Windows 10: EtwRTDefenderApiLogger.etl

What is this process:

Windows\System32\LogFiles\WMI\Rtbackup\EtwRTDefenderApiLogger.etl

I see in resource manager this comes up sometimes and chews away at my HDD for a good 10 minutes. Very annoying as it loves to run while I'm trying to use my PC for other things.

Can this be disabled?

I don't even have defender enabled so I have no idea why this runs.

:)

 

Error source: Kernel-EventTracing ID: 2 Task category: Session

Before we delete it, we suggest that you create a backup first, and do that just, follow the directory. See the steps below:

• Go to C: > Windows > Logs
  > NetSetup > service.0.etl.
• Right-click on service.0.etl and copy and paste it where the same file (service.0.etl) is saved in.
• When pasting, add a .bak on the file name. It should be like this:
  service.0.etl.bak.

Once, done proceed with deleting it. Still, follow the directory, this time, when you do the right-click, choose
Delete.

Let us know if this allows you delete the file.

 

etl file

I’ve checked the system and found System.1.etl file in disk C. I don’t know if this file is important. What can happen if I delete it?

 

ETL Collector svc, What is it?

Most likely ETL is a third party service. We recommend that you do a clean boot to your computer, it will use a minimal set of drivers and startup
programs. After that, check if ETL service is still running.

Let us know how it goes.