CAINE LiveCD
Would you like to react to this message? Create an account in a few clicks or log in to continue.

Guymager acquired image of Win XP SP3 system not loading in vmware on Win 7

Go down

Guymager acquired image of Win XP SP3 system not loading  in vmware on Win 7 Empty Guymager acquired image of Win XP SP3 system not loading in vmware on Win 7

Post  alk1 Tue Oct 22, 2013 4:22 pm

Hi I have used guymager to acquire the below image.

system used to boot image is VMWare in Win7 64bit machine

Please advise if I am doing somethign wrong as I am new to this Smile

thank you in advance and congratulations on such a nice distro!

I have converted with to vmware with Prodiscover Basic (converts dd to vmdk) but am unable to mount to see image. I get blue screen with following
STOP :0x0000007B 0xBA4CF524,  0xC0000034, 0x00000000, 0x00000000


This is the info file from guymager

GUYMAGER ACQUISITION INFO FILE
==============================

Guymager
========

Version              : 0.7.1-1            
Compilation timestamp: 2013-03-15-17.10.48
Compiled with        : gcc 4.4.5          
libewf version       : 20100226          
libguytools version  : 2.0.2              


Device information
==================
Command executed: bash -c "search="`basename /dev/sda`: H..t P.......d A..a de.....d" && dmesg | grep -A3 "$search" || echo "No kernel HPA messages for /dev/sda""
Information returned:
----------------------------------------------------------------------------------------------------
  No kernel HPA messages for /dev/sda

Command executed: bash -c "smartctl -s on /dev/sda ; smartctl -a /dev/sda"
Information returned:
----------------------------------------------------------------------------------------------------
  smartctl 6.0 2012-10-10 r3643 [i686-linux-3.2.0-38-generic] (local build)
  Copyright (C) 2002-12, Bruce Allen, Christian Franke, wwwDOTsmartmontoolsDOTorg
 
  === START OF ENABLE/DISABLE COMMANDS SECTION ===
  SMART Enabled.
 
  smartctl 6.0 2012-10-10 r3643 [i686-linux-3.2.0-38-generic] (local build)
  Copyright (C) 2002-12, Bruce Allen, Christian Franke, wwwDOTsmartmontoolsDOTorg
 
  === START OF INFORMATION SECTION ===
  Model Family:     Seagate Momentus 5400.5
  Device Model:     ST9160310AS
  Serial Number:    XXXXXXXXX
  LU WWN Device Id: XXXXXXXXXXXXXX
  Firmware Version: SD03
  User Capacity:    160,041,885,696 bytes [160 GB]
  Sector Size:      512 bytes logical/physical
  Device is:        In smartctl database [for details use: -P show]
  ATA Version is:   ATA8-ACS T13/1699-D revision 4
  SATA Version is:  SATA 2.6, 3.0 Gb/s
  Local Time is:    Mon Oct 21 13:40:22 2013 CEST
  SMART support is: Available - device has SMART capability.
  SMART support is: Enabled
 
  === START OF READ SMART DATA SECTION ===
  SMART overall-health self-assessment test result: PASSED
  See vendor-specific Attribute list for marginal Attributes.
 
  General SMART Values:
  Offline data collection status:  (0x82) Offline data collection activity
  was completed without error.
  Auto Offline Data Collection: Enabled.
  Self-test execution status:      (   0) The previous self-test routine completed
  without error or no self-test has ever
  been run.
  Total time to complete Offline
  data collection: (  712) seconds.
  Offline data collection
  capabilities: (0x7b) SMART execute Offline immediate.
  Auto Offline data collection on/off support.
  Suspend Offline collection upon new
  command.
  Offline surface scan supported.
  Self-test supported.
  Conveyance Self-test supported.
  Selective Self-test supported.
  SMART capabilities:            (0x0003) Saves SMART data before entering
  power-saving mode.
  Supports SMART auto save timer.
  Error logging capability:        (0x01) Error logging supported.
  General Purpose Logging supported.
  Short self-test routine
  recommended polling time: (   1) minutes.
  Extended self-test routine
  recommended polling time: (  62) minutes.
  Conveyance self-test routine
  recommended polling time: (   2) minutes.
  SCT capabilities:       (0x103f) SCT Status supported.
  SCT Error Recovery Control supported.
  SCT Feature Control supported.
  SCT Data Table supported.
 
  SMART Attributes Data Structure revision number: 10
  Vendor Specific SMART Attributes with Thresholds:
  ID# ATTRIBUTE_NAME          FLAG     VALUE WORST THRESH TYPE      UPDATED  WHEN_FAILED RAW_VALUE
    1 Raw_Read_Error_Rate     0x000f   086   081   006    Pre-fail  Always       -       26007230
    3 Spin_Up_Time            0x0003   099   099   000    Pre-fail  Always       -       0
    4 Start_Stop_Count        0x0032   099   099   020    Old_age   Always       -       1142
    5 Reallocated_Sector_Ct   0x0033   100   100   036    Pre-fail  Always       -       0
    7 Seek_Error_Rate         0x000f   080   060   030    Pre-fail  Always       -       109266798
    9 Power_On_Hours          0x0032   097   097   000    Old_age   Always       -       2916
   10 Spin_Retry_Count        0x0013   100   100   097    Pre-fail  Always       -       0
   12 Power_Cycle_Count       0x0032   099   099   020    Old_age   Always       -       1140
  184 End-to-End_Error        0x0032   100   100   099    Old_age   Always       -       0
  187 Reported_Uncorrect      0x0032   001   001   000    Old_age   Always       -       1317
  188 Command_Timeout         0x0032   100   099   000    Old_age   Always       -       28
  189 High_Fly_Writes         0x003a   100   100   000    Old_age   Always       -       0
  190 Airflow_Temperature_Cel 0x0022   060   044   045    Old_age   Always   In_the_past 40 (0 2 40 22 0)
  191 G-Sense_Error_Rate      0x0032   100   100   000    Old_age   Always       -       90
  192 Power-Off_Retract_Count 0x0032   100   100   000    Old_age   Always       -       1
  193 Load_Cycle_Count        0x0032   089   089   000    Old_age   Always       -       23303
  194 Temperature_Celsius     0x0022   040   056   000    Old_age   Always       -       40 (0 11 0 0 0)
  195 Hardware_ECC_Recovered  0x001a   050   038   000    Old_age   Always       -       26007230
  197 Current_Pending_Sector  0x0012   100   100   000    Old_age   Always       -       4
  198 Offline_Uncorrectable   0x0010   100   100   000    Old_age   Offline      -       4
  199 UDMA_CRC_Error_Count    0x003e   200   200   000    Old_age   Always       -       0
 
  SMART Error Log Version: 1
  ATA Error Count: 1408 (device log contains only the most recent five errors)
  CR = Command Register [HEX]
  FR = Features Register [HEX]
  SC = Sector Count Register [HEX]
  SN = Sector Number Register [HEX]
  CL = Cylinder Low Register [HEX]
  CH = Cylinder High Register [HEX]
  DH = Device/Head Register [HEX]
  DC = Device Command Register [HEX]
  ER = Error register [HEX]
  ST = Status register [HEX]
  Powered_Up_Time is measured from power on, and printed as
  DDd+hh🇲🇲SS.sss where DD=days, hh=hours, mm=minutes,
  SS=sec, and sss=millisec. It "wraps" after 49.710 days.
 
  Error 1408 occurred at disk power-on lifetime: 2915 hours (121 days + 11 hours)
    When the command that caused the error occurred, the device was active or idle.
 
    After command completion occurred, registers were:
    ER ST SC SN CL CH DH
    -- -- -- -- -- -- --
    40 51 00 ff ff ff 0f  Error: UNC at LBA = 0x0fffffff = 268435455
 
    Commands leading to the command that caused the error were:
    CR FR SC SN CL CH DH DC   Powered_Up_Time  Command/Feature_Name
    -- -- -- -- -- -- -- --  ----------------  --------------------
    25 00 08 ff ff ff ef 00      00:17:31.499  READ DMA EXT
    27 00 00 00 00 00 e0 00      00:17:31.498  READ NATIVE MAX ADDRESS EXT
    ec 00 00 00 00 00 a0 00      00:17:31.490  IDENTIFY DEVICE
    ef 03 46 00 00 00 a0 00      00:17:31.484  SET FEATURES [Set transfer mode]
    27 00 00 00 00 00 e0 00      00:17:31.458  READ NATIVE MAX ADDRESS EXT
 
  Error 1407 occurred at disk power-on lifetime: 2915 hours (121 days + 11 hours)
    When the command that caused the error occurred, the device was active or idle.
 
    After command completion occurred, registers were:
    ER ST SC SN CL CH DH
    -- -- -- -- -- -- --
    40 51 00 ff ff ff 0f  Error: UNC at LBA = 0x0fffffff = 268435455
 
    Commands leading to the command that caused the error were:
    CR FR SC SN CL CH DH DC   Powered_Up_Time  Command/Feature_Name
    -- -- -- -- -- -- -- --  ----------------  --------------------
    25 00 08 ff ff ff ef 00      00:17:29.143  READ DMA EXT
    27 00 00 00 00 00 e0 00      00:17:29.142  READ NATIVE MAX ADDRESS EXT
    ec 00 00 00 00 00 a0 00      00:17:29.134  IDENTIFY DEVICE
    ef 03 46 00 00 00 a0 00      00:17:29.130  SET FEATURES [Set transfer mode]
    27 00 00 00 00 00 e0 00      00:17:29.094  READ NATIVE MAX ADDRESS EXT
 
  Error 1406 occurred at disk power-on lifetime: 2915 hours (121 days + 11 hours)
    When the command that caused the error occurred, the device was active or idle.
 
    After command completion occurred, registers were:
    ER ST SC SN CL CH DH
    -- -- -- -- -- -- --
    40 51 00 ff ff ff 0f  Error: UNC at LBA = 0x0fffffff = 268435455
 
    Commands leading to the command that caused the error were:
    CR FR SC SN CL CH DH DC   Powered_Up_Time  Command/Feature_Name
    -- -- -- -- -- -- -- --  ----------------  --------------------
    25 00 08 ff ff ff ef 00      00:17:26.767  READ DMA EXT
    27 00 00 00 00 00 e0 00      00:17:26.766  READ NATIVE MAX ADDRESS EXT
    ec 00 00 00 00 00 a0 00      00:17:26.758  IDENTIFY DEVICE
    ef 03 46 00 00 00 a0 00      00:17:26.753  SET FEATURES [Set transfer mode]
    27 00 00 00 00 00 e0 00      00:17:26.718  READ NATIVE MAX ADDRESS EXT
 
  Error 1405 occurred at disk power-on lifetime: 2915 hours (121 days + 11 hours)
    When the command that caused the error occurred, the device was active or idle.
 
    After command completion occurred, registers were:
    ER ST SC SN CL CH DH
    -- -- -- -- -- -- --
    40 51 00 ff ff ff 0f  Error: UNC at LBA = 0x0fffffff = 268435455
 
    Commands leading to the command that caused the error were:
    CR FR SC SN CL CH DH DC   Powered_Up_Time  Command/Feature_Name
    -- -- -- -- -- -- -- --  ----------------  --------------------
    25 00 08 ff ff ff ef 00      00:17:24.391  READ DMA EXT
    27 00 00 00 00 00 e0 00      00:17:24.390  READ NATIVE MAX ADDRESS EXT
    ec 00 00 00 00 00 a0 00      00:17:24.382  IDENTIFY DEVICE
    ef 03 46 00 00 00 a0 00      00:17:24.377  SET FEATURES [Set transfer mode]
    27 00 00 00 00 00 e0 00      00:17:24.342  READ NATIVE MAX ADDRESS EXT
 
  Error 1404 occurred at disk power-on lifetime: 2915 hours (121 days + 11 hours)
    When the command that caused the error occurred, the device was active or idle.
 
    After command completion occurred, registers were:
    ER ST SC SN CL CH DH
    -- -- -- -- -- -- --
    40 51 00 ff ff ff 0f  Error: UNC at LBA = 0x0fffffff = 268435455
 
    Commands leading to the command that caused the error were:
    CR FR SC SN CL CH DH DC   Powered_Up_Time  Command/Feature_Name
    -- -- -- -- -- -- -- --  ----------------  --------------------
    25 00 08 ff ff ff ef 00      00:17:22.015  READ DMA EXT
    27 00 00 00 00 00 e0 00      00:17:22.014  READ NATIVE MAX ADDRESS EXT
    ec 00 00 00 00 00 a0 00      00:17:22.006  IDENTIFY DEVICE
    ef 03 46 00 00 00 a0 00      00:17:22.001  SET FEATURES [Set transfer mode]
    27 00 00 00 00 00 e0 00      00:17:21.966  READ NATIVE MAX ADDRESS EXT
 
  SMART Self-test log structure revision number 1
  No self-tests have been logged.  [To run self-tests, use: smartctl -t]
 
 
  SMART Selective self-test log data structure revision number 1
   SPAN  MIN_LBA  MAX_LBA  CURRENT_TEST_STATUS
      1        0        0  Not_testing
      2        0        0  Not_testing
      3        0        0  Not_testing
      4        0        0  Not_testing
      5        0        0  Not_testing
  Selective self-test flags (0x0):
    After scanning selected spans, do NOT read-scan remainder of disk.
  If Selective self-test is pending on power-up, resume after 0 minute delay.

Command executed: bash -c "hdparm -I /dev/sda"
Information returned:
----------------------------------------------------------------------------------------------------
  /dev/sda:
 
  ATA device, with non-removable media
  Model Number:       ST9160310AS                            
  Serial Number:      XXXXXXXXX
  Firmware Revision:  SD03    
  Transport:          Serial
  Standards:
  Used: unknown (minor revision code 0x0029)
  Supported: 8 7 6 5
  Likely used: 8
  Configuration:
  Logical max current
  cylinders 16383 16383
  heads 16 16
  sectors/track 63 63
  --
  CHS current addressable sectors:   16514064
  LBA    user addressable sectors:  268435455
  LBA48  user addressable sectors:  312581808
  Logical/Physical Sector size:           512 bytes
  device size with M = 1024*1024:      152627 MBytes
  device size with M = 1000*1000:      160041 MBytes (160 GB)
  cache/buffer size  = 8192 KBytes
  Capabilities:
  LBA, IORDY(can be disabled)
  Queue depth: 32
  Standby timer values: spec'd by Standard, no device specific minimum
  R/W multiple sector transfer: Max = 16 Current = 16
  Advanced power management level: disabled
  Recommended acoustic management value: 254, current value: 0
  DMA: mdma0 mdma1 mdma2 udma0 udma1 udma2 udma3 udma4 udma5 *udma6
      Cycle time: min=120ns recommended=120ns
  PIO: pio0 pio1 pio2 pio3 pio4
      Cycle time: no flow control=120ns  IORDY flow control=120ns
  Commands/features:
  Enabled Supported:
    * SMART feature set
      Security Mode feature set
    * Power Management feature set
    * Write cache
    * Look-ahead
    * Host Protected Area feature set
    * WRITE_BUFFER command
    * READ_BUFFER command
    * DOWNLOAD_MICROCODE
      Advanced Power Management feature set
      SET_MAX security extension
    * 48-bit Address feature set
    * Device Configuration Overlay feature set
    * Mandatory FLUSH_CACHE
    * FLUSH_CACHE_EXT
    * SMART error logging
    * SMART self-test
    * General Purpose Logging feature set
    * WRITE_{DMA|MULTIPLE}_FUA_EXT
    * WRITE_DMA_QUEUED_FUA_EXT
    * 64-bit World wide name
    * IDLE_IMMEDIATE with UNLOAD
    * Write-Read-Verify feature set
    * WRITE_UNCORRECTABLE_EXT command
    * {READ,WRITE}_DMA_EXT_GPL commands
    * Gen1 signaling speed (1.5Gb/s)
    * Gen2 signaling speed (3.0Gb/s)
    * Native Command Queueing (NCQ)
    * Phy event counters
      DMA Setup Auto-Activate optimization
      Device-initiated interface power management
    * Software settings preservation
    * SMART Command Transport (SCT) feature set
    * SCT Long Sector Access (AC1)
    * SCT LBA Segment Access (AC2)
    * SCT Error Recovery Control (AC3)
    * SCT Features Control (AC4)
    * SCT Data Tables (AC5)
      unknown 206[12] (vendor specific)
  Security:
  Master password revision code = 65534
  supported
  not enabled
  not locked
  frozen
  not expired: security count
  supported: enhanced erase
  54min for SECURITY ERASE UNIT. 54min for ENHANCED SECURITY ERASE UNIT.
  Logical Unit WWN Device Identifier: XXXXXXXXXXXXXX
  NAA : 5
  IEEE OUI : 000c50
  Unique ID : XXXXXXXXXX
  Checksum: correct

Hidden areas: none


Acquisition
===========

Linux device            : /dev/sda                                        
Device size             : 160041885696 (160.0GB)                          
Format                  : Linux dd raw image - file extension is .dd      
Image path and file name: /media/sdb1/IMAGE FILE/winxpdesklaptopImage.dd  
Info  path and file name: /media/sdb1/IMAGE FILE/winxpdesklaptopImage.info
Hash calculation        : MD5                                            
Source verification     : on                                              
Image verification      : on                                              

During acquisition, 4 bad sectors have been encountered. They have been replaced by zeroed sectors. The sector numbers are:
  6276558-6276560, 312581807
During verification, 4 bad sectors have been encountered. The sector numbers are:
  6276558-6276560, 312581807
State: Finished successfully (with 4 bad sectors)

MD5 hash                   : c58fbe667c36147afe2605e293480ed0
MD5 hash verified source   : c58fbe667c36147afe2605e293480ed0
MD5 hash verified image    : c58fbe667c36147afe2605e293480ed0
SHA1 hash                  : --                              
SHA1 hash verified source  : --                              
SHA1 hash verified image   : --                              
SHA256 hash                : --                              
SHA256 hash verified source: --                              
SHA256 hash verified image : --                              
Source verification OK. The device delivered the same data during acquisition and verification.
Image verification OK. The image contains exactly the data that was written.

Acquisition started : 2013-10-21 13:40:19 (ISO format YYYY-MM-DD HH:MM:SS)    
Verification started: 2013-10-21 16:25:36                                    
Ended               : 2013-10-21 18:16:36 (4 hours, 36 minutes and 16 seconds)
Acquisition speed   : 15.39 MByte/s (2 hours, 45 minutes and 16 seconds)      
Verification speed  : 22.92 MByte/s (1 hours, 50 minutes and 59 seconds)      


Generated image files and their MD5 hashes
==========================================

No MD5 hashes available (configuration parameter CalcImageFileMD5 is off)
MD5                               Image file
n/a                               XXXXXXXXX.dd

alk1

Number of posts : 3
Registration date : 2013-10-22

Back to top Go down

Back to top

- Similar topics

 
Permissions in this forum:
You cannot reply to topics in this forum