1002
Winlogon
The shell stopped unexpectedly and %1 was restarted.
This event is logged when the shell (by default explorer.exe) crashed, most likely due to a bug in the shell or a loaded DLL.
The OS then restarts the shell and logs this message to the event log.