KVRT Free won't create cleanup script

[Roger Blair]

I’ve used KVRT Free for years. Today, when I tried to run it, I got the message “Cannot create cleanup script.” I’ve downloaded the current version but still get the message. What’s wrong, and how do I fix it?

Thanks.

[Yury N.]

Hello.

 

There was a similar topic with blocking by Antivirus. Please disable Antivirus and retry.

If that doesn't help, please provide traces https://support.kaspersky.com/15677

[Roger Blair]

I use Windows Security, and KVRT has in the past run successfully under it.

 

I've tried to attach  or open and copy the trace file (KVRT.20.0.10.0_2022.03.23_13.27.48_2412.log.enc1:)

but can do neither. How should I proceed?

[Flood and Flood's wife]

I use Windows Security, and KVRT has in the past run successfully under it.

I've tried to attach  or open and copy the trace file, (KVRT.20.0.10.0_2022.03.23_13.27.48_2412.log.enc1:)but can do neither. How should I proceed?

Hello @Roger Blair, 

Thank you for posting back!

Upload the file/s to any cloud service of your choice & post the share link please? 

Thank you🙏, 

Flood🐳+🐋

[Yury N.]

On 3/23/2022 at 2:33 PM, Roger Blair said:

Here’s a USEABLE link:https://drive.google.com/file/d/19cRUIqLWzkfeuwhQnsFEUV997HI3RenC/view?usp=sharing

Someone blocking the creation of a registry value in registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce. Perhaps this is antivirus, perhaps group policies.

You can try to collect Procmon log. See Collecting a system events log instruction and step "Minimize Process Monitor and reproduce the issue". Send log to me with a private message.

Edited March 28, 2022 by Yury N.

[Roger Blair]

https://drive.google.com/file/d/19lfgdrnJKXTUcwVK_MBtCe9WY8p0R45S/view?usp=sharing

Please note that when I ran KVRT this time, I had no problems.

[Roger Blair]

I tried to run KVRT today, but I got the error message again.

https://drive.google.com/file/d/1jxPoRMaoa8WUwtJM4tH_Ajgm1WZTi435/view?usp=sharing

[Yury N.]

@Roger Blair It seems KVRT had been blocked by MBAM. Please try to disable.

[Roger Blair]

I've tried several times to run KVRT on Windows 10 (version 21H2). I use Microsoft Defender antivirus. I run MBAM once a week (as I [try to] run KVRT); MBAM's online protection is turned off, so that isn't relevant. I've tried running KVRT with MD turned off; I get the same error. What's going on?

Edited August 31, 2022 by Roger Blair

[Yury N.]

В 31.08.2022 в 16:21, Roger Blair сказал:

MBAM's online protection is turned off, so that isn't relevant.

Please try uninstall MBAM and reproduce.

[Dave2024]

There was a suspicious temp file that Hitman Pro detected told hitman to delete this file

Uninstalled Malwarebytes as well and now KVRT works