Unable to boot VMWare from dd'ed disk image

cosimo · 2006-04-18T11:41:48Z

Hello,I am trying to boot VMWare from a disk image acquired with dd. The imaged disk contains three partitions (the first one is a recovery partition, the second and third ones are NTFS partitions containing NTFS file systems). The bootable partition is the second one, on which Windows XP Professional is installed.I've tried various methods to boot VMWare from this image, but I always get the "blu screen" error and the virtual machine reboots. To be more precise, I've tried 1) to mount the image with Image Pro and add it as a raw disk to VMWare2) to use the techniques described in the Michael Penhallurick's paper published on Digital Investigation ("Methodologies for the use of VMWare to boot cloned/mounted subject hard disk images")3) to use the techniques described in the VMWare discussion forum (http//www.vmware.com/community/thread.jspa?messageID=15890&)When possible, I've tried these techniques both with VMWare running on Linux and Windows as OS hosts. I all the cases, I always get the "blu screen" message saying that Windows cannot boot to avoid hardware damages, and suggesting to run chkfsk /F on the disk.Did anybody experience the same problem?Thanks in advance.– Cosimo

Page 2 / 2 Prev

General (Technical, Procedural, Software, Hardware etc.)

Last Post by chague 20 years ago

12 Posts

9 Users

0 Reactions

2,155 Views

RSS

Andy

(@andy)

Reputable Member

Joined: 22 years ago

Posts: 357

02/09/2006 2:50 pm

LiveView is one of the best free tools I've ever used, brilliant.

Andy

ReplyQuote

chague

(@chague)

Eminent Member

Joined: 20 years ago

Posts: 33

02/09/2006 10:36 pm

I would agree with Andy and others. LiveView has been a great tool to view a suspectâ€™s machine as they see it. Of course all analysis has been done on the forensically on the image file.

ReplyQuote

Page 2 / 2 Prev