0% found this document useful (0 votes)
207 views9 pages

Log Time

The document contains event log entries recording various shutdown, restart, and power off events on a computer called USER-PC over a period of time. The shutdowns were initiated by either the winlogon.exe or explorer.exe processes on behalf of users for reasons like upgrades, recovery, or described as unplanned. The logs provide details on the process, user, reason code, and shutdown/restart type for each event.
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as TXT, PDF, TXT or read online on Scribd
0% found this document useful (0 votes)
207 views9 pages

Log Time

The document contains event log entries recording various shutdown, restart, and power off events on a computer called USER-PC over a period of time. The shutdowns were initiated by either the winlogon.exe or explorer.exe processes on behalf of users for reasons like upgrades, recovery, or described as unplanned. The logs provide details on the process, user, reason code, and shutdown/restart type for each event.
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as TXT, PDF, TXT or read online on Scribd
You are on page 1/ 9

Level Date and Time Source Event ID

Task Category
Information
10/09/2014 21:43:06
USER32 1074
None
"The process C:\
Windows\system32\winlogon.exe (USER-PC) has initiated the power off of computer
USER-PC on behalf of user User-PC\User for the following reason: No title for th
is reason could be found
Reason Code: 0x500ff
Shutdown Type: power off
Comment: "
Information
10/09/2014 21:41:57
USER32 1074
None
"The process Exp
lorer.EXE has initiated the power off of computer USER-PC on behalf of user User
-PC\User for the following reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: power off
Comment: "
Information
09/09/2014 17:11:38
USER32 1074
None
"The process C:\
Windows\system32\winlogon.exe (USER-PC) has initiated the power off of computer
USER-PC on behalf of user User-PC\User for the following reason: No title for th
is reason could be found
Reason Code: 0x500ff
Shutdown Type: power off
Comment: "
Information
09/09/2014 17:11:32
USER32 1074
None
"The process Exp
lorer.EXE has initiated the power off of computer USER-PC on behalf of user User
-PC\User for the following reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: power off
Comment: "
Information
09/09/2014 16:55:04
USER32 1074
None
"The process C:\
Windows\system32\winlogon.exe (USER-PC) has initiated the restart of computer US
ER-PC on behalf of user User-PC\User for the following reason: No title for this
reason could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment: "
Information
09/09/2014 16:54:57
USER32 1074
None
"The process exp
lorer.exe has initiated the restart of computer USER-PC on behalf of user User-P
C\User for the following reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment: "
Information
09/09/2014 10:28:51
USER32 1074
None
"The process C:\
Windows\system32\winlogon.exe (USER-PC) has initiated the restart of computer US
ER-PC on behalf of user User-PC\User for the following reason: No title for this
reason could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment: "
Information
09/09/2014 10:28:04
USER32 1074
None
"The process Exp
lorer.EXE has initiated the restart of computer USER-PC on behalf of user User-P
C\User for the following reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment: "
Information
08/09/2014 7:01:57
USER32 1074
None
"The process C:\
Windows\system32\winlogon.exe (USER-PC) has initiated the power off of computer
USER-PC on behalf of user User-PC\User for the following reason: No title for th
is reason could be found
Reason Code: 0x500ff
Shutdown Type: power off
Comment: "

Information
08/09/2014 7:00:57
USER32 1074
None
"The process Exp
lorer.EXE has initiated the power off of computer USER-PC on behalf of user User
-PC\User for the following reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: power off
Comment: "
Information
03/09/2014 20:52:10
USER32 1074
None
"The process C:\
Windows\system32\winlogon.exe (USER-PC) has initiated the power off of computer
USER-PC on behalf of user User-PC\User for the following reason: No title for th
is reason could be found
Reason Code: 0x500ff
Shutdown Type: power off
Comment: "
Information
03/09/2014 20:51:16
USER32 1074
None
"The process Exp
lorer.EXE has initiated the power off of computer USER-PC on behalf of user User
-PC\User for the following reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: power off
Comment: "
Information
03/09/2014 7:01:31
USER32 1074
None
"The process C:\
Windows\system32\winlogon.exe (USER-PC) has initiated the power off of computer
USER-PC on behalf of user User-PC\User for the following reason: No title for th
is reason could be found
Reason Code: 0x500ff
Shutdown Type: power off
Comment: "
Information
03/09/2014 7:01:03
USER32 1074
None
"The process Exp
lorer.EXE has initiated the power off of computer USER-PC on behalf of user User
-PC\User for the following reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: power off
Comment: "
Information
02/09/2014 17:17:17
USER32 1074
None
"The process C:\
Windows\system32\winlogon.exe (USER-PC) has initiated the power off of computer
USER-PC on behalf of user User-PC\User for the following reason: No title for th
is reason could be found
Reason Code: 0x500ff
Shutdown Type: power off
Comment: "
Information
02/09/2014 17:16:42
USER32 1074
None
"The process Exp
lorer.EXE has initiated the power off of computer USER-PC on behalf of user User
-PC\User for the following reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: power off
Comment: "
Information
01/09/2014 17:20:45
USER32 1074
None
"The process C:\
Windows\system32\winlogon.exe (USER-PC) has initiated the power off of computer
USER-PC on behalf of user User-PC\User for the following reason: No title for th
is reason could be found
Reason Code: 0x500ff
Shutdown Type: power off
Comment: "
Information
01/09/2014 17:20:11
USER32 1074
None
"The process Exp
lorer.EXE has initiated the power off of computer USER-PC on behalf of user User
-PC\User for the following reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: power off
Comment: "
Information
01/09/2014 3:20:04
USER32 1074
None
"The process C:\
Windows\system32\svchost.exe (USER-PC) has initiated the restart of computer USE

R-PC on behalf of user NT AUTHORITY\SYSTEM for the following reason: Operating S


ystem: Recovery (Planned)
Reason Code: 0x80020002
Shutdown Type: restart
Comment: "
Information
31/08/2014 13:09:46
USER32 1074
None
"The process C:\
Windows\system32\svchost.exe (USER-PC) has initiated the restart of computer USE
R-PC on behalf of user NT AUTHORITY\SYSTEM for the following reason: Operating S
ystem: Recovery (Planned)
Reason Code: 0x80020002
Shutdown Type: restart
Comment: "
Information
31/08/2014 3:30:00
USER32 1074
None
"The process C:\
Windows\servicing\TrustedInstaller.exe (USER-PC) has initiated the restart of co
mputer USER-PC on behalf of user NT AUTHORITY\SYSTEM for the following reason: O
perating System: Upgrade (Planned)
Reason Code: 0x80020003
Shutdown Type: restart
Comment: "
Information
30/08/2014 20:17:43
USER32 1074
None
"The process C:\
Windows\system32\winlogon.exe (USER-PC) has initiated the restart of computer US
ER-PC on behalf of user User-PC\User for the following reason: No title for this
reason could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment: "
Information
30/08/2014 16:47:16
USER32 1074
None
"The process C:\
Windows\servicing\TrustedInstaller.exe (USER-PC) has initiated the restart of co
mputer USER-PC on behalf of user NT AUTHORITY\SYSTEM for the following reason: O
perating System: Upgrade (Planned)
Reason Code: 0x80020003
Shutdown Type: restart
Comment: "
Information
30/08/2014 11:47:43
USER32 1074
None
"The process C:\
Windows\system32\winlogon.exe (USER-PC) has initiated the shutdown of computer U
SER-PC on behalf of user User-PC\User for the following reason: No title for thi
s reason could be found
Reason Code: 0x500ff
Shutdown Type: shutdown
Comment: "
Information
30/08/2014 11:47:01
USER32 1074
None
"The process Exp
lorer.EXE has initiated the shutdown of computer USER-PC on behalf of user UserPC\User for the following reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: shutdown
Comment: "
Information
29/08/2014 20:26:56
USER32 1074
None
"The process C:\
Windows\servicing\TrustedInstaller.exe (USER-PC) has initiated the restart of co
mputer USER-PC on behalf of user NT AUTHORITY\SYSTEM for the following reason: O
perating System: Upgrade (Planned)
Reason Code: 0x80020003
Shutdown Type: restart
Comment: "
Information
29/08/2014 20:10:40
USER32 1074
None
"The process C:\
Windows\servicing\TrustedInstaller.exe (USER-PC) has initiated the restart of co
mputer USER-PC on behalf of user NT AUTHORITY\SYSTEM for the following reason: O
perating System: Upgrade (Planned)
Reason Code: 0x80020003
Shutdown Type: restart
Comment: "

Information
29/08/2014 18:19:53
USER32 1074
None
"The process C:\
Windows\system32\winlogon.exe (USER-PC) has initiated the shutdown of computer U
SER-PC on behalf of user User-PC\User for the following reason: No title for thi
s reason could be found
Reason Code: 0x500ff
Shutdown Type: shutdown
Comment: "
Information
29/08/2014 18:18:31
USER32 1074
None
"The process Exp
lorer.EXE has initiated the shutdown of computer USER-PC on behalf of user UserPC\User for the following reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: shutdown
Comment: "
Information
28/08/2014 22:32:20
USER32 1074
None
"The process C:\
Windows\system32\winlogon.exe (USER-PC) has initiated the power off of computer
USER-PC on behalf of user User-PC\User for the following reason: No title for th
is reason could be found
Reason Code: 0x500ff
Shutdown Type: power off
Comment: "
Information
28/08/2014 22:31:20
USER32 1074
None
"The process Exp
lorer.EXE has initiated the power off of computer USER-PC on behalf of user User
-PC\User for the following reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: power off
Comment: "
Information
28/08/2014 8:58:06
USER32 1074
None
"The process C:\
Windows\system32\winlogon.exe (USER-PC) has initiated the restart of computer US
ER-PC on behalf of user User-PC\User for the following reason: No title for this
reason could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment: "
Information
28/08/2014 8:57:56
USER32 1074
None
"The process Exp
lorer.EXE has initiated the restart of computer USER-PC on behalf of user User-P
C\User for the following reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment: "
Information
28/08/2014 6:54:03
USER32 1074
None
"The process C:\
Windows\system32\winlogon.exe (USER-PC) has initiated the power off of computer
USER-PC on behalf of user User-PC\User for the following reason: No title for th
is reason could be found
Reason Code: 0x500ff
Shutdown Type: power off
Comment: "
Information
28/08/2014 6:53:57
USER32 1074
None
"The process Exp
lorer.EXE has initiated the power off of computer USER-PC on behalf of user User
-PC\User for the following reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: power off
Comment: "
Information
28/08/2014 3:59:26
USER32 1074
None
"The process C:\
Windows\servicing\TrustedInstaller.exe (USER-PC) has initiated the restart of co
mputer USER-PC on behalf of user NT AUTHORITY\SYSTEM for the following reason: O
perating System: Upgrade (Planned)
Reason Code: 0x80020003
Shutdown Type: restart
Comment: "
Information
28/08/2014 0:20:58
USER32 1074
None
"The process C:\

Windows\system32\winlogon.exe (USER-PC) has initiated the restart of computer US


ER-PC on behalf of user User-PC\User for the following reason: No title for this
reason could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment: "
Information
28/08/2014 0:10:33
USER32 1074
None
"The process C:\
Windows\system32\winlogon.exe (USER-PC) has initiated the restart of computer US
ER-PC on behalf of user User-PC\User for the following reason: No title for this
reason could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment: "
Information
27/08/2014 20:58:24
USER32 1074
None
"The process C:\
Windows\servicing\TrustedInstaller.exe (USER-PC) has initiated the restart of co
mputer USER-PC on behalf of user NT AUTHORITY\SYSTEM for the following reason: O
perating System: Upgrade (Planned)
Reason Code: 0x80020003
Shutdown Type: restart
Comment: "
Information
27/08/2014 17:32:44
USER32 1074
None
"The process C:\
Windows\system32\winlogon.exe (USER-PC) has initiated the shutdown of computer U
SER-PC on behalf of user User-PC\User for the following reason: No title for thi
s reason could be found
Reason Code: 0x500ff
Shutdown Type: shutdown
Comment: "
Information
27/08/2014 17:32:27
USER32 1074
None
"The process Exp
lorer.EXE has initiated the shutdown of computer USER-PC on behalf of user UserPC\User for the following reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: shutdown
Comment: "
Information
27/08/2014 17:31:45
USER32 1074
None
"The process Exp
lorer.EXE has initiated the shutdown of computer USER-PC on behalf of user UserPC\User for the following reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: shutdown
Comment: "
Information
27/08/2014 10:08:02
USER32 1074
None
"The process C:\
Windows\system32\svchost.exe (USER-PC) has initiated the restart of computer USE
R-PC on behalf of user NT AUTHORITY\SYSTEM for the following reason: Operating S
ystem: Recovery (Planned)
Reason Code: 0x80020002
Shutdown Type: restart
Comment: "
Information
26/08/2014 21:57:04
USER32 1074
None
"The process C:\
Windows\system32\winlogon.exe (USER-PC) has initiated the power off of computer
USER-PC on behalf of user User-PC\User for the following reason: No title for th
is reason could be found
Reason Code: 0x500ff
Shutdown Type: power off
Comment: "
Information
26/08/2014 21:56:57
USER32 1074
None
"The process exp
lorer.exe has initiated the power off of computer USER-PC on behalf of user User
-PC\User for the following reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: power off
Comment: "
Information
26/08/2014 20:51:45
USER32 1074
None
"The process C:\

Windows\system32\winlogon.exe (USER-PC) has initiated the restart of computer US


ER-PC on behalf of user User-PC\User for the following reason: No title for this
reason could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment: "
Information
26/08/2014 18:27:00
USER32 1074
None
"The process C:\
Windows\system32\winlogon.exe (USER-PC) has initiated the restart of computer US
ER-PC on behalf of user User-PC\User for the following reason: No title for this
reason could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment: "
Information
26/08/2014 18:26:42
USER32 1074
None
"The process exp
lorer.exe has initiated the restart of computer USER-PC on behalf of user User-P
C\User for the following reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment: "
Information
26/08/2014 9:38:02
USER32 1074
None
"The process C:\
Windows\system32\winlogon.exe (USER-PC) has initiated the power off of computer
USER-PC on behalf of user User-PC\User for the following reason: No title for th
is reason could be found
Reason Code: 0x500ff
Shutdown Type: power off
Comment: "
Information
26/08/2014 9:37:58
USER32 1074
None
"The process exp
lorer.exe has initiated the power off of computer USER-PC on behalf of user User
-PC\User for the following reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: power off
Comment: "
Information
26/08/2014 6:14:29
USER32 1074
None
"The process C:\
Windows\system32\winlogon.exe (USER-PC) has initiated the power off of computer
USER-PC on behalf of user User-PC\User for the following reason: No title for th
is reason could be found
Reason Code: 0x500ff
Shutdown Type: power off
Comment: "
Information
26/08/2014 6:14:24
USER32 1074
None
"The process exp
lorer.exe has initiated the power off of computer USER-PC on behalf of user User
-PC\User for the following reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: power off
Comment: "
Information
25/08/2014 18:22:32
USER32 1074
None
"The process C:\
Windows\system32\winlogon.exe (USER-PC) has initiated the power off of computer
USER-PC on behalf of user User-PC\User for the following reason: No title for th
is reason could be found
Reason Code: 0x500ff
Shutdown Type: power off
Comment: "
Information
25/08/2014 18:22:26
USER32 1074
None
"The process Exp
lorer.EXE has initiated the power off of computer USER-PC on behalf of user User
-PC\User for the following reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: power off
Comment: "
Information
25/08/2014 9:08:31
USER32 1074
None
"The process C:\
Windows\system32\winlogon.exe (USER-PC) has initiated the power off of computer

USER-PC on behalf of user User-PC\User for the following reason: No title for th
is reason could be found
Reason Code: 0x500ff
Shutdown Type: power off
Comment: "
Information
25/08/2014 9:08:02
USER32 1074
None
"The process Exp
lorer.EXE has initiated the power off of computer USER-PC on behalf of user User
-PC\User for the following reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: power off
Comment: "
Information
23/08/2014 19:45:29
USER32 1074
None
"The process C:\
Windows\system32\winlogon.exe (USER-PC) has initiated the restart of computer US
ER-PC on behalf of user User-PC\User for the following reason: No title for this
reason could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment: "
Information
23/08/2014 19:45:25
USER32 1074
None
"The process exp
lorer.exe has initiated the restart of computer USER-PC on behalf of user User-P
C\User for the following reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment: "
Information
23/08/2014 15:49:29
USER32 1074
None
"The process C:\
Windows\system32\winlogon.exe (USER-PC) has initiated the power off of computer
USER-PC on behalf of user User-PC\User for the following reason: No title for th
is reason could be found
Reason Code: 0x500ff
Shutdown Type: power off
Comment: "
Information
23/08/2014 15:49:25
USER32 1074
None
"The process exp
lorer.exe has initiated the power off of computer USER-PC on behalf of user User
-PC\User for the following reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: power off
Comment: "
Information
23/08/2014 15:43:21
USER32 1074
None
"The process C:\
Windows\system32\winlogon.exe (USER-PC) has initiated the restart of computer US
ER-PC on behalf of user User-PC\User for the following reason: No title for this
reason could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment: "
Information
23/08/2014 15:43:01
USER32 1074
None
"The process Exp
lorer.EXE has initiated the restart of computer USER-PC on behalf of user User-P
C\User for the following reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart
Comment: "
Information
22/08/2014 17:42:33
USER32 1074
None
"The process C:\
Windows\system32\winlogon.exe (USER-PC) has initiated the power off of computer
USER-PC on behalf of user User-PC\User for the following reason: No title for th
is reason could be found
Reason Code: 0x500ff
Shutdown Type: power off
Comment: "
Information
22/08/2014 17:42:21
USER32 1074
None
"The process exp
lorer.exe has initiated the power off of computer USER-PC on behalf of user User
-PC\User for the following reason: Other (Unplanned)

Reason Code: 0x0


Shutdown Type: power off
Comment: "
Information
22/08/2014 16:36:33
USER32 1074
None
"The process exp
lorer.exe has initiated the power off of computer USER-PC on behalf of user User
-PC\User for the following reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: power off
Comment: "
Information
22/08/2014 6:51:09
USER32 1074
None
"The process C:\
Windows\system32\winlogon.exe (USER-PC) has initiated the power off of computer
USER-PC on behalf of user User-PC\User for the following reason: No title for th
is reason could be found
Reason Code: 0x500ff
Shutdown Type: power off
Comment: "
Information
22/08/2014 6:50:52
USER32 1074
None
"The process exp
lorer.exe has initiated the power off of computer USER-PC on behalf of user User
-PC\User for the following reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: power off
Comment: "
Information
21/08/2014 7:30:15
USER32 1074
None
"The process C:\
Windows\system32\winlogon.exe (USER-PC) has initiated the power off of computer
USER-PC on behalf of user User-PC\User for the following reason: No title for th
is reason could be found
Reason Code: 0x500ff
Shutdown Type: power off
Comment: "
Information
21/08/2014 7:29:54
USER32 1074
None
"The process Exp
lorer.EXE has initiated the power off of computer USER-PC on behalf of user User
-PC\User for the following reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: power off
Comment: "
Information
19/08/2014 18:37:35
USER32 1074
None
"The process C:\
Windows\system32\winlogon.exe (USER-PC) has initiated the power off of computer
USER-PC on behalf of user User-PC\User for the following reason: No title for th
is reason could be found
Reason Code: 0x500ff
Shutdown Type: power off
Comment: "
Information
19/08/2014 18:37:23
USER32 1074
None
"The process exp
lorer.exe has initiated the power off of computer USER-PC on behalf of user User
-PC\User for the following reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: power off
Comment: "
Information
19/08/2014 16:40:38
USER32 1074
None
"The process C:\
Windows\system32\winlogon.exe (USER-PC) has initiated the restart of computer US
ER-PC on behalf of user User-PC\User for the following reason: No title for this
reason could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment: "
Information
19/08/2014 16:39:50
USER32 1074
None
"The process Exp
lorer.EXE has initiated the restart of computer USER-PC on behalf of user User-P
C\User for the following reason: Other (Unplanned)
Reason Code: 0x0
Shutdown Type: restart

Comment: "

You might also like