I keep getting this warning at power-up. MS on-line support has no results. Dell has no answers (it is beyond their level of expertise !). I don't know how to contact MS windows 7 support (Dell won't tell me--probably beyond their level of expertise also). So if someone can take an educated guess at what this driver is, or steer me in the right direction I would appreciate it. I have recently noticed that a 'run' windows opens briefly during PUP but closes too quickly for me to see what if anything is displayed in the command line. I don't know how to run a 'trace' on this OS or even if 'trace' is even used these days. Thank you for your time and any thoughts.__________________________________________________________________________________________________Log Name: System Source: Microsoft-Windows-Kernel-PnP Date: 1/25/2010 4:07:45 PM Event ID: 219 Task Category: (212) Level: Warning Keywords: User: SYSTEM Computer: George-PC Description: The driver \Driver\WUDFRd failed to load for the device USB\VID_BEEF&PID_0006\AAAAAAAAAAAAAAAAAAAA. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Microsoft-Windows-Kernel-PnP" Guid="{9C205A39-1250-487D-ABD7-E831C6290539}" /> <EventID>219</EventID> <Version>0</Version> <Level>3</Level> <Task>212</Task> <Opcode>0</Opcode> <Keywords>0x8000000000000000</Keywords> <TimeCreated SystemTime="2010-01-25T21:07:45.746021500Z" /> <EventRecordID>75881</EventRecordID> <Correlation /> <Execution ProcessID="4" ThreadID="56" /> <Channel>System</Channel> <Computer>George-PC</Computer> <Security UserID="S-1-5-18" /> </System> <EventData> <Data Name="DriverNameLength">42</Data> <Data Name="DriverName">USB\VID_BEEF&amp;PID_0006\AAAAAAAAAAAAAAAAAAAA</Data> <Data Name="Status">3221226341</Data> <Data Name="FailureNameLength">14</Data> <Data Name="FailureName">\Driver\WUDFRd</Data> <Data Name="Version">0</Data> </EventData> </Event>

If this is a driver issue, the fastest way to track this down is to use a testing tool called Driver Verifier.If this tool finds a problem, your machine will crash again. Hopefully with it enabled, it will allow you to easily identify the bad driver.Enable driver verifier1) Open an elevated command prompt2) Type "verifier /standard /all" (no quotes)3) Reboot your machine4) Use machine again until it crashes (hopefully this will be fast :)After the crash & reboot, go into safe mode. http://windowshelp.microsoft.com/Windows/en-US/Help/323ef48f-7b93-4079-a48a-5c58eec904a11033.mspxDisable driver verifier1) Open an elevated command prompt2) Type "verifier /reset" (no quotes)3) Reboot your machineUpload the minidump file to the pubic folder of www.skydrive.com so someone can look at the files to see if they can pinpoint the cause.I would also do a memory check with http://www.memtest.org/ and verify the ram is good. MCSE, MCSA, MCDST [If this post helps to resolve your issue, please click the "Mark as Answer" or "Helpful" button at the top of this message. By marking a post as Answered, or Helpful you help others find the answer faster.]

I assume too since this is a Dell, that Dell had you run the full onboard diagnostics (if the OEM partition wasn't removed that held the onboard diagnostics) otherwise download the latest diagnostics utility for your machine and run the FULL set of tests.MCSE, MCSA, MCDST [If this post helps to resolve your issue, please click the "Mark as Answer" or "Helpful" button at the top of this message. By marking a post as Answered, or Helpful you help others find the answer faster.]

I ran the verifier utility and the system promptly crashed to the BSOD which said a driver in the kernal stack was attempting to corrupt windows and needed to be replaced with a working version. Where do I find the minidump file ? Do I need to go into advanced system settings and redirect it to a new location?

I found this file in AppData. Is this what I need?NetworkDiagnostics.0.debugreport.xml (file://GEORGE-PC/Users/George/AppData/Local/ElevatedDiagnostics/460911090/2010013020.000/NetworkDiagnostics.0.debugreport.xml)NetworkDiagnostics.0.debugreport.xml (file://GEORGE-PC/Users/George/AppData/Local/ElevatedDiagnostics/460911090/2010013020.000/NetworkDiagnostics.0.debugreport.xml)

C:\Windows\Minidump folder we need the *.dmp filesMCSE, MCSA, MCDST [If this post helps to resolve your issue, please click the "Mark as Answer" or "Helpful" button at the top of this message. By marking a post as Answered, or Helpful you help others find the answer faster.]

Can't find C:\Windows\minidump.

(%systemroot%\minidump) you may need to enable folder options to see hidden files and folders MCSE, MCSA, MCDST [If this post helps to resolve your issue, please click the "Mark as Answer" or "Helpful" button at the top of this message. By marking a post as Answered, or Helpful you help others find the answer faster.]

I remember finding this file when I had Vista, but I looked everywhere in Windows 7 and can't find it. I may have the advanced system crashdump set up wrong.

I went into system settings / advanced. I checked and the Crashdump file was supposed to be written to %systemroot%\Minidump. I tried a small memory dump, a kernal dump and got absolutely nothing to show for it. I have searched everywhere for any file that corresponds with the time of the BSOD. The closest thing I got was in C:\users\george\AppData\Local\ElevatedDiagnostics. I have a file called 'setupact' and one called 'ntbtlog'. All of these files are too large to post on this site. I want to thank you for your time and effort and hope you understand that I am not that computer literate. I will keep trying. The verifier found the problem but I can't produce a file with the results. Last night I re-installed Windows 7 x64 as an upgrade and still have : "a driver attempting to corrupt Windows has been caught. This driver needs to be replaced with a working version.' Everything works. If something didn't work I could find it. I don't know what to do. I ain't got nothin'.

what is your machine make, model and model # (be very specific). Be specific to the actual error you're receiving, any error codes, messages. Make sure that you have no 3rd party firewalls/security suites installed, Itunes, Zonealarm, antivirus. Install the latest Windows software updates. Don't forget to check for non-critical updates too! To manually get updates, open Internet Explorer (you can't use a non-Microsoft browser for updates). For IE 8 and later: Click on Safety, then Windows Update. Follow the instructions. If you can get the system up for more than a few minutes or can use safe mode, try removing the last installed software application or driver. For removal of an application (Windows 7 & Vista): Click on Start, Control Panel, then Programs and Features. Select the software to uninstall and select Uninstall. For removal of an application (Windows XP): Click on Start, Control Panel, then Add or Remove Programs. Select the software to uninstall and select Remove. To disable a driver: Bring up the system information dialog: On the keyboard, press the Windows key + Pause/Break. or Select Start, right click Computer and on the drop-down, select Properties. Click on the left side option Advanced system settings (7/Vista only). In System Properties, select the Hardware tab, then click on Device Manager button. Find the hardware/driver of interest (you may need to expand a choice at the "plus" graphic) and double click the choice. Select the Driver tab. Here you can perform a number of actions such as update the driver, roll Back the driver to an older version, disable or uninstall the driver. Click OK to exit, then close the Device Manager and other previously opened dialogs. MCSE, MCSA, MCDST [If this post helps to resolve your issue, please click the "Mark as Answer" or "Helpful" button at the top of this message. By marking a post as Answered, or Helpful you help others find the answer faster.]

The PC is a DEll XPS-420 Dimension Desktop / Core2 Quad Core Q6600 2.4 GHz / 8GB RAM / NVIDIA GeForce 9500GT 1GB video board. The system only freezes up and crashes when I use 'verifier'. The 'Blue Screen Of Death' states that a driver attempting to corrupt Windows has been caught. This driver needs to be replaced with a working version. Other than that, I only get the warning stated in the beginning of my question. No matter what I do I cannot get a crash dump file to be generated. If it is being generated, I can't find it --- anywhere. The only files being generated at the time of the crash are named in the above panel.

How does the verifier work? I suspect that it works with an USB device and the device driver is not compatible with Windows 7. If Dell cannot provide Windows 7 compatible driver, we are not able to resolve this issue. All the latest drivers for your computer can be downloaded from the following website. Drivers & Downloads for XPS/Dimension 420 Important Note: Microsoft provides third-party contact information to help you find technical support. This contact information may change without notice. Microsoft does not guarantee the accuracy of this third-party contact information. You may install the driver that is related to the USB device. If the issue is not resolved, we need to wait for Dell for the new drivers.Arthur Xie - MSFT

Hi ZuhlAre you using a Logitech keyboard on that system?The driver WUDFRd.sys is associated with Logitech keyboards and some of these are not compatible with Windows 7.Check the following. Go to the following website: Windows 7 Compatibility Center You will see a Software and Hardware tab that you can use to locate the product you wish to check for compatibility. Select the Compatibility FAQ that will explain how to use the compatibility website. If you find an installed software/hardware item that does not appear on the compatibility list, go to the website of the maker of that product and check for any updates.Let us know what you find. Thank You for using Windows 7 Ronnie Vernon MVP

I am using a Logitech Classic 200 USB keyboard. This keyboard is listed as 64 and 32 bit compatible with no action compatible. I have tried a Logitech wireless mouse before and have uninstalled all drivers related to it. I also uninstalled all Logitech Gaming software and drivers for my joystick with no results. I was getting this warning when I was still using the original Dell USB keyboard. I did try a Microsoft wireless laser mouse and later a Microsoft wireless keyboard and mouse combo. I was unhappy with the performance of these products and stopped using them. There may still be drivers left over from them that need to be removed.

I am using a Logitech Classic 200 USB keyboard. This keyboard is listed as 64 and 32 bit compatible with no action compatible. I have tried a Logitech wireless mouse before and have uninstalled all drivers related to it. I also uninstalled all Logitech Gaming software and drivers for my joystick with no results. I was getting this warning when I was still using the original Dell USB keyboard. I did try a Microsoft wireless laser mouse and later a Microsoft wireless keyboard and mouse combo. I was unhappy with the performance of these products and stopped using them. There may still be drivers left over from them that need to be removed. I also have something called 'Interlock driver setup x64' by 'Pace Anti-piracy' listed as being installed on 11/14/09. Didn't find it at Compatibiliy Center. Don't know if I can uninstall it without any ill effects. Please advise if possible.

I also have something called 'Interlock driver setup x64' by 'Pace Anti-piracy' listed as being installed on 11/14/09. Didn't find it at Compatibiliy Center. Don't know if I can uninstall it without any ill effects. Please advise if possible. HiIt's possible that this application could be the problem. The pace Interlock Driver Anti-piracy is apparently a component that protects software from theft or illegal copying. It is not available as a stand alone product, but is installed by software makers when you install their products.More information here: PACE Anti-Piracy -- Frequently Asked Questions for End UsersApparently Pace does not provide end user support.I would recommend checking to see what software product was installed at the same time that the Pace product was installed to determine which software installed this component. Whatever product you find is where you will need to check for any possible known issues.You can take a look in Control Panel/Programs and Features/Installed Programs for the information.Doing some more checking on the WUDFRd.sys component and it turns out that this is the "Windows Driver Foundation - User Mode Framework Reflector" which is a core Windows driver component.It's possible that whatever driver is misbehaving is associated with the software that installed the Pace product.Let us know what you find. Thank You for using Windows 7 Ronnie Vernon MVP

I did a search on PACE and read that it was installed 'covertly' with some trial versions of software. The article claimed that PACE could not be removed unless it was edited out of the offending program which is why I asked. If I remember correctly, the article was dated 2005 or so. PACE does appear in ControlPanel as being able to be uninstalled, so I guess I'll try it. The only other programs installed on the same date were 1)Microsoft Sync Framework 2.0 Provider Services (x64) and 2) WIDCOMM Bluetooth Software 6.0.1.4300. I don't have any Bluetooth devices but I don't know if uninstalling WIDCOMM would cause problems elsewhere. I don't know where 'Sync Framework' came from. Maybe an update? Can it be safely removed?

I did a search on PACE and read that it was installed 'covertly' with some trial versions of software. The article claimed that PACE could not be removed unless it was edited out of the offending program which is why I asked. If I remember correctly, the article was dated 2005 or so. PACE does appear in ControlPanel as being able to be uninstalled, so I guess I'll try it. The only other programs installed on the same date were 1)Microsoft Sync Framework 2.0 Provider Services (x64) and 2) WIDCOMM Bluetooth Software 6.0.1.4300. I don't have any Bluetooth devices but I don't know if uninstalling WIDCOMM would cause problems elsewhere. I don't know where 'Sync Framework' came from. Maybe an update? Can it be safely removed? I successfully removed PACE but still have the same warnings. 1) Driver failed to load---this one and 2) wininit---dll files for all applications are being loaded.

I have installed my own minidump folder with an empty minidump.dmp file inside. I will enable KernelEventTracing in Event viewer to see if I can capture the driver attempting to corrupt Windows.

http://support.microsoft.com/kb/974720Warning is due to the timing of components being installed and is safe to ignore.

Well... I had the same exact error, but it appears that some further reading is required. Read this: http://support.microsoft.com/kb/978977 If you have the Smart Card Reader or other "!" point for a related device, you may beed the associated HotFix... I did... Cleared up the "!" and the WUDFRd event...

I had no "!" in my Device Manager or anywhere else other than the error in Event Viewer. I chose to ignore the error as MSFT advised and nothing ever malfunctioned because of it. My error went away probably due to a MSFT update. Your answer is probably more correct as this Question was posted before the support document you are referring to was not published until March.

I'm not sure this applies, KB974720 is talking about device ROOT\*ISATAP\0000, not USB\VID_BEEF&PID_0006\AAAAAAAAAAAAAAAAAAAA. ISATAP is a software-only network stack driver, where as the USB\VID_BEEF prefix suggests memory corription is involved.

I think I used 'Unknown Device Identifier' from HunterSoft to find the device and remove its drivers. http://download.cnet.com/windows/huntersoft/3260-20_4-85156.html It's a rather lengthy process where I had to open each device listed and look at the 'Hardware ID' to find it. It has been so long ago that I don't even remember what I had eventually found. I even forgot about this post. It might have been the drivers from a USB joystick that I'd removed because of a conflict with a game and forgot to remove its drivers that were looking for a joystick at startup that wasn't there anymore.

I have the exact same problem on Windows 7 SP1. Windows 7 SP1 is supposed to have this fix included and is not allowing me to apply. Any idea what to do?

I have the very same error on Windows 7 SP1 but it is really not a problem, the warning is due to the timing of components being installed and is safe to ignore.

Ronnie, you state above "The driver WUDFRd.sys is associated with Logitech keyboards and some of these are not compatible with Windows 7." Really? Not just with any device using a user-mode driver? I get this error with my external legacy usb disk, but there is no malfunction - it's just that it appears in the event log.