Problem: PC/Server suddenly shuts down
Solution: If you want to know what was the exact last shut down time and start-up time of your computer, go to the Event Viewer -> Windows Log -> System
and look for:-
- Event ID 1074: PC has been shut down or restarted
- Event ID 6006: PC has shut down
- Event ID 6009: PC has start-up
Here are the steps.
- If you are using Windows Vista or Windows 7, click the start icon and type Event Viewer in the search box. Event viewer program will appear. Click on it.
- Event Viewer window will open. Now on the left side of that window click on “Windows Logs”. Now on the right side, click on System.
- All the system files will open on the right side. Now on the source column you have to find out Eventlog source having Event ID 6006 (6006 is an event ID for shutdown). You will find many Eventlog sources having event ID 6006. But you need to figure out source with the most recent date and time.Note: All the events are placed in descending order (latest time first) so the top event log with event ID 6006 will show the correct time and date of last PC shutdown (In this case the time is 1/10/2010 1:06:48 AM).
Source: https://www.guidingtech.com/432/last-shutdown-time-windows/