Still having Defender Issues


MetalAlchemist

Well-known member
Member
Local time
7:19 PM
Posts
18
OS
Windows 11 Home
So I'm Still getting "Session "DefenderApiLoggerLowPriv" failed to start with the following error: 0xC0000035" even after October update and updating Defender Platform on both my Windows 10 and 11 machines. I have no idea why this is still happening.
Screenshot (11).webp
 

My Computer My Computer

At a glance

Windows 11 Home13th Gen Intel(R) Core(TM) i7-13620H16 GBRTX 4050 (Laptop)
OS
Windows 11 Home
Computer type
Laptop
Manufacturer/Model
MSI Katana 15 B13VEK
CPU
13th Gen Intel(R) Core(TM) i7-13620H
Motherboard
MSI- MS 1585
Memory
16 GB
Graphics Card(s)
RTX 4050 (Laptop)
Screen Resolution
1920X1080P
Hard Drives
SAMSUNG MZVL41T0HBLB-00BTW
Search result -

The error Session "DefenderApiLoggerLowPriv" failed to start with the following error: 0xC0000035 means STATUS_OBJECT_NAME_COLLISION, which happens when an Event Tracing for Windows (ETW) logging session tries to start with a name that is already active or improperly cleared. [1, 2]

Users on forums like Ten Forums and Reddit note that this often appears alongside Windows Defender notification quirks or engine updates. In most cases, it is a benign logging glitch rather than a broken antivirus service. [1, 2, 3, 4]

How to Fix or Clear the Error

  • Update Windows and Security Intelligence: Ensure your system has the latest Windows updates and Microsoft Defender security intelligence definitions installed, as recent patch cycles address related logging and engine crashes. [1]
  • Run System File Checker (SFC) and DISM:
    1. Press the Windows Key, type cmd, right-click Command Prompt, and select Run as administrator.
    2. Type sfc /scannow and press Enter.
    3. Once finished, type DISM /Online /Cleanup-Image /RestoreHealth and press Enter. [1]
  • Check Event Trace Sessions in Performance Monitor:
    1. Press Win + R, type perfmon, and click OK.
    2. Expand Data Collector Sets and click Event Trace Sessions.
    3. Look for the logging session or check if a stale trace session needs to be stopped or adjusted. [1]
  • Backup and Reset Defender Policies (Advanced): If policy conflicts are locking up the service startup, you can export and clear custom Defender registry policies via an elevated PowerShell session. [1]
 

My Computer My Computer

At a glance

Windows 11 Pro 26H2
OS
Windows 11 Pro 26H2
Computer type
Laptop
Manufacturer/Model
Toshiba
Antivirus
Defender
Back
Top Bottom