Some Microsoft documentation states that 0xc0000035 corresponds to , meaning the system cannot locate necessary configuration or registration information related to the event-tracking session. When Windows Update attempts to start its logging mechanism but cannot find the required registry keys or session objects, this error triggers. In the context of Windows 11 24H2 cumulative updates, the error indicates that the system could not find the necessary registry entries when starting the event-tracking session.
Right-click RtBackup , select , go to the Security tab, and grant your user account full ownership permissions if access is denied. Delete the contents inside the RtBackup folder. Reboot the system normally. 4. Run DISM and SFC Deployment Tools
ren C:\Windows\SoftwareDistribution SoftwareDistribution.old ren C:\Windows\System32\catroot2 Catroot2.old ren C:\Windows\Logs\WindowsUpdate WindowsUpdate.old
However, if you are experiencing or failed updates , follow the steps below. How to Fix It 1. Run the Windows Update Troubleshooter This is the easiest first step to reset internal services. Go to Settings > System > Troubleshoot . Right-click RtBackup , select , go to the
Are you currently seeing this error alongside any , like failed updates or blue screens?
Because the root cause is a name collision, the solution involves forcing the existing, stuck ETW session to stop. You do not need to reinstall Windows or perform a system restore in most cases.
For persistent cases, use a tool like or Sysinternals WinObj to inspect the \KernelObjects\ namespace for a stale WindowsUpdateTraceLog event handle. No public tool directly deletes these; a reboot is the cleanest solution. for 95% of affected systems
Press Windows Key + R to open the Run dialog box. Type and press Enter to open the Registry Editor.
Are you currently seeing any (e.g., 0x800...) in the Windows Update settings menu?
Wiping the temporary update files can resolve persistent name collisions. Open and stop these services: net stop wuauserv net stop bits Are you currently seeing any (e.g.
The "Session WindowsUpdate_trace_log failed to start with error 0xc0000035" message falls into a category of Windows errors that are more common than most users realize. For many, it represents nothing more than a harmless system message that can be safely ignored. However, when accompanied by actual Windows Update failures or system instability, it serves as a valuable diagnostic clue pointing toward corrupted system files, update conflicts, or registry issues.
: Some antivirus software may block or conflict with Event Tracing for Windows (ETW) sessions.
Select all files and folders inside this directory and delete them. (If a file says it is in use, skip it).
If you reach Method 8 and the error still persists, the underlying cause is likely a deeper OS corruption requiring a clean installation. However, for 95% of affected systems, Methods 1–3 will resolve the issue in under ten minutes.