Session Windowsupdatetracelog Failed To Start With The Following Error 0xc0000035 Repack
Even if the error seems minor, it often accompanies:
List current ETW sessions:
If a duplicate/stale session appears, stop and delete it:
Use wevtutil to check provider/state (optional):
wevtutil gp Microsoft-Windows-WindowsUpdateClient /ge
(Inspect for odd configuration.)
Run System File Checker and DISM:
sfc /scannow
DISM /Online /Cleanup-Image /RestoreHealth
Check Task Scheduler:
Check for leftover registry keys (advanced; back up registry first):
Review antivirus/security logs or temporarily disable third-party security to test if it blocks session creation.
Ensure Windows is up to date and run Windows Update Troubleshooter.
In the context of this error, “repack” refers to a custom Windows image — for example, a modified .wim or .esd file created with tools like NTLite, MSMG Toolkit, or DISM. Repacking often involves removing components, integrating updates, or altering services. This process commonly triggers the error. Even if the error seems minor, it often accompanies:
Background software can lock trace sessions. List current ETW sessions:
The SFC scan checks and repairs corrupted system files. If a duplicate/stale session appears, stop and delete it:
Subscribe Now!
