Error: Unable to start Intel PT Service (err=50) about winipt HOT 6 CLOSED

Please paste output of
sc query ipt

Also, is your build x64?

from winipt.

• sc query ipt shows:

SERVICE_NAME: ipt
        TYPE               : 1  KERNEL_DRIVER
        STATE              : 1  STOPPED
        WIN32_EXIT_CODE    : 50  (0x32)
        SERVICE_EXIT_CODE  : 0  (0x0)
        CHECKPOINT         : 0x0
        WAIT_HINT          : 0x0

• net start ipt shows:

System error 50 has occurred.
The request is not supported.

• When I change the registry value Start in HKLM\SYSTEM\CurrentControlSet\Services\IPT registry key to 0 (means boot) then net start ipt shows WIN32_EXIT_CODE: 31 (0x1f) (means ERROR_GEN_FAILURE). So I guess that IPT depends on Intel processor generation.

• Yes, build is x64. Does this service depend on CPU like Intel Pentium or i3 or i5 etc.?

from winipt.

from winipt.

Will it work if I change the processor model in VirtualBox? Or the IPT driver depends on some specific CPU features.

from winipt.

from winipt.

@ionescu007 I found two Event Trace Provider GUID, thought to be useful for your project:

More in my repo TraceEvent.

from winipt.