jschicht / extractusnjrnl Goto Github PK

Getting this error when using the 64 bit version on a Windows 8.1 64bit machine.
Any solutions?

Hi

Thank you for your Good Tool. I usually use ExtractUsnJrnl to do Forensic Investigation.
But, it seems to be treated as malware. If it is possible, I hope it is improved.

Kenji

In the last month, ExtractUsnJrnl started getting quarantined by my AV. Now it is flagged as a standard Artemis. Do you have anything in your bag of tricks that can prevent it from looking malicious with Mcafee?

thanks.

Command is:

ExtractUsnJrnl.exe C:
or
Q:\Mawson>ExtractUsnJrnl64.exe C:\ Q:\Mawson\

Output is:
ExtractUsnJrnl v1.0.0.1

followed by a Windows dialog saying
Line 20772 (File "Q:\Mawson\ExtractUsnJrnl.exe"):
Error: Variable used without being declared.

Same error for 32-bit or 64-bit versions.

Windows 8.1/64, Administrative CMD shell. C: is an 880GB NTFS filesystem, Q: is a 16GB flash drive.

Other commands like
RawCopy64.exe C:0 Q:\Mawson\

worked fine.

Not sure if we're running the latest release or this is already fixed but I figured I'd report this.

Can provide more details as needed, since it's an active client I have to be selective.
Sorry about the limited information.