Python error occured at add_note function in mft.py file.

[killberos]

Hello, First, I thanks to you for this tool

I have one question :D While I trying to analyze MFT file(C:\, windows 2003 R2) in Windows 7, python error occured as follows.

The error is "NameError: global name 'mft_record' is not defined".

This error occured 398th line of the "mft.py" file.

So, I modified from "mft_record" to "record" in add_note function, and the error doesn't occured.

But, I don't know whether this is the right way.

Help me. please.

~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~. D:\MFT\analyzeMFT_2.0.4\analyzeMFT-2.0.4>python analyzeMFT.py -f $MFT_C -o test Traceback (most recent call last): File "analyzeMFT.py", line 13, in session.process_mft_file() File "D:\MFT\analyzeMFT_2.0.4\analyzeMFT-2.0.4\analyzemft\mftsession.py", line 134, in process_mft _file record = mft.parse_record(raw_record, self.options) File "D:\MFT\analyzeMFT_2.0.4\analyzeMFT-2.0.4\analyzemft\mft.py", line 91, in parse_record FNrecord = decodeFNAttribute(raw_record[read_ptr+ATRrecord['soff']:], options.localtz, record) File "D:\MFT\analyzeMFT_2.0.4\analyzeMFT-2.0.4\analyzemft\mft.py", line 564, in decodeFNAttribute add_note(record, 'Filename - chars converted to hex') File "D:\MFT\analyzeMFT_2.0.4\analyzeMFT-2.0.4\analyzemft\mft.py", line 398, in add_note record['notes'] = "%s | %s |" % (mft_record['notes'], s) NameError: global name 'mft_record' is not defined ~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.~.

[dkovar]

Greetings,

Thank you for finding that error. I've fixed it and pushed the change up. If you pull down a new copy it should work properly.

-David