Level	Date and Time	Source	Event ID	Task Category
Information	8/28/2014 3:15:29 AM	USER32	1074	None	"The process C:\Windows\system32\svchost.exe (H1ECATX1) has initiated the restart of computer H1ECATX1 on behalf of user NT AUTHORITY\SYSTEM for the following reason: Operating System: Recovery (Planned)
 Reason Code: 0x80020002
 Shutdown Type: restart
 Comment: "
Information	8/28/2014 3:06:30 AM	Service Control Manager	7036	None	The Microsoft Software Shadow Copy Provider service entered the stopped state.
Information	8/28/2014 3:03:30 AM	Service Control Manager	7036	None	The Volume Shadow Copy service entered the stopped state.
Information	8/28/2014 3:01:22 AM	Microsoft-Windows-WindowsUpdateClient	22	Automatic Updates	Restart Required: To complete the installation of the following updates, the computer will be restarted within 15 minutes: 
- Security Update for Windows 7 (KB2993651)