Guymager acquired image of Win XP SP3 system not loading in vmware on Win 7

[alk1]

Hi i accidentally posted this under tools, just saw this part of forum



Hi I have used guymager to acquire the below image.

system used to boot image is VMWare in Win7 64bit machine

Please advise if I am doing somethign wrong as I am new to this Smile

thank you in advance and congratulations on such a nice distro!

I have converted with to vmware with Prodiscover Basic (converts dd to vmdk) but am unable to mount to see image. I get blue screen with following
STOP :0x0000007B 0xBA4CF524, 0xC0000034, 0x00000000, 0x00000000


This is the info file from guymager

GUYMAGER ACQUISITION INFO FILE
==============================

Guymager
========

Version : 0.7.1-1
Compilation timestamp: 2013-03-15-17.10.48
Compiled with : gcc 4.4.5
libewf version : 20100226
libguytools version : 2.0.2


Device information
==================
Command executed: bash -c "search="`basename /dev/sda`: H..t P.......d A..a de.....d" && dmesg | grep -A3 "$search" || echo "No kernel HPA messages for /dev/sda""
Information returned:
----------------------------------------------------------------------------------------------------
No kernel HPA messages for /dev/sda

Command executed: bash -c "smartctl -s on /dev/sda ; smartctl -a /dev/sda"
Information returned:
----------------------------------------------------------------------------------------------------
smartctl 6.0 2012-10-10 r3643 [i686-linux-3.2.0-38-generic] (local build)
Copyright (C) 2002-12, Bruce Allen, Christian Franke, wwwDOTsmartmontoolsDOTorg

=== START OF ENABLE/DISABLE COMMANDS SECTION ===
SMART Enabled.

smartctl 6.0 2012-10-10 r3643 [i686-linux-3.2.0-38-generic] (local build)
Copyright (C) 2002-12, Bruce Allen, Christian Franke, wwwDOTsmartmontoolsDOTorg

=== START OF INFORMATION SECTION ===
Model Family: Seagate Momentus 5400.5
Device Model: ST9160310AS
Serial Number: XXXXXXXXX
LU WWN Device Id: XXXXXXXXXXXXXX
Firmware Version: SD03
User Capacity: 160,041,885,696 bytes [160 GB]
Sector Size: 512 bytes logical/physical
Device is: In smartctl database [for details use: -P show]
ATA Version is: ATA8-ACS T13/1699-D revision 4
SATA Version is: SATA 2.6, 3.0 Gb/s
Local Time is: Mon Oct 21 13:40:22 2013 CEST
SMART support is: Available - device has SMART capability.
SMART support is: Enabled

=== START OF READ SMART DATA SECTION ===
SMART overall-health self-assessment test result: PASSED
See vendor-specific Attribute list for marginal Attributes.

General SMART Values:
Offline data collection status: (0x82) Offline data collection activity
was completed without error.
Auto Offline Data Collection: Enabled.
Self-test execution status: ( 0) The previous self-test routine completed
without error or no self-test has ever
been run.
Total time to complete Offline
data collection: ( 712) seconds.
Offline data collection
capabilities: (0x7b) SMART execute Offline immediate.
Auto Offline data collection on/off support.
Suspend Offline collection upon new
command.
Offline surface scan supported.
Self-test supported.
Conveyance Self-test supported.
Selective Self-test supported.
SMART capabilities: (0x0003) Saves SMART data before entering
power-saving mode.
Supports SMART auto save timer.
Error logging capability: (0x01) Error logging supported.
General Purpose Logging supported.
Short self-test routine
recommended polling time: ( 1) minutes.
Extended self-test routine
recommended polling time: ( 62) minutes.
Conveyance self-test routine
recommended polling time: ( 2) minutes.
SCT capabilities: (0x103f) SCT Status supported.
SCT Error Recovery Control supported.
SCT Feature Control supported.
SCT Data Table supported.

SMART Attributes Data Structure revision number: 10
Vendor Specific SMART Attributes with Thresholds:
ID# ATTRIBUTE_NAME FLAG VALUE WORST THRESH TYPE UPDATED WHEN_FAILED RAW_VALUE
1 Raw_Read_Error_Rate 0x000f 086 081 006 Pre-fail Always - 26007230
3 Spin_Up_Time 0x0003 099 099 000 Pre-fail Always - 0
4 Start_Stop_Count 0x0032 099 099 020 Old_age Always - 1142
5 Reallocated_Sector_Ct 0x0033 100 100 036 Pre-fail Always - 0
7 Seek_Error_Rate 0x000f 080 060 030 Pre-fail Always - 109266798
9 Power_On_Hours 0x0032 097 097 000 Old_age Always - 2916
10 Spin_Retry_Count 0x0013 100 100 097 Pre-fail Always - 0
12 Power_Cycle_Count 0x0032 099 099 020 Old_age Always - 1140
184 End-to-End_Error 0x0032 100 100 099 Old_age Always - 0
187 Reported_Uncorrect 0x0032 001 001 000 Old_age Always - 1317
188 Command_Timeout 0x0032 100 099 000 Old_age Always - 28
189 High_Fly_Writes 0x003a 100 100 000 Old_age Always - 0
190 Airflow_Temperature_Cel 0x0022 060 044 045 Old_age Always In_the_past 40 (0 2 40 22 0)
191 G-Sense_Error_Rate 0x0032 100 100 000 Old_age Always - 90
192 Power-Off_Retract_Count 0x0032 100 100 000 Old_age Always - 1
193 Load_Cycle_Count 0x0032 089 089 000 Old_age Always - 23303
194 Temperature_Celsius 0x0022 040 056 000 Old_age Always - 40 (0 11 0 0 0)
195 Hardware_ECC_Recovered 0x001a 050 038 000 Old_age Always - 26007230
197 Current_Pending_Sector 0x0012 100 100 000 Old_age Always - 4
198 Offline_Uncorrectable 0x0010 100 100 000 Old_age Offline - 4
199 UDMA_CRC_Error_Count 0x003e 200 200 000 Old_age Always - 0

SMART Error Log Version: 1
ATA Error Count: 1408 (device log contains only the most recent five errors)
CR = Command Register [HEX]
FR = Features Register [HEX]
SC = Sector Count Register [HEX]
SN = Sector Number Register [HEX]
CL = Cylinder Low Register [HEX]
CH = Cylinder High Register [HEX]
DH = Device/Head Register [HEX]
DC = Device Command Register [HEX]
ER = Error register [HEX]
ST = Status register [HEX]
Powered_Up_Time is measured from power on, and printed as
DDd+hhSS.sss where DD=days, hh=hours, mm=minutes,
SS=sec, and sss=millisec. It "wraps" after 49.710 days.

Error 1408 occurred at disk power-on lifetime: 2915 hours (121 days + 11 hours)
When the command that caused the error occurred, the device was active or idle.

After command completion occurred, registers were:
ER ST SC SN CL CH DH
-- -- -- -- -- -- --
40 51 00 ff ff ff 0f Error: UNC at LBA = 0x0fffffff = 268435455

Commands leading to the command that caused the error were:
CR FR SC SN CL CH DH DC Powered_Up_Time Command/Feature_Name
-- -- -- -- -- -- -- -- ---------------- --------------------
25 00 08 ff ff ff ef 00 00:17:31.499 READ DMA EXT
27 00 00 00 00 00 e0 00 00:17:31.498 READ NATIVE MAX ADDRESS EXT
ec 00 00 00 00 00 a0 00 00:17:31.490 IDENTIFY DEVICE
ef 03 46 00 00 00 a0 00 00:17:31.484 SET FEATURES [Set transfer mode]
27 00 00 00 00 00 e0 00 00:17:31.458 READ NATIVE MAX ADDRESS EXT

Error 1407 occurred at disk power-on lifetime: 2915 hours (121 days + 11 hours)
When the command that caused the error occurred, the device was active or idle.

After command completion occurred, registers were:
ER ST SC SN CL CH DH
-- -- -- -- -- -- --
40 51 00 ff ff ff 0f Error: UNC at LBA = 0x0fffffff = 268435455

Commands leading to the command that caused the error were:
CR FR SC SN CL CH DH DC Powered_Up_Time Command/Feature_Name
-- -- -- -- -- -- -- -- ---------------- --------------------
25 00 08 ff ff ff ef 00 00:17:29.143 READ DMA EXT
27 00 00 00 00 00 e0 00 00:17:29.142 READ NATIVE MAX ADDRESS EXT
ec 00 00 00 00 00 a0 00 00:17:29.134 IDENTIFY DEVICE
ef 03 46 00 00 00 a0 00 00:17:29.130 SET FEATURES [Set transfer mode]
27 00 00 00 00 00 e0 00 00:17:29.094 READ NATIVE MAX ADDRESS EXT

Error 1406 occurred at disk power-on lifetime: 2915 hours (121 days + 11 hours)
When the command that caused the error occurred, the device was active or idle.

After command completion occurred, registers were:
ER ST SC SN CL CH DH
-- -- -- -- -- -- --
40 51 00 ff ff ff 0f Error: UNC at LBA = 0x0fffffff = 268435455

Commands leading to the command that caused the error were:
CR FR SC SN CL CH DH DC Powered_Up_Time Command/Feature_Name
-- -- -- -- -- -- -- -- ---------------- --------------------
25 00 08 ff ff ff ef 00 00:17:26.767 READ DMA EXT
27 00 00 00 00 00 e0 00 00:17:26.766 READ NATIVE MAX ADDRESS EXT
ec 00 00 00 00 00 a0 00 00:17:26.758 IDENTIFY DEVICE
ef 03 46 00 00 00 a0 00 00:17:26.753 SET FEATURES [Set transfer mode]
27 00 00 00 00 00 e0 00 00:17:26.718 READ NATIVE MAX ADDRESS EXT

Error 1405 occurred at disk power-on lifetime: 2915 hours (121 days + 11 hours)
When the command that caused the error occurred, the device was active or idle.

After command completion occurred, registers were:
ER ST SC SN CL CH DH
-- -- -- -- -- -- --
40 51 00 ff ff ff 0f Error: UNC at LBA = 0x0fffffff = 268435455

Commands leading to the command that caused the error were:
CR FR SC SN CL CH DH DC Powered_Up_Time Command/Feature_Name
-- -- -- -- -- -- -- -- ---------------- --------------------
25 00 08 ff ff ff ef 00 00:17:24.391 READ DMA EXT
27 00 00 00 00 00 e0 00 00:17:24.390 READ NATIVE MAX ADDRESS EXT
ec 00 00 00 00 00 a0 00 00:17:24.382 IDENTIFY DEVICE
ef 03 46 00 00 00 a0 00 00:17:24.377 SET FEATURES [Set transfer mode]
27 00 00 00 00 00 e0 00 00:17:24.342 READ NATIVE MAX ADDRESS EXT

Error 1404 occurred at disk power-on lifetime: 2915 hours (121 days + 11 hours)
When the command that caused the error occurred, the device was active or idle.

After command completion occurred, registers were:
ER ST SC SN CL CH DH
-- -- -- -- -- -- --
40 51 00 ff ff ff 0f Error: UNC at LBA = 0x0fffffff = 268435455

Commands leading to the command that caused the error were:
CR FR SC SN CL CH DH DC Powered_Up_Time Command/Feature_Name
-- -- -- -- -- -- -- -- ---------------- --------------------
25 00 08 ff ff ff ef 00 00:17:22.015 READ DMA EXT
27 00 00 00 00 00 e0 00 00:17:22.014 READ NATIVE MAX ADDRESS EXT
ec 00 00 00 00 00 a0 00 00:17:22.006 IDENTIFY DEVICE
ef 03 46 00 00 00 a0 00 00:17:22.001 SET FEATURES [Set transfer mode]
27 00 00 00 00 00 e0 00 00:17:21.966 READ NATIVE MAX ADDRESS EXT

SMART Self-test log structure revision number 1
No self-tests have been logged. [To run self-tests, use: smartctl -t]


SMART Selective self-test log data structure revision number 1
SPAN MIN_LBA MAX_LBA CURRENT_TEST_STATUS
1 0 0 Not_testing
2 0 0 Not_testing
3 0 0 Not_testing
4 0 0 Not_testing
5 0 0 Not_testing
Selective self-test flags (0x0):
After scanning selected spans, do NOT read-scan remainder of disk.
If Selective self-test is pending on power-up, resume after 0 minute delay.

Command executed: bash -c "hdparm -I /dev/sda"
Information returned:
----------------------------------------------------------------------------------------------------
/dev/sda:

ATA device, with non-removable media
Model Number: ST9160310AS
Serial Number: XXXXXXXXX
Firmware Revision: SD03
Transport: Serial
Standards:
Used: unknown (minor revision code 0x0029)
Supported: 8 7 6 5
Likely used: 8
Configuration:
Logical max current
cylinders 16383 16383
heads 16 16
sectors/track 63 63
--
CHS current addressable sectors: 16514064
LBA user addressable sectors: 268435455
LBA48 user addressable sectors: 312581808
Logical/Physical Sector size: 512 bytes
device size with M = 1024*1024: 152627 MBytes
device size with M = 1000*1000: 160041 MBytes (160 GB)
cache/buffer size = 8192 KBytes
Capabilities:
LBA, IORDY(can be disabled)
Queue depth: 32
Standby timer values: spec'd by Standard, no device specific minimum
R/W multiple sector transfer: Max = 16 Current = 16
Advanced power management level: disabled
Recommended acoustic management value: 254, current value: 0
DMA: mdma0 mdma1 mdma2 udma0 udma1 udma2 udma3 udma4 udma5 *udma6
Cycle time: min=120ns recommended=120ns
PIO: pio0 pio1 pio2 pio3 pio4
Cycle time: no flow control=120ns IORDY flow control=120ns
Commands/features:
Enabled Supported:
* SMART feature set
Security Mode feature set
* Power Management feature set
* Write cache
* Look-ahead
* Host Protected Area feature set
* WRITE_BUFFER command
* READ_BUFFER command
* DOWNLOAD_MICROCODE
Advanced Power Management feature set
SET_MAX security extension
* 48-bit Address feature set
* Device Configuration Overlay feature set
* Mandatory FLUSH_CACHE
* FLUSH_CACHE_EXT
* SMART error logging
* SMART self-test
* General Purpose Logging feature set
* WRITE_{DMA|MULTIPLE}_FUA_EXT
* WRITE_DMA_QUEUED_FUA_EXT
* 64-bit World wide name
* IDLE_IMMEDIATE with UNLOAD
* Write-Read-Verify feature set
* WRITE_UNCORRECTABLE_EXT command
* {READ,WRITE}_DMA_EXT_GPL commands
* Gen1 signaling speed (1.5Gb/s)
* Gen2 signaling speed (3.0Gb/s)
* Native Command Queueing (NCQ)
* Phy event counters
DMA Setup Auto-Activate optimization
Device-initiated interface power management
* Software settings preservation
* SMART Command Transport (SCT) feature set
* SCT Long Sector Access (AC1)
* SCT LBA Segment Access (AC2)
* SCT Error Recovery Control (AC3)
* SCT Features Control (AC4)
* SCT Data Tables (AC5)
unknown 206[12] (vendor specific)
Security:
Master password revision code = 65534
supported
not enabled
not locked
frozen
not expired: security count
supported: enhanced erase
54min for SECURITY ERASE UNIT. 54min for ENHANCED SECURITY ERASE UNIT.
Logical Unit WWN Device Identifier: XXXXXXXXXXXXXX
NAA : 5
IEEE OUI : 000c50
Unique ID : XXXXXXXXXX
Checksum: correct

Hidden areas: none


Acquisition
===========

Linux device : /dev/sda
Device size : 160041885696 (160.0GB)
Format : Linux dd raw image - file extension is .dd
Image path and file name: /media/sdb1/IMAGE FILE/winxpdesklaptopImage.dd
Info path and file name: /media/sdb1/IMAGE FILE/winxpdesklaptopImage.info
Hash calculation : MD5
Source verification : on
Image verification : on

During acquisition, 4 bad sectors have been encountered. They have been replaced by zeroed sectors. The sector numbers are:
6276558-6276560, 312581807
During verification, 4 bad sectors have been encountered. The sector numbers are:
6276558-6276560, 312581807
State: Finished successfully (with 4 bad sectors)

MD5 hash : c58fbe667c36147afe2605e293480ed0
MD5 hash verified source : c58fbe667c36147afe2605e293480ed0
MD5 hash verified image : c58fbe667c36147afe2605e293480ed0
SHA1 hash : --
SHA1 hash verified source : --
SHA1 hash verified image : --
SHA256 hash : --
SHA256 hash verified source: --
SHA256 hash verified image : --
Source verification OK. The device delivered the same data during acquisition and verification.
Image verification OK. The image contains exactly the data that was written.

Acquisition started : 2013-10-21 13:40:19 (ISO format YYYY-MM-DD HH:MM:SS)
Verification started: 2013-10-21 16:25:36
Ended : 2013-10-21 18:16:36 (4 hours, 36 minutes and 16 seconds)
Acquisition speed : 15.39 MByte/s (2 hours, 45 minutes and 16 seconds)
Verification speed : 22.92 MByte/s (1 hours, 50 minutes and 59 seconds)


Generated image files and their MD5 hashes
==========================================

No MD5 hashes available (configuration parameter CalcImageFileMD5 is off)
MD5 Image file
n/a XXXXXXXXX.dd


alk1

Number of posts: 1
Registration date: 2013-10-22

View user profile Send private message

Back to top

[nannib]

use xmount or xmount-gui (present in caine).
In any case, it is not sure you'll be able to virtualize Win7, because the drivers....you have to study how to using opengates plugin in a BartPe disk.
Use these advices for searching on google
bye

[alk1]

Thank you Nanni,

I am looking and it seems its not quite easy to virtualize xp in vmware and in win7, xmount works fine to review the files. Thank you.



Regards,

Alex

[Sponsored content]