搜尋外文資料:
Source: Winlogon
Category: None
Event ID: 1002
Description: The shell stopped unexpectedly and Explorer.exe was restarted.
1- Nvidia put out a bad driver "nvtuicpl.cpl" which Windows Update may have placed on your system (c:/windows/windows32). You can safely remove this file if you don't use multiple monitors and maybe even then you can still remove it.
2- Uninstall SpyBot's immunization and browser helper functions as Sdhelper.dll may be causing the conflict leading to the Explorer crash.
This may occur when Explorer tries to read from registy
[HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows/CurrentVersion/Explorer/Browser Helper Objects/{BCF96FB4-5F1B-497B-AECC-910304A55011}]
other:I just fixed this problem on my W2K SP3 Server. The problem was in the area in the registry that the Start Menu points to. Usually the Start menu points to "HKEY_CURRENT_USER/Software/Microsoft/Windows/CurrentVersion/Explorer/User Shell Folders/%USERPROFILE%/Start Menu" but in my case it was reconfigured to point to "%LCLSRVR%/Profiles$/Start Menu". On this server the "%LCLSRVR%" environment variable did not exist and this was causing the error. Once the path went back to "%USERPROFILE%/Start Menu" the errors stopped immediately. Also, look at Microsoft Knowledge Base Article - 262076 for a sticky / stuck start menu button. It was good info and referred to the same area.
國內資料:
WinLogon: 1002 錯誤:
外殼程式意外停止,Explorer.exe 被重新啟動。
(The shell stopped unexpectedly and Explorer.exe was restarted.)
1、安全模式下無此錯誤
2、初步判斷是 explorer 載入 COM 出錯,屏蔽以下條目問題依然存在。
HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows/CurrentVersion/Explorer/Browser Helper Objects
3、explorer 重啟後發現 E_S4I3W1 進程(epson列印管理)關閉,懷疑列印驅動問題,卸載後問題依然存在。
4、搜尋資料,nVidia 的 nvtuicpl.cpl 也曾導致此錯誤,刪除此檔案,安裝最新顯卡驅動問問題依然存在。
5、建立使用者登入後無此錯誤,由此判斷問題出在目前使用者的設定上
6、比對兩者註冊表發現問題出在以下設定:
HKEY_CURRENT_USER/Software/Microsoft/Windows/CurrentVersion/Policies/Explorer/Run
COM Service = C:/WINDOWS/msagent/gditpxr.pif
還有:
HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows/CurrentVersion/Explorer/Browser Helper Objects] 下面有四個項,
其中兩個似乎和諾頓有關,不理他。另外有一個{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3},
把它刪掉(刪掉之前先備份註冊表,切記切記)
最後我看到:
嘗試全盤搜尋wc98pp.dll,刪除它。
regedit,搜尋wc98pp.dll,刪除相關索引值。
你這種現象我經常遇到。
好經驗與大家共用!
我的註冊表也有wc98pp.dll,最後刪除解決。