Event ID 10 – SELECT * FROM __InstanceModificationEvent – WMI

I have got below error Event 10 in Application log after installed the Windows Server 2008 R2 Service Pack 1.

Log Name:      Application
Source:        Microsoft-Windows-WMI
Date:          11/15/2014 1:48:57 PM
Event ID:      10
Level:         Error
Computer:      TPVServer.MTS.local
Description:
Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Fix/Solution for Windows 7 or Windows Server with Service Pack 1

I have got the quick fix for this error Event 10 from microsoft support forum: Fix Application Error Event ID 10

We need to run below script to stop the Event ID 10 messages. To run the script follow these steps:

1) Copy the below script code and paste in Notepad file.

2) Save As the Notepad file with the extension .vbs like FixErrorEvent10.vbs

strComputer = "."

Set objWMIService = GetObject("winmgmts:" _
& "{impersonationLevel=impersonate}!" _
& strComputer & "rootsubscription")
Set obj1 = objWMIService.ExecQuery("select * from __eventfilter where name='BVTFilter' and query='SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA ""Win32_Processor"" AND TargetInstance.LoadPercentage > 99'")

For Each obj1elem in obj1

set obj2set = obj1elem.Associators_("__FilterToConsumerBinding")
set obj3set = obj1elem.References_("__FilterToConsumerBinding")

For each obj2 in obj2set
WScript.echo "Deleting the object"
WScript.echo obj2.GetObjectText_
obj2.Delete_
next

For each obj3 in obj3set
WScript.echo "Deleting the object"
WScript.echo obj3.GetObjectText_
obj3.Delete_
next

WScript.echo "Deleting the object"
WScript.echo obj1elem.GetObjectText_
obj1elem.Delete_
Next

3) Open the command prompt with elevated privilege (Run As Administrator)

4) Now run the vb script file FixErrorEvent10.vbs using CScript from command prompt to stop the event 10 with the above error message.

After running this script the Event ID 10 errors related to this event should stop occurring.

Note: If you receive the Event ID 10 with different error message, there can be other reasons, this only prevents the Event ID 10 with above error message.

Thanks,
Morgan
Software Developer