I am conducting a computer forensic investigation and I have pulled out several vmware desktop files in hopes of starting up the vmware image to understand what the user was doing. Upon opening up the vmware image I get the following error, "A disk read error occurred, Press Ctrl Alt Delete to restart. I have tried the execute Ctrl Alt Delete, but nothing happens. I am wondering if I am missing some crucial files that needed be in the folder/location where the rest of the vmware files for this image to run.
The files that I have are below. I am masked parts of the file for my own purpse.
foo WinXp.nvram
foo WinXp.vmsd
foo WinXp.vmx
foo WinXp.vmxf
vmware.log
Windows XP Professional-0....cl1-.....-cl1.vmdk
Windows XP Professional-0....cl1-.....-cl1.vmdk_part 2.vmdk
Windows XP Professional-0....cl1-.....-cl1.vmdk_part 3.vmdk
Windows XP Professional-0....cl1-.....-cl1.vmdk_part 4.vmdk
Windows XP Professional-0....cl1-.....-cl1.vmdk_part 5.vmdk
Windows XP Professional-0....cl1-.....-cl1.vmdk_part 6.vmdk
Are there other files that are needed for this image to startup? Or is there something in the App (vmware desktop) that I can override?
Thanks