Event ID 1002 — Performance counters for the http://schemas.

{
  "system": {
    "provider": "Microsoft-Windows-LoadPerf",
    "guid": "122EE297-BB47-41AE-B265-1CA8D1886D40",
    "event_source_name": "",
    "event_id": 1002,
    "version": 0,
    "level": 4,
    "task": 0,
    "opcode": 0,
    "keywords": 9223372036854775808,
    "time_created": "2013-10-23T18:31:55.566626+00:00",
    "event_record_id": 266,
    "correlation": {},
    "execution": {
      "process_id": 836,
      "thread_id": 3012
    },
    "channel": "Application",
    "computer": "IE8Win7",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "user_data": {
    "EventXML": {
      "xmlns:auto-ns2": "http://schemas.microsoft.com/win/2004/08/events",
      "param1": ".NET CLR Networking 4.0.0.0",
      "param2": ".NET CLR Networking 4.0.0.0",
      "binaryDataSize": 4,
      "binaryData": "whIAAA=="
    }
  },
  "message": "Performance counters for the http://schemas.microsoft.com/win/2004/08/events!s! (.NET CLR Networking 4.0.0.0!s!) service are already in the registry, no need to reinstall. This only happens when you install the same counter twice. The second time install will generate this event."
}