Windows-WMI 事件 ID 10或0x80041003 死机 解药88bf必发

关键字:           经典

Windows-WMI 事件 ID 10或0x80041003 死机 解药,

最近笔记本重复了好几次奇怪的现象,重启后进入桌面,然后死机,木有蓝屏。

后来在安全模式里查了事件,如下 

 

日志名称:          Application 来源:            Microsoft-Windows-WMI
日期:            2017-11-11 22:08:41 事件 ID:         10 任务类别:     
    无 级别:            错误 关键字:           经典 用户:           
暂缺 计算机:           longware-T430 描述: Event filter with query
“SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE
TargetInstance ISA “Win32_Processor” AND TargetInstance.LoadPercentage
> 99″ could not be reactivated in namespace “//./root/CIMV2” because
of error 0x80041003. Events cannot be delivered through this filter
until the problem is corrected.

事件 Xml:

<Event
xmlns=”http://schemas.microsoft.com/win/2004/08/events/event"&gt
<System>    <Provider Name=”Microsoft-Windows-WMI”
Guid=”{1edeee53-0afe-4609-b846-d8c0b2075b1f}” EventSourceName=”WinMgmt”
/>    <EventID Qualifiers=”49152″>10</EventID>   
<Version>0</Version>    <Level>2</Level>   
<Task>0</Task>    <Opcode>0</Opcode>   
<Keywords>0x80000000000000</Keywords>    <TimeCreated
SystemTime=”2017-11-11T14:08:41.000000000Z” />   
<EventRecordID>93359</EventRecordID>    <Correlation
/>    <Execution ProcessID=”0″ ThreadID=”0″ />   
<Channel>Application</Channel>   
<Computer>longware-T430</Computer>    <Security /> 
</System>  <EventData>   
<Data>//./root/CIMV2</Data>    <Data>SELECT * FROM
__InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA
“Win32_Processor” AND TargetInstance.LoadPercentage >
99</Data>    <Data>0x80041003</Data> 
</EventData></Event>

 

 百思不得其解,于是乎google,发现国内的帖子还木有,国外有几个解决方法,内容如下。

建立一个 test.vbs
文件,贴入如下内容,保存,然后以管理员模式运行cmd,在cmd里执行test.vbs

 


strComputer = “.”Set objWMIService = GetObject(“winmgmts:” _&
“{impersonationLevel=impersonate}!\\” _& strComputer &
“\root\subscription”)Set obj1 = objWMIService.ExecQuery(“select *
from __eventfilter where name=’BVTFilter’ and query=’SELECT * FROM
__InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA
“”Win32_Processor”” AND TargetInstance.LoadPercentage > 99′”)For
Each obj1elem in obj1set obj2set =
obj1elem.Associators_(“__FilterToConsumerBinding”)set obj3set =
obj1elem.References_(“__FilterToConsumerBinding”)For each obj2 in
obj2setWScript.echo “Deleting the object”WScript.echo
obj2.GetObjectText_obj2.Delete_nextFor each obj3 in
obj3setWScript.echo “Deleting the object”WScript.echo
obj3.GetObjectText_obj3.Delete_nextWScript.echo “Deleting the
object”WScript.echo obj1elem.GetObjectText_obj1elem.Delete_Next


 目前木有出现死机,是否彻底解决,景观后效。

 

备忘之。

 

 

 

GMT

中文简体俄语日语英语韩语 中文简体俄语日语英语韩语

文本转语音功能仅限200个字符

选项 : 历史 : 反馈 : Donate 关闭

http://www.bkjia.com/Windowsjc/1232580.htmlwww.bkjia.comtruehttp://www.bkjia.com/Windowsjc/1232580.htmlTechArticleWindows-WMI 事件 ID 10或0x80041003 死机 解药,
最近笔记本重复了好几次奇怪的现象,重启后进入桌面,然后死机,木有蓝屏。
后来在安全模式…

    <Data>//./root/CIMV2</Data>

    <Data>0x80041003</Data>

strComputer = “.”

最近笔记本重复了好几次奇怪的现象,重启后进入桌面,然后死机,木有蓝屏。

WScript.echo obj3.GetObjectText_

 

Event filter with query “SELECT * FROM __InstanceModificationEvent
WITHIN 60 WHERE TargetInstance ISA “Win32_Processor” AND
TargetInstance.LoadPercentage > 99″ could not be reactivated in
namespace “//./root/CIMV2” because of error 0x80041003. Events cannot be
delivered through this filter until the problem is corrected.

    <EventRecordID>93359</EventRecordID>

set obj3set = obj1elem.References_(“__FilterToConsumerBinding”)


For Each obj1elem in obj1

日志名称:          Application

For each obj3 in obj3set

事件 ID:         10

WScript.echo “Deleting the object”


& strComputer & “\root\subscription”)

    <Provider Name=”Microsoft-Windows-WMI”
Guid=”{1edeee53-0afe-4609-b846-d8c0b2075b1f}” EventSourceName=”WinMgmt”
/>

计算机:           longware-T430

WScript.echo obj2.GetObjectText_

用户:            暂缺

    <Data>SELECT * FROM __InstanceModificationEvent WITHIN 60
WHERE TargetInstance ISA “Win32_Processor” AND
TargetInstance.LoadPercentage > 99</Data>

obj2.Delete_

描述:

G

& “{impersonationLevel=impersonate}!\\” _

  <EventData>

来源:            Microsoft-Windows-WMI

    <Opcode>0</Opcode>

 

后来在安全模式里查了事件,如下 

For each obj2 in obj2set

备忘之。

obj1elem.Delete_

    <Execution ProcessID=”0″ ThreadID=”0″ />

日期:            2017-11-11 22:08:41

<Event
xmlns=”http://schemas.microsoft.com/win/2004/08/events/event"&gt;

M

    <TimeCreated SystemTime=”2017-11-11T14:08:41.000000000Z” />

文本转语音功能仅限200个字符

  </System>

    <Security />

  </EventData>

next

中文简体俄语日语英语韩语
中文简体俄语日语英语韩语

 

WScript.echo “Deleting the object”

T

Next

WScript.echo “Deleting the object”

级别:            错误

    <Level>2</Level>

Set objWMIService = GetObject(“winmgmts:” _

    <Computer>longware-T430</Computer>

Set obj1 = objWMIService.ExecQuery(“select * from __eventfilter where
name=’BVTFilter’ and query=’SELECT * FROM __InstanceModificationEvent
WITHIN 60 WHERE TargetInstance ISA “”Win32_Processor”” AND
TargetInstance.LoadPercentage > 99′”)

事件 Xml:

 

obj3.Delete_

 百思不得其解,于是乎google,发现国内的帖子还木有,国外有几个解决方法,内容如下。

    <Correlation />

 

    <Task>0</Task>

建立一个 test.vbs
文件,贴入如下内容,保存,然后以管理员模式运行cmd,在cmd里执行test.vbs

    <Version>0</Version>

 

 

WScript.echo obj1elem.GetObjectText_

</Event>

next

选项 : 历史 : 反馈 : Donate 关闭

    <EventID Qualifiers=”49152″>10</EventID>

    <Channel>Application</Channel>

    <Keywords>0x80000000000000</Keywords>

set obj2set = obj1elem.Associators_(“__FilterToConsumerBinding”)

 目前木有出现死机,是否彻底解决,景观后效。

任务类别:          无

  <System>