Share via

Windows 8.1-Event Viewer-Kernel-Event Tracing-Event ID 3

Anonymous
2014-07-12T18:50:51+00:00

I am getting this ERROR in Event Viewer,

Log Name:      Microsoft-Windows-Kernel-EventTracing/Admin

Source:        Microsoft-Windows-Kernel-EventTracing

Date:          7/12/2014 11:38:39 AM

Event ID:      3

Task Category: Session

Level:         Error

Keywords:      Session

User:          SYSTEM

Computer:      Nick

Description:

Session "Circular Kernel Context Logger" stopped due to the following error: 0xC0000188

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

  <System>

    <Provider Name="Microsoft-Windows-Kernel-EventTracing" Guid="{B675EC37-BDB6-4648-BC92-F3FDC74D3CA2}" />

    <EventID>3</EventID>

    <Version>1</Version>

    <Level>2</Level>

    <Task>2</Task>

    <Opcode>14</Opcode>

    <Keywords>0x8000000000000010</Keywords>

    <TimeCreated SystemTime="2014-07-12T18:38:39.018252500Z" />

    <EventRecordID>1026</EventRecordID>

    <Correlation />

    <Execution ProcessID="4" ThreadID="3092" />

    <Channel>Microsoft-Windows-Kernel-EventTracing/Admin</Channel>

    <Computer>Nick</Computer>

    <Security UserID="S-1-5-18" />

  </System>

  <EventData>

    <Data Name="SessionName">Circular Kernel Context Logger</Data>

    <Data Name="FileName">C:\WINDOWS\system32\WDI\LogFiles\SecondaryLogonCKCL.etl</Data>

    <Data Name="ErrorCode">3221225864</Data>

    <Data Name="LoggingMode">41943168</Data>

    <Data Name="FailureReason">0</Data>

  </EventData>

</Event>

Windows for home | Previous Windows versions | Performance and system failures

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

Answer accepted by question author

Anonymous
2014-08-01T08:14:50+00:00

Hi Nicholas,

I have come across a similar issue, which says third party antivirus or third party are the cause for these errors.

If you are using any third-party antivirus software, you may disable it and check if the sync works.

You may refer to the antivirus manufacturer website to check for the options to disable antivirus.

**Note:**Even if you disable third party antivirus, Windows Defender will still be running in the computer. This will guard your computer from malware.

If the above does not help, perform clean boot.

Clean boot will help us identify if any third party applications or startup items are causing the issue.

To do this, follow steps from this link:

http://support.microsoft.com/kb/929135

Note: After checking the functionality in clean boot, follow the suggestions under “How to reset the computer to start normally after clean boot troubleshooting”.

Keep us posted on the status of the issue.

Was this answer helpful?

1 person found this answer helpful.
0 comments

8 additional answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2014-07-16T11:59:31+00:00

    I have no issues with the performance of my computer. I've run a diagnosis, ie.sfc /scannow and

    no issues were detected. I have McAfee virus scanner and also showed no viruses in my system.

    I do get an error message in Event Viewer ESENT-error as well periodically. Again the computer shows no signs of any issues as far as performance or error messages..BSOD. Although, there was an issue in June of this year were I was receiving a BSOD..MEMOMRY_MANAGMENT message. I ran Windows 8.1 Windows Memory Diagnostic from Administrative Tools and a program called MEMTest86 and found that the RAM had gone bad and since than has been replaced. I reran the the Memory test's and the RAM is now operating fine.

    Thank You for your help.

    Was this answer helpful?

    0 comments
  2. Anonymous
    2014-07-16T10:39:24+00:00

    Hi Nicholas,

    The 'Microsoft-Windows-Kernel-EventTracing' will run each time the system is started along with the associated 'Circular Kernel Context Logger'. These components are part of the Performance Diagnostics. 

    1. Are you facing any issues on the computer?
    2. Were there any recent changes made on the computer prior to the issue?

    Please get back to us with the above information to assist you further.

    Was this answer helpful?

    0 comments
  3. Anonymous
    2014-07-13T14:57:19+00:00

    Thanks, I did delete the key,"Microsoft-Windows-DxpTaskRingtone/Analytic' and

    restarted my computer but the error message was still generated in event viewer.

    Here is a link to my OneDrive to view the results from Event Viewer,

    https://onedrive.live.com/redir?resid=E0F0C6744C08B06!6635&authkey=!AEuXZEuwV6pN-YI&ithint=file%2c.zip

    Thanks for your help!

    Was this answer helpful?

    0 comments
  4. Anonymous
    2014-07-13T04:42:52+00:00

    Please provide us with your Event Viewer administrative logs by following these steps:

    Click Start Menu

    Type eventvwr into Search programs and files (do not hit enter)

    Right click eventvwr.exe and click Run as administrator

    Expand Custom Views

    Click Administrative Events

    Right click Administrative Events

    Save all Events in Custom View As...

    Save them in a folder where you will remember which folder and save as Errors.evtx

    Go to where you saved Errors.evtx

    Right click Errors.evtx -> send to -> compressed (zipped) folder

    Upload the .zip file to Onedrive or a file sharing service and put a link to it in your next post

    *

    **If you have updated to win 8.1 and you get the error message "**the system cannot find the file specified" it is a known problem.  The work around is to edit the registry.  If you are not comfortable doing this DONT.  If you are, backup the key before you do

    Press Win+"R" and input regedit

    Navigate to:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels.Delete "Microsoft-Windows-DxpTaskRingtone/Analytic"

    Was this answer helpful?

    0 comments