Both in Windows 10 and Windows 11, you might see a new folder named $WinREAgent in the root of the C drive. By default, this folder is hidden and will not appear unless you check the Hidden Items option in File Explorer’s View menu. If you are worried about whether it’s a virus, why it exists, or whether you should delete it, this article covers everything about the $WinREAgent folder so that you can make a decision and have peace of mind. Let’s get started.
What is the $WinREAgent Folder?
$WinREAgent is a hidden system folder related to the Windows Recovery Environment. It is automatically created and managed by Windows during the installation, upgrade, or resetting of Windows.
This folder contains logs and files used by Windows to automatically roll back or restore your PC in case an update or upgrade goes wrong.
Inside the $WinREAgent folder, you’ll find the following sub-folders:
- Backup: This folder is used by Windows to store backup copies of system files before applying an update or upgrade.
- Rollback: This is used by Windows during the update process to hold data and files necessary to undo the update if necessary. For example, if Windows cannot apply the update/upgrade for any reason or if it determines that it is causing stability issues, it will use files in this folder to rollback the update and restore your system to its previous state.
- Scratch: Windows uses this folder as a temporary storage area for files that it might need during the update process.
Is $WinREAgent A Virus?
No, the $WinREAgent folder is not a virus. It is a system folder created and managed by Windows. You can safely ignore the folder and let it be. It does not harm your computer. Instead, it can help Windows roll back failed updates or upgrades to restore your PC to a known good state.
If you are still unsure, you can scan it with Windows Defender or third-party antivirus software such as Bitdefender, Malwarebytes, etc.
Windows Defender scan results for $WinREAgent folder: No current threats.
Bitdefender scan results for $WinREAgent folder: No threats found.
What Is the Use of the $WinREAgent Folder?
Installing new updates and upgrades in Windows is prone to cause issues. Under certain circumstances, it can even lead to issues such as boot looping and irreparable damage to system files.
To make sure it doesn’t happen, Windows automatically creates the $WinREAgent folder with all the necessary files that can help it rollback the changes. That way, you will have a healthy and usable system even in the event of an incompatible update.
Is it Safe to Delete the $WinREAgent Folder & Should You Delete It?
Is it Safe to Delete the $WinREAgent Folder?
Yes, you can safely delete the $WinREAgent folder. However, you need administrator rights to do it.
Should You Delete the $WinREAgent Folder?
While it is completely safe to delete the folder, the downside of doing so is that you will not be able to rollback if you face issues with your recent update or upgrade.
For instance, if Windows recently installed Patch Tuesday’s cumulative update and you are encountering issues with that, deleting this folder will stop you from rolling back changes made by that update.
That being said, sometimes, an update might fail to install specifically because the $WinREAgent folder is outdated or corrupted. In those kinds of cases, you can delete it to solve the issue.
So, the general recommendation from Microsoft is that unless you are specifically instructed, you should not delete the $WinREAgent folder, like all system files and folders.
Steps to Delete the $WinREAgent Folder
If you understand the risk and still want to delete this folder, follow the below steps:
To delete the folder, open File Explorer, go to the C drive, select the $WinREAgent folder, and press Delete (Del) on your keyboard.
Click Continue in the access denied prompt and the folder is removed.
Note: Windows will again automatically create this folder when it is installing an update/upgrade.
How to View & Open $WinREAgent Folder
By default, the $WinREAgent is hidden. If you want to see the folder, do the following.
Open File Explorer by pressing the Windows key + E shortcut.
Click on the View option and select the Hidden Items option.
Now, go to the C drive.
You will see the $WinREAgent folder in the root of the C drive.
Wrapping Up – Understanding $WinREAgent Folder
To wrap it all up, $WinREAgent is a hidden system folder created and managed by Windows. It is not a virus. Like with all system files and folders, unless you see specific instructions from Microsoft, it is generally not recommended to delete this folder.
If you have any questions or doubts, comment below and I will answer all of them.
