Microsoft Knowledge Base Article 897125 Explains an issue where a computer consistently crashes if you enable an ETW trace session, and the trace session is configured to use a buffer that is more than 4 kilobytes (KB). Describes a workaround for this issue.