k3ntrol
Level 1 (0 points)

Q: Installed Yosemite (OS X 10.10), Windows 7 Partition/Bootcamp does not work.

Hello,

 

I recently installed Yosemite (OS X 10.10). When I was going to boot my Windows 7 partition (by holding down 'alt' when booting) I realized that it dissappeared.

 

I did not back up my mac as I thought this would not effect my bootcamp. Needless to say, I regret upgrading to this yosemite. I have very important files that i need to recover on my windows.

 

Could someone please help me with step by steps on how to recover my windows. Please let me know what info you need and how I get these info. Please send me a message or post if you could kindly help my situation. Thank you

 

Here is the info of my mac

Screen Shot 2015-02-09 at 2.16.57 PM.png

When I checked Disk Utility this is what I found:

 

Screen Shot 2015-02-09 at 2.20.42 PM.png

The Boot Camp partition is not there. But there's a new partition (Have not seen it before) called disk0s4

 

What should I do to get the Windows 7/Boot Camp partition back?


Posted on Feb 9, 2015 2:38 PM

by Loner T,Solvedanswer
Loner T Loner T
Level 7 (24,202 points)
Safari
A:

The following command dumps the first block of the NTFS partition (the NTFS header).

 

sudo dd if=/dev/rdisk0s4 count=1 2>/dev/null | hexdump -C

 

Can you post the output of this command?

Posted on Feb 10, 2015 4:00 AM

Close
k3ntrol

Q: Installed Yosemite (OS X 10.10), Windows 7 Partition/Bootcamp does not work.

  • All replies
  • Helpful answers

  • by Loner T,

    Loner T Loner T Feb 9, 2015 4:30 PM in response to k3ntrol
    Level 7 (24,202 points)
    Safari
    Feb 9, 2015 4:30 PM in response to k3ntrol

    Ca you post the output of the following Terminal commands? For "sudo" commands, enter your password, which will not be echoed back to you.

     

    diskutil list

    diskutil cs list

    sudo gpt -vv -r show /dev/disk0

    sudo fdisk /dev/disk0

  • by k3ntrol,

    k3ntrol k3ntrol Feb 9, 2015 8:33 PM in response to Loner T
    Level 1 (0 points)
    Feb 9, 2015 8:33 PM in response to Loner T

    Woken-Wes-MacBook-Pro:~ kxn$ diskutil list

    /dev/disk0

       #:                       TYPE NAME                    SIZE       IDENTIFIER

       0:      GUID_partition_scheme                        *250.1 GB   disk0

       1:                        EFI EFI                     209.7 MB   disk0s1

       2:                  Apple_HFS Macintosh HD            123.9 GB   disk0s2

       3:                 Apple_Boot Recovery HD             650.0 MB   disk0s3

       4:       Microsoft Basic Data                         125.3 GB   disk0s4

    /dev/disk3

       #:                       TYPE NAME                    SIZE       IDENTIFIER

       0:     FDisk_partition_scheme                        *2.1 GB     disk3

       1:                 DOS_FAT_16                         2.1 GB     disk3s1

    /dev/disk4

       #:                       TYPE NAME                    SIZE       IDENTIFIER

       0:     FDisk_partition_scheme                        *62.5 GB    disk4

       1:             Windows_FAT_32 Sony_64GM               62.5 GB    disk4s1

    Woken-Wes-MacBook-Pro:~ kxn$ diskutil cs list

    No CoreStorage logical volume groups found

    Woken-Wes-MacBook-Pro:~ kxn$ sudo gpt -vv -r show /dev/disk0

     

    WARNING: Improper use of the sudo command could lead to data loss

    or the deletion of important system files. Please double-check your

    typing when using sudo. Type "man sudo" for more information.

     

    To proceed, enter your password, or type Ctrl-C to abort.

     

    Password:

    Sorry, try again.

    Password:

    gpt show: /dev/disk0: mediasize=250059350016; sectorsize=512; blocks=488397168

    gpt show: /dev/disk0: Suspicious MBR at sector 0

    gpt show: /dev/disk0: Pri GPT at sector 1

    gpt show: /dev/disk0: Sec GPT at sector 488397167

          start       size  index  contents

              0          1         MBR

              1          1         Pri GPT header

              2         32         Pri GPT table

             34          6        

             40     409600      1  GPT part - C12A7328-F81F-11D2-BA4B-00A0C93EC93B

         409640  242002104      2  GPT part - 48465300-0000-11AA-AA11-00306543ECAC

      242411744    1269536      3  GPT part - 426F6F74-0000-11AA-AA11-00306543ECAC

      243681280  244715520      4  GPT part - EBD0A0A2-B9E5-4433-87C0-68B6B72699C7

      488396800        335        

      488397135         32         Sec GPT table

      488397167          1         Sec GPT header

    Woken-Wes-MacBook-Pro:~ kxn$ sudo fdisk /dev/disk0

    Disk: /dev/disk0 geometry: 30401/255/63 [488397168 sectors]

    Signature: 0xAA55

             Starting       Ending

    #: id  cyl  hd sec -  cyl  hd sec [     start -       size]

    ------------------------------------------------------------------------

    1: EE 1023 254  63 - 1023 254  63 [         1 -     409639] <Unknown ID>

    2: AF 1023 254  63 - 1023 254  63 [    409640 -  242002104] HFS+       

    3: AB 1023 254  63 - 1023 254  63 [ 242411744 -    1269536] Darwin Boot

    4: 0C 1023 254  63 - 1023 254  63 [ 243681280 -  244715520] Win95 FAT32L

     

    Hope this works, please let me know if you need any other info. Thanks so much Loner T!!!

  • by Loner T,Solvedanswer

    Loner T Loner T Feb 10, 2015 4:00 AM in response to k3ntrol
    Level 7 (24,202 points)
    Safari
    Feb 10, 2015 4:00 AM in response to k3ntrol

    The following command dumps the first block of the NTFS partition (the NTFS header).

     

    sudo dd if=/dev/rdisk0s4 count=1 2>/dev/null | hexdump -C

     

    Can you post the output of this command?

  • by k3ntrol,

    k3ntrol k3ntrol Feb 10, 2015 3:42 PM in response to Loner T
    Level 1 (0 points)
    Feb 10, 2015 3:42 PM in response to Loner T

    sudo dd if=/dev/rdisk0s4 count=1 2>/dev/null | hexdump -C

    Woken-Wes-MacBook-Pro:~ kxn$ sudo dd if=/dev/rdisk0s4 count=1 2>/dev/null | hexdump -C

    Password:

    00000000  97 e9 ff ff 96 e6 ff ff  95 e3 ff ff 95 e1 ff ff  |................|

    00000010  95 dd ff ff 95 db ff ff  94 d7 ff ff 98 d0 f9 ff  |................|

    00000020  ba ab b9 ff c6 95 95 f6  8b 68 68 75 00 00 00 12  |.........hhu....|

    00000030  00 00 00 03 00 00 00 00  00 00 00 00 00 00 00 00  |................|

    00000040  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|

    *

    000000a0  c0 90 90 11 ca 98 98 d1  c2 ac ac ff 9c f6 f9 ff  |................|

    000000b0  98 f9 ff ff 98 f6 ff ff  98 f3 ff ff 97 f0 ff ff  |................|

    000000c0  97 ed ff ff 97 ea ff ff  96 e7 ff ff 96 e4 ff ff  |................|

    000000d0  95 e2 ff ff 95 de ff ff  a6 c6 df ff c9 9d 9f ff  |................|

    000000e0  b2 86 86 c8 44 33 33 30  00 00 00 08 00 00 00 01  |....D330........|

    000000f0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|

    *

    00000160  00 00 00 00 c0 90 90 11  ca 97 97 c1 c2 ac ac ff  |................|

    00000170  a2 ea ec ff 98 fa ff ff  98 f7 ff ff 98 f4 ff ff  |................|

    00000180  97 f1 ff ff 97 ee ff ff  97 eb ff ff 96 e8 ff ff  |................|

    00000190  99 e0 f9 ff bb b0 b9 ff  c6 95 95 f6 8d 6a 6a 74  |.............jjt|

    000001a0  00 00 00 12 00 00 00 03  00 00 00 00 00 00 00 00  |................|

    000001b0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|

    *

    00000200

  • by k3ntrol,

    k3ntrol k3ntrol Feb 17, 2015 1:50 PM in response to Loner T
    Level 1 (0 points)
    Feb 17, 2015 1:50 PM in response to Loner T

    Loner T, any updates? is my windows bootcamp recoverable?

  • by Loner T,

    Loner T Loner T Feb 17, 2015 2:33 PM in response to k3ntrol
    Level 7 (24,202 points)
    Safari
    Feb 17, 2015 2:33 PM in response to k3ntrol

    Sorry. This fell off my list.

     

    Will you be able to use Testdisk (http://www.cgsecurity.org/wiki/TestDisk) and GPT Fdisk (http://sourceforge.net/projects/gptfdisk/) and start with a Testdisk scan.

     

    Please see http://imgur.com/a/PjmnK for the starting Testdisk. If you download Testdisk in your download directory, you can start it with

     

    sudo ~/Downloads/testdisk-6.14/testdisk /dev/rdisk0

     

    Your version number may not be 6.14, but may be higher.

  • by k3ntrol,

    k3ntrol k3ntrol Feb 23, 2015 11:10 PM in response to Loner T
    Level 1 (0 points)
    Feb 23, 2015 11:10 PM in response to Loner T

    Loner T,

     

    I installed and ran Test disk.

     

    Here are some screen shots. what should I do next? Thanks!Screen Shot 2015-02-23 at 8.13.28 PM.pngScreen Shot 2015-02-23 at 10.44.57 PM.pngScreen Shot 2015-02-23 at 10.44.41 PM.pngScreen Shot 2015-02-23 at 11.06.13 PM.png

  • by Leopardus,

    Leopardus Leopardus Feb 24, 2015 2:41 AM in response to k3ntrol
    Level 4 (1,122 points)
    Desktops
    Feb 24, 2015 2:41 AM in response to k3ntrol

    Have you solved your problem?

     

    Leo

  • by Loner T,

    Loner T Loner T Feb 24, 2015 5:14 AM in response to k3ntrol
    Level 7 (24,202 points)
    Safari
    Feb 24, 2015 5:14 AM in response to k3ntrol

    For each of the MS Data partitions, use 'P - List files' . Please be careful with keys. Start with the MS Data that is highlighted, it is the most likely candidate given  that your GPT4 is at

     

    243681280  244715520      4  GPT part - EBD0A0A2-B9E5-4433-87C0-68B6B72699C7

     

    This is about 57K sectors within your Recovery HD, so you may lose Recovery HD temporarily.

  • by Lee Kolakowski,

    Lee Kolakowski Lee Kolakowski Feb 27, 2015 6:43 AM in response to k3ntrol
    Level 1 (0 points)
    Feb 27, 2015 6:43 AM in response to k3ntrol

    Hi All -

     

    I have the same kind of problem as described.

     

    There are a few things that are different though.

    I have two partitions one GUID and one NTFS using Tuxera NTFS version 2014 driver.

    I had Windows 7 64 bit professional installed on a separate partition.

     

    I ran W7 in two ways.

         1- boot camp with the option boot key and selecting the windows 7 drive

    OR

         2 - Via parallels

     

    After the yosemite upgrade, the boot camp option disappeared, the parallels option is fine.

    I suspect the MBR is screwed up in the bootcamp side.

     

    Following the suggestions above, I have done some of the diagnostics -

     

    $ diskutil list

    /dev/disk0

       #:                       TYPE NAME                    SIZE       IDENTIFIER

       0:      GUID_partition_scheme                        *1.0 TB     disk0

       1:                        EFI EFI                     209.7 MB   disk0s1

       2:                  Apple_HFS MacintoshHD             799.5 GB   disk0s2

       3:                 Apple_Boot Recovery HD             650.0 MB   disk0s3

       4:       Microsoft Basic Data BootCamp                199.9 GB   disk0s4

    /dev/disk2

       #:                       TYPE NAME                    SIZE       IDENTIFIER

       0:      GUID_partition_scheme                        *3.0 TB     disk2

       1:                        EFI EFI                     209.7 MB   disk2s1

       2:                  Apple_HFS Time Machine Backups    3.0 TB     disk2s2


    $ diskutil cs list

    No CoreStorage logical volume groups found


    $ sudo gpt -vv -r show /dev/disk0

    gpt show: /dev/disk0: mediasize=1000204886016; sectorsize=512; blocks=1953525168

    gpt show: /dev/disk0: Suspicious MBR at sector 0

    gpt show: /dev/disk0: Pri GPT at sector 1

    gpt show: /dev/disk0: Sec GPT at sector 1953525167

           start        size  index  contents

               0           1         MBR

               1           1         Pri GPT header

               2          32         Pri GPT table

              34           6        

              40      409600      1  GPT part - C12A7328-F81F-11D2-BA4B-00A0C93EC93B

          409640  1561493680      2  GPT part - 48465300-0000-11AA-AA11-00306543ECAC

      1561903320     1269544      3  GPT part - 426F6F74-0000-11AA-AA11-00306543ECAC

      1563172864   390350848      4  GPT part - EBD0A0A2-B9E5-4433-87C0-68B6B72699C7

      1953523712        1423        

      1953525135          32         Sec GPT table

      1953525167           1         Sec GPT header


    $ sudo gpt -vv -r show /dev/disk2

    gpt show: /dev/disk2: mediasize=2998445457408; sectorsize=512; blocks=5856338784

    gpt show: /dev/disk2: PMBR at sector 0

    gpt show: /dev/disk2: Pri GPT at sector 1

    gpt show: /dev/disk2: Sec GPT at sector 5856338783

           start        size  index  contents

               0           1         PMBR

               1           1         Pri GPT header

               2          32         Pri GPT table

              34           6        

              40      409600      1  GPT part - C12A7328-F81F-11D2-BA4B-00A0C93EC93B

          409640  5855666960      2  GPT part - 48465300-0000-11AA-AA11-00306543ECAC

      5856076600      262151        

      5856338751          32         Sec GPT table

      5856338783           1         Sec GPT header


    $ sudo fdisk /dev/disk0

    Disk: /dev/disk0 geometry: 121601/255/63 [1953525168 sectors]

    Signature: 0xAA55

             Starting       Ending

    #: id  cyl  hd sec -  cyl  hd sec [     start -       size]

    ------------------------------------------------------------------------

    1: EE 1023 254  63 - 1023 254  63 [         1 -     409639] <Unknown ID>

    2: AF 1023 254  63 - 1023 254  63 [    409640 - 1561493680] HFS+       

    3: AB 1023 254  63 - 1023 254  63 [1561903320 -    1269544] Darwin Boot

    4: 0C 1023 254  63 - 1023 254  63 [1563172864 -  390350848] Win95 FAT32L


    $ sudo fdisk /dev/disk2

    Disk: /dev/disk2 geometry: 97190/255/63 [1561371488 sectors]

    Signature: 0xAA55

             Starting       Ending

    #: id  cyl  hd sec -  cyl  hd sec [     start -       size]

    ------------------------------------------------------------------------

    1: EE 1023 254  63 - 1023 254  63 [         1 - 4294967294] <Unknown ID>

    2: 00    0   0   0 -    0   0   0 [         0 -          0] unused     

    3: 00    0   0   0 -    0   0   0 [         0 -          0] unused     

    4: 00    0   0   0 -    0   0   0 [         0 -          0] unused     


    $ sudo dd if=/dev/rdisk0s4 count=1 2>/dev/null | hexdump -C

    00000000  eb 52 90 4e 54 46 53 20  20 20 20 00 02 08 00 00  |.R.NTFS    .....|

    00000010  00 00 00 00 00 f8 00 00  3f 00 ff 00 00 20 2c 5d  |........?.... ,]|

    00000020  00 00 00 00 80 00 80 00  f8 47 44 17 00 00 00 00  |.........GD.....|

    00000030  00 00 0c 00 00 00 00 00  7f 21 65 00 00 00 00 00  |.........!e.....|

    00000040  f6 00 00 00 01 00 00 00  c6 ea 6b 66 0a 6c 66 14  |..........kf.lf.|

    00000050  00 00 00 00 fa 33 c0 8e  d0 bc 00 7c fb 68 c0 07  |.....3.....|.h..|

    00000060  1f 1e 68 66 00 cb 88 16  0e 00 66 81 3e 03 00 4e  |..hf......f.>..N|

    00000070  54 46 53 75 15 b4 41 bb  aa 55 cd 13 72 0c 81 fb  |TFSu..A..U..r...|

    00000080  55 aa 75 06 f7 c1 01 00  75 03 e9 dd 00 1e 83 ec  |U.u.....u.......|

    00000090  18 68 1a 00 b4 48 8a 16  0e 00 8b f4 16 1f cd 13  |.h...H..........|

    000000a0  9f 83 c4 18 9e 58 1f 72  e1 3b 06 0b 00 75 db a3  |.....X.r.;...u..|

    000000b0  0f 00 c1 2e 0f 00 04 1e  5a 33 db b9 00 20 2b c8  |........Z3... +.|

    000000c0  66 ff 06 11 00 03 16 0f  00 8e c2 ff 06 16 00 e8  |f...............|

    000000d0  4b 00 2b c8 77 ef b8 00  bb cd 1a 66 23 c0 75 2d  |K.+.w......f#.u-|

    000000e0  66 81 fb 54 43 50 41 75  24 81 f9 02 01 72 1e 16  |f..TCPAu$....r..|

    000000f0  68 07 bb 16 68 70 0e 16  68 09 00 66 53 66 53 66  |h...hp..h..fSfSf|

    00000100  55 16 16 16 68 b8 01 66  61 0e 07 cd 1a 33 c0 bf  |U...h..fa....3..|

    00000110  28 10 b9 d8 0f fc f3 aa  e9 5f 01 90 90 66 60 1e  |(........_...f`.|

    00000120  06 66 a1 11 00 66 03 06  1c 00 1e 66 68 00 00 00  |.f...f.....fh...|

    00000130  00 66 50 06 53 68 01 00  68 10 00 b4 42 8a 16 0e  |.fP.Sh..h...B...|

    00000140  00 16 1f 8b f4 cd 13 66  59 5b 5a 66 59 66 59 1f  |.......fY[ZfYfY.|

    00000150  0f 82 16 00 66 ff 06 11  00 03 16 0f 00 8e c2 ff  |....f...........|

    00000160  0e 16 00 75 bc 07 1f 66  61 c3 a0 f8 01 e8 09 00  |...u...fa.......|

    00000170  a0 fb 01 e8 03 00 f4 eb  fd b4 01 8b f0 ac 3c 00  |..............<.|

    00000180  74 09 b4 0e bb 07 00 cd  10 eb f2 c3 0d 0a 41 20  |t.............A |

    00000190  64 69 73 6b 20 72 65 61  64 20 65 72 72 6f 72 20  |disk read error |

    000001a0  6f 63 63 75 72 72 65 64  00 0d 0a 42 4f 4f 54 4d  |occurred...BOOTM|

    000001b0  47 52 20 69 73 20 6d 69  73 73 69 6e 67 00 0d 0a  |GR is missing...|

    000001c0  42 4f 4f 54 4d 47 52 20  69 73 20 63 6f 6d 70 72  |BOOTMGR is compr|

    000001d0  65 73 73 65 64 00 0d 0a  50 72 65 73 73 20 43 74  |essed...Press Ct|

    000001e0  72 6c 2b 41 6c 74 2b 44  65 6c 20 74 6f 20 72 65  |rl+Alt+Del to re|

    000001f0  73 74 61 72 74 0d 0a 00  8c a9 be d6 00 00 55 aa  |start.........U.|

    00000200

     

     

    If anybody has a suggestion for restoring the ability to boot from the option key at startup I'd really appreciate your help.

     

    The other option is to

    1 - backup the windows 7 disk.

    2 - Remove the partition

    3 - Add back the partition

    4 - Install Win7 again via boot camp

    5 - Restore partition that was backed up in Step 1

     

    All of the is really too much work for the few times when I need more CPI power than I can get from a parallels VM

     

    Thanks

    Frank

  • by Loner T,

    Loner T Loner T Feb 27, 2015 6:57 AM in response to Lee Kolakowski
    Level 7 (24,202 points)
    Safari
    Feb 27, 2015 6:57 AM in response to Lee Kolakowski

    Since the NTFS header is intact, you may be able to run a simpler fix, you can try the following steps. Please ignore the i386 boot error message in the following steps. The following steps change the Windows entry (MBR #4) to be bootable and the MBR Index ID to be NTFS (it is currently FAT).

     

    sudo fdisk -e /dev/disk0

    p

    setpid 4

    07

    flag 4

    p

    w

    y

     

    Reboot and test.

     

    Test 1 - Can you see Bootcamp Volume in Finder?

    Test 2 - Can you files in Bootcamp files in Finder?

    Test 3 - Can you select Bootcamp in System Preferences -> Startup Disk?

    Test 4 - If Test 3 is successful, select Bootcamp, and click on Restart.

     

    If you see a black screen with a blinking underline cursor in top left corner and Windows fails to boot, please post back.

  • by Lee Kolakowski,

    Lee Kolakowski Lee Kolakowski Feb 27, 2015 7:26 AM in response to Loner T
    Level 1 (0 points)
    Feb 27, 2015 7:26 AM in response to Loner T

    Thanks so much Loner T

    >Reboot and test.

    >Test 1 - Can you see Bootcamp Volume in Finder?

    Yes

    >Test 2 - Can you files in Bootcamp files in Finder?

    Yes

    >Test 3 - Can you select Bootcamp in System Preferences -> Startup Disk?

    No - I have never been able to do this. Lone ago when bootcamp was first released it was known that since this is a ntfs partition it would not shown up in the startup disk selector

    >Test 4 - If Test 3 is successful, select Bootcamp, and click on Restart.

    Great. Now I need to test that the parallels invokation still works! Great - All fixed with one command.

     

    The only other weird thing is that the recovery partition is from Mavericks. Not sure why the upgrade to 10.10 did not update that.

     

    Thanks to the Apple Support Communities and Loner T

  • by Loner T,

    Loner T Loner T Feb 27, 2015 7:42 AM in response to Lee Kolakowski
    Level 7 (24,202 points)
    Safari
    Feb 27, 2015 7:42 AM in response to Lee Kolakowski

    Lee Kolakowski wrote:

     

    No - I have never been able to do this. Lone ago when bootcamp was first released it was known that since this is a ntfs partition it would not shown up in the startup disk selector

    Apple provides a read-only NTFS driver for OSX and Windows/Bootcamp. If there are any third-party NTFS drivers installed on the OSX side (Tuxera, Paragon, NTFS-3g, NTFS-3, NTFS-Free,....) then System Preferences will refuse to show the Bootcamp drive. This is what i have on my MBP (I am running 10.9.5 now).

     

    Bootcamp-Original-Volume.png