摘抄微软官网
事件 ID:10
描述:
Event filter with query “SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA “Win32_Processor” AND TargetInstance.LoadPercentage > 99” could not be reactivated in namespace “//./root/CIMV2” because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
要解决此问题,请运行脚本以停止事件 ID 10 消息。要运行脚本,请执行以下步骤:
在记事本中,创建一个名为Workaround.txt的新文档。
将以下脚本复制到记事本中:
strComputer = "."
Set objWMIService = GetObject("winmgmts:" _
& "{impersonationLevel=impersonate}!\\" _
& strComputer & "\root\subscription")
Set obj1 = objWMIService.ExecQuery("select * from __eventfilter where name='BVTFilter' and query='SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA ""Win32_Processor"" AND TargetInstance.LoadPercentage > 99'")
For Each obj1elem in obj1
set obj2set = obj1elem.Associators_("__FilterToConsumerBinding")
set obj3set = obj1elem.References_("__FilterToConsumerBinding")
For each obj2 in obj2set
WScript.echo "Deleting the object"
WScript.echo obj2.GetObjectText_
obj2.Delete_
next
For each obj3 in obj3set
WScript.echo "Deleting the object"
WScript.echo obj3.GetObjectText_
obj3.Delete_
next
WScript.echo "Deleting the object"
WScript.echo obj1elem.GetObjectText_
obj1elem.Delete_
Next
将文本另存为Workaround.vbs。
关闭记事本。
打开提升的命令提示符:
选择开始。
选择程序。
右键单击命令提示符。
选择以管理员身份运行。
将目录更改为包含workaround.vbs的目录,例如CD c:\users%username%.
运行脚本workaround.vbs。
运行脚本后,与此事件相关的事件 ID 10 错误应该停止发生。此脚本不会删除事件日志中的任何现有条目,它们需要手动从应用程序事件日志中清除。