Unable to boot VMWare from dd'ed disk image

cosimo · 2006-04-18T11:41:48Z

Hello,I am trying to boot VMWare from a disk image acquired with dd. The imaged disk contains three partitions (the first one is a recovery partition, the second and third ones are NTFS partitions containing NTFS file systems). The bootable partition is the second one, on which Windows XP Professional is installed.I've tried various methods to boot VMWare from this image, but I always get the "blu screen" error and the virtual machine reboots. To be more precise, I've tried 1) to mount the image with Image Pro and add it as a raw disk to VMWare2) to use the techniques described in the Michael Penhallurick's paper published on Digital Investigation ("Methodologies for the use of VMWare to boot cloned/mounted subject hard disk images")3) to use the techniques described in the VMWare discussion forum (http//www.vmware.com/community/thread.jspa?messageID=15890&)When possible, I've tried these techniques both with VMWare running on Linux and Windows as OS hosts. I all the cases, I always get the "blu screen" message saying that Windows cannot boot to avoid hardware damages, and suggesting to run chkfsk /F on the disk.Did anybody experience the same problem?Thanks in advance.– Cosimo

Page 2 / 2 Prev

General (Technical, Procedural, Software, Hardware etc.)

Last Post by chague 19 years ago

12 Posts

9 Users

0 Reactions

1,747 Views

RSS

Andy

(@andy)

Reputable Member

Joined: 21 years ago

Posts: 357

02/09/2006 2:50 pm

LiveView is one of the best free tools I've ever used, brilliant.

Andy

ReplyQuote

chague

(@chague)

Eminent Member

Joined: 19 years ago

Posts: 33

02/09/2006 10:36 pm

I would agree with Andy and others. LiveView has been a great tool to view a suspectâ€™s machine as they see it. Of course all analysis has been done on the forensically on the image file.

ReplyQuote

Page 2 / 2 Prev

Podcast: Well-Being In Digital Forensics And Policing: Insights From Hannah Bailey

Hannah Bailey shares her journey from frontline policin...

By Zoe , 4 days ago
RE: Android Forensics

Hi, Try decompressing the file using zlib in python. ...

By Dexter4n6 , 5 days ago
Interview: Neal Ysart, Co-Founder, The Coalition of Cyber Investigators

Neal Ysart shares how The Coalition of Cyber Investigat...

By Zoe , 5 days ago

8 Forums
15.7 K Topics
92.3 K Posts
27 Online
41.1 K Members

Forum Icons: Forum contains no unread posts Forum contains unread posts

Topic Icons: Not Replied Replied Active Hot Sticky Unapproved Solved Private Closed