Windows 10: Windows 10 Event ID 6008 Restart Time

I am running Windows 10 Professional 64-bit 21H2. I am getting auto-reboots, which I think are hardware-related. In the System Event Log, Event ID 6008 message, there is a timestamp of the restart. I know that the timestamp listed is NOT the time of the reboot. That timestamp has a time that occurr3ed before the auto-reboot. From where is Windows 10 retrieving the time of the reboot.?Example - I know that an auto-reboot takes about one minute or less, as I have been at my computer when the system as auto-rebooted. I have in my System Log: 07/23/2022 04:40:05AM "The previous&nb

:)

 

Event ID 6008, Windows 10 1809

Thanks for your reply Leocadia - I understand your suggestions thank you.

The point I was trying to make is our Win 10 Pro v1803 computers, log Event ID 6008 when an unexpected crash happens. However we have Win 10 pro v1809 machines that crashed when the power failed and did not record an Event ID 6008 so I was not able to tell
when the power actually failed, only when they were rebooted. - so my question is :- is this a bug in the 1809 release or by Microsoft design and has anybosy else experienced this situation ??

thanks Bob, IT Manager, Henry Riley LLP.

 

Unexpected Restarts and Event Id 6008

About once every four or five hours my computer will restart unexpectedly.

I have checked the system log and found event id 6008. The following is the event properties:

The previous system shutdown at 9:31:18 PM on ‎12/‎16/‎2016 was unexpected.

Here are the event log details:

• 
  - System
  
• 
  
  
• 
  - Provider
  
• 
  
  
• 
  [ Name] EventLog
  
• 
  
  
• 
  - EventID 6008
  
• 
  
  
• 
  [ Qualifiers] 32768
  
• 
  
  
• 
  Level 2
  
• 
  
  
• 
  Task 0
  
• 
  
  
• 
  Keywords 0x80000000000000
  
• 
  
  
• 
  - TimeCreated
  
• 
  
  
• 
  [ SystemTime] 2016-12-17T03:35:54.182379400Z
  
• 
  
  
• 
  EventRecordID 8028
  
• 
  
  
• 
  Channel System
  
• 
  
  
• 
  Computer Luke-PC
  
• 
  
  
• 
  Security
  
• 
  
  
• 
  
  
• 
  - EventData
  
• 
  
  
• 
  9:31:18 PM
  
• 
  ‎12/‎16/‎2016
  
• 
  
  
• 
  
  
• 
  2424
  
• 
  
  
• 
  
  
• 
  E0070C000500100015001F0012003503E0070C000600110003001F0012003503600900003C000000010000006009000001000000B00400000100000000000000
  
• 
  
  
• 
  
  
• 
  --------------------------------------------------------------------------------
  
• 
  
  
• 
  Binary data:
  
• 
  
  
• 
  
  
• 
  In Words
  
• 
  
  
• 
  0000: 000C07E0 00100005 001F0015 03350012
  
• 
  0010: 000C07E0 00110006 001F0003 03350012
  
• 
  0020: 00000960 0000003C 00000001 00000960
  
• 
  0030: 00000001 000004B0 00000001 00000000
  
• 
  
  
• 
  
  
• 
  In Bytes
  
• 
  
  
• 
  0000: E0 07 0C 00 05 00 10 00 .......
  
• 
  0008: 15 00 1F 00 12 00 35 03 ......5.
  
• 
  0010: E0 07 0C 00 06 00 11 00 .......
  
• 
  0018: 03 00 1F 00 12 00 35 03 ......5.
  
• 
  0020: 60 09 00 00 3C 00 00 00 `...<...
  
• 
  0028: 01 00 00 00 60 09 00 00 ....`...
  
• 
  0030: 01 00 00 00 B0 04 00 00 ....°...
  
• 
  0038: 01 00 00 00 00 00 00 00 ........
  

This only started in the last few weeks and I would really appreciate any help.

 

event id 6008


I believe that event id 6008 is meant to indicate that the previous shutdown was unexpected. However on my computer it happens at odd times with successful shut downs in between. See the attached. I looked at what was happenning at 9:10:19
on 23rd February and the computer was starting up (successfully) rather than shutting down.