mp44_tom

Q: Please help, lost windows after Yosemite upgrade

Hello everybody

 

I have the same problem as a lot of people I saw, lost my Windows

 

Let me first say that I am a absolute nono so I have no idea what to do... I have read some info but that all sounds computer abracadabra to me.....

 

I sincerely hope you can help me

I found terminal and this is the result

 

iMac-van-Tom:~ tombarkmeijer$ diskutil list

/dev/disk0

   #:                       TYPE NAME                    SIZE       IDENTIFIER

   0:      GUID_partition_scheme                        *1.0 TB     disk0

   1:                        EFI EFI                     209.7 MB   disk0s1

   2:                  Apple_HFS Macintosh HD            750.7 GB   disk0s2

   3:                 Apple_Boot Recovery HD             650.0 MB   disk0s3

   4:       Microsoft Basic Data                         50.0 GB    disk0s4

 

after typing diskutil cs list I got :


iMac-van-Tom:~ tombarkmeijer$ diskutil cs list

No CoreStorage logical volume groups found

 

What should / can I do please, there is some very important info on my windows disk, which I did backup, but can't use the backup either

 

Thanks in advance

Tom

iMac (27-inch, Late 2013), OS X Yosemite (10.10.1)

Posted on Dec 18, 2014 12:45 AM

Close

Q: Please help, lost windows after Yosemite upgrade

  • All replies
  • Helpful answers

Page 1 Next
  • by Loner T,

    Loner T Loner T Dec 18, 2014 1:24 AM in response to mp44_tom
    Level 7 (24,601 points)
    Safari
    Dec 18, 2014 1:24 AM in response to mp44_tom

    In the same terminal window, please post the output of

     

    sudo fdisk /dev/disk0

    sudo gpt -vv -r show /dev/disk0.

     

    If you have the Yosemite 'bug', you will need

     

    Testdisk - http://www.cgsecurity.org/wiki/TestDisk

    GPT Fdisk - http://sourceforge.net/projects/gptfdisk/

     

    The steps are fairly simple.

  • by mp44_tom,

    mp44_tom mp44_tom Dec 18, 2014 1:34 AM in response to Loner T
    Level 1 (0 points)
    Dec 18, 2014 1:34 AM in response to Loner T

    Here the results

     

    sudo fdisk /dev/disk0

     

    Disk: /dev/disk0 geometry: 121601/255/63 [1953525168 sectors]

    Signature: 0xAA55

             Starting       Ending

    #: id  cyl  hd sec -  cyl  hd sec [     start -       size]

    ------------------------------------------------------------------------

    1: EE 1023 254  63 - 1023 254  63 [         1 -     409639] <Unknown ID>

    2: AF 1023 254  63 - 1023 254  63 [    409640 - 1466233968] HFS+       

    3: AB 1023 254  63 - 1023 254  63 [1466643608 -    1269536] Darwin Boot

    4: 0C 1023 254  63 - 1023 254  63 [1855868928 -   97654784] Win95 FAT32L

     

    sudo gpt -vv -r show /dev/disk0


    gpt show: /dev/disk0: mediasize=1000204886016; sectorsize=512; blocks=1953525168

    gpt show: /dev/disk0: Suspicious MBR at sector 0

    gpt show: /dev/disk0: Pri GPT at sector 1

    gpt show: /dev/disk0: Sec GPT at sector 1953525167

           start        size  index  contents

               0           1         MBR

               1           1         Pri GPT header

               2          32         Pri GPT table

              34           6        

              40      409600      1  GPT part - C12A7328-F81F-11D2-BA4B-00A0C93EC93B

          409640  1466233968      2  GPT part - 48465300-0000-11AA-AA11-00306543ECAC

      1466643608     1269536      3  GPT part - 426F6F74-0000-11AA-AA11-00306543ECAC

      1467913144   387955784        

      1855868928    97654784      4  GPT part - EBD0A0A2-B9E5-4433-87C0-68B6B72699C7

      1953523712        1423        

      1953525135          32         Sec GPT table

      1953525167           1         Sec GPT header

     

     

    I hope you can do something with it and instruct me what to do, I also downloaded

    Testdisk - http://www.cgsecurity.org/wiki/TestDisk

    GPT Fdisk - http://sourceforge.net/projects/gptfdisk/

     

    But did not use them (until I know what to do with it )

     

    Tom

  • by Loner T,

    Loner T Loner T Dec 18, 2014 2:22 AM in response to mp44_tom
    Level 7 (24,601 points)
    Safari
    Dec 18, 2014 2:22 AM in response to mp44_tom

    You seem to have the same issue as this thread - Re: Missing Bootcamp Partition (with pastes!). The 'gap' that is in your gpt command output between GPT3 and GPT4 is where there is a 'lost' NTFS header.

     

    Are you comfortable following this link and getting started with Testdisk?

  • by mp44_tom,

    mp44_tom mp44_tom Dec 18, 2014 2:56 AM in response to Loner T
    Level 1 (0 points)
    Dec 18, 2014 2:56 AM in response to Loner T

    I wish I could say Yes (I feel deeply ashamed) but to be honest I have no clue what to do next.....

     

    I hope you have the time and patience to guide me through it ?

     

    Regards

    Tom

  • by Loner T,

    Loner T Loner T Dec 18, 2014 3:37 AM in response to mp44_tom
    Level 7 (24,601 points)
    Safari
    Dec 18, 2014 3:37 AM in response to mp44_tom

    I have Testdisk downloaded in my Downloads directory.

     

    ls testdisk-7.0-WIP*

    testdisk-7.0-WIP.mac_intel.tar

     

    testdisk-7.0-WIP:

    78            INFO            THANKS            fidentify        photorec        testdisk

    AUTHORS            NEWS            VERSION            fidentify.8        photorec.8        testdisk.8

    COPYING            README            documentation.html    ico            readme.txt

     

    I can go to the Downloads directory ( using cd ~/Downloads) and run testdisk as

     

    sudo testdisk-7.0-WIP/testdisk /dev/rdisk0


    Click on Proceed -> Continue -> EFI GPT -> Analyse ->  Quick Search.

     

    There is a step-by-step guide at http://www.cgsecurity.org/wiki/TestDisk_Step_By_Step, but the screens may be slightly different.

     

    You are primarily interested in partitions which are of type 'MS Data'. Do not use left/right arrow/cursor keys. Use only up/down keys and scroll to the partition of interest and use 'P' to list files. In most cases, a Deeper Search is required to look for 'lost' partitions.

     

    Please feel free to ask questions.

  • by mp44_tom,

    mp44_tom mp44_tom Dec 18, 2014 3:49 AM in response to Loner T
    Level 1 (0 points)
    Dec 18, 2014 3:49 AM in response to Loner T

    Hi Loner T

     

    This is what I get

     

    TestDisk 7.0-WIP, Data Recovery Utility, October 2014

    Christophe GRENIER <grenier@cgsecurity.org>

    http://www.cgsecurity.org

     

    Disk /dev/rdisk0 - 1000 GB / 931 GiB - 1953525168 sectors (RO)

     

    The harddisk (1000 GB / 931 GiB) seems too small! (< 1050 GB / 978 GiB)

    Check the harddisk size: HD jumpers settings, BIOS detection...

     

    The following partitions can't be recovered:

         Partition               Start        End    Size in sectors

    >  MS Data               1953523711 2051178494   97654784

       Mac HFS               1953525124 1954794659    1269536

     

     

    So what to do next ?? The MS Data line is highlighted and i can press continue ?

    Thanks for your help so far

    Tom

  • by Loner T,

    Loner T Loner T Dec 18, 2014 4:00 AM in response to mp44_tom
    Level 7 (24,601 points)
    Safari
    Dec 18, 2014 4:00 AM in response to mp44_tom

    Please Continue. This number 1953523711 is a bit surprising. Your disk is 1953525168 sectors. Most likely this will return that file system is damaged.

     

    Please use the Escape key to go back one screen.

     

    Here is an example of the screen that you are interested in.

     

    Testdisk-GoodWindowsPartition.png

  • by mp44_tom,

    mp44_tom mp44_tom Dec 18, 2014 3:55 AM in response to Loner T
    Level 1 (0 points)
    Dec 18, 2014 3:55 AM in response to Loner T

    HERE the results

     

    TestDisk 7.0-WIP, Data Recovery Utility, October 2014

    Christophe GRENIER <grenier@cgsecurity.org>

    http://www.cgsecurity.org

     

    Disk /dev/rdisk0 - 1000 GB / 931 GiB - 1953525168 sectors (RO)

         Partition               Start        End    Size in sectors

    >P EFI System                    40     409639     409600 [EFI]

    D Mac HFS                   409640 1466643607 1466233968

    D MS Data                982304776 1467914240  485609465

    D Mac HFS               1466643608 1467913143    1269536

    D MS Data               1467914240 1953523704  485609465

    D MS Data               1855868928 1953523711   97654784

    D Mac HFS               1952255592 1953525127    1269536

     

     

     

     

     

     

     

    Structure: Ok.  Use Up/Down Arrow keys to select partition.

    Use Left/Right Arrow keys to CHANGE partition characteristics:

                    P=Primary  D=Deleted

    Keys A: add partition, L: load backup, T: change type, P: list files,

         Enter: to continue

    FAT32, blocksize=512, 209 MB / 200 MiB

  • by Loner T,

    Loner T Loner T Dec 18, 2014 4:07 AM in response to mp44_tom
    Level 7 (24,601 points)
    Safari
    Dec 18, 2014 4:07 AM in response to mp44_tom

    The two MS data entries which sized as the sum of GPT4 and the 'gap' are what is of most interest. In your case, you are looking for entries of size 485610568 or roughly the same.

     

    The following two are most interesting.

    D MS Data                982304776 1467914240  485609465

    D MS Data               1467914240 1953523704  485609465

    The other clue is that they should start somewhere close to 1467913144 (the start of the 'gap'), which makes second entry

    D MS Data               1467914240 1953523704  485609465

    the most probable candidate.

  • by mp44_tom,

    mp44_tom mp44_tom Dec 18, 2014 4:08 AM in response to mp44_tom
    Level 1 (0 points)
    Dec 18, 2014 4:08 AM in response to mp44_tom

    This is what I found

     

    TestDisk 7.0-WIP, Data Recovery Utility, October 2014

    Christophe GRENIER <grenier@cgsecurity.org>

    http://www.cgsecurity.org

         MS Data               1467914240 1953523704  485609465

    Directory /

     

     

    >dr-xr-xr-x     0     0         0 12-Dec-2014 11:27 .

    dr-xr-xr-x     0     0         0 12-Dec-2014 11:27 ..

    dr-xr-xr-x     0     0         0 27-Nov-2014 15:35 $AVG

    dr-xr-xr-x     0     0         0  9-Aug-2014 10:06 $Recycle.Bin

    dr-xr-xr-x     0     0         0 24-Jul-2014 21:04 Boot

    dr-xr-xr-x     0     0         0 18-Oct-2014 21:49 Brother

    dr-xr-xr-x     0     0         0 19-Nov-2014 11:37 DRIVERS

    dr-xr-xr-x     0     0         0 24-Jul-2014 13:18 Intel

    dr-xr-xr-x     0     0         0 24-Jul-2014 17:32 MSOCache

    dr-xr-xr-x     0     0         0 14-Jul-2009 05:20 PerfLogs

    dr-xr-xr-x     0     0         0  1-Dec-2014 14:49 Program Files

    dr-xr-xr-x     0     0         0  1-Dec-2014 14:48 Program Files (x86)

    dr-xr-xr-x     0     0         0  1-Dec-2014 14:48 ProgramData

    dr-xr-xr-x     0     0         0 24-Jul-2014 13:11 Recovery

    dr-xr-xr-x     0     0         0 12-Dec-2014 11:26 System Volume Information

    dr-xr-xr-x     0     0         0 24-Jul-2014 13:16 Users

    dr-xr-xr-x     0     0         0 27-Nov-2014 10:00 Windows

    dr-xr-xr-x     0     0         0 27-Nov-2014 13:07 backup_home

    dr-xr-xr-x     0     0         0  7-Aug-2014 18:07 totalcmd

    -r--r--r--     0     0      8192 24-Jul-2014 21:05 BOOTSECT.BAK

    -r--r--r--     0     0      2054 24-Jul-2014 13:18 RHDSetup.log

    -r--r--r--     0     0         0 27-Nov-2014 10:12 autoexec.bat

    -r--r--r--     0     0    383786 21-Nov-2010 04:23 bootmgr

    -r--r--r--     0     0 6395662336 14-Dec-2014 20:45 hiberfil.sys

    -r--r--r--     0     0 8527552512 14-Dec-2014 20:45 pagefile.sys

     

     

     

    Is this what I am looking for ??

     

     

     

     

     

     

     

     

     

     

     

     

     

     

     

     

     

     

     

     

     

     

     

     

     

     

     

     

     

     

     

     

     

     

     

     

     

     

     

     

     

     

                                                       Next

    Use Right to change directory, h to hide Alternate Data Stream

        q to quit, : to select the current file, a to select all files

        C to copy the selected files, c to copy the current file

  • by Loner T,

    Loner T Loner T Dec 18, 2014 4:17 AM in response to mp44_tom
    Level 7 (24,601 points)
    Safari
    Dec 18, 2014 4:17 AM in response to mp44_tom

    Yes, you found it.

     

    This is where Gdisk is used.

     

    GPT 3 StartGPT 3 SizeGPT 3 EndNTFS StartSector OffsetNTFS SizeNTFS End
    146664360812695361467913144146791424010964856094651953523704

     

    The 'Sector Offset' being positive is good. A negative value means you lose GPT#3. The NTFS size is roughly 240GB which is good.

     

    You need to use the following steps. If you see any error messages during the following steps, please stop and post back here with the error message. The following steps have values from your Testdisk output (and you can verify) in Steps 7 and 8.

     

    Rebuild GPT4 using start/end offsets

     

    1. Sudo gdisk /dev/rdisk0
    2. P  (print the full list of parts)
    3. D  (delete)
    4. 4  (part 4)
    5. N  (new part)
    6. 4   (part 4)
    7. 1467914240 - Start offset in bytes  (start point for Bootcamp part)
    8. +485609465 (Size offset as opposed to End offset)
    9. 0700     (Windows part type)
    10. P           (print list of all parts just to see what changes will be made)
    11. W         (Write the new GPT)
    12. Y           (Yes! really write the new GPT)

      This will delete and re-write the GPT partition info for /dev/disk0s4. 


    Rebuild MBR to match the new GPT information thus resetting the Hybrid MBR. Use defaults for other questions (like partition codes).

    1. Sudo gdisk /dev/disk0
    2. P  (Print list of parts)
    3. R   (Recover)
    4. H (chooses Hybrid)
    5. Partitions numbers to be hybridized: 2 3 4
    6. Y (Good for GRUB question)
    7. N (part 2 boot flag)
    8. N (part 3 boot flag)
    9. Y  (part 4 boot flag make NTFS bootable partition)
    10. W  (Write the new MBR)
    11. Y    (Yes! write the new MBR)
    12. Reboot

     

    Test 1 - Does Bootcamp Volume show up in Finder?

    Test 2 - Can you see files in Bootcamp Volume?

    Test 3 - Can you select Bootcamp in System Preferences -> Startup Disk?

    Test 4 - If Test 3 is successful, select Bootcamp and Click Restart

     

    If you have any third-party NTFS drivers, you should disable/uninstall them before you execute Test 3.

     

    If you see a hanging underline cursor at the top left on a black screen, and it does not proceed further, you may need Windows Startup Repair or a tool called EasyBCD.

  • by mp44_tom,

    mp44_tom mp44_tom Dec 18, 2014 4:21 AM in response to Loner T
    Level 1 (0 points)
    Dec 18, 2014 4:21 AM in response to Loner T

    So just to be sure

     

    I leave testdisk now and continue with this ?

     

    Rebuild GPT4 using start/end offsets

     

    1. Sudo gdisk /dev/rdisk0
    2. P  (print the full list of parts)
    3. D  (delete)
    4. 4  (part 4)
    5. N  (new part)
    6. 4   (part 4)
    7. 1467914240 - Start offset in bytes  (start point for Bootcamp part)
    8. +485609465 (Size offset as opposed to End offset)
    9. 0700     (Windows part type)
    10. P           (print list of all parts just to see what changes will be made)
    11. W         (Write the new GPT)
    12. Y           (Yes! really write the new GPT)

      This will delete and re-write the GPT partition info for /dev/disk0s4.

  • by Loner T,Solvedanswer

    Loner T Loner T Dec 18, 2014 4:24 AM in response to mp44_tom
    Level 7 (24,601 points)
    Safari
    Dec 18, 2014 4:24 AM in response to mp44_tom

    Yes.

  • by mp44_tom,

    mp44_tom mp44_tom Dec 18, 2014 5:05 AM in response to Loner T
    Level 1 (0 points)
    Dec 18, 2014 5:05 AM in response to Loner T

    I salute you !!!! It worked and I got my data back !!!!

     

    Thank you so much !!! you saved my day !!!

     

    Thanks for your patience and guiding me through the process !!

     

    A merry Christmas to you !

     

    Cheers

    Tom

Page 1 Next