1) good choice
2) get back into the Event Mgr (as admin) and CLEAR the SYSTEM LOG
3) when you get another 'unexplained shutdown', get back into it and repeat what we've doneabove
I suspect an over heat condition which is hard to track down
My pc restarted yesterday while I was playing again and I got some errors.
Log Name: System
Source: Microsoft-Windows-Kernel-Power
Date: 8/24/2016 1:49:10 AM
Event ID: 137
Task Category: None
Level: Error
Keywords: (4)
User: N/A
Computer: Michyy-PC
Description:
The system firmware has changed the processor's memory type range registers (MTRRs) across a sleep state transition (S5). This can result in reduced resume performance.
Event Xml:
<Event xmlns="
http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />
<EventID>137</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000004</Keywords>
<TimeCreated SystemTime="2016-08-24T08:49:10.656604900Z" />
<EventRecordID>3508</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="1664" />
<Channel>System</Channel>
<Computer>Michyy-PC</Computer>
<Security />
</System>
<EventData>
<Data Name="SleepState">5</Data>
</EventData>
</Event>
Log Name: System
Source: Service Control Manager
Date: 8/24/2016 1:49:02 AM
Event ID: 7031
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Michyy-PC
Description:
The Sync Host_39d8b service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 10000 milliseconds: Restart the service.
Event Xml:
<Event xmlns="
http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="49152">7031</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2016-08-24T08:49:02.140313700Z" />
<EventRecordID>3503</EventRecordID>
<Correlation />
<Execution ProcessID="672" ThreadID="1968" />
<Channel>System</Channel>
<Computer>Michyy-PC</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">Sync Host_39d8b</Data>
<Data Name="param2">1</Data>
<Data Name="param3">10000</Data>
<Data Name="param4">1</Data>
<Data Name="param5">Restart the service</Data>
<Binary>4F006E006500530079006E0063005300760063005F00330039006400380062000000</Binary>
</EventData>
</Event>
Log Name: System
Source: Microsoft-Windows-DistributedCOM
Date: 8/24/2016 1:45:43 AM
Event ID: 10010
Task Category: None
Level: Error
Keywords: Classic
User: SYSTEM
Computer: Michyy-PC
Description:
The server {B91D5831-B1BD-4608-8198-D72E155020F7} did not register with DCOM within the required timeout.
Event Xml:
<Event xmlns="
http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
<EventID Qualifiers="0">10010</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2016-08-24T08:45:43.551436900Z" />
<EventRecordID>3498</EventRecordID>
<Correlation />
<Execution ProcessID="888" ThreadID="920" />
<Channel>System</Channel>
<Computer>Michyy-PC</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="param1">{B91D5831-B1BD-4608-8198-D72E155020F7}</Data>
</EventData>
</Event>
Log Name: System
Source: Service Control Manager
Date: 8/24/2016 1:43:25 AM
Event ID: 7034
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Michyy-PC
Description:
The Downloaded Maps Manager service terminated unexpectedly. It has done this 1 time(s).
Event Xml:
<Event xmlns="
http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="49152">7034</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2016-08-24T08:43:25.364059000Z" />
<EventRecordID>3496</EventRecordID>
<Correlation />
<Execution ProcessID="672" ThreadID="1996" />
<Channel>System</Channel>
<Computer>Michyy-PC</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">Downloaded Maps Manager</Data>
<Data Name="param2">1</Data>
<Binary>4D00610070007300420072006F006B00650072000000</Binary>
</EventData>
</Event>
Log Name: System
Source: Service Control Manager
Date: 8/24/2016 1:39:19 AM
Event ID: 7000
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Michyy-PC
Description:
The NetPipeActivator service failed to start due to the following error:
The service did not respond to the start or control request in a timely fashion.
Event Xml:
<Event xmlns="
http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="49152">7000</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2016-08-24T08:39:19.327687200Z" />
<EventRecordID>3492</EventRecordID>
<Correlation />
<Execution ProcessID="672" ThreadID="1984" />
<Channel>System</Channel>
<Computer>Michyy-PC</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">NetPipeActivator</Data>
<Data Name="param2">%%1053</Data>
<Binary>4E0065007400500069007000650041006300740069007600610074006F0072000000</Binary>
</EventData>
</Event>
Log Name: System
Source: Service Control Manager
Date: 8/24/2016 1:39:19 AM
Event ID: 7009
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Michyy-PC
Description:
A timeout was reached (30000 milliseconds) while waiting for the NetPipeActivator service to connect.
Event Xml:
<Event xmlns="
http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="49152">7009</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2016-08-24T08:39:19.327687200Z" />
<EventRecordID>3491</EventRecordID>
<Correlation />
<Execution ProcessID="672" ThreadID="1984" />
<Channel>System</Channel>
<Computer>Michyy-PC</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">30000</Data>
<Data Name="param2">NetPipeActivator</Data>
<Binary>4E0065007400500069007000650041006300740069007600610074006F0072000000</Binary>
</EventData>
</Event>
Log Name: System
Source: Service Control Manager
Date: 8/24/2016 1:38:38 AM
Event ID: 7001
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Michyy-PC
Description:
The NetTcpActivator service depends on the NetTcpPortSharing service which failed to start because of the following error:
The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.
Event Xml:
<Event xmlns="
http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="49152">7001</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2016-08-24T08:38:38.173866100Z" />
<EventRecordID>3473</EventRecordID>
<Correlation />
<Execution ProcessID="672" ThreadID="1988" />
<Channel>System</Channel>
<Computer>Michyy-PC</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">NetTcpActivator</Data>
<Data Name="param2">NetTcpPortSharing</Data>
<Data Name="param3">%%1058</Data>
<Binary>4E006500740054006300700041006300740069007600610074006F0072000000</Binary>
</EventData>
</Event>
Log Name: System
Source: Microsoft-Windows-Kernel-Power
Date: 8/24/2016 1:38:18 AM
Event ID: 41
Task Category: (63)
Level: Critical
Keywords: (70368744177664),(2)
User: SYSTEM
Computer: Michyy-PC
Description:
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
Event Xml:
<Event xmlns="
http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />
<EventID>41</EventID>
<Version>3</Version>
<Level>1</Level>
<Task>63</Task>
<Opcode>0</Opcode>
<Keywords>0x8000400000000002</Keywords>
<TimeCreated SystemTime="2016-08-24T08:38:18.211685400Z" />
<EventRecordID>3454</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="8" />
<Channel>System</Channel>
<Computer>Michyy-PC</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="BugcheckCode">0</Data>
<Data Name="BugcheckParameter1">0x0</Data>
<Data Name="BugcheckParameter2">0x0</Data>
<Data Name="BugcheckParameter3">0x0</Data>
<Data Name="BugcheckParameter4">0x0</Data>
<Data Name="SleepInProgress">0</Data>
<Data Name="PowerButtonTimestamp">0</Data>
<Data Name="BootAppStatus">0</Data>
</EventData>
</Event>
Log Name: System
Source: EventLog
Date: 8/24/2016 1:38:32 AM
Event ID: 6008
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Michyy-PC
Description:
The previous system shutdown at 12:58:07 AM on 8/24/2016 was unexpected.
Event Xml:
<Event xmlns="
http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="EventLog" />
<EventID Qualifiers="32768">6008</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2016-08-24T08:38:32.055840700Z" />
<EventRecordID>3438</EventRecordID>
<Channel>System</Channel>
<Computer>Michyy-PC</Computer>
<Security />
</System>
<EventData>
<Data>12:58:07 AM</Data>
<Data>8/24/2016</Data>
<Data>
</Data>
<Data>
</Data>
<Data>285925</Data>
<Data>
</Data>
<Data>
</Data>
<Binary>E00708000300180000003A0007007503E00708000300180007003A0007007503600900003C000000010000006009000001000000B00400000100000000000000</Binary>
</EventData>
</Event>
Log Name: System
Source: Microsoft-Windows-TaskScheduler
Date: 8/24/2016 1:38:35 AM
Event ID: 414
Task Category: Task Misconfiguration
Level: Warning
Keywords:
User: SYSTEM
Computer: Michyy-PC
Description:
Task Scheduler service found a misconfiguration in the NT TASK\Microsoft\Windows\Media Center\RecordingRestart definition. Additional Data: Error Value: %SystemRoot%\ehome\ehrec.
Event Xml:
<Event xmlns="
http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-TaskScheduler" Guid="{DE7B24EA-73C8-4A09-985D-5BDADCFA9017}" />
<EventID>414</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>414</Task>
<Opcode>0</Opcode>
<Keywords>0x4000000000000000</Keywords>
<TimeCreated SystemTime="2016-08-24T08:38:35.624464200Z" />
<EventRecordID>3464</EventRecordID>
<Correlation />
<Execution ProcessID="984" ThreadID="1080" />
<Channel>System</Channel>
<Computer>Michyy-PC</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData Name="TaskMisconfigured">
<Data Name="TaskName">NT TASK\Microsoft\Windows\Media Center\RecordingRestart</Data>
<Data Name="Parameter">%SystemRoot%\ehome\ehrec</Data>
</EventData>
</Event>
Log Name: System
Source: Microsoft-Windows-TaskScheduler
Date: 8/24/2016 1:38:36 AM
Event ID: 414
Task Category: Task Misconfiguration
Level: Warning
Keywords:
User: SYSTEM
Computer: Michyy-PC
Description:
Task Scheduler service found a misconfiguration in the NT TASK\Microsoft\Windows\Media Center\ehDRMInit definition. Additional Data: Error Value: %SystemRoot%\ehome\ehPrivJob.exe.
Event Xml:
<Event xmlns="
http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-TaskScheduler" Guid="{DE7B24EA-73C8-4A09-985D-5BDADCFA9017}" />
<EventID>414</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>414</Task>
<Opcode>0</Opcode>
<Keywords>0x4000000000000000</Keywords>
<TimeCreated SystemTime="2016-08-24T08:38:36.251663500Z" />
<EventRecordID>3465</EventRecordID>
<Correlation />
<Execution ProcessID="984" ThreadID="1080" />
<Channel>System</Channel>
<Computer>Michyy-PC</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData Name="TaskMisconfigured">
<Data Name="TaskName">NT TASK\Microsoft\Windows\Media Center\ehDRMInit</Data>
<Data Name="Parameter">%SystemRoot%\ehome\ehPrivJob.exe</Data>
</EventData>
</Event>
Log Name: System
Source: Microsoft-Windows-TaskScheduler
Date: 8/24/2016 1:38:36 AM
Event ID: 414
Task Category: Task Misconfiguration
Level: Warning
Keywords:
User: SYSTEM
Computer: Michyy-PC
Description:
Task Scheduler service found a misconfiguration in the NT TASK\Microsoft\Windows\Media Center\MediaCenterRecoveryTask definition. Additional Data: Error Value: %SystemRoot%\ehome\mcupdate.exe.
Event Xml:
<Event xmlns="
http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-TaskScheduler" Guid="{DE7B24EA-73C8-4A09-985D-5BDADCFA9017}" />
<EventID>414</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>414</Task>
<Opcode>0</Opcode>
<Keywords>0x4000000000000000</Keywords>
<TimeCreated SystemTime="2016-08-24T08:38:36.584160900Z" />
<EventRecordID>3468</EventRecordID>
<Correlation />
<Execution ProcessID="984" ThreadID="1080" />
<Channel>System</Channel>
<Computer>Michyy-PC</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData Name="TaskMisconfigured">
<Data Name="TaskName">NT TASK\Microsoft\Windows\Media Center\MediaCenterRecoveryTask</Data>
<Data Name="Parameter">%SystemRoot%\ehome\mcupdate.exe</Data>
</EventData>
</Event>
Log Name: System
Source: Microsoft-Windows-TaskScheduler
Date: 8/24/2016 1:38:44 AM
Event ID: 414
Task Category: Task Misconfiguration
Level: Warning
Keywords:
User: SYSTEM
Computer: Michyy-PC
Description:
Task Scheduler service found a misconfiguration in the NT TASK\Microsoft\Windows\Media Center\PvrScheduleTask definition. Additional Data: Error Value: %SystemRoot%\ehome\mcupdate.exe.
Event Xml:
<Event xmlns="
http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-TaskScheduler" Guid="{DE7B24EA-73C8-4A09-985D-5BDADCFA9017}" />
<EventID>414</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>414</Task>
<Opcode>0</Opcode>
<Keywords>0x4000000000000000</Keywords>
<TimeCreated SystemTime="2016-08-24T08:38:44.429874400Z" />
<EventRecordID>3488</EventRecordID>
<Correlation />
<Execution ProcessID="984" ThreadID="1080" />
<Channel>System</Channel>
<Computer>Michyy-PC</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData Name="TaskMisconfigured">
<Data Name="TaskName">NT TASK\Microsoft\Windows\Media Center\PvrScheduleTask</Data>
<Data Name="Parameter">%SystemRoot%\ehome\mcupdate.exe</Data>
</EventData>
</Event>