The Event Log !! I never thought of that.
When I force Explorer to die, it does come up with an event which says:
A driver packet received from the I/O subsystem was invalid. The data is the packet.
The packet data is related to LanMan Redirector stuff. Odd.
Off to Google, thanks for the pointer.