What is stored in %Windir%\System32\LogFiles\WMI\RtBackup?

Posted by Helge Klein on Server Fault See other posts from Server Fault or by Helge Klein
Published on 2011-02-19T14:41:14Z Indexed on 2011/02/19 15:26 UTC
Read the original article Hit count: 324

Filed under:
|
|
|

I occasionally notice in Resource Monitor hard disk activity related to ETL files in the folder C:\Windows\System32\LogFiles\WMI\RtBackup.

Which process/service creates these ETL files and what is their purpose?

Resource Monitor shows "System" as the process which is correct since ETW traces (that is what ETL files are) are created by the kernel. But I am interested in the process that causes the traces to be created.

This happens on Windows 7, by the way.

© Server Fault or respective owner

Related posts about Windows

Related posts about files