Support articles

Find clear, step-by-step solutions to common WithSecure issues across installation, configuration, updates, and product performance.

Can the WithSecure Quarantine Dumper Tool be run remotely?

Issue:

Is is possible to run the WithSecure Quarantine Dumper Tool(wsdumpqrt.exe / wsdumpqrt64.exe) be run remotely?

Resolution:

The WithSecure Quarantine Dumper tool can't be used remotely. Currently the tool is designed to be used locally only, so you need to download and run the tool on the device itself with administrator privileges. 

If you have remote administrator access to the device, you can log in to the device and run the tool that way. 

Collect quarantined files using WithSecure Quarantine Dumper by following the instructions below:

  1. Click on this link to download  to a location of your choice, for example, c:\temp:
  2. Launch Command Prompt (CMD).
  3. Navigate the directory to the location you selected in step 1. For example, type cd c:\temp\ and press Enter on your keyboard to go to c:\temp\ folder.
  4. Type wsdumpqrt.exe -d c:\temp\ to run the tool.
  5. Enter your administrator credentials when prompted. WithSecure license terms are now shown.
  6. Scroll all the way to the end of the license terms before you can accept them.
  7. Press E on your keyboard to accept the license terms.
  8. Press any key to complete the run. The quarantined files will be collected in a file named malware_samples.zip with the default password (infected) in the location you specified in step 1.