| Event Id | 6008 |
| Source | User32 |
| Description | The previous system shutdown at %1 on %2 was unexpected. |
| Event Information | According to Microsoft : Cause : This event is written during startup following an unexpected restart or shutdown. An unexpected restart or shutdown is one that the system cannot anticipate, such as when the user pushes the computer's reset button or unplugs the power cord. If the Persistent Time Stamp group policy setting is either enabled or not configured, system information is written to the data section of this event. This information includes a timestamp that indicates the computer's uptime in seconds before the unexpected shutdown occurred. Resolution: One or more of the following options might help to determine the cause of the unexpected shutdown: 1.Check the system event log for other events that occurred around the same time as the unexpected shutdown. 2.Find out whether the computer's reset button was pressed, the power cord was unplugged, or a general power failure occurred. |
| Reference Links | Event ID 6008 from Source User32 |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.