Event ID 1008: How to Fix It on Windows 10 & 11

Event ID 1008 is an error code that typically indicates an issue related to the performance monitoring infrastructure of the operating system.

In this blog, we will explain the expert-tested troubleshooting methods after discussing the causes.

What causes the Event ID 1008 on Windows 10 & 11?

Event ID 1008 on Windows 10 and Windows 11 could be caused due to various reasons; some of the common ones are mentioned here:

• Corrupted or missing performance counters – Performance counters monitor system performance. If these counters become corrupted, you may see the Event ID.
• Disabled DLL file – If a DLL file related to the performance counter is disabled or unregistered, you may see this error. Try re-registering the DLL file.
• Software conflicts – Conflicts between different software components or conflicting software installations can disrupt the performance monitoring system and cause this problem.
• Corrupted system files – If the system files necessary for the proper functioning of performance counters become corrupted, it can trigger the error. Try running an SFC scan to fix it.

Now that you know the causes of the issue, let us check out the troubleshooting methods to fix it.

What can I do to fix the Event ID 1008 on Windows 11?

Before engaging in advanced troubleshooting steps, you should consider performing the following checks:

• Try restarting your computer.
• Reinstall all recently updated applications if they are not working properly.
• Ensure Windows is up to date.
• Make sure you have the administrative privileges for the machine.

Once you are done with these, move to the detailed solutions to resolve the issue.

1. Run an SFC scan

1. Press the Windows key, type cmd and click Run as administrator.
2. Type the following command to repair system files and hit Enter: sfc/scannow
3. Wait for the process to complete, copy and paste the following command, and press Enter: DISM /Online /Cleanup-image /Restorehealth
4. Once the command is executed, Windows will patch faulty files in the component store of the Windows system image.
5. Restart your computer to let the changes take effect.

Restoring the corrupted files of your Windows 10/11 computer can help you fix other issues like Event ID 5858; to learn more, read this guide.

Additionally, you can use a professional repair tool which will help you simplify this process.

2. Re-register the DLL file

2.1 Identify which DLL file is affected

1. Press the Windows key, type event viewer and click Open.
2. Go to Windows Logs, then System.
3. On the right pane, locate the Event ID and check the description to know the DLL file. Note the DLL file name and proceed to the next section.

2.2 Rebuild the performance counters

1. Press the Windows key, type cmd and click Run as administrator.
2. Type the following command to navigate to the System32 directory and hit Enter: CD %SYSTEMROOT%\System32
3. To rebuild the performance counter setting from the system backup store, copy & paste the following command and press Enter: lodctr /r
4. Type the following command to register the DLL file after replacing DLLfilename with the name of the DLL and hit Enter: lodctr /e:DLfilename
5. To resync the counter with Windows Management Instrumentation, copy & paste the following command and press Enter: WINMGMT.EXE /RESYNCPERF
6. Close the Command Prompt and reboot your PC to save the changes.

Read more about this topic

• Change Phone Number on Signal Desktop: Can You do it?
• ERROR_SECURITY_STREAM_IS_INCONSISTENT [BSoD Fix]
• How to Download Touchpad Driver for Lenovo Laptops With Windows 11
• Microsoft has disabled the OCR text detection in the Photos app, for now

3. Modify a registry entry

3.1 Backup your registry entries

1. Press Windows +R to open the Run console.
2. Type regedit and click OK to open Registry Editor.
3. Go to File, then click Export.
4. On the File Explorer window, navigate to the location where you want to save the .reg file. Name it and click Save to close the window.

3.2 Delete the registry entries

1. Now on Registry Editor, navigate to this path, and replace BITS with the service which is causing the issue: Computer\HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\BITS\Performance
2. On the right pane, locate First Counter, Last Counter, First Help, Open and Last Help and right-click them one by one and select Delete to remove them.
3. Restart your PC to complete the process.

3.3 Restore the entries

1. Press Windows +R to open the Run console.
2. Type regedit and click OK to open Registry Editor.
3. Go to File, then click Import.
4. Locate the .reg file that you created and click Open.
5. Wait for the changes to appear and check if the issue persists.

4. Use a third-party tool

1. Download and install Extensible Counter List.
2. Navigate to this path: C:\Program Files (x86)\Resource Kit
3. Locate and right-click Exctrlst.exe, then select Run as Administrator.
4. Find the affected service(s) from the list and remove the checkmark next to Performance Counters Enabled for each service.

Although this method doesn’t directly fix the problem, it obliterates the notifications from Event Viewer.

What can I do to fix the Event ID 1008 on Windows 10?

To fix the issue related to Event ID 1008, you need to have a user account with admin rights on your Windows 10 computer, then follow the methods mentioned above for Windows 11.

If you want to know more about Event Viewer and how it can help you identify issues on your Windows 10 or 11 computer, we suggest you check out this guide.

Encountering the Event ID 1008 on Windows 10 or 11 is annoying, but this is not a critical error. You can follow these methods to fix this Event error.

Please feel free to give us any information, tips, and your experience with the subject in the comments section below.