Event ID: 1002 the external shell program stops, and assumer.exe is restarted.

Search for foreign materials:

Source: Winlogon
Category: None
Event ID: 1002
Description: The shell stopped unexpectedly and assumer.exe was restarted.

1-NVIDIA put out a bad driver "nvtuicpl. cpl "which Windows Update may have placed on your system (C:/Windows/windows32 ). you can safely remove this file if you don't use multiple monitors and maybe even then you can still remove it.

2-uninstall Spybot's immunization and browser helper functions as sdhelper. dll may be causing the conflict leading to the explorer crash.

This may occur when Explorer tries to read from registy
[HKEY_LOCAL_MACHINE/software/Microsoft/Windows/CurrentVersion/Explorer/Browser Helper Objects/{BCF96FB4-5F1B-497B-AECC-910304A55011}]

Other: I just fixed this problem on my w2k sp3 server. the problem was in the area in the registry that the Start Menu points. usually the Start Menu points to "HKEY_CURRENT_USER/software/Microsoft/Windows/CurrentVersion/Explorer/User Shell Folders/% USERPROFILE %/Start Menu" but in my case it was reconfigured to point "% lclsrvr %/profiles $/Start Menu ". on this server the "% lclsrvr %" environment variable did not exist and this was causing the error. once the path went back to "% USERPROFILE %/Start Menu" the errors stopped immediately. also, look at Microsoft Knowledge Base Article-262076 for a sticky/stuck start menu button. it was good info and referred to the same area.

Domestic materials:

Winlogon: 1002 error:
The external shell program stops, and assumer.exe is restarted.
(The shell stopped unexpectedly and assumer.exe was restarted .)

1. This error does not occur in security mode.

2. It was preliminarily determined that an error occurred while loading com from explorer, and the following entry blocking problem still exists.
HKEY_LOCAL_MACHINE/software/Microsoft/Windows/CurrentVersion/Explorer/Browser Helper Objects

3. After explorer is restarted, it is found that the e_s4i3w1 process (Epson print management) is disabled. It is suspected that the printing driver is faulty and the problem still exists after uninstallation.

4. This error is also caused by NVIDIA nvtuicpl. Cpl. When this file is deleted, the latest video card Driver Installation still exists.

5. This error does not occur after a new user logs on. Therefore, the problem lies in the current user settings.

6. Check whether the two registries have the following problems:
HKEY_CURRENT_USER/software/Microsoft/Windows/CurrentVersion/policies/Explorer/run
COM Service = C:/Windows/msagent/gditpxr. pif

Also:

There are four items under HKEY_LOCAL_MACHINE/software/Microsoft/Windows/CurrentVersion/Explorer/Browser Helper Objects,
Two of them seem to be related to Norton and ignore him. Another {06849e9f-c8d7-4d59-b87d-784b7d6be0b3 },
Delete it (back up the registry before deleting it, remember to remember)

Finally, I can see:

Try to search for wc98pp. dll in full and delete it.
Regedit, search for wc98pp. dll, and delete key values.
I often encounter this phenomenon.
Good experience is shared with everyone!

My registry also has wc98pp. dll, which is finally deleted.