[Solved] raw image to vhd

[madIndia]

Hi,
I'm trying to load vhd build from raw image. However it abruptly ends with blue screen. can you help me

[andyp73]

With that little information probably not!

What are you trying to take a raw image of (operating systems and versions would be helpful)? What tool are you trying to use to create the .vhd file? Do you get any other warnings or error messages before the BSOD? The BSOD will include a bugcheck code - what is it, does it give any clues?

-Andy.

[madIndia]

Yeah... I'm trying to convert RAW image to VDI and then load it in a VirtualBox

I used paladin forensic suite (usb boot) to take the image of laptop running windows enterprise 7 and having harddisk of size 500 GB

This image is converted into VDI using VBoxManage convertfromraw utility (151 GB) copied into an external harddisk. Then I tried to open from virtualbox (windows 10 host).Few seconds into booting BSOD comes and system get rebooted. I'm not getting any warning message before BSOD. The 2 log files that i could found are VBOX.log and VBoxHardening.Log. I'm first time trying this and no idea where it is going wrong.

[socratis]

4740.3150: supR3HardNtChildWaitFor[1]: Quitting: ExitCode=0x0 (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 32425 ms, the end);

You do not seem to have a hardening problem. If you did, you'd know about it, you would have been notified about it.

Few seconds into booting BSOD comes and system get rebooted

What's the BSOD that you're getting? The biggest issue in a Physical-to-Virtual (P2V) is the hard drive controller.

00:00:02.892621 [/Devices/ahci/0/LUN#0/Config/] (level 5)
00:00:02.892623   BlockCache <integer> = 0x0000000000000001 (1)
00:00:02.892623   Format     <string>  = "VDI" (cb=4)
00:00:02.892624   Mountable  <integer> = 0x0000000000000000 (0)
00:00:02.892625   Path       <string>  = "K:\testgmail\testgmail.vdi" (cb=27)
00:00:02.892626   Type       <string>  = "HardDisk" (cb=9)
00:00:02.892626   UseNewIo   <integer> = 0x0000000000000001 (1)

You have set your HD controller as a SCSI. Was the original hard drive running on a SCSI controller or an IDE one?

[madIndia]

i have checked the source system. There is no SCSI. Screen image of same is attached.

The VDI is in external portable hardidsk (K:\). Is that the reason? Should I copy VDI to any system partition?

[socratis]

The VDI is in external portable hardidsk (K:\). Is that the reason? Should I copy VDI to any system partition?

No, that's not the reason.

You need most probably to add an IDE controller to the VM Storage settings, and then attach the VDI to the IDE controller. I asked you previously what's the BSOD, that would explain the situation.

[madIndia]

Attached here is the BSOD image.

The suggestions in blue screen are check for antivirus, remove newly installed hard dirve or controllers etc.

[socratis]

You need most probably to add an IDE controller to the VM Storage settings, and then attach the VDI to the IDE controller.

Did you do that? I don't think you did...

[madIndia]

Now it is working after following your suggestion. Thanks a lot.

I'm working on setting the internet and network