Has a C:\inetpub folder appeared on your computer? What you need to know.
2025-04-14 by Chemtable Software
After installing the April Windows update, many users noticed a new folder called C:\inetpub on their computers. Normally, this folder appears only when enabling certain web server tools (like IIS) in Windows. But now, it’s showing up for everyone—even if you’ve never used those features.
Why is this happening?
Microsoft confirmed this isn’t a mistake. The folder is part of a security update designed to fix a critical vulnerability (CVE-2025-21204). Hackers could exploit this flaw to take full control of your computer if they had physical or remote access. The folder acts as a temporary shield to block such attacks.
Important: Do not delete the C:\inetpub folder, even if you don’t need it. Removing it could leave your system exposed to risks.
How to hide the folder (if it bothers you):
- Right-click the folder, select Properties, check the Hidden box, and click Apply.
- If it’s still visible, open File Explorer, go to the View tab, click Options, and uncheck Hide protected operating system files.
You can also just leave it alone—it doesn’t harm your computer or take up much space.
If you already deleted the folder:
Don’t panic, but try to restore it:
- Reinstall the April update: Go to Windows Update Settings, uninstall the latest update, then reinstall it.
- Toggle IIS settings:
- Open Control Panel → Programs → Turn Windows features on or off.
- Check any IIS-related option (e.g., FTP Server), click OK, and restart your PC.
- After restarting, uncheck the same IIS option and restart again. The folder should reappear.
Microsoft may fix this in future updates, but it’s safer to restore the folder now.
Why is this folder so important?
The vulnerability it addresses is severe. Attackers could use malicious shortcut files (.LNK) to gain system-level access, even without admin rights. While Microsoft’s fix might seem odd, it’s a temporary measure until a permanent solution arrives.
Bottom line: Think of C:\inetpub as a security guard. It’s harmless, and deleting it could open the door to hackers. If it’s annoying, hide it—but keep it on your system!
