Fix “Error Code: 0XC0000035” Kernel event tracing on Windows

The Error Code 0XC0000035 is a common error message related to kernel event tracing. Learn how to fix it and maintain your computer in this article.

Some Windows customers are reporting that their Event Viewer is constantly flooded with 0XC0000035 errors, indicating a Kernel Event Tracing Error. Every current Windows version, including Windows 7, Windows 8.1, Windows 10, and Windows 11, has been proven to have this issue.

In this article, we will be discussing what the 0XC0000035 error is and how you can fix it.

“Error Code: 0XC0000035” Kernel Event Tracing on Windows

What Causes "Error Code: 0XC0000035" on Windows?
How To Fix The "Error Code: 0XC0000035" on Windows?
Method 1. Restart Your Computer
Method 2. Flush IP and DNS Cache
Method 3. Disable IPv6
Method 4. Temporarily Disable Your Antivirus
Method 5. Enable the SysMain and Superfetch Services
Method 6. Edit the Autologg Key in Your Registry
Method 7. Update Your Intel Drivers
TL;DR
Conclusion

What Causes "Error Code: 0XC0000035" on Windows?

The Error Code 0XC0000035 is a common error message related to kernel event tracing. Various factors can cause this error, but the most common cause is an issue with the Windows Event Log service.

After plenty of examination, it was observed that there are a number of plausible causes for this error. Here's a quick rundown of what could be causing your Event Viewer to overflow with 0XC0000035 errors:

Perfdiag is modifying the Event Tracing of Windows session: The ETW session is used by Perfdiag to collect data for performance analysis. If this session is interrupted, it can cause the 0XC0000035 error.
The Event Trace Session was manually stopped: In some cases, users have reported that they were able to fix the 0XC0000035 error by starting the Event Trace Session manually.
Outdated network drivers (Intel): If you're running Windows and utilizing the network drivers fleet, the problem is most likely caused by a conflict between the Intel WI-FI driver and a sensitive kernel process.
Bad IP range or DNS cache: You should expect this issue to occur in specific conditions, such as when your DNS cache is corrupted or when you've been issued a faulty IP range.
Third-party antivirus: Due to an overprotective active shield function, several 3rd party antivirus suites have been known to create this issue. As it turns out, the only way to fix this problem is to disable real-time protection or uninstall the third-party app.

These are some of the possible causes for the 0XC0000035 error. In the next section, we'll discuss how you can fix this problem.

How To Fix The "Error Code: 0XC0000035" on Windows?

There are a few different ways that you can go about fixing this error. The first thing that you should try is restarting the Windows Event Log service. To do this, follow these steps:

Method 1. Restart Your Computer

The first thing that you should do is restart your computer. This will allow the Event Log service to reset itself and hopefully fix the 0XC0000035 error. A simple restart can go a long way in fixing Windows problems. Make sure to start here before moving on to more complicated methods.

To restart your computer, follow these steps:

Click on the Start menu and select the Power button.
Click Restart from the drop-down menu.
Once your computer has restarted, see if the same error shows up when you open the Event Viewer.

Method 2. Flush IP and DNS Cache

If restarting your computer doesn't work, you should try flushing your DNS cache and resetting your IP address. This will help to fix any corruptions that may be causing the 0XC0000035 error. To do this, follow these steps:

Open the search bar in your taskbar by clicking on the magnifying glass icon. You can also bring it up with the Windows + S keyboard shortcut.
Type Command Prompt in the search box. When you see it in the results, right-click on it and choose Run as Administrator. If you're using a local account that doesn't have administrator permissions, click here first.
When prompted by the User Account Control (UAC), click Yes to allow the app to launch with administrative permissions.
Input the commands below in the following order, pressing the Enter key on your keyboard after each line:
- ipconfig /flushdns
- ipconfig /registerdns
- ipconfig /renew
- ipconfig /release
Close the Command Prompt.

Method 3. Disable IPv6

If you're still getting the 0XC0000035 error, then you may be able to fix it by disabling IPv6. This conflicts with the Event Log service and can cause the 0XC0000035 error. To do this, follow these steps:

Press the Windows + X keys on your keyboard to bring up the WinX menu, and click on Network Connections from the context menu.
Select your current connection type (for example, Ethernet or Wi-Fi) in the left pane, and then click on the Change adapter options button.
Right-click on the network adapter you're currently having issues with, and select Properties from the context menu.
Scroll down until you see the Internet Protocol Version 6 (TCP/IPv6) option. If there's a checkmark next to it, click on the box once to disable it. If the box is already empty, then IPv6 is not enabled on your device and you can try a different solution to the error.
Click OK. This solution should work if IPv6 was the specific reason why your system showed "Error Code: 0XC0000035".

Method 4. Temporarily Disable Your Antivirus

Antivirus apps are notorious for causing all sorts of problems on Windows. False positives, performance issues, and the 0XC0000035 error are all among the issues that can be caused by antivirus apps.

If you're still getting the 0XC0000035 error, then you may be able to fix it by temporarily disabling your antivirus. If that works, you should try whitelisting the Event Log service in your antivirus settings.

To do this, follow these steps:

Right-click on an empty space in your taskbar and choose Task Manager from the context menu.
Switch to the Startup tab using the header menu located at the top of the window. Here, find your antivirus application from the list and select it by clicking on it once.
Click on the Disable button now visible in the bottom-right of the window. This will disable the application from launching when you start your device.
Restart your computer and see if you're able to use your computer without the same error showing up in your Event Viewer.

Method 5. Enable the SysMain and Superfetch Services

If you're still getting the 0XC0000035 error, then you may be able to fix it by enabling the SysMain and Superfetch services. These services are known to help with Event Log performance and can fix the 0XC0000035 error. To do this, follow these steps:

Press the Windows + R keys on your keyboard. This is going to bring up the Run utility.
Type in "services.msc" without quotation marks and press the Enter key on your keyboard. This will open the Services window.
Scroll down until you see the SysMain service. Right-click on it, and then choose Properties from the context menu.
Stay on the General tab. Ensure that the Startup type is set to Automatic, and then click on the Start button under the Service status if it's not currently running. Doing so will start the service automatically when you boot up your computer.
Click Apply, and then OK to exit out of the window. When you're back in the Services window, repeat the same steps for the Superfetch service to enable it.

You should be able to see if the error repeats itself after making this adjustment. If you're still seeing "Error Code: 0XC0000035" along with Kernel Event Tracing, continue reading to find a different solution!

Method 6. Edit the Autologg Key in Your Registry

If you're still getting the 0XC0000035 error, then you may be able to fix it by editing the autologg key in your registry. This is a known fix for the 0XC0000035 error. To do this, follow these steps:

press Windows + R keys to bring up the Run dialog box. To open the Registry Editor with admin access, type 'regedit' and press Ctrl + Shift + Enter.
Use the navigation pane on the left side of the window to reach the following Registry key, or use the address bar and copy-paste the location:

Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\WMI\Autologger\EventLog-System\{b675ec37-bdb6-4648-bc92-f3fdc74d3ca2}
Right-click on the Enabled registry entry in the right-side pane and choose Modify from the context menu.
Make sure to change the Value data to 0, and then set the Base to Hexadecimal. Click the OK button when you're done making these changes.
After you've modified both registry settings, restart your computer to make the changes permanent. Open the Event Viewer to see if any new occurrences of the 0XC0000035 problem have appeared.

Method 7. Update Your Intel Drivers

If you're still getting the 0XC0000035 error, then you may be able to fix it by updating your Intel drivers. Outdated drivers can cause a variety of problems, including the 0XC0000035 error.

If the Event Viewer error points to one of the following locations, it's safe to assume that the issue is caused by an Intel driver issue:

C:\Program Files\Intel\WiFi\bin\MurocApi.dll
C:\Program Files\Intel\WiFi\UnifiedLogging\MurocLog.log

Using the Intel Driver & Support Assistant is the only approach that has been confirmed to resolve the issue. To check that you're running the most recent driver version compatible with your Windows, follow these steps:

Open your default browser and go to the Intel Driver & Support Assistant main page.
Wait until the initial scan is complete in the Intel Driver & Support Assistant tool, then click the Download All button. When the download is complete, click the Install All button and wait until all drivers are installed.
You may need to follow an additional set of instructions to get the drivers installed, depending on the drivers that need to be updated.
Once all of the drivers have been installed, reboot your computer one last time to determine if the problem has been resolved.

TL;DR

The "Error Code: 0XC0000035" is a kernel event tracing error that can be caused by a variety of things, including outdated drivers, corrupt DNS cache, or a bad IP range.
There are a few different ways that you can go about fixing this error. The first thing that you should try is restarting the Windows Event Log service.
Try flushing your DNS cache, resetting your IP address, or disabling IPv6.
You may also be able to fix the problem by temporarily disabling your antivirus or editing the autologg key in your registry.
If all else fails, you can try updating your Intel drivers.

Conclusion

The "Error Code: 0XC0000035" is a relatively common error on Windows that can be caused by various things. We hope this article has helped you fix your computer's problem.

If you have any questions or comments, please feel free to leave them in the section below. You can also reach out to us for support – we'd be happy to help!

Thank you for reading.

One More Thing

Looking for more tips? Check out our other guides in our Blog or visit our Help Center for a wealth of information on how to troubleshoot various issues.

Sign up for our newsletter and get early access to our blog posts, promotions, and discount codes. Plus, you'll be the first to know about our latest guides, deals, and other exciting updates!

Find anything you need

How To Fix “Error Code: 0XC0000035” Kernel Event Tracing on Windows?

Table of Contents