Computing.Net > Forums > Windows XP > ghost image reader program

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

ghost image reader program

Reply to Message Icon

Name: peacock
Date: July 17, 2008 at 05:05:29 Pacific
OS: XP_SP2
CPU/Ram: 2.4GHz /1GB
Product: Dell Latitude D620
Comment:

i saved an imaged on the network with all the users files and remimaged ir. When i tried to put the image back, i got an error. What i would like to know is, is there a way to extract files out of the image? *.doc, *.pst, *.dwg etc etc. Most of its trash, but we need to reocver the files out of the image.

In brief, the error is
Error Number: (10008)
Message: Unexpected end of file

For those of you who really want the gory details, the error is


*********************************
Date : Thu Jul 17 12:23:49 2008
Error Number: (10008)
Message: Unexpected end of file
Version: 7.7.0.665 (Dec 18 2002, Build=665)
Command line arguments:
Active Switches :
AutoName
ProgMode : PROG_LOCAL
PathName : 21850 shdocvw.dllNIC8254X.MDM
DumpFile : z:\images\master\UK\Backup\David\49159 - titov shrestha\titov-49159.GHO
DumpPos : 2147480589
File64 buffersize : 1024
FlagImplode : 0
FlagExplode : 2

Operation Details :
Total size.........16403
MB copied..........2922
MB remaining.......13481
Percent complete...17%
Speed..............872MB/min
Time elapsed.......3:21
Time remaining.....15:27

Program Call Stack
Generic_Abort
DumpRead
NTFSRead
readNextSeqPacket
loadRun
loadAttribute
loadAttributes
loadMFTRec
loadMFT
loadVol
LoadNTFSPartition
ProcessNTFSPartition
CopyPartition
ProcessAllPartitions
CopyAllPartitions
CopyFileToDisk
CopyMainline
AttemptOperation
sub_main
main

Call Stack
Address Frame Logical Addr Module
0x000000007c94ed54 0x000000000012dc64 KiFastSystemCallRet+0x0000000000000000
0x000000000012df54 0x0000000000000003 0x0000:0x0000000000000000
End Call Stack


Start heap available: 1954279424
Cur heap available: 1906606080
Total Memory: 2137014272

Conventional Memory
Inital Conventional Memory Size = 0
Current Conventional Memory Size = 0
Allocated
33500 ghost.cpp:898
Free
32768 LfoDeviceCommand.cpp:80

Fat details:
SRC:
FatType..........16
first_sect.......63
ClusterSize......2048
clusters.........40060
root_next_avail..0
data_next_avail..0
dir_sector.......0
root_sector......315
data_sector......347
FAT_sector.......0
DST:
FatType..........16
first_sect.......63
ClusterSize......2048
clusters.........40060
root_next_avail..2
data_next_avail..3927
dir_sector.......322
root_sector......315
data_sector......347
FAT_sector.......16

NTFS details:
----------------

NTFS Global Flags:
----------------
contiguousWrite=1 forceDiskClusterMapping=0
inhibitCHKDSK=1 ignoreBadLog=0 ignoreCHKDSKBit=0
enable_cache=0 xfrbuflen=32768
last_attr_type = 0
----------------
=======================================================
NTFS volume 0:
----------------
initialised..............1
read cached..............N
Selective caching........N
flags....................Volume OK
drive....................0x00
part order...............1
version..................0x0400
volsize..................40965749
blocksize................512
clusterfactor............8
clustersize..............4096
mftrecordsize............1024
indexrecordsize..........4096
indexclustperrecord......1
bootSectorCopyOffset.....40965749
pagefileSys..............4294967295
bootIni..................3572
volumeLabel..............[SYSTEM]
sectorsInUse.............28483656
totalNonCopiedBytes......0
bytesToCopy..............0
bitmapClusters...........157
bitmapUsedBytes..........640096
estimatedClusters........157
estimatedUsedBytes.......640096
clustersizeShift.........12
blocksizeShift...........9
mftrecordsizeShift.......10
indexrecordsizeShift.....12
totalRootMftRecs.........86845
clustermap failover......N
Boot sector details
name....................[NTFS ]
blocksize...............512
clusterfactor...........8
reservedSectorsUnused...0
mediaType...............0xf8
secPerTrack.............63
numHeads................255
hiddenSectors...........160650
volsize_lo..............40965749
volsize_hi..............0
mftcluster.(lo).........786432
mftcluster.(hi).........0
mftmirrorcluster.(lo)...16
mftmirrorcluster.(hi)...0
clustersPerMFTRecord....246
clustersPerIndexBuffer..1

------------------------
Cluster Allocation Map
------------------------
Start: 0 Length: 726121 Next: 726121
Gap: 60311
Start: 786432 Length: 640092 Next: 1426524
Gap: 3694194
Start: 5120718 Length: 0 Next: 5120718


=======================================================

Disk Info :
remote.............0
drive..............80
sectors_used.......78124032
estimated_used.....33593455
pemax..............3
Version............770

# Ord Boot Id Ext First Num Last Used NTFS
0 0 0 de No 00000063 00160587 00160650 00015550 No
1 1 80 7 No 00160650 40965750 41126400 28483656 Yes
2 2 0 7 No 41126400 36997695 78124095 10214248 Yes

Disk Info :
remote.............0
drive..............0
sectors_used.......78124095
estimated_used.....0
pemax..............3
Version............0

# Ord Boot Id Ext First Num Last Used NTFS
0 0 0 de No 00000063 00160587 00160650 00015550 No
1 1 80 7 No 00160650 40965750 41126400 28483656 Yes
2 2 0 7 No 41126400 36997695 78124095 10214248 Yes

Fixed Drives

Drive 0 Hitachi HTS541040G9S MB2O MPBBPAXHE9816M

ASPI
Total Sectors 78140160
Bytes per Sector 512
MB 38154

WinNT (Active)
Total Sectors 78140160
Bytes per Sector 512
MB 38154
Cylinders 4864
Heads 255
Sectors per Track 63

Floppy Drives

Remote Drives
AsyncIo : 1
NTFS MFT or Attribute Structure
000: 80 00 00 00 48 00 00 00 01 00 00 00 00 00 03 00 ....H...........
016: 00 00 00 00 00 00 00 00 6D 01 00 00 00 00 00 00 ........m.......
032: 40 00 00 00 00 00 00 00 00 E0 16 00 00 00 00 00 @...............
048: 00 D8 16 00 00 00 00 00 00 D8 16 00 00 00 00 00 ................
064: 32 6E 01 3A 24 0B 00 00 FF FF FF FF 82 79 47 11 2n.:$........yG.
080: FF FF FF FF 82 79 47 11 00 00 00 00 00 00 00 00 .....yG.........
096: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
112: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
128: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
144: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
160: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
176: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
192: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
208: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
224: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
240: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
256: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
272: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
288: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
304: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
320: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
336: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
352: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
368: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
384: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
416: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
432: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
448: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
464: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
480: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
496: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
512: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
528: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
544: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
560: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
576: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
592: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
608: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
624: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
640: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
656: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
672: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
688: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
704: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
720: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
736: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
752: 00 00 00 00 00 00 00 00 3E 00 81 00 5D 01 0A 01 ........>...]...
768: 00 00 00 00 72 61 6D 20 43 61 6C 6C 20 53 74 61 ....ram Call Sta
784: 63 6B 0A 47 65 6E 65 72 69 63 5F 41 62 6F 72 74 ck.Generic_Abort
800: 0A 44 75 6D 70 52 65 61 64 0A 4E 54 46 53 52 65 .DumpRead.NTFSRe
816: 61 64 0A 72 65 61 64 4E 65 78 74 53 65 71 50 61 ad.readNextSeqPa
832: 63 6B 65 74 0A 6C 6F 61 64 52 75 6E 0A 6C 6F 61 cket.loadRun.loa
848: 64 41 74 74 72 69 62 75 74 65 0A 6C 6F 61 64 41 dAttribute.loadA
864: 74 74 72 69 62 75 74 65 73 0A 6C 6F 61 64 4D 46 ttributes.loadMF
880: 54 52 65 63 0A 6C 6F 61 64 4D 46 54 0A 6C 6F 61 TRec.loadMFT.loa
896: 64 56 6F 6C 0A 4C 6F 61 64 4E 54 46 53 50 61 72 dVol.LoadNTFSPar
912: 74 69 74 69 6F 6E 0A 50 72 6F 63 65 73 73 4E 54 tition.ProcessNT
928: 46 53 50 61 72 74 69 74 69 6F 6E 0A 43 6F 70 79 FSPartition.Copy
944: 50 61 72 74 69 74 69 6F 6E 0A 50 72 6F 63 65 73 Partition.Proces
960: 73 41 6C 6C 50 61 72 74 69 74 69 6F 6E 73 0A 43 sAllPartitions.C
976: 6F 70 79 41 6C 6C 50 61 72 74 69 74 69 6F 6E 73 opyAllPartitions
992: 0A 43 6F 70 79 46 69 6C 65 54 6F 44 69 73 6B 0A .CopyFileToDisk.
1008: 43 6F 70 79 4D 61 69 6E 6C 69 6E 65 0A 41 74 74 CopyMainline.Att
1024: 65 6D 70 74 4F 70 65 72 61 74 69 6F 6E 0A 73 75 emptOperation.su
1040: 62 5F 6D 61 69 6E 0A 6D 61 69 6E 0A 0A 43 61 6C b_main.main..Cal
1056: 6C 20 53 74 61 63 6B 0A 41 64 64 72 65 73 73 20 l Stack.Address
1072: 20 20 20 20 20 20 20 20 20 20 20 46 72 61 6D 65 Frame
1088: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 4C 6F Lo
1104: 67 69 63 61 6C 20 41 64 64 72 20 20 20 20 20 20 gical Addr
1120: 20 20 20 20 20 20 20 20 4D 6F 64 75 6C 65 0A 30 Module.0
1136: 78 30 30 30 30 30 30 30 30 37 63 39 34 65 64 35 x000000007c94ed5
1152: 34 20 30 78 30 30 30 30 30 30 30 30 30 30 31 32 4 0x000000000012
1168: 64 63 36 34 20 4B 69 46 61 73 74 53 79 73 74 65 dc64 KiFastSyste
1184: 6D 43 61 6C 6C 52 65 74 2B 30 78 30 30 30 30 30 mCallRet+0x00000
1200: 30 30 30 30 30 30 30 30 30 30 30 0A 30 78 30 30 00000000000.0x00
1216: 30 30 30 30 30 30 30 30 31 32 64 66 35 34 20 30 0000000012df54 0
1232: 78 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 x000000000000000
1248: 33 20 30 78 30 30 0F 0F 02 00 3E 00 0F 00 0F 01 3 0x00....>.....
1264: F8 DF B0 00 88 38 AE 00 09 00 02 00 1D 01 08 01 .....8..........
1280: B0 DF B0 00 64 20 44 72 69 76 65 73 0A 0A 44 72 ....d Drives..Dr
1296: 69 76 65 20 30 20 48 69 74 61 63 68 69 20 48 54 ive 0 Hitachi HT
1312: 53 35 34 31 30 34 30 47 39 53 20 4D 42 32 4F 20 S541040G9S MB2O
1328: 20 20 20 20 20 20 4D 50 42 42 50 41 58 48 45 39 MPBBPAXHE9
1344: 03 00 09 00 14 01 08 01 20 FD AD 00 00 00 00 00 ........ .......
1360: 80 02 00 00 E0 01 00 00 04 00 03 00 11 01 08 01 ................
1376: B0 1E AE 00 04 00 02 00 80 02 00 00 00 00 00 00 ................
1392: 00 00 00 00 00 00 00 00 02 00 04 00 0D 01 0C 01 ................
1408: D0 1E AE 00 A8 02 A5 00 03 00 02 00 0F 01 08 01 ................
1424: E0 1E AE 00 47 01 00 00 0D 02 00 00 48 01 00 00 ....G.......H...
1440: 04 00 03 00 08 01 08 01 F8 1E AE 00 04 00 02 00 ................
1456: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
1472: 02 00 04 00 04 01 0C 01 18 1F AE 00 60 02 A5 00 ............`...
1488: 03 00 02 00 06 01 08 01 70 1F AE 00 00 00 00 00 ........p.......
1504: 80 02 00 00 E0 01 00 00 04 00 03 00 03 01 08 01 ................
1520: 40 1F AE 00 04 00 02 00 00 00 00 00 00 00 00 00 @...............
1536: 00 00 00 00 00 00 00 00 02 00 04 00 3F 01 0C 01 ............?...
1552: 60 1F AE 00 18 02 A5 00 03 00 02 00 39 01 08 01 `...........9...
1568: 40 FA AD 00 00 00 00 00 80 02 00 00 E0 01 00 00 @...............
1584: 04 00 03 00 3A 01 08 01 88 1F AE 00 04 00 02 00 ....:...........
1600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
1616: 02 00 04 00 36 01 0C 01 A8 1F AE 00 D0 01 A5 00 ....6...........
1632: 03 00 02 00 30 01 08 01 C0 F8 AD 00 00 00 00 00 ....0...........
1648: 80 02 00 00 E0 01 00 00 04 00 03 00 2D 01 08 01 ............-...
1664: D8 F8 AD 00 04 00 02 00 00 00 00 00 00 00 00 00 ................
1680: 00 00 00 00 00 00 00 00 02 00 04 00 29 01 0C 01 ............)...
1696: F8 F8 AD 00 88 01 A5 00 0A 00 02 00 2B 11 10 01 ............+...
1712: 8C A0 58 00 C8 01 A5 00 00 00 00 00 00 00 00 00 ..X.............
1728: 00 00 00 00 F0 16 AE 00 38 17 AE 00 02 00 00 00 ........8.......
1744: 00 00 00 00 E0 01 00 00 00 00 03 00 21 10 08 01 ............!...
1760: 70 CC AC 00 88 79 AC 00 00 00 00 00 0F 00 00 00 p....y..........
1776: 00 00 00 00 00 00 00 00



Sponsored Link
Ads by Google

Response Number 1
Name: kx5m2g
Date: July 17, 2008 at 06:10:28 Pacific
Reply:

The versions of Ghost I have used allow you to explore any files stored in the image. Which version of Ghost did you use ? I didn't feel like reading all of that output you posted.


0

Response Number 2
Name: XpUser
Date: July 17, 2008 at 06:18:50 Pacific
Reply:

... neither do I.

Debugging internal problems in code is extremely difficult and time consuming. Why don't you read through THIS 5-pages thread related to norton ghost Unexpected end of file problem then see what applies to you?

Pay particular attention to what Nigel Bree (a Symantec Employee ??) and hawk333w wrote.

Good luck & Best Wishes.


i_Xp/VistaUser


0

Response Number 3
Name: 1stepbeyond
Date: July 17, 2008 at 10:13:19 Pacific
Reply:

hi

i read about this the other day , no idea if it will work specially as the image has failed once already ,v long shot?

vmconverter can convert ghost image for use in vm ,
http://www.vmware.com/files/pdf/con...


out of interest xpuser, anyone, have you seen this done before?



0

Response Number 4
Name: jefro
Date: July 17, 2008 at 14:01:47 Pacific
Reply:

Ghost has a viewer but you must have a working file. Since you didn't use the correct program how do you know the file is bad?

Boot the CD if you have V9 or above. It has legacy tools.


"Best Practices", Event viewer, host file, perfmon, are in my top 10


0

Response Number 5
Name: peacock
Date: July 19, 2008 at 17:08:35 Pacific
Reply:

I did use the correct program. i used Ghost to create image and in the attempt to restore it.

Another question. Is there a program for repairing corrupt Ghost images. Always assuming they are not too corrupt. We believe the drive they were written to is OK, but the source drive from which the image was created is not.

Many thanks to everyone who has tried to help


0

Related Posts

See More



Response Number 6
Name: mavis007
Date: July 23, 2008 at 12:44:59 Pacific
Reply:

... oh a bit late I guess

http://ghost.radified.com/

... depends on which version of ghost

... I've had crappy boot-up CD/DVD mess up with End Of File read errors before but had
the image saved on a massive hard drive for those "just in case" episodes.

... the file "Ghostexp.exe" will read the image files and extract any files, I believe you can also import files to the image with this file; but I never had success doing this as I used high compression creating the image(s)

... better late than never!

Grrrr
wat do I know?
... got brain freeze


0

Sponsored Link
Ads by Google
Reply to Message Icon






Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Windows XP Forum Home


Sponsored links

Ads by Google


Results for: ghost image reader program

Ghost image www.computing.net/answers/windows-xp/ghost-image/162174.html

I want to create a ghost Image of o www.computing.net/answers/windows-xp/i-want-to-create-a-ghost-image-of-o/165400.html

Need advice on Ghost image. www.computing.net/answers/windows-xp/need-advice-on-ghost-image/42840.html