event id:1002 外壳程序意外停止，Explorer.exe 被重新启动.

搜索外文资料：

Source: Winlogon
Category: None
Event ID: 1002
Description: The shell stopped unexpectedly and Explorer.exe was restarted.

1- Nvidia put out a bad driver "nvtuicpl.cpl" which Windows Update may have placed on your system (c:/windows/windows32). You can safely remove this file if you don't use multiple monitors and maybe even then you can still remove it.

2- Uninstall SpyBot's immunization and browser helper functions as Sdhelper.dll may be causing the conflict leading to the Explorer crash.

This may occur when Explorer tries to read from registy
[HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows/CurrentVersion/Explorer/Browser Helper Objects/{BCF96FB4-5F1B-497B-AECC-910304A55011}]

other:I just fixed this problem on my W2K SP3 Server. The problem was in the area in the registry that the Start Menu points to. Usually the Start menu points to "HKEY_CURRENT_USER/Software/Microsoft/Windows/CurrentVersion/Explorer/User Shell Folders/%USERPROFILE%/Start Menu" but in my case it was reconfigured to point to "%LCLSRVR%/Profiles$/Start Menu". On this server the "%LCLSRVR%" environment variable did not exist and this was causing the error. Once the path went back to "%USERPROFILE%/Start Menu" the errors stopped immediately. Also, look at Microsoft Knowledge Base Article - 262076 for a sticky / stuck start menu button. It was good info and referred to the same area.

国内资料：

WinLogon: 1002 错误：
外壳程序意外停止，Explorer.exe 被重新启动。
（The shell stopped unexpectedly and Explorer.exe was restarted.）

1、安全模式下无此错误

2、初步判断是 explorer 加载 COM 出错，屏蔽以下条目问题依然存在。
HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows/CurrentVersion/Explorer/Browser Helper Objects

3、explorer 重启后发现 E_S4I3W1 进程（epson打印管理）关闭，怀疑打印驱动问题，卸载后问题依然存在。

4、搜索资料，nVidia 的 nvtuicpl.cpl 也曾导致此错误，删除此文件，安装最新显卡驱动问问题依然存在。

5、新建用户登录后无此错误，由此判断问题出在当前用户的设置上

6、比对两者注册表发现问题出在以下设置：
HKEY_CURRENT_USER/Software/Microsoft/Windows/CurrentVersion/Policies/Explorer/Run
COM Service = C:/WINDOWS/msagent/gditpxr.pif

还有：

HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows/CurrentVersion/Explorer/Browser Helper Objects] 下面有四个项，
其中两个似乎和诺顿有关，不理他。另外有一个{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}，
把它删掉（删掉之前先备份注册表，切记切记）

最后我看到：

尝试全盘搜索wc98pp.dll，删除它。
regedit，搜索wc98pp.dll，删除相关键值。
你这种现象我经常遇到。
好经验与大家共享！

我的注册表也有wc98pp.dll，最后删除解决。