My PC shuts down after I resume from sleep mode (by shaking the mouse) most of the time -- did not do this until about a month or so ago. Here is what I can detail about the typical interactions: Shake mouse, bios starts. Windows resumes, sounds like an awful lot of disk traffic which takes rather longer than it used to. Fingerprint (Rohos) logon Screen is shown, works as usual: logs me on. Desktop is displayed, but not really responsive. Intensive disk traffic continues. System reports that it needs to shut down all running programs and then shuts itself down. I checked the system log, but there are so many messages after wake up that I haven't been able to find a cause. After a restart of the system, all is back to normal. When I stop the shutdown process by aborting the auto shutdown, the system works -- but because some processes were already terminated before I could intervene, this is not really a solution. It would be nice if there was some way to log "who done it" for the shutdown request in the application or system log. Anybody know how to close in on this rascal?

Hi, Thanks for posting in Microsoft TechNet forums. Before going further, please read the following KB and see if it resolves the problem: A computer that is running Windows 7 or Windows Server 2008 R2 shuts down shortly after you resume the computer from hibernation A Windows 7-based portable computer shuts down when you try to resume it after a critical battery state If the issue persists, please visit the following link to troubleshoot the cause. Troubleshoot problems waking computer from sleep mode To get track on unexpected shut down, you could use Shutdown Event Tracker, please refer to the following message to use it: Shutdown Event Tracker Overview Configure Shutdown Event Tracker on the Local Computer Best Regards Dale Qiao TechNet Subscriber Support in forum. If you have any feedback on our support, please contact tngfb@microsoft.com Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Hi, As this thread has been quiet for a while, we assume that the issue has been resolved. At this time, we will mark it as ‘Answered’ as the previous steps should be helpful for many similar scenarios. If the issue still persists, please feel free to reply this post directly so we will be notified to follow it up. You can also choose to unmark the answer as you wish. BTW, we’d love to hear your feedback about the solution. By sharing your experience you can help other community members facing similar problems. Thanks for your understanding and efforts. Best Regards Dale Qiao TechNet Subscriber Support in forum. If you have any feedback on our support, please contact tngfb@microsoft.comPlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Sorry for being so tacid; I marked this thread as "Alert me" but did not get anything so I checked back just now and found your help. I promise to read it asap. Whatever the cause was, it seems to be gone due to a highly risky manouvre that I will describe below. I noticed that the last thing before the shut down was actually outlook 2010 which was outostarted (pardon the pun). When I aborted the shutdown before it started, I noticed that the start of outlook also took ages (although it eventually completed without messages and worked fine thereafter. Outlook also took ages to become available when Win7 was re-launched after a shutdown. Looking further into this, using the resource monitor of Win7, i noticed numerous reads on files in the folowing directory: C:\Users\MySelf\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-3044740734-2513338306-4106383019-1000 . There were about (Edit:) 18.280 files in this directory, all of them rather old, youngest over 6 months. Relating this to some of the many messages cluttering the application log before the shutdown, I decided that it might be a repeated security problem occurrence that was causing the problem. Because things could not possible go wrong more than they already were, I DELETED all the files in said directory. Two (good) things happened: Outlook launched without delays now, but my self-certificate used by my outlook vba macros was gone (I just made a new one and all is fine now) There no longer is an automatic shutdown after sleep mode. Which leaves me happy but curious as to why there were so many RSA keys that apparently were faulty. Living in a Wonder Fool world, Rolf

Anyway I'm glad the hear that the issue is resolved. For the description of RSA in Crypto folder, the following thread may provide some information: Please Help ..Explain Crypto\RSA Files Best Regards Dale Qiao TechNet Subscriber Support in forum. If you have any feedback on our support, please contact tngfb@microsoft.comPlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Aaargh! The problem is back. Tried all suggestions. The PC also decided to launch from standby at 4 am yesterday. Again, no clue. There are no scheduled tasks visible that would do that. (Only suspicious suspect may be Acronis True Image, which launches by some cryptic other means. But there is no task visible within this, either. Still, a suspect because of the weird way it does timer lauches.)