Fix Event ID 6008 after Unexpected System Shutdown [3 Ways]

Event errors are easier to solve than ever, thanks to the solutions below

Reading time icon 4 min. read

Readers help support Windows Report. When you make a purchase using links on our site, we may earn an affiliate commission. Tooltip Icon

Read the affiliate disclosure page to find out how can you help Windows Report effortlessly and without spending any money. Read more

Key notes

  • The Event ID 6008 may be generated by multiple elements, even your hardware might be to blame.
  • One confirmed solution involves applying certain changes to your graphic card driver.
  • You might also be missing some essential updates and this aspect might cause the error 6008.
rollback event viewer error
A message from our partner

To fix Windows PC system issues, you will need a dedicated tool

  • Download Fortect and install it on your PC
  • Start the tool's scanning process to look for corrupt files that are the source of your problem
  • Right-click on Start Repair so the tool could start the fixing algorythm
Download from Fortect has been downloaded by 0 readers this month, rated 4.4 on TrustPilot

The Event ID 6008 error is triggered if the computer was shut down forcefully using a remote shutdown tool or automatically by a third-party program without the user’s request.

This error can affect any version of Windows from Windows XP to Windows 11 and occurs due to several reasons. To fix the Event Viewer error 6008, you should follow the steps below.

What is Event ID 6008?

This event error could be recorded in the System event log if you restart the computer after an application that makes use of the InitiateSystemShutdownEx function has previously caused the machine to shut down automatically.

Event IDs uniquely identify a given event. Each event source can specify its own unique numbered events, as well as the description strings that will be mapped to those events in the message file that it creates.

What can cause an event 6008?

It is possible that you will experience this issue if the computer has been locked or it is set up with a screensaver that requires a password to be accessed.

And if a program that employs the InitiateSystemShutdownEx function with the force flag is the one that is responsible for the automated beginning of the shutdown procedure.

In this scenario, the Event Log service is not informed about the shutdown occurrence, and as a consequence, the shutdown operation is wrongly regarded as an unexpected event by the Event Log service.

How do you see what caused an unexpected shutdown?

  1. Press the Windows key + S, type event, and select the Event Viewer option.
    event id 6008
  2. Click Windows Logs in the left pane and right-click on the System option.
  3. Select the Filter Current Log… option.
  4. Enter the ID of the issue you want to research in the <All event IDs> box and click OK. For example, type the event id 6008 to see the cause of an unexpected shutdown.
    all event
  5. You can now select a log in the next window to confirm the information there.

How do I fix Event ID 6008?

Before moving to any complicated fixes, it is recommended to check your hardware if they are working well. Below are some of the preliminary checks you can carry out:

  • Check if your CPU is overheating. You can check the CPU temperature using any third-party app.
  • If on a desktop computer, check if the Sink fan is working.
  • Try to clean the heat sink fan by removing the dirt using compressed air.
  • Check your power supply unit (PSU) for any malfunction.

If the issue still persists after these preliminary steps, you can proceed to the fixes below:

1.  Use the Roll Back Driver button

If you are facing the event id 6008 while gaming accompanied by a blue screen, it might be caused by your display driver. In case you just updated your driver before noticing the issue, the ideal solution is to roll it back to the previous version.

1. Right-click the Start icon then select Device Manager.

When clicking on Start icon, a box will expand and you have to select Device Manager.


2. Click the arrow next to Display Adapter to expand it, then right-click on your Graphic Card Driver and select Properties.

After you clicked Device Manager, a list with devices will be shown. Just click on Display Adapter, right-click on your Graphic Card, then on Properties where you’ll find the Roll Back option.

prop-display-adapter event viewer error 6008

3. Go to the Driver tab and click the Roll Back Driver button.

Clicking the Driver tab you’ll find the Roll Back Driver button. The roll-back will begin right after pressing the button.



4. Restart your PC.

After the driver is rolled back, reboot the system and check if the Event log 6008 error still appears.

2. Check for Windows Updates

  1. Press Windows + I then go to the Update & Security section.update-security nmi hardware failure windows 10
  2. Next, click the Check for updates button.check-updates searchui windows 10

If you are getting the Event ID 6008 with qualifier 32768 in the event log, it might be due to an outdated PC. After the update is installed, check if it is triggered again or if your system is freezing.

If the issue is prevalent then it is possible that Microsoft may have released an update to fix the problem. Check for any pending Windows updates, if you haven’t done them already.

3. Uninstall Feature Updates

  1. Press Windows, input control, and select Control Panel from the results.control-panel-serarch-w10 opera not responding
  2. Select Uninstall a program under the Programs option.programs-w10 0x80070002 windows update
  3. Select the View Installed Updates option.installed event viewer error 6008
  4. Now, select the most recently installed update that caused the problem and Clicking Uninstall.
  5. Reboot the system and check for any improvements.

You should try this solution if the error 6008 occurred during a previous Windows Update download, so we advise you to uninstall the KB update from the Control Panel. This would also help when encountering Event ID 6008 in Windows 7.

Additionally, make sure that software updates are checked for on a regular basis and that you are using genuine software versions, which are more stable and include fewer bugs.

For more information and ways to avoid this issue, check out our post on what to do if my computer randomly shuts down in Windows 10/11.

As we’ve shown in this article, it is possible to solve the Event ID 6008 and 41 issues by yourself. Though for Windows 10, the solutions here would help fix Event ID 6008 in Windows 11 as well.

Sometimes it can be as easy as downloading the latest Windows updates, while certain situations may require hardware maintenance. We hope that this guide helped you fix the error.

We’d like to hear more from you on this subject, so feel free to drop a comment in the section below.

More about the topics: Windows Update