiated the power off of computer USER-PC on behalf of user User
-PC\User for the following reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: power off
Comment: "
Information
03/09/2014 7:01:31
USER32 1074
None
"The process C:\
Windows\system32\winlogon.exe (USER-PC) has initiated the power off of computer
USER-PC on behalf of user User-PC\User for the following reason: No title for th
is reason could be found
Reason Code: 0x500ff
Shutdown Type: power off
Comment: "
Information
03/09/2014 7:01:03
USER32 1074
None
"The process Exp
lorer.EXE has initiated the power off of computer USER-PC on behalf of user User
-PC\User for the following reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: power off
Comment: "
Information
02/09/2014 17:17:17
USER32 1074
None
"The process C:\
Windows\system32\winlogon.exe (USER-PC) has initiated the power off of computer
USER-PC on behalf of user User-PC\User for the following reason: No title for th
is reason could be found
Reason Code: 0x500ff
Shutdown Type: power off
Comment: "
Information
02/09/2014 17:16:42
USER32 1074
None
"The process Exp
lorer.EXE has initiated the power off of computer USER-PC on behalf of user User
-PC\User for the following reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: power off
Comment: "
Information
01/09/2014 17:20:45
USER32 1074
None
"The process C:\
Windows\system32\winlogon.exe (USER-PC) has initiated the power off of computer
USER-PC on behalf of user User-PC\User for the following reason: No title for th
is reason could be found
Reason Code: 0x500ff
Shutdown Type: power off
Comment: "
Information
01/09/2014 17:20:11
USER32 1074
None
"The process Exp
lorer.EXE has initiated the power off of computer USER-PC on behalf of user User
-PC\User for the following reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: power off
Comment: "
Information
01/09/2014 3:20:04
USER32 1074
None
"The process C:\
Windows\system32\svchost.exe (USER-PC) has initiated the restart of computer USE

R-PC on behalf of user NT AUTHORITY\SYSTEM for the following reason: Operating S

ystem: Recovery (Planned)
Reason Code: 0x80020002
Shutdown Type: restart
Comment: "
Information
31/08/2014 13:09:46
USER32 1074
None
"The process C:\
Windows\system32\svchost.exe (USER-PC) has initiated the restart of computer USE
R-PC on behalf of user NT AUTHORITY\SYSTEM for the following reason: Operating S
ystem: Recovery (Planned)
Reason Code: 0x80020002
Shutdown Type: restart
Comment: "
Information
31/08/2014 3:30:00
USER32 1074
None
"The process C:\
Windows\servicing\TrustedInstaller.exe (USER-PC) has initiated the restart of co
mputer USER-PC on behalf of user NT AUTHORITY\SYSTEM for the following reason: O
perating System: Upgrade (Planned)
Reason Code: 0x80020003
Shutdown Type: restart
Comment: "
Information
30/08/2014 20:17:43
USER32 1074
None
"The process C:\
Windows\system32\winlogon.exe (USER-PC) has initiated the restart of computer US
ER-PC on behalf of user User-PC\User for the following reason: No title for this
reason could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment: "
Information
30/08/2014 16:47:16
USER32 1074
None
"The process C:\
Windows\servicing\TrustedInstaller.exe (USER-PC) has initiated the restart of co
mputer USER-PC on behalf of user NT AUTHORITY\SYSTEM for the following reason: O
perating System: Upgrade (Planned)
Reason Code: 0x80020003
Shutdown Type: restart
Comment: "
Information
30/08/2014 11:47:43
USER32 1074
None
"The process C:\
Windows\system32\winlogon.exe (USER-PC) has initiated the shutdown of computer U
SER-PC on behalf of user User-PC\User for the following reason: No title for thi
s reason could be found
Reason Code: 0x500ff
Shutdown Type: shutdown
Comment: "
Information
30/08/2014 11:47:01
USER32 1074
None
"The process Exp
lorer.EXE has initiated the shutdown of computer USER-PC on behalf of user UserPC\User for the following reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: shutdown
Comment: "
Information
29/08/2014 20:26:56
USER32 1074
None
"The process C:\
Windows\servicing\TrustedInstaller.exe (USER-PC) has initiated the restart of co
mputer USER-PC on behalf of user NT AUTHORITY\SYSTEM for the following reason: O
perating System: Upgrade (Planned)
Reason Code: 0x80020003
Shutdown Type: restart
Comment: "
Information
29/08/2014 20:10:40
USER32 1074
None
"The process C:\
Windows\servicing\TrustedInstaller.exe (USER-PC) has initiated the restart of co
mputer USER-PC on behalf of user NT AUTHORITY\SYSTEM for the following reason: O
perating System: Upgrade (Planned)
Reason Code: 0x80020003
Shutdown Type: restart
Comment: "

Information
29/08/2014 18:19:53
USER32 1074
None
"The process C:\
Windows\system32\winlogon.exe (USER-PC) has initiated the shutdown of computer U
SER-PC on behalf of user User-PC\User for the following reason: No title for thi
s reason could be found
Reason Code: 0x500ff
Shutdown Type: shutdown
Comment: "
Information
29/08/2014 18:18:31
USER32 1074
None
"The process Exp
lorer.EXE has initiated the shutdown of computer USER-PC on behalf of user UserPC\User for the following reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: shutdown
Comment: "
Information
28/08/2014 22:32:20
USER32 1074
None
"The process C:\
Windows\system32\winlogon.exe (USER-PC) has initiated the power off of computer
USER-PC on behalf of user User-PC\User for the following reason: No title for th
is reason could be found
Reason Code: 0x500ff
Shutdown Type: power off
Comment: "
Information
28/08/2014 22:31:20
USER32 1074
None
"The process Exp
lorer.EXE has initiated the power off of computer USER-PC on behalf of user User
-PC\User for the following reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: power off
Comment: "
Information
28/08/2014 8:58:06
USER32 1074
None
"The process C:\
Windows\system32\winlogon.exe (USER-PC) has initiated the restart of computer US
ER-PC on behalf of user User-PC\User for the following reason: No title for this
reason could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment: "
Information
28/08/2014 8:57:56
USER32 1074
None
"The process Exp
lorer.EXE has initiated the restart of computer USER-PC on behalf of user User-P
C\User for the following reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment: "
Information
28/08/2014 6:54:03
USER32 1074
None
"The process C:\
Windows\system32\winlogon.exe (USER-PC) has initiated the power off of computer
USER-PC on behalf of user User-PC\User for the following reason: No title for th
is reason could be found
Reason Code: 0x500ff
Shutdown Type: power off
Comment: "
Information
28/08/2014 6:53:57
USER32 1074
None
"The process Exp
lorer.EXE has initiated the power off of computer USER-PC on behalf of user User
-PC\User for the following reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: power off
Comment: "
Information
28/08/2014 3:59:26
USER32 1074
None
"The process C:\
Windows\servicing\TrustedInstaller.exe (USER-PC) has initiated the restart of co
mputer USER-PC on behalf of user NT AUTHORITY\SYSTEM for the following reason: O
perating System: Upgrade (Planned)
Reason Code: 0x80020003
Shutdown Type: restart
Comment: "
Information
28/08/2014 0:20:58
USER32 1074
None
"The process C:\

Windows\system32\winlogon.exe (USER-PC) has initiated the restart of computer US

ER-PC on behalf of user User-PC\User for the following reason: No title for this
reason could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment: "
Information
28/08/2014 0:10:33
USER32 1074
None
"The process C:\
Windows\system32\winlogon.exe (USER-PC) has initiated the restart of computer US
ER-PC on behalf of user User-PC\User for the following reason: No title for this
reason could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment: "
Information
27/08/2014 20:58:24
USER32 1074
None
"The process C:\
Windows\servicing\TrustedInstaller.exe (USER-PC) has initiated the restart of co
mputer USER-PC on behalf of user NT AUTHORITY\SYSTEM for the following reason: O
perating System: Upgrade (Planned)
Reason Code: 0x80020003
Shutdown Type: restart
Comment: "
Information
27/08/2014 17:32:44
USER32 1074
None
"The process C:\
Windows\system32\winlogon.exe (USER-PC) has initiated the shutdown of computer U
SER-PC on behalf of user User-PC\User for the following reason: No title for thi
s reason could be found
Reason Code: 0x500ff
Shutdown Type: shutdown
Comment: "
Information
27/08/2014 17:32:27
USER32 1074
None
"The process Exp
lorer.EXE has initiated the shutdown of computer USER-PC on behalf of user UserPC\User for the following reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: shutdown
Comment: "
Information
27/08/2014 17:31:45
USER32 1074
None
"The process Exp
lorer.EXE has initiated the shutdown of computer USER-PC on behalf of user UserPC\User for the following reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: shutdown
Comment: "
Information
27/08/2014 10:08:02
USER32 1074
None
"The process C:\
Windows\system32\svchost.exe (USER-PC) has initiated the restart of computer USE
R-PC on behalf of user NT AUTHORITY\SYSTEM for the following reason: Operating S
ystem: Recovery (Planned)
Reason Code: 0x80020002
Shutdown Type: restart
Comment: "
Information
26/08/2014 21:57:04
USER32 1074
None
"The process C:\
Windows\system32\winlogon.exe (USER-PC) has initiated the power off of computer
USER-PC on behalf of user User-PC\User for the following reason: No title for th
is reason could be found
Reason Code: 0x500ff
Shutdown Type: power off
Comment: "
Information
26/08/2014 21:56:57
USER32 1074
None
"The process exp
lorer.exe has initiated the power off of computer USER-PC on behalf of user User
-PC\User for the following reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: power off
Comment: "
Information
26/08/2014 20:51:45
USER32 1074
None
"The process C:\

Windows\system32\winlogon.exe (USER-PC) has initiated the restart of computer US

ER-PC on behalf of user User-PC\User for the following reason: No title for this
reason could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment: "
Information
26/08/2014 18:27:00
USER32 1074
None
"The process C:\
Windows\system32\winlogon.exe (USER-PC) has initiated the restart of computer US
ER-PC on behalf of user User-PC\User for the following reason: No title for this
reason could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment: "
Information
26/08/2014 18:26:42
USER32 1074
None
"The process exp
lorer.exe has initiated the restart of computer USER-PC on behalf of user User-P
C\User for the following reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment: "
Information
26/08/2014 9:38:02
USER32 1074
None
"The process C:\
Windows\system32\winlogon.exe (USER-PC) has initiated the power off of computer
USER-PC on behalf of user User-PC\User for the following reason: No title for th
is reason could be found
Reason Code: 0x500ff
Shutdown Type: power off
Comment: "
Information
26/08/2014 9:37:58
USER32 1074
None
"The process exp
lorer.exe has initiated the power off of computer USER-PC on behalf of user User
-PC\User for the following reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: power off
Comment: "
Information
26/08/2014 6:14:29
USER32 1074
None
"The process C:\
Windows\system32\winlogon.exe (USER-PC) has initiated the power off of computer
USER-PC on behalf of user User-PC\User for the following reason: No title for th
is reason could be found
Reason Code: 0x500ff
Shutdown Type: power off
Comment: "
Information
26/08/2014 6:14:24
USER32 1074
None
"The process exp
lorer.exe has initiated the power off of computer USER-PC on behalf of user User
-PC\User for the following reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: power off
Comment: "
Information
25/08/2014 18:22:32
USER32 1074
None
"The process C:\
Windows\system32\winlogon.exe (USER-PC) has initiated the power off of computer
USER-PC on behalf of user User-PC\User for the following reason: No title for th
is reason could be found
Reason Code: 0x500ff
Shutdown Type: power off
Comment: "
Information
25/08/2014 18:22:26
USER32 1074
None
"The process Exp
lorer.EXE has initiated the power off of computer USER-PC on behalf of user User
-PC\User for the following reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: power off
Comment: "
Information
25/08/2014 9:08:31
USER32 1074
None
"The process C:\
Windows\system32\winlogon.exe (USER-PC) has initiated the power off of computer

USER-PC on behalf of user User-PC\User for the following reason: No title for th
is reason could be found
Reason Code: 0x500ff
Shutdown Type: power off
Comment: "
Information
25/08/2014 9:08:02
USER32 1074
None
"The process Exp
lorer.EXE has initiated the power off of computer USER-PC on behalf of user User
-PC\User for the following reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: power off
Comment: "
Information
23/08/2014 19:45:29
USER32 1074
None
"The process C:\
Windows\system32\winlogon.exe (USER-PC) has initiated the restart of computer US
ER-PC on behalf of user User-PC\User for the following reason: No title for this
reason could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment: "
Information
23/08/2014 19:45:25
USER32 1074
None
"The process exp
lorer.exe has initiated the restart of computer USER-PC on behalf of user User-P
C\User for the following reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment: "
Information
23/08/2014 15:49:29
USER32 1074
None
"The process C:\
Windows\system32\winlogon.exe (USER-PC) has initiated the power off of computer
USER-PC on behalf of user User-PC\User for the following reason: No title for th
is reason could be found
Reason Code: 0x500ff
Shutdown Type: power off
Comment: "
Information
23/08/2014 15:49:25
USER32 1074
None
"The process exp
lorer.exe has initiated the power off of computer USER-PC on behalf of user User
-PC\User for the following reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: power off
Comment: "
Information
23/08/2014 15:43:21
USER32 1074
None
"The process C:\
Windows\system32\winlogon.exe (USER-PC) has initiated the restart of computer US
ER-PC on behalf of user User-PC\User for the following reason: No title for this
reason could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment: "
Information
23/08/2014 15:43:01
USER32 1074
None
"The process Exp
lorer.EXE has initiated the restart of computer USER-PC on behalf of user User-P
C\User for the following reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment: "
Information
22/08/2014 17:42:33
USER32 1074
None
"The process C:\
Windows\system32\winlogon.exe (USER-PC) has initiated the power off of computer
USER-PC on behalf of user User-PC\User for the following reason: No title for th
is reason could be found
Reason Code: 0x500ff
Shutdown Type: power off
Comment: "
Information
22/08/2014 17:42:21
USER32 1074
None
"The process exp
lorer.exe has initiated the power off of computer USER-PC on behalf of user User
-PC\User for the following reason: Other (Unplanned)

Reason Code: 0x0

Shutdown Type: power off
Comment: "
Information
22/08/2014 16:36:33
USER32 1074
None
"The process exp
lorer.exe has initiated the power off of computer USER-PC on behalf of user User
-PC\User for the following reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: power off
Comment: "
Information
22/08/2014 6:51:09
USER32 1074
None
"The process C:\
Windows\system32\winlogon.exe (USER-PC) has initiated the power off of computer
USER-PC on behalf of user User-PC\User for the following reason: No title for th
is reason could be found
Reason Code: 0x500ff
Shutdown Type: power off
Comment: "
Information
22/08/2014 6:50:52
USER32 1074
None
"The process exp
lorer.exe has initiated the power off of computer USER-PC on behalf of user User
-PC\User for the following reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: power off
Comment: "
Information
21/08/2014 7:30:15
USER32 1074
None
"The process C:\
Windows\system32\winlogon.exe (USER-PC) has initiated the power off of computer
USER-PC on behalf of user User-PC\User for the following reason: No title for th
is reason could be found
Reason Code: 0x500ff
Shutdown Type: power off
Comment: "
Information
21/08/2014 7:29:54
USER32 1074
None
"The process Exp
lorer.EXE has initiated the power off of computer USER-PC on behalf of user User
-PC\User for the following reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: power off
Comment: "
Information
19/08/2014 18:37:35
USER32 1074
None
"The process C:\
Windows\system32\winlogon.exe (USER-PC) has initiated the power off of computer
USER-PC on behalf of user User-PC\User for the following reason: No title for th
is reason could be found
Reason Code: 0x500ff
Shutdown Type: power off
Comment: "
Information
19/08/2014 18:37:23
USER32 1074
None
"The process exp
lorer.exe has initiated the power off of computer USER-PC on behalf of user User
-PC\User for the following reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: power off
Comment: "
Information
19/08/2014 16:40:38
USER32 1074
None
"The process C:\
Windows\system32\winlogon.exe (USER-PC) has initiated the restart of computer US
ER-PC on behalf of user User-PC\User for the following reason: No title for this
reason could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment: "
Information
19/08/2014 16:39:50
USER32 1074
None
"The process Exp
lorer.EXE has initiated the restart of computer USER-PC on behalf of user User-P
C\User for the following reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart

Comment: "