Guymager acquired image of Win XP SP3 system not loading in vmware on Win 7

View previous topic View next topic Go down

Guymager acquired image of Win XP SP3 system not loading in vmware on Win 7

Post  alk1 on Fri Oct 25, 2013 4:03 pm

Hi i accidentally posted this under tools, just saw this part of forum Smile



Hi I have used guymager to acquire the below image.

system used to boot image is VMWare in Win7 64bit machine

Please advise if I am doing somethign wrong as I am new to this Smile

thank you in advance and congratulations on such a nice distro!

I have converted with to vmware with Prodiscover Basic (converts dd to vmdk) but am unable to mount to see image. I get blue screen with following
STOP :0x0000007B 0xBA4CF524, 0xC0000034, 0x00000000, 0x00000000


This is the info file from guymager

GUYMAGER ACQUISITION INFO FILE
==============================

Guymager
========

Version : 0.7.1-1
Compilation timestamp: 2013-03-15-17.10.48
Compiled with : gcc 4.4.5
libewf version : 20100226
libguytools version : 2.0.2


Device information
==================
Command executed: bash -c "search="`basename /dev/sda`: H..t P.......d A..a de.....d" && dmesg | grep -A3 "$search" || echo "No kernel HPA messages for /dev/sda""
Information returned:
----------------------------------------------------------------------------------------------------
No kernel HPA messages for /dev/sda

Command executed: bash -c "smartctl -s on /dev/sda ; smartctl -a /dev/sda"
Information returned:
----------------------------------------------------------------------------------------------------
smartctl 6.0 2012-10-10 r3643 [i686-linux-3.2.0-38-generic] (local build)
Copyright (C) 2002-12, Bruce Allen, Christian Franke, wwwDOTsmartmontoolsDOTorg

=== START OF ENABLE/DISABLE COMMANDS SECTION ===
SMART Enabled.

smartctl 6.0 2012-10-10 r3643 [i686-linux-3.2.0-38-generic] (local build)
Copyright (C) 2002-12, Bruce Allen, Christian Franke, wwwDOTsmartmontoolsDOTorg

=== START OF INFORMATION SECTION ===
Model Family: Seagate Momentus 5400.5
Device Model: ST9160310AS
Serial Number: XXXXXXXXX
LU WWN Device Id: XXXXXXXXXXXXXX
Firmware Version: SD03
User Capacity: 160,041,885,696 bytes [160 GB]
Sector Size: 512 bytes logical/physical
Device is: In smartctl database [for details use: -P show]
ATA Version is: ATA8-ACS T13/1699-D revision 4
SATA Version is: SATA 2.6, 3.0 Gb/s
Local Time is: Mon Oct 21 13:40:22 2013 CEST
SMART support is: Available - device has SMART capability.
SMART support is: Enabled

=== START OF READ SMART DATA SECTION ===
SMART overall-health self-assessment test result: PASSED
See vendor-specific Attribute list for marginal Attributes.

General SMART Values:
Offline data collection status: (0x82) Offline data collection activity
was completed without error.
Auto Offline Data Collection: Enabled.
Self-test execution status: ( 0) The previous self-test routine completed
without error or no self-test has ever
been run.
Total time to complete Offline
data collection: ( 712) seconds.
Offline data collection
capabilities: (0x7b) SMART execute Offline immediate.
Auto Offline data collection on/off support.
Suspend Offline collection upon new
command.
Offline surface scan supported.
Self-test supported.
Conveyance Self-test supported.
Selective Self-test supported.
SMART capabilities: (0x0003) Saves SMART data before entering
power-saving mode.
Supports SMART auto save timer.
Error logging capability: (0x01) Error logging supported.
General Purpose Logging supported.
Short self-test routine
recommended polling time: ( 1) minutes.
Extended self-test routine
recommended polling time: ( 62) minutes.
Conveyance self-test routine
recommended polling time: ( 2) minutes.
SCT capabilities: (0x103f) SCT Status supported.
SCT Error Recovery Control supported.
SCT Feature Control supported.
SCT Data Table supported.

SMART Attributes Data Structure revision number: 10
Vendor Specific SMART Attributes with Thresholds:
ID# ATTRIBUTE_NAME FLAG VALUE WORST THRESH TYPE UPDATED WHEN_FAILED RAW_VALUE
1 Raw_Read_Error_Rate 0x000f 086 081 006 Pre-fail Always - 26007230
3 Spin_Up_Time 0x0003 099 099 000 Pre-fail Always - 0
4 Start_Stop_Count 0x0032 099 099 020 Old_age Always - 1142
5 Reallocated_Sector_Ct 0x0033 100 100 036 Pre-fail Always - 0
7 Seek_Error_Rate 0x000f 080 060 030 Pre-fail Always - 109266798
9 Power_On_Hours 0x0032 097 097 000 Old_age Always - 2916
10 Spin_Retry_Count 0x0013 100 100 097 Pre-fail Always - 0
12 Power_Cycle_Count 0x0032 099 099 020 Old_age Always - 1140
184 End-to-End_Error 0x0032 100 100 099 Old_age Always - 0
187 Reported_Uncorrect 0x0032 001 001 000 Old_age Always - 1317
188 Command_Timeout 0x0032 100 099 000 Old_age Always - 28
189 High_Fly_Writes 0x003a 100 100 000 Old_age Always - 0
190 Airflow_Temperature_Cel 0x0022 060 044 045 Old_age Always In_the_past 40 (0 2 40 22 0)
191 G-Sense_Error_Rate 0x0032 100 100 000 Old_age Always - 90
192 Power-Off_Retract_Count 0x0032 100 100 000 Old_age Always - 1
193 Load_Cycle_Count 0x0032 089 089 000 Old_age Always - 23303
194 Temperature_Celsius 0x0022 040 056 000 Old_age Always - 40 (0 11 0 0 0)
195 Hardware_ECC_Recovered 0x001a 050 038 000 Old_age Always - 26007230
197 Current_Pending_Sector 0x0012 100 100 000 Old_age Always - 4
198 Offline_Uncorrectable 0x0010 100 100 000 Old_age Offline - 4
199 UDMA_CRC_Error_Count 0x003e 200 200 000 Old_age Always - 0

SMART Error Log Version: 1
ATA Error Count: 1408 (device log contains only the most recent five errors)
CR = Command Register [HEX]
FR = Features Register [HEX]
SC = Sector Count Register [HEX]
SN = Sector Number Register [HEX]
CL = Cylinder Low Register [HEX]
CH = Cylinder High Register [HEX]
DH = Device/Head Register [HEX]
DC = Device Command Register [HEX]
ER = Error register [HEX]
ST = Status register [HEX]
Powered_Up_Time is measured from power on, and printed as
DDd+hh:mm:SS.sss where DD=days, hh=hours, mm=minutes,
SS=sec, and sss=millisec. It "wraps" after 49.710 days.

Error 1408 occurred at disk power-on lifetime: 2915 hours (121 days + 11 hours)
When the command that caused the error occurred, the device was active or idle.

After command completion occurred, registers were:
ER ST SC SN CL CH DH
-- -- -- -- -- -- --
40 51 00 ff ff ff 0f Error: UNC at LBA = 0x0fffffff = 268435455

Commands leading to the command that caused the error were:
CR FR SC SN CL CH DH DC Powered_Up_Time Command/Feature_Name
-- -- -- -- -- -- -- -- ---------------- --------------------
25 00 08 ff ff ff ef 00 00:17:31.499 READ DMA EXT
27 00 00 00 00 00 e0 00 00:17:31.498 READ NATIVE MAX ADDRESS EXT
ec 00 00 00 00 00 a0 00 00:17:31.490 IDENTIFY DEVICE
ef 03 46 00 00 00 a0 00 00:17:31.484 SET FEATURES [Set transfer mode]
27 00 00 00 00 00 e0 00 00:17:31.458 READ NATIVE MAX ADDRESS EXT

Error 1407 occurred at disk power-on lifetime: 2915 hours (121 days + 11 hours)
When the command that caused the error occurred, the device was active or idle.

After command completion occurred, registers were:
ER ST SC SN CL CH DH
-- -- -- -- -- -- --
40 51 00 ff ff ff 0f Error: UNC at LBA = 0x0fffffff = 268435455

Commands leading to the command that caused the error were:
CR FR SC SN CL CH DH DC Powered_Up_Time Command/Feature_Name
-- -- -- -- -- -- -- -- ---------------- --------------------
25 00 08 ff ff ff ef 00 00:17:29.143 READ DMA EXT
27 00 00 00 00 00 e0 00 00:17:29.142 READ NATIVE MAX ADDRESS EXT
ec 00 00 00 00 00 a0 00 00:17:29.134 IDENTIFY DEVICE
ef 03 46 00 00 00 a0 00 00:17:29.130 SET FEATURES [Set transfer mode]
27 00 00 00 00 00 e0 00 00:17:29.094 READ NATIVE MAX ADDRESS EXT

Error 1406 occurred at disk power-on lifetime: 2915 hours (121 days + 11 hours)
When the command that caused the error occurred, the device was active or idle.

After command completion occurred, registers were:
ER ST SC SN CL CH DH
-- -- -- -- -- -- --
40 51 00 ff ff ff 0f Error: UNC at LBA = 0x0fffffff = 268435455

Commands leading to the command that caused the error were:
CR FR SC SN CL CH DH DC Powered_Up_Time Command/Feature_Name
-- -- -- -- -- -- -- -- ---------------- --------------------
25 00 08 ff ff ff ef 00 00:17:26.767 READ DMA EXT
27 00 00 00 00 00 e0 00 00:17:26.766 READ NATIVE MAX ADDRESS EXT
ec 00 00 00 00 00 a0 00 00:17:26.758 IDENTIFY DEVICE
ef 03 46 00 00 00 a0 00 00:17:26.753 SET FEATURES [Set transfer mode]
27 00 00 00 00 00 e0 00 00:17:26.718 READ NATIVE MAX ADDRESS EXT

Error 1405 occurred at disk power-on lifetime: 2915 hours (121 days + 11 hours)
When the command that caused the error occurred, the device was active or idle.

After command completion occurred, registers were:
ER ST SC SN CL CH DH
-- -- -- -- -- -- --
40 51 00 ff ff ff 0f Error: UNC at LBA = 0x0fffffff = 268435455

Commands leading to the command that caused the error were:
CR FR SC SN CL CH DH DC Powered_Up_Time Command/Feature_Name
-- -- -- -- -- -- -- -- ---------------- --------------------
25 00 08 ff ff ff ef 00 00:17:24.391 READ DMA EXT
27 00 00 00 00 00 e0 00 00:17:24.390 READ NATIVE MAX ADDRESS EXT
ec 00 00 00 00 00 a0 00 00:17:24.382 IDENTIFY DEVICE
ef 03 46 00 00 00 a0 00 00:17:24.377 SET FEATURES [Set transfer mode]
27 00 00 00 00 00 e0 00 00:17:24.342 READ NATIVE MAX ADDRESS EXT

Error 1404 occurred at disk power-on lifetime: 2915 hours (121 days + 11 hours)
When the command that caused the error occurred, the device was active or idle.

After command completion occurred, registers were:
ER ST SC SN CL CH DH
-- -- -- -- -- -- --
40 51 00 ff ff ff 0f Error: UNC at LBA = 0x0fffffff = 268435455

Commands leading to the command that caused the error were:
CR FR SC SN CL CH DH DC Powered_Up_Time Command/Feature_Name
-- -- -- -- -- -- -- -- ---------------- --------------------
25 00 08 ff ff ff ef 00 00:17:22.015 READ DMA EXT
27 00 00 00 00 00 e0 00 00:17:22.014 READ NATIVE MAX ADDRESS EXT
ec 00 00 00 00 00 a0 00 00:17:22.006 IDENTIFY DEVICE
ef 03 46 00 00 00 a0 00 00:17:22.001 SET FEATURES [Set transfer mode]
27 00 00 00 00 00 e0 00 00:17:21.966 READ NATIVE MAX ADDRESS EXT

SMART Self-test log structure revision number 1
No self-tests have been logged. [To run self-tests, use: smartctl -t]


SMART Selective self-test log data structure revision number 1
SPAN MIN_LBA MAX_LBA CURRENT_TEST_STATUS
1 0 0 Not_testing
2 0 0 Not_testing
3 0 0 Not_testing
4 0 0 Not_testing
5 0 0 Not_testing
Selective self-test flags (0x0):
After scanning selected spans, do NOT read-scan remainder of disk.
If Selective self-test is pending on power-up, resume after 0 minute delay.

Command executed: bash -c "hdparm -I /dev/sda"
Information returned:
----------------------------------------------------------------------------------------------------
/dev/sda:

ATA device, with non-removable media
Model Number: ST9160310AS
Serial Number: XXXXXXXXX
Firmware Revision: SD03
Transport: Serial
Standards:
Used: unknown (minor revision code 0x0029)
Supported: 8 7 6 5
Likely used: 8
Configuration:
Logical max current
cylinders 16383 16383
heads 16 16
sectors/track 63 63
--
CHS current addressable sectors: 16514064
LBA user addressable sectors: 268435455
LBA48 user addressable sectors: 312581808
Logical/Physical Sector size: 512 bytes
device size with M = 1024*1024: 152627 MBytes
device size with M = 1000*1000: 160041 MBytes (160 GB)
cache/buffer size = 8192 KBytes
Capabilities:
LBA, IORDY(can be disabled)
Queue depth: 32
Standby timer values: spec'd by Standard, no device specific minimum
R/W multiple sector transfer: Max = 16 Current = 16
Advanced power management level: disabled
Recommended acoustic management value: 254, current value: 0
DMA: mdma0 mdma1 mdma2 udma0 udma1 udma2 udma3 udma4 udma5 *udma6
Cycle time: min=120ns recommended=120ns
PIO: pio0 pio1 pio2 pio3 pio4
Cycle time: no flow control=120ns IORDY flow control=120ns
Commands/features:
Enabled Supported:
* SMART feature set
Security Mode feature set
* Power Management feature set
* Write cache
* Look-ahead
* Host Protected Area feature set
* WRITE_BUFFER command
* READ_BUFFER command
* DOWNLOAD_MICROCODE
Advanced Power Management feature set
SET_MAX security extension
* 48-bit Address feature set
* Device Configuration Overlay feature set
* Mandatory FLUSH_CACHE
* FLUSH_CACHE_EXT
* SMART error logging
* SMART self-test
* General Purpose Logging feature set
* WRITE_{DMA|MULTIPLE}_FUA_EXT
* WRITE_DMA_QUEUED_FUA_EXT
* 64-bit World wide name
* IDLE_IMMEDIATE with UNLOAD
* Write-Read-Verify feature set
* WRITE_UNCORRECTABLE_EXT command
* {READ,WRITE}_DMA_EXT_GPL commands
* Gen1 signaling speed (1.5Gb/s)
* Gen2 signaling speed (3.0Gb/s)
* Native Command Queueing (NCQ)
* Phy event counters
DMA Setup Auto-Activate optimization
Device-initiated interface power management
* Software settings preservation
* SMART Command Transport (SCT) feature set
* SCT Long Sector Access (AC1)
* SCT LBA Segment Access (AC2)
* SCT Error Recovery Control (AC3)
* SCT Features Control (AC4)
* SCT Data Tables (AC5)
unknown 206[12] (vendor specific)
Security:
Master password revision code = 65534
supported
not enabled
not locked
frozen
not expired: security count
supported: enhanced erase
54min for SECURITY ERASE UNIT. 54min for ENHANCED SECURITY ERASE UNIT.
Logical Unit WWN Device Identifier: XXXXXXXXXXXXXX
NAA : 5
IEEE OUI : 000c50
Unique ID : XXXXXXXXXX
Checksum: correct

Hidden areas: none


Acquisition
===========

Linux device : /dev/sda
Device size : 160041885696 (160.0GB)
Format : Linux dd raw image - file extension is .dd
Image path and file name: /media/sdb1/IMAGE FILE/winxpdesklaptopImage.dd
Info path and file name: /media/sdb1/IMAGE FILE/winxpdesklaptopImage.info
Hash calculation : MD5
Source verification : on
Image verification : on

During acquisition, 4 bad sectors have been encountered. They have been replaced by zeroed sectors. The sector numbers are:
6276558-6276560, 312581807
During verification, 4 bad sectors have been encountered. The sector numbers are:
6276558-6276560, 312581807
State: Finished successfully (with 4 bad sectors)

MD5 hash : c58fbe667c36147afe2605e293480ed0
MD5 hash verified source : c58fbe667c36147afe2605e293480ed0
MD5 hash verified image : c58fbe667c36147afe2605e293480ed0
SHA1 hash : --
SHA1 hash verified source : --
SHA1 hash verified image : --
SHA256 hash : --
SHA256 hash verified source: --
SHA256 hash verified image : --
Source verification OK. The device delivered the same data during acquisition and verification.
Image verification OK. The image contains exactly the data that was written.

Acquisition started : 2013-10-21 13:40:19 (ISO format YYYY-MM-DD HH:MM:SS)
Verification started: 2013-10-21 16:25:36
Ended : 2013-10-21 18:16:36 (4 hours, 36 minutes and 16 seconds)
Acquisition speed : 15.39 MByte/s (2 hours, 45 minutes and 16 seconds)
Verification speed : 22.92 MByte/s (1 hours, 50 minutes and 59 seconds)


Generated image files and their MD5 hashes
==========================================

No MD5 hashes available (configuration parameter CalcImageFileMD5 is off)
MD5 Image file
n/a XXXXXXXXX.dd


alk1

Number of posts: 1
Registration date: 2013-10-22

View user profile Send private message

Back to top

alk1

Number of posts : 3
Registration date : 2013-10-22

View user profile

Back to top Go down

Re: Guymager acquired image of Win XP SP3 system not loading in vmware on Win 7

Post  nannib on Tue Oct 29, 2013 2:53 pm

use xmount or xmount-gui (present in caine).
In any case, it is not sure you'll be able to virtualize Win7, because the drivers....you have to study how to using opengates plugin in a BartPe disk.
Use these advices for searching on google Wink
bye

_________________
-------------------------
Nanni Bassetti
Caine Project Manager
http://www.nannibassetti.com
avatar
nannib
Admin

Number of posts : 271
Age : 46
Registration date : 2008-10-28

View user profile http://www.nannibassetti.com/

Back to top Go down

thanks

Post  alk1 on Wed Oct 30, 2013 11:56 am

Thank you Nanni,

I am looking and it seems its not quite easy to virtualize xp in vmware and in win7, xmount works fine to review the files. Thank you.



Regards,

Alex

alk1

Number of posts : 3
Registration date : 2013-10-22

View user profile

Back to top Go down

Re: Guymager acquired image of Win XP SP3 system not loading in vmware on Win 7

Post  Sponsored content


Sponsored content


Back to top Go down

View previous topic View next topic Back to top

- Similar topics

 
Permissions in this forum:
You cannot reply to topics in this forum