Turns out if you remove a file\service called wdf01000 you will be greeted with many devices with yellow ‘!’, and many will simply not work.
Some examples include processor drivers, CD\DVD drivers, mouse and keyboard that are USB (ps/2 works fine), and sound drivers.
First off, we need to restore the file wdf01000.sys to C:\windows\system32\drivers. For Windows Vista\7 simply right click and go to properties -> Previous Versions -> and select a previous version and open it. Copy and paste the older wdf01000.sys into the C:\windows\system32\drivers.
Now just merge this key For Windows Vista or Windows 7 [32-bit tested only]
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Wdf01000]
“DisplayName”=”Kernel Mode Driver Frameworks service”
“Group”=”WdfLoadGroup”
“ImagePath”=hex(2):73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,64,00,\
72,00,69,00,76,00,65,00,72,00,73,00,5c,00,57,00,64,00,66,00,30,00,31,00,30,\
00,30,00,30,00,2e,00,73,00,79,00,73,00,00,00
“ErrorControl”=dword:00000001
“Start”=dword:00000000
“Type”=dword:00000001[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Wdf01000\Enum]
“0″=”Root\\LEGACY_WDF01000\\0000″
“Count”=dword:00000001
“NextInstance”=dword:00000001[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Wdf01000\Parameters]
“MajorVersion”=dword:00000001
“MinorVersion”=dword:00000009
“BuildNumber”=dword:00001db0
Download the Registry Key directly
Why does this happen? Well, take a look at the definition for WDF:
WDF implements the fundamental features of a Windows driver and enables you to focus on the specific details of your hardware or filter. WDF defines a single driver model that you can use to create object-oriented, event-driven drivers for either kernel mode or user mode.
Good Luck!
I am a tech enthusiast constantly moving toward developing a higher understanding of the Windows, viruses, programming, reversing, and virtually anything else computer related.
Hi Jay I have the problem you described with my HP g50 laptop Win7/32. You solution didn’t work I cannot even copy/paste wfd01000.sys Do you have other ideas? Thanks
Hey there. Once you merged the key you should be able to look at previous versions. Can you find previous versions on the machine by right clicking drivers(in system32) and selecting properties? Here is my view from it:
Try hitting “Copy” and just select C: and hitting ok and it will drop a previous copy of drivers there. Then open it, and try to find WDF and copy it to C:\windows\system32\drivers. If you cannot find it, do you have another windows machine you can use to get the file?
Elaborating more on the copy and paste issue will help, too. is it a permission error you are having?
OK got it copied to drivers after played with security settings and permissions, then merged the key – same thing, only part of it appear in regeditor
After you merge the key into the registry, you may need to reinstall the devices from device manager. If there are some other things that are giving you errors, you may want to consult BleepingComputer for one on one help.
Hi I cannot merge the key completely, only Enum subkey shows all 4 lines, other 2 are empty with one row only. I copied folder drives as you suggest, no errors, but wdf01000.sys is not there. I found wdf01000.sys.mui inside drivers\en-US
ok found wdf01000.sys in windows\winsxs\x86….. but cannot copy it to drivers – permission error, I have admin rights
Do you have UAC disabled? if not, I suggest disabling it and you may solve your issues. If it is, try using the built in administrator account by opening up an elevated command prompt and typing:
net user administrator /active:yes
Make sure to turn it off by passing the switch /active:no after you’re finished with the changes.
Hi Jay,
I’ve run into this problem as well, saw your post and thought you might be able to help. I was going to try and reinstall windows, but the driver for my dvd rom drive is one of the drivers coming up as corrupted. I did look for the wdf01000.sys file you mentioned but can’t seem to find it. I’m using a Dell laptop and the onboard keyboard, touch pad, pointer, sound and dvd aren’t working to name a few. checking in device manager they all come up with the yellow exclamation point and say “The driver for this device might be corrupted, or your system may be running low on memory or other resources. (Code 3″ I looked under tried doing a system restore and the latest I could restore from what midnight this am and it didn’t fix the problem. Oddly enough I can still use the computer because an external mouse and kb via USB does actually work. I can get online with it as well. Oddest problem I’ve ever seen.
Thanks,
Chuck
Hi,
I own a Dell latitude D820 laptop. It had been left on, and I noticed the screen was black so rebooted it. When it came back online I was no longer able to use the keyboard or built in touch pad. I was however able to use a wireless USB mouse and keyboard so I can use the laptop and get online with it. I checked device manager and it shows several items with errors including the DVD drive so I cannot reinstall windows. The error for each item is “The driver for this device might be corrupted, or your system may be running low on memory or other resources. (Code 3)”
It doesn’t even see the DVD drive in my computer. I did try and do a system restore, but the only restore point available was from midnight the night before and it didn’t fix the problem.
As a last resort I might attempt to locate an external USB DVD drive, but I’m hoping to not go in that direction if possible.
Running Windows 7 32 bit version.
Thanks!
Chuck
there’s a couple of bad characters in the keys around “0′=…
I’m tryinng this:
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Wdf01000]
“DisplayName”=”Kernel Mode Driver Frameworks service”
“Group”=”WdfLoadGroup”
“ImagePath”=hex(2):73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,64,00,\
72,00,69,00,76,00,65,00,72,00,73,00,5c,00,57,00,64,00,66,00,30,00,31,00,30,\
00,30,00,30,00,2e,00,73,00,79,00,73,00,00,00
“ErrorControl”=dword:00000001
“Start”=dword:00000000
“Type”=dword:00000001
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Wdf01000\Enum]
“0″=Root\\LEGACY_WDF01000\000″
“Count”=dword:00000001
“NextInstance”=dword:00000001
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Wdf01000\Parameters]
“MajorVersion”=dword:00000001
“MinorVersion”=dword:00000009
“BuildNumber”=dword:00001db0
woops, its broken there too
“0″=”Root\\LEGACY_WDF01000\000″
After pulling my hair out for a 2wks trying to fix this issue of corrupted drivers all over the place (CPU, DVD, PCI ISA Bridge, Audio etc) and finally resigning myself to having to re-install all my apps, settings etc, I found this page…
WOW!
I took ownership of wdf0001.sys, replaced it with a version I downloaded through Google, deleted every corrupted device from Device Manager and rebooted.
Windows failed to boot, ran the System Repair Wizard, and correctly identified that new wdf0001.sys was the cause of the problem, and replaced it succesfully.
Rebooted again, and this time instead of the endless “Installing Driver – Current driver is best driver – Driver corrupted” loop I had been in, it successfully installed every device that was corrupted, and even some that I didn;t know about (CMOS clock anyone?)
So anyway, a HUUUUUUGE THANK YOU!
The fix with wdf0001.sys was not mentioned anywhere else I found through Google, so this page is a needle in a haystack but worth its weight in gold!
Oh, I forgot to mention in the first step above (replacing wdf0001.sys) I also saved the .reg file to my desktop and ran it – it successfully merged the keys into the registry.
Thank you so much! I was ready to buy a new computer due to this terrible issue. This saved me few hundred dollars! Thank you thank you thank you.
This solution resolved my issue, thank you! Forefront Endpoint Protection (aka MS Securit Essentials) removed the wdf01000.sys file due to an infection and the registry was altered too. I restored the file from a previous version easy enough. The provided registry text is missing some formatting and didn’t work so I exported the [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Wdf01000] key from a working computer and imported that. One reboot later and the computer was up and running. Thank you again.
exported from another computer the registery and it worked!
Good to hear
I DONT HAVE A previous version on my windows
This page definitely helped me resolve the issues on a customers Presario v3500 laptop running windows 7. There were many instances of this error in the device manager. As it turned out the wdf01000.sys file was missing and Microsoft Security Essentials had quarantined the file as a trojan virus. I decided against restoring it from the quarantine as it could re-infect the laptop if it was a trojan.
Solution, open command prompt as administrator and run “sfc /scannow”
This replaces the missing wdf01000.sys file a reboot was necessary after this. I believe this process also replaced the registry keys.
After rebooting I went to device manager but still has these errors so I went through and uninstalled every device with the error. I then rebooted and upon start-up it managed to install the drivers for all but one device.
The only device left is an unknown usb device but I consider this acceptable.
I have posted this in the hopes that it may help others who have difficulty completing the steps previously mentioned.
Thanks