Windows-WMI 事件 ID 10或0x80041003——解决过程

2024年10月8日
国庆节后，第一天上班，实验室里一台PC机出现故障，Windows7系统，可以正常启动进入安全模式，但是正常启动无法加载桌面，可以看见鼠标，Ctrl+Alt+Del无法调出任务管理器。

开始处理，进入安全模式，查看系统日志。
发现一个错误如下（截取自[https://www.cnblogs.com/longware/p/7823135.html]），然后按照网上文章步骤处理，得以解决。

日志名称: Application
来源: Microsoft-Windows-WMI
日期: 2017-11-11 22:08:41
事件 ID: 10
任务类别: 无
级别: 错误
关键字: 经典
用户: 暂缺
计算机: longware-T430
描述:
Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

以下是处理方法：
建立一个 test.vbs 文件，贴入如下内容，保存，然后以管理员模式运行cmd，在cmd里执行test.vbs

strComputer = "."
Set objWMIService = GetObject("winmgmts:" & "{impersonationLevel=impersonate}!\\" & strComputer & "\root\subscription")
Set obj1 = objWMIService.ExecQuery("select * from __eventfilter where name='BVTFilter' and query='SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA ""Win32_Processor"" AND TargetInstance.LoadPercentage > 99'")
For Each obj1elem in obj1
set obj2set = obj1elem.Associators_("__FilterToConsumerBinding")
set obj3set = obj1elem.References_("__FilterToConsumerBinding")
For each obj2 in obj2set
WScript.echo "Deleting the object"
WScript.echo obj2.GetObjectText_
obj2.Delete_
next
For each obj3 in obj3set
WScript.echo "Deleting the object"
WScript.echo obj3.GetObjectText_
obj3.Delete_
next
WScript.echo "Deleting the object"
WScript.echo obj1elem.GetObjectText_
obj1elem.Delete_
Next