Event ID:
1002
Source:
Winlogon
Message:
The shell stopped unexpectedly and %1 was restarted.

More information
Event ID:
6006
Source:
WinLogon
Message:
The winlogon notification subscriber <Profiles> took nnn second(s) to handle the notification event (Logon).

More information
Found 2 records