Tuesday, 19 May 2015 00:00

VMware and hard drive image

Rate this item
(0 votes)

VMware is a package for virtualisation of computers. This tremendous tool is for programmers, for ordinary users wishing to examine some untypical operating system and for specialists in the data recovery. Vmware is free to download and use a trial version. There are also completely free full versions. We will demonstrate, how to start the original machine having only a binary image of hard drive (RAW format).

It is possible to make the image of the hard drive with many programs (e.g. dd, DMDE, R-Studio in the demo version). These programs are creating the binary file, reading entire hard drive, sector by sector. When we already have such an image, We should somehow upload it to VMware - but, VMware doesn't have such a function. So We need to cheat the software.

We are creating the new virtual machine, as the guest operating system. We are choosing "Other" twice. We are allocating on the HD this virtual machine - a created new file will stay about the permanent size (VMware won't be magnifying the image size even when more space is needed). One should be smallest as possible – it won't be needed. I assume that the new virtual machine is already created. We are copying the image of the hard drive which we want to start to the folder of the created virtual machine. Now it is time for manual modifications.

We are opening a file [machine_name]. vmdk in the text editor. In this configuration file new parameters of the image file will be saved.

# Extent description

RW 40021632 FLAT „sectors.ima” 0

# The Disk Data Base

#DDB

ddb.toolsVersion = „0”

ddb.adapterType = „ide”

ddb.geometry.sectors = „63”

ddb.geometry.heads = „255”

ddb.geometry.cylinders = „2482”

ddb.virtualHWVersion = „6”

Elements which We should change were bolded. The first element is an amount of sectors in the image. Second, it is a name of the image. A third, fourth and fifth element is a geometry of the hard drive (of image) read out from MBR. I will leave reading geometry for You as the homework :). The machine is ready to start.

How can it be useful in case of the data recovery? It is possible to see the authentic operating system before the defecting the hard drive (only if logical organization of the HD, or at least an operating system, isn't violated). It is possible to start applications which are peculiar to the system and to check, whether all their databases work properly. It often happens, that a hard drive is finding its way to the data recovery with the software written up to business data - in such cases the presented way is excellent.

Below You can see an old version of system NetWare, NWFS file system. It is possible to see, what would happen after starting the authentic hard drive in the server from which he comes. Incorrect repaired boards are destroying the already damaged file system.


PS: in the case above, both boards of files were damaged. Bad sectors and the tool to repairing the file system isn't a good connection. Data was retrieved manually. More information you can ask our team in Chicago office

Last modified on Tuesday, 19 May 2015 18:20
Data Recovery Expert

Viktor S., Ph.D. (Electrical/Computer Engineering), was hired by DataRecoup, the international data recovery corporation, in 2012. Promoted to Engineering Senior Manager in 2010 and then to his current position, as C.I.O. of DataRecoup, in 2014. Responsible for the management of critical, high-priority RAID data recovery cases and the application of his expert, comprehensive knowledge in database data retrieval. He is also responsible for planning and implementing SEO/SEM and other internet-based marketing strategies. Currently, Viktor S., Ph.D., is focusing on the further development and expansion of DataRecoup’s major internet marketing campaign for their already successful proprietary software application “Data Recovery for Windows” (an application which he developed).

Leave a comment

Make sure you enter the (*) required information where indicated. HTML code is not allowed.

Get Help Now

Thank you for contacting us.
Your Private Investigator will call you shortly.