事件ID10 Event filter with query “SELECT

摘抄微软官网
事件 ID:10
描述:
Event filter with query “SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA “Win32_Processor” AND TargetInstance.LoadPercentage > 99” could not be reactivated in namespace “//./root/CIMV2” because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
要解决此问题，请运行脚本以停止事件 ID 10 消息。要运行脚本，请执行以下步骤：

在记事本中，创建一个名为Workaround.txt的新文档。

将以下脚本复制到记事本中：

strComputer = "."
Set objWMIService = GetObject("winmgmts:" _
& "{impersonationLevel=impersonate}!\\" _
& strComputer & "\root\subscription")
Set obj1 = objWMIService.ExecQuery("select * from __eventfilter where name='BVTFilter' and query='SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA ""Win32_Processor"" AND TargetInstance.LoadPercentage > 99'")
For Each obj1elem in obj1
set obj2set = obj1elem.Associators_("__FilterToConsumerBinding")
set obj3set = obj1elem.References_("__FilterToConsumerBinding")
For each obj2 in obj2set
WScript.echo "Deleting the object"
WScript.echo obj2.GetObjectText_
obj2.Delete_
next
For each obj3 in obj3set
WScript.echo "Deleting the object"
WScript.echo obj3.GetObjectText_
obj3.Delete_
next
WScript.echo "Deleting the object"
WScript.echo obj1elem.GetObjectText_
obj1elem.Delete_
Next

将文本另存为Workaround.vbs。

关闭记事本。

打开提示的命令提示符：

选择开始。
选择程序。
右键单击命令提示符。
选择以管理员身份运行。
将目录更改为包含workaround.vbs的目录，例如CD c:\users%username%.

运行脚本workaround.vbs。

运行脚本后，与此事件相关的事件 ID 10 错误应该停止发生。此脚本不会删除事件日志中的任何现有条目，它们需要手动从应用程序事件日志中清除。