Hey, is this winrmsrv.exe safe to allow in the firewall?

Regardless it being from microsoft, I could not find so much info about it in the Internet. It seems to be some Remote related service, but it was strange to show up all of nothing after I starting my computer today.

Thanks in advance.

 

Question Info


Last updated May 25, 2020 Views 7,495 Applies to:
Hi Alan,
I am Sumit, an Independent Advisor and a 3 year Windows Insider MVP here to help.

It is unusual for a process like winmsrv.exe to ask for firewall access. I also see it isn't on my computer running Windows 10 Home. I would deny it as a first step.

Scan your computer using an anti-virus program and know the results.
Sumit

Available 6 PM - 8 AM Pacific Standard time
Stay safe and wash your hands

22 people were helped by this reply

·

Did this solve your problem?

Sorry this didn't help.

Great! Thanks for marking this as the answer.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this response?

Thanks for your feedback.

Hello guys, 

I'm a having the same issue, but my anti-virus have disappeared, seems I don't have any provider suddenly (I was using both windows defend and McAfee). I cannot run them and neither reinstall, I try, but the installation sticks and doesn't go on. 

Is there a way to fix it? 

1 person was helped by this reply

·

Did this solve your problem?

Sorry this didn't help.

Great! Thanks for marking this as the answer.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this response?

Thanks for your feedback.

Try find the location of the file which is in your screenshot and find the file.

Then upload it to VirusTotal:

https://www.virustotal.com/gui/home 

Let us know what is the result?

Meanwhile, run full system scan with Windows Defender.

1 person was helped by this reply

·

Did this solve your problem?

Sorry this didn't help.

Great! Thanks for marking this as the answer.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this response?

Thanks for your feedback.

This just happened to me now as well. I ran a kaspersky scan and it removed it but i still have no security providers 

Did this solve your problem?

Sorry this didn't help.

Great! Thanks for marking this as the answer.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this response?

Thanks for your feedback.

I have same isse
IT Trainer

Did this solve your problem?

Sorry this didn't help.

Great! Thanks for marking this as the answer.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this response?

Thanks for your feedback.

same issue as you guys

Did this solve your problem?

Sorry this didn't help.

Great! Thanks for marking this as the answer.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this response?

Thanks for your feedback.

Hi all! I had the same problem. One day Windows Defender ask me for permission for winrmsrv, I denied and then I realized that my Kaspersky anti-virus has disappeared. I installed first Kaspersky again (there were some errors but luckily it installed successfully). Kaspersky detected some threats.  I also scanned the computer with the Malwarebytes program. But Windows Security window was still empty so I used this advice - https://answers.microsoft.com/en-us/windows/forum/windows_10-windows_install-winpc/how-to-perform-a-repair-upgrade-using-the-windows/35160fbe-9352-4e70-9887-f40096ec3085 - repair upgrade with keeping all files and applications and now everything works fine :) 

Did this solve your problem?

Sorry this didn't help.

Great! Thanks for marking this as the answer.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this response?

Thanks for your feedback.

winrmsrv is a Malware!

I uses you PC for crypto-mining and slows it down so please do not allow it on the firewall! Immediately scan your PC using Malwarebytes and quarantine the virus. It's okay even if you have accidentally allowed it, just scan using Malwarebytes

Did this solve your problem?

Sorry this didn't help.

Great! Thanks for marking this as the answer.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this response?

Thanks for your feedback.

If the program is requiring firewall permission then it is a virus for sure. The built-in winrmsrv file does not need any kind of Network access. Good news is Malwarebytes free version can easily get rid of this virus.

Also it's best to check the file with Virustotal. Just follow this Guide if there's any confusion.

Did this solve your problem?

Sorry this didn't help.

Great! Thanks for marking this as the answer.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this response?

Thanks for your feedback.