


How To Fix 'Error Code: 0XC0000035” Kernel Event Tracing on Windows?
May 17, 2025 am 02:41 AMThe Error Code 0XC0000035 is a frequently encountered error message associated with kernel event tracing. Discover how to resolve it and keep your computer running smoothly in this article.
Numerous Windows users have reported that their Event Viewer is consistently overwhelmed with 0XC0000035 errors, signaling a Kernel Event Tracing Error. This issue has been identified across all current Windows versions, including Windows 7, Windows 8.1, Windows 10, and Windows 11.
In this article, we will explore what the 0XC0000035 error entails and provide you with solutions to fix it.
Table of Contents
- What Triggers "Error Code: 0XC0000035" on Windows?
- How to Resolve the "Error Code: 0XC0000035" on Windows?
- Method 1. Restart Your Computer
- Method 2. Clear IP and DNS Cache
- Method 3. Turn Off IPv6
- Method 4. Temporarily Deactivate Your Antivirus
- Method 5. Activate the SysMain and Superfetch Services
- Method 6. Modify the Autologg Key in Your Registry
- Method 7. Update Your Intel Drivers
- TL;DR
- Conclusion
What Triggers "Error Code: 0XC0000035" on Windows?
The Error Code 0XC0000035 is a common error message linked to kernel event tracing. Several factors can lead to this error, with the most frequent being an issue with the Windows Event Log service.
After extensive investigation, it has been found that there are multiple potential reasons for this error. Here's a brief overview of what might be causing your Event Viewer to be flooded with 0XC0000035 errors:
- Perfdiag is altering the Event Tracing of Windows session: The ETW session, which Perfdiag uses for performance data collection, can cause the 0XC0000035 error if interrupted.
- The Event Trace Session was manually terminated: Some users have resolved the 0XC0000035 error by manually restarting the Event Trace Session.
- Outdated network drivers (Intel): If you're using Windows with Intel network drivers, the error might stem from a conflict between the Intel WI-FI driver and a sensitive kernel process.
- Corrupted IP range or DNS cache: This issue may arise under specific circumstances, such as a corrupted DNS cache or an incorrect IP range assignment.
- Third-party antivirus: Overzealous real-time protection from certain third-party antivirus programs can trigger this error. The solution often involves disabling real-time protection or uninstalling the third-party software.
These are some of the potential reasons behind the 0XC0000035 error. In the following section, we'll discuss how to address this issue.
How to Resolve the "Error Code: 0XC0000035" on Windows?
There are several approaches to resolving this error. The initial step should be to restart the Windows Event Log service. Here's how to do it:
Method 1. Restart Your Computer
The first action you should take is to restart your computer. This will reset the Event Log service and may resolve the 0XC0000035 error. A simple restart can often resolve Windows issues. Start with this before proceeding to more complex solutions.
To restart your computer, follow these steps:
- Click on the Start menu and select the Power button.
- Choose Restart from the drop-down menu.
- After your computer restarts, check if the error persists in the Event Viewer.
Method 2. Clear IP and DNS Cache
If a restart doesn't resolve the issue, try clearing your DNS cache and resetting your IP address. This can fix any corruption causing the 0XC0000035 error. Here's how:
- Open the search bar in your taskbar by clicking on the magnifying glass icon or using the Windows S keyboard shortcut.
- Type Command Prompt in the search box. Right-click on it in the results and choose Run as Administrator. If you're using a local account without administrator permissions, click here first.
- When prompted by the User Account Control (UAC), click Yes to allow the app to launch with administrative permissions.
- Enter the following commands in the order listed, pressing Enter after each:
- ipconfig /flushdns
- ipconfig /registerdns
- ipconfig /renew
-
ipconfig /release
- Close the Command Prompt.
Method 3. Turn Off IPv6
If you're still encountering the 0XC0000035 error, disabling IPv6 might help. It can conflict with the Event Log service and cause the error. Here's how to disable it:
- Press the Windows X keys to open the WinX menu, and click on Network Connections.
- Select your current connection type (e.g., Ethernet or Wi-Fi) in the left pane, then click on the Change adapter options button.
- Right-click on the network adapter causing issues, and select Properties.
- Scroll down to the Internet Protocol Version 6 (TCP/IPv6) option. If it's checked, click the box to disable it. If it's already unchecked, IPv6 is not enabled on your device, so try another solution.
- Click OK. This should resolve the error if IPv6 was the cause.
Method 4. Temporarily Deactivate Your Antivirus
Antivirus applications can cause various issues on Windows, including the 0XC0000035 error. If you're still seeing the error, try temporarily disabling your antivirus. If that works, consider whitelisting the Event Log service in your antivirus settings.
Here's how to disable your antivirus temporarily:
- Right-click on an empty space in your taskbar and choose Task Manager.
- Switch to the Startup tab. Find your antivirus application in the list and select it.
- Click on the Disable button at the bottom-right of the window to prevent the application from launching at startup.
- Restart your computer and check if the error persists in the Event Viewer.
Method 5. Activate the SysMain and Superfetch Services
If the error continues, enabling the SysMain and Superfetch services might help. These services can improve Event Log performance and resolve the 0XC0000035 error. Here's how to enable them:
- Press the Windows R keys to open the Run utility.
- Type "services.msc" and press Enter to open the Services window.
- Scroll to the SysMain service. Right-click on it and choose Properties.
- On the General tab, ensure the Startup type is set to Automatic, and click the Start button under Service status if it's not running. This will start the service automatically at boot.
- Click Apply, then OK. Repeat these steps for the Superfetch service.
Check if the error reappears after making these changes. If you still see "Error Code: 0XC0000035" related to Kernel Event Tracing, continue to the next solution.
Method 6. Modify the Autologg Key in Your Registry
If the error persists, modifying the autologg key in your registry might fix it. This is a known solution for the 0XC0000035 error. Here's how to do it:
Press Windows R to open the Run dialog. Type 'regedit' and press Ctrl Shift Enter to open the Registry Editor with admin access.
-
Navigate to the following Registry key using the left pane or copy-paste the location into the address bar:
Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\WMI\Autologger\EventLog-System\{b675ec37-bdb6-4648-bc92-f3fdc74d3ca2} Right-click on the Enabled registry entry in the right pane and choose Modify.
Change the Value data to 0 and set the Base to Hexadecimal. Click OK to save the changes.
Restart your computer to apply the changes. Check the Event Viewer for any new instances of the 0XC0000035 error.
Method 7. Update Your Intel Drivers
If you're still encountering the 0XC0000035 error, updating your Intel drivers might resolve it. Outdated drivers can cause various issues, including this error.
If the Event Viewer error points to the following locations, it's likely due to an Intel driver issue:
- C:\Program Files\Intel\WiFi\bin\MurocApi.dll
- C:\Program Files\Intel\WiFi\UnifiedLogging\MurocLog.log
The only confirmed method to resolve this is by using the Intel Driver & Support Assistant. Here's how to ensure you're running the latest compatible driver version:
- Open your default browser and visit the Intel Driver & Support Assistant main page.
- Wait for the initial scan to complete in the Intel Driver & Support Assistant tool, then click the Download All button. Once the download is complete, click Install All and wait for all drivers to be installed.
- Follow any additional instructions for updating the drivers.
- After installing all drivers, restart your computer to check if the issue is resolved.
TL;DR
- The "Error Code: 0XC0000035" is a kernel event tracing error that can result from various issues, including outdated drivers, a corrupted DNS cache, or an incorrect IP range.
- To fix this error, start by restarting the Windows Event Log service.
- Other solutions include clearing your DNS cache, resetting your IP address, or disabling IPv6.
- You might also resolve the issue by temporarily disabling your antivirus or modifying the autologg key in your registry.
- If all else fails, updating your Intel drivers could be the solution.
Conclusion
The "Error Code: 0XC0000035" is a relatively common issue on Windows that can be caused by various factors. We hope this article has helped you resolve your computer's problem.
If you have any questions or comments, please leave them in the section below. You can also reach out to us for support – we'd be happy to help!
Thank you for reading.
One More Thing
Looking for more tips? Check out our other guides in our Blog or visit our Help Center for a wealth of information on troubleshooting various issues.
Sign up for our newsletter to get early access to our blog posts, promotions, and discount codes. Plus, you'll be the first to know about our latest guides, deals, and other exciting updates!
The above is the detailed content of How To Fix 'Error Code: 0XC0000035” Kernel Event Tracing on Windows?. For more information, please follow other related articles on the PHP Chinese website!

Hot AI Tools

Undress AI Tool
Undress images for free

Undresser.AI Undress
AI-powered app for creating realistic nude photos

AI Clothes Remover
Online AI tool for removing clothes from photos.

Clothoff.io
AI clothes remover

Video Face Swap
Swap faces in any video effortlessly with our completely free AI face swap tool!

Hot Article

Hot Tools

Notepad++7.3.1
Easy-to-use and free code editor

SublimeText3 Chinese version
Chinese version, very easy to use

Zend Studio 13.0.1
Powerful PHP integrated development environment

Dreamweaver CS6
Visual web development tools

SublimeText3 Mac version
God-level code editing software (SublimeText3)

Hot Topics









If you want to cancel the password login for Windows 11, there are three methods to choose: 1. Modify the automatic login settings, uncheck "To use this computer, users must enter their username and password", and then restart the automatic login after entering the password; 2. Switch to a passwordless login method, such as PIN, fingerprint or face recognition, configure it in "Settings>Account>Login Options" to improve convenience and security; 3. Delete the account password directly, but there are security risks and may lead to some functions being limited. It is recommended to choose a suitable solution based on actual needs.

There are three main ways to uninstall programs on Windows 11: 1. Uninstall through "Settings", open the "Settings" > "Apps" > "Installed Applications", select the program and click "Uninstall", which is suitable for most users; 2. Use the control panel, search and enter "Control Panel" > "Programs and Functions", right-click the program and select "Uninstall", which is suitable for users who are accustomed to traditional interfaces; 3. Use third-party tools such as RevoUninstaller to clean up more thoroughly, but pay attention to the download source and operation risks, and novices can give priority to using the system's own methods.

To run programs as administrator, you can use Windows' own functions: 1. Right-click the menu to select "Run as administrator", which is suitable for temporary privilege hike scenarios; 2. Create a shortcut and check "Run as administrator" to achieve automatic privilege hike start; 3. Use the task scheduler to configure automated tasks, suitable for running programs that require permissions on a scheduled or background basis, pay attention to setting details such as path changes and permission checks.

Windows 10 KB5061087 is now rolling out as an optional preview update for those on version 22H2 with Start menu fixes.

Microsoft confirmed that the DHCP server service might stop responding or refuse to connect after the June 2025 Update for Windows Server.

In the past, I always viewed the i5 lineup as anemic when it came to gaming. However, in 2025, a mid-range CPU is more than enough to start your gaming journey. Many games still don’t fully utilize multi-core performance as well as they could, so

The activation method of Windows 11 depends on the system source and is divided into two types: automatic activation of digital licenses and manual input of product keys. 1. If you purchase a computer using a genuine channel or bind a digital license, connect to the network and log in to a Microsoft account, the system will automatically activate. You can check the status in "Settings → System → About → Activation"; 2. If you use a retail version or OEM key, you need to enter the activation page and manually enter the key, and the key must match the system version; 3. If the activation fails, you should check whether the key is reused, whether the network is normal, running the troubleshooting tool, or try to log in to the Microsoft account again, but it still cannot be resolved. You can contact Microsoft customer service.

The CUKTECH 15 GaN Charger 140W is the type of tech accessory everyone should own. Perfect for charging a laptop or a bunch of mobile devices at once, the GaN internals make this a heavier charger than others on the market, but a bit of extra bulk is
