Solved Did A Ghost Restart My Computer?

[MourningStar]

This is a new one for me. After some time doing everyday computer-stuff I stepped away from my machine for ~30 minutes. When I returned the login screen that appears when the machine is 1st turned on or restarted was displayed. Any way to find out why/what caused this?

-thx

 

[Ranger4]

Was there a brief power outage while you were away. Sometimes these very brief power outages can go almost unnoticed by us, but electrical equipment is affected instantly.

 

[MourningStar]

Was there a brief power outage while you were away. Sometimes these very brief power outages can go almost unnoticed by us, but electrical equipment is affected instantly.

thx 4 reply.

I suppose this is possible. However, why would the machine not simply stay off? I do not recall any 'restart-if-power-interruption-detected' setting or what-not as a feature of this machine.

 

[johnhoh]

Open Event Viewer with Eventvwr.exe, Navigate to Windows Logs\System, Right-Click on it and select "Filter Current Log…", Filter: Event log: System Event ID: 1074, double click on it to see details of the restart

 

[MourningStar]

.....

 

[johnhoh]

something is initiating the restart so here's a few ideas:

1) Check task scheduler start > run > taskschd.msc
2) run an online virus scan Virus Scan & Free Virus Removal - Panda Security
3) try windows reliability monitor Windows Reliability Monitor - (Windows 8.1, 8, 7 Vista)

 

[MourningStar]

something is initiating the restart ...

so, the event log was no help, correct?

so here's a few ideas:

1) Check task scheduler start > run > taskschd.msc
2) run an online virus scan Virus Scan & Free Virus Removal - Panda Security
3) try windows reliability monitor Windows Reliability Monitor - (Windows 8.1, 8, 7 Vista)

hmmm, ... I don't think my skillset can be of much use here.

I have used this machine since bought in '09. As per the OP, it is the 1st and only time this has happened.

 

[johnhoh]

the event log tells us that this was not an aberrant hardware problem but rather an initiated restart such as might be done by scheduled tasks you may not be aware of, like for instance an antimalware program, or may be caused by a virus, hence steps 1 and 2 above. If neither of those steps helps, step 3 is a furthur course of action. The fact that the machine has never done this before does not really mean anything.

 

[ThrashZone]

Hi,
If a power outage you'd most like not get a restart and even if you did would probably be directed to do you want to start windows normally or safe mode... screen.

Popping directly to login seems likely something updated whether that was windows or another utility ??

 

[Callender]

I'd say check your power plan.

Power Options - Set power options to NEVER turn off computer. It still - Microsoft Community

​

 

[MourningStar]

... The fact that the machine has never done this before does not really mean anything.

It means it has never done this before. This is really 'something'.

Hi,If a power outage you'd most like not get a restart and even if you did would probably be directed to do you want to start windows normally or safe mode... screen.

true. however, my experience in this scenario is a restart occurs automatically if a choice is not made via a 30 sec countdown. So, this may have indeed occurred.

Popping directly to login seems likely something updated whether that was windows or another utility ??

Although I have Windows Update to 'never update without always notify'-type setting, I have on rare occasions encountered updates done without my knowledge. Perhaps MS snuck in an update that required and then initiated a restart unawares to me.

I'd say check your power plan.

thx, settings have always been "Never Turn Off"

-thx everyone.

 

[ThrashZone]

Hi,
Even if you had a oc that failed it would of stuck waiting for F1 so weird is indeed a word to use

 

[Callender]

Let's have a look at energy report:

Run this command from an elevated command prompt.
powercfg /energy

​

You might need to copy C:\Windows\system32\energy-report.html to desktop to view it. You should be able to drag the file into new window in your browser or just open it with your browser.

Or you can zip it and upload it.

 

[Lance1]

You may have had a system failure of some sort. Right click on Computer / Properties / Advanced system settings. Click the Advanced tab. Under Startup and Recovery click Settings. Is Automatically restart checked? If it is then it is entirely possible something happened. Go to C:\Windows / Minidump OR C:\Windows / MEMORY.DMP and check if there is a dump file.

 

[MourningStar]

Lance1 : thx, it is set for auto restart, however, dump directory is empty.

Callender : thx, I will pm you the energy report and continue this angle with you via pm later today, tomorrow for sure.

 

[Callender]

Also suggest:

Grab a copy of Process Logger Service:

Download NoVirusThanks Process Logger Service - MajorGeeks

Edit the config.ini file like this:

​

Basically set options to log service stops/ starts as well as processes. The log path is up to you. Personally I set it to a non windows partition so I can still view it if windows partition needs to be restored.

It installs as a service and can be started/ stopped anytime. Click install.bat to install service and start logging. Click uninstall.bat to stop logging and remove service.

​

​

I'd say that there's no need to run it unless you know that you are going to be away from your computer for some time. If you know that you are going to be away from your computer launch the service and if you get an unexpected reboot check the logs and look at what was recorded while you were away. Maybe it will provide a clue.

 

[MourningStar]

ooohhh maannnn! some freak storm just blew thru southern California while I was out (a few days ago it was 95 deg@06:00pm, right now there's snow on my truck!). Upon return to the house the computer was off and all of the house clocks were blinking "12:00". well, I think all/any logs will be just that much harder to decrypt. I'll just put this on the shelf for now. I will re-visit this should the ghost return.

-Thx all.