Служба журнала событий недоступна

Решение:

0. run Safe Mode
1. cmd 
net stop winmgmt
2. Переименовываем  в каталоге windows\system32\WBEM каталог Repository в Repository.old
3. cmd
net start winmgmt
winmgmt /resetRepository
4. shutdown -r -t 00

0. run Safe Mode

1. cmd

net stop winmgmt

2. Переименовываем в каталоге windows\system32\WBEM каталог Repository в Repository.old

3. cmd

net start winmgmt

winmgmt /resetRepository

4. shutdown -r -t 00

Подробней:

   1. Start the computer in Safe Mode without networking.
   2. Open a command prompt as administrator
   3. Type "net stop winmgmt" without quotes and press enter to make certain the wmi service is not running.
   4. Go to the windows\system32\WBEM\ and rename the Repository folder.
   5. Restart the system to normal mode.
   6. Open a command prompt as administrator.
   7. Type "net stop winmgmt" without quotes and press enter to stop the wmi service.
   8. Type winmgmt /resetRepository and restart the system.
   9. Test the event viewer.

1. Start the computer in Safe Mode without networking.

2. Open a command prompt as administrator

3. Type "net stop winmgmt" without quotes and press enter to make certain the wmi service is not running.

4. Go to the windows\system32\WBEM\ and rename the Repository folder.

5. Restart the system to normal mode.

6. Open a command prompt as administrator.

7. Type "net stop winmgmt" without quotes and press enter to stop the wmi service.

8. Type winmgmt /resetRepository and restart the system.

9. Test the event viewer.