ZEKASTRA

SystemSystem and services

41 · The system has rebooted without cleanly shutting down first

Logged by Microsoft-Windows-Kernel-Power at startup when the previous session ended without a clean shutdown, for example after a power loss, hang or stop error.

01Fields in the event

  • BugcheckCode
  • BugcheckParameter1
  • BugcheckParameter2
  • BugcheckParameter3
  • BugcheckParameter4
  • SleepInProgress
  • PowerButtonTimestamp

02How to use it

A non-zero BugcheckCode points to a stop error; PowerButtonTimestamp may indicate the power button was held. Compare with 6008 and crash dumps before drawing conclusions about deliberate power-off.

03Caveats

Records only that the shutdown was unclean; many causes (hardware, drivers, power) produce the same event.

05Sources

  1. Microsoft Learn — Advanced troubleshooting for Event ID 41 checked 2026-10-18

Contact and service requests

Contact us about examination services related to this page, support for expert witnesses, or collaboration. Please do not attach evidence files or personal data to your email.