Trace providers must register with ETW when they start, either by calling EventRegister or by using register macros or functions provided by a tracing framework, such as the WPP_INIT_TRACING macro provided by WPP. They unregister just before they stop, either by calling EventUnregister or by using the framework unregister macro or function. Trace providers that do not register themselves cannot be enabled, and no events will be collected from them.
To display events from a registered provider, use TraceView. For instructions, see Creating a trace session for a registered provider.
For more information about registered providers, see Event Tracing in the Microsoft Windows SDK.