What is Wdf01000?

Wdf01000.sys is a Windows driver. A driver is a small software program that allows your computer to communicate with hardware or connected devices. This means that a driver has direct access to the internals of the operating system, hardware etc. The free file information forum can help you determine if Wdf01000.sys is a Windows system file or if it belongs to an application that you can trust.

Run a free scan to check for Wdf01000 drivers in need of updating

Wdf01000.sys file information

The process known as WDF Dynamic or Kernel Mode Driver Framework Runtime belongs to software Microsoft Windows Operating System or Kernel Mode Driver Frameworks service by Microsoft (

Description: Wdf01000.sys is not essential for the Windows OS and causes relatively few problems. Wdf01000.sys is located in the C:\Windows\System32\drivers folder. Known file sizes on Windows 10/8/7/XP are 492,000 bytes (79% of all occurrences), 503,008 bytes and 5 more variants. 
The driver can be started or stopped from Services in the Control Panel or by other programs. The program is not visible. Wdf01000.sys is a trustworthy file from Microsoft. Wdf01000.sys is digitally signed. There is no detailed description of this service. The Wdf01000.sys file is not a Windows system file. Wdf01000.sys appears to be a compressed file. Therefore the technical security rating is 9% dangerous, however you should also read the user reviews.

Uninstalling this variant: In case of problems with Wdf01000.sys, you can do the following:
  • contact Customer Service [1][2]
  • uninstall the associated program (Start > Control Panel > Uninstall a Program > Kernel-Mode Driver Framework or Microsoft Windows)

Recommended: Identify Wdf01000.sys related errors

Important: Some malware disguises itself as Wdf01000.sys, particularly when not located in the C:\Windows\System32\drivers folder. Therefore, you should check the Wdf01000.sys process on your PC to see if it is a threat. We recommend Security Task Manager for verifying your computer's security. This was one of the Top Download Picks of The Washington Post and PC World.


User Comments

might be ibm trackpointer driver for thinkpad
  Big Lee  
also associated with dell alps touchpad drivers.
  Small Lee  
it is used by logitech in their 'setpoint' software for keyboards and mouse. I cannot locate it in my sys32/drivers folder either, so i am hunting for it.
  Alan   (further information)
something (driver package?) from Vista (vista_rtm.061101-2205) ; i think i installed it with xp SP3
This file prevented my Alps Thinkpad (on a Dell Latitude D630 notebook) from installing the driver (causes a "Fatal Error" during install). Renaming to wdf01000.old will resolve that issue.
  Scott O.  
deleted WF01000.sys (484kb) and saved the file. Before deleting MS update kept trying to download updates that were already installed.That fixed the problem. Apparently Windows rebuilt the file, now contains (481kb)
  Wayne Feese  
My Vista laptop won't start without it, according to the Startup Repair utility.
  Pam A.  
Logitech wireless mouse
bsoded my system
Was consuming 100% cpu on a processor. Unused IEEE1394 was running in it and disabling that device via DeviceMgr solved issue.
  Tom N.   (further information)
seems to show up in many bluescreen view reports - driver power state error so i unchecked the power management for authentec fingerprint scanner from
Cisco securityreported that it was monitoring my keyboard.
Start up driver for windows if corrupted needs to be replaced with a copy from a running vista installation the CD won't always fix it
this is common file infected by TR/Rootkit.Gen. If its 100% CPU I guess its active.
It caused a bluescreen. Dell desktop with a dell mouse and logitech Bluetooth keyboard
It monitors the Keyboard, but for what I do not know. My Cisco Security Agent warns me about it all the time.
  j tizzle  
dell inspiron windows vista 32 bit wouldnt start. i booted into dos and renamed the file to .bak windows would then boot and i connected an external mouse and keyboard. then i did a search for wdf01000.sys in c:\windows\winsxs and copied it into system32\drivers. rebooted and all was well
  Mark G  
My computer is having problems with this file and there is no way to fix it, since it is preventing me from reaching the logon screen in my computer.
  Joe Desmond  
Wdf01000.sys repeat corrupt file messages every 9/10 days boot failure. Was restoring from backup. Now copy duplicate from D: to fix. Unknown why......
it is the kernal-mode driver update. it was causing bsod on a laptop i was working on, can be uninstalled with no issues.
My wifi drivers for my asus usb wifi dongle were causing this file to spike the cpu process to 100%. If you are having trouble with audio or video skipping, download latencymon and see if something is spiking your cpu process.
Very helpful info here, as I keep getting crashes and the cursor jumps on my DELL Latitude! BlueScreenView detects it, but I can't locate it to delete it... Neither Task Manager nor Explorer...
  Sabine K McNeill  
Kernel Mode Driver Framework Runtime, system file, Microsoft Windows Operating System. Size depends of the version x86 x64 and revision. The file is always signed with MS signature. You can check the integrity of the system files from elevated Command prompt (shift + start as Administrator) with SFC /SCANNOW Command, for Vista, 7, 8, 8.1 Windows.
  Willy Todorov  

Rating chart

Summary: Average user rating of Wdf01000.sys: based on 25 votes with 23 user comments. 13 users think Wdf01000.sys is essential for Windows or an installed application. 5 users think it's probably harmless. 2 users think it's neither essential nor dangerous. One user suspects danger. 4 users think Wdf01000.sys is dangerous and recommend removing it. 5 users don't grade Wdf01000.sys ("not sure about it").

Do you have additional information?
What do you know about Wdf01000.sys:
How would you rate it:
Link for more info:
Your Name:

Best practices for resolving Wdf01000 issues

A clean and tidy computer is the key requirement for avoiding problems with Wdf01000. This means running a scan for malware, cleaning your hard drive using cleanmgr and sfc /scannow, uninstalling programs that you no longer need, checking for Autostart programs (using msconfig) and enabling Windows' Automatic Update. Always remember to perform periodic backups, or at least to set restore points.

Should you experience an actual problem, try to recall the last thing you did, or the last thing you installed before the problem appeared for the first time. Use the resmon command to identify the processes that are causing your problem. Even for serious problems, rather than reinstalling Windows, you are better off repairing of your installation or, for Windows 8 and later versions, executing the DISM.exe /Online /Cleanup-image /Restorehealth command. This allows you to repair the operating system without losing data.

To help you analyze the Wdf01000.sys process on your computer, the following programs have proven to be helpful: Security Task Manager displays all running Windows tasks, including embedded hidden processes, such as keyboard and browser monitoring or Autostart entries. A unique security risk rating indicates the likelihood of the process being potential spyware, malware or a Trojan. Malwarebytes Anti-Malware detects and removes sleeping spyware, adware, Trojans, keyloggers, malware and trackers from your hard drive.

Other processes

Wdf01000.sys [all]