Q: El Capitan has deleted my bootcamp windows partition

Install GPT Fdisk (aka gdisk).  Leave your Testdisk display and start a new Terminal Window. You need to use the following steps. If you see any error messages during the following steps, please stop and post back here with the error message. The following steps have values from your Testdisk output (and you can verify) in Steps 7 and 8. Please notice the'+' sign in step 8 (this is called offset notation). The text in parentheses is for informational purpose to describe the action being taken. Gdisk has one-character commands except when entering numbers.

Rebuild GPT4 using start/end offsets

1. Sudo gdisk /dev/rdisk0
2. P  (print the full list of parts)
3. D  (delete)
4. 4  (part 4)
5. N  (new part)
6. 4  (part 4)
7. 509906944 ( - Start offset in sectors or the start point for Bootcamp part)
8. +115234809 ( - Size offset, as opposed to End offset)
9. 0700 (Windows part type)
10. P  (print list of all parts just to see what changes will be made)
11. W (Write the new GPT)
12. Y  (Yes! really write the new GPT)

This will delete and re-write the GPT partition info for /dev/disk0s4.

Rebuild MBR to match the new GPT information thus resetting the Hybrid MBR. Use defaults for other questions (like partition codes). The only values that need modifications are the Boot flags and step 10. Accept all other defaults that Gdisk offers. Please see the sample Q&A as an example. These steps can be repeated if you make a mistake before you get to Step 12, otherwise start from Step 1 for these steps. Step 6 has numbers which are typed with a space between the numbers. Please see the sample Q&A before you execute these steps.

1. Sudo gdisk /dev/rdisk0
2. P  (Print list of parts)
3. R  (Recover)
4. O (print current Hybrid MBR)
5. H (chooses Hybrid)
6. Partitions numbers to be hybridized: 2 3 4
7. Y  (Good for GRUB question)
8. N  (part 2 boot flag)
9. N  (part 3 boot flag)
10. Y  (part 4 boot flag make NTFS bootable partition)
11. O  (print current Hybrid MBR)
12. W (Write the new MBR)
13. Y (Yes! write the new MBR)
14. Reboot

Here is sample Q&A for this section. Please notice the Press Enter/Return.

Place EFI GPT (0xEE) partition first in MBR (good for GRUB)? (Y/N): Y

 

Creating entry for GPT partition #2 (MBR partition #2)

Enter an MBR hex code (default AF): Press Enter/Return

Set the bootable flag? (Y/N): N

 

Creating entry for GPT partition #3 (MBR partition #3)

Enter an MBR hex code (default AB): Press Enter/Return

Set the bootable flag? (Y/N): N

 

Creating entry for GPT partition #4 (MBR partition #4)

Enter an MBR hex code (default 07): Press Enter/Return

Set the bootable flag? (Y/N): Y

Test 1 - Does Bootcamp Volume show up in Finder?

Test 2 - Can you see files in Bootcamp Volume?

Test 3 - Can you select Bootcamp in System Preferences -> Startup Disk?

Test 4 - If Test 3 is successful, select Bootcamp and Click Restart.

The numbers in step 7 and 8 came from your Testdisk output. 0700 indicates NTFS (or Microsoft Basic Data to be more precise).

No questions are stupid. Every problem provides new and subtle learning. First and foremost, backup OS X and Windows. Second, create a Windows System Restore point. Create a backup schedule.

Does your mouse come with a driver? You can check the manufacturer website.

Yes, you will have to re-enable SIP using csrutil.

Hi Loner T

I followed all the steps but Bootcamp still missing.

this is exactly what I did please let me know which part wasn't correct.

Thank you for your time

Last login: Mon Oct 19 16:56:53 on console

Lauras-iMac:~ I-mac-lbds$ Sudo gdisk /dev/rdisk0

Password:

GPT fdisk (gdisk) version 1.0.1

Warning: Devices opened with shared lock will not have their

partition table automatically reloaded!

Partition table scan:

  MBR: hybrid

  BSD: not present

  APM: not present

  GPT: present

Found valid GPT with hybrid MBR; using GPT.

Command (? for help): P

Disk /dev/rdisk0: 976773168 sectors, 465.8 GiB

Logical sector size: 512 bytes

Disk identifier (GUID): 68FB0390-3648-4705-BF3D-715A7E00AE28

Partition table holds up to 128 entries

First usable sector is 34, last usable sector is 976773134

Partitions will be aligned on 8-sector boundaries

Total free space is 461 sectors (230.5 KiB)

Number  Start (sector)    End (sector)  Size       Code  Name

   1              40          409639   200.0 MiB   EF00  EFI System Partition

   2          409640       648847143   309.2 GiB   AF00  Macintosh HD

   3       648847144       650116679   619.9 MiB   AB00  Recovery HD

   4       650117120       976773119   155.8 GiB   0700  BOOTCAMP

Command (? for help): D

Partition number (1-4): 4

Command (? for help): N

Partition number (4-128, default 4): 4

First sector (34-976773134, default = 650116680) or {+-}size{KMGTP}: 650117200

Last sector (650117200-976773134, default = 976773134) or {+-}size{KMGTP}: +326656000

Last sector (650117200-976773134, default = 976773134) or {+-}size{KMGTP}: +326656300

Last sector (650117200-976773134, default = 976773134) or {+-}size{KMGTP}: +326655900

Current type is 'Apple HFS/HFS+'

Hex code or GUID (L to show codes, Enter = AF00): 0700

Changed type of partition to 'Microsoft basic data'

Command (? for help): P

Disk /dev/rdisk0: 976773168 sectors, 465.8 GiB

Logical sector size: 512 bytes

Disk identifier (GUID): 68FB0390-3648-4705-BF3D-715A7E00AE28

Partition table holds up to 128 entries

First usable sector is 34, last usable sector is 976773134

Partitions will be aligned on 8-sector boundaries

Total free space is 561 sectors (280.5 KiB)

Number  Start (sector)    End (sector)  Size       Code  Name

   1              40          409639   200.0 MiB   EF00  EFI System Partition

   2          409640       648847143   309.2 GiB   AF00  Macintosh HD

   3       648847144       650116679   619.9 MiB   AB00  Recovery HD

   4       650117200       976773099   155.8 GiB   0700  Microsoft basic data

Command (? for help): W

Final checks complete. About to write GPT data. THIS WILL OVERWRITE EXISTING

PARTITIONS!!

Do you want to proceed? (Y/N): Y

OK; writing new GUID partition table (GPT) to /dev/rdisk0.

Warning: Devices opened with shared lock will not have their

partition table automatically reloaded!

Warning: The kernel may continue to use old or deleted partitions.

You should reboot or remove the drive.

The operation has completed successfully.

Lauras-iMac:~ I-mac-lbds$ Sudo gdisk /dev/rdisk0

Password:

Sorry, try again.

Password:

GPT fdisk (gdisk) version 1.0.1

Warning: Devices opened with shared lock will not have their

partition table automatically reloaded!

Partition table scan:

  MBR: hybrid

  BSD: not present

  APM: not present

  GPT: present

Found valid GPT with hybrid MBR; using GPT.

Command (? for help): P

Disk /dev/rdisk0: 976773168 sectors, 465.8 GiB

Logical sector size: 512 bytes

Disk identifier (GUID): 68FB0390-3648-4705-BF3D-715A7E00AE28

Partition table holds up to 128 entries

First usable sector is 34, last usable sector is 976773134

Partitions will be aligned on 8-sector boundaries

Total free space is 561 sectors (280.5 KiB)

Number  Start (sector)    End (sector)  Size       Code  Name

   1              40          409639   200.0 MiB   EF00  EFI System Partition

   2          409640       648847143   309.2 GiB   AF00  Macintosh HD

   3       648847144       650116679   619.9 MiB   AB00  Recovery HD

   4       650117200       976773099   155.8 GiB   0700  Microsoft basic data

Command (? for help): R

Recovery/transformation command (? for help): O

Disk size is 976773168 sectors (465.8 GiB)

MBR disk identifier: 0xC1CB4021

MBR partitions:

Number  Boot  Start Sector   End Sector   Status      Code

   1                     1       409639   primary     0xEE

   2                409640    648847143   primary     0xAF

   3             648847144    650116679   primary     0xAB

Recovery/transformation command (? for help): H

WARNING! Hybrid MBRs are flaky and dangerous! If you decide not to use one,

just hit the Enter key at the below prompt and your MBR partition table will

be untouched.

Type from one to three GPT partition numbers, separated by spaces, to be

added to the hybrid MBR, in sequence: 2 3 4

Place EFI GPT (0xEE) partition first in MBR (good for GRUB)? (Y/N): Y

Creating entry for GPT partition #2 (MBR partition #2)

Enter an MBR hex code (default AF):

Set the bootable flag? (Y/N): N

Creating entry for GPT partition #3 (MBR partition #3)

Enter an MBR hex code (default AB):

Set the bootable flag? (Y/N): N

Creating entry for GPT partition #4 (MBR partition #4)

Enter an MBR hex code (default 07):

Set the bootable flag? (Y/N): Y

Recovery/transformation command (? for help): O

Disk size is 976773168 sectors (465.8 GiB)

MBR disk identifier: 0xC1CB4021

MBR partitions:

Number  Boot  Start Sector   End Sector   Status      Code

   1                     1       409639   primary     0xEE

   2                409640    648847143   primary     0xAF

   3             648847144    650116679   primary     0xAB

   4      *      650117200    976773099   primary     0x07

Recovery/transformation command (? for help): W

Final checks complete. About to write GPT data. THIS WILL OVERWRITE EXISTING

PARTITIONS!!

Do you want to proceed? (Y/N): Y

OK; writing new GUID partition table (GPT) to /dev/rdisk0.

Warning: Devices opened with shared lock will not have their

partition table automatically reloaded!

Warning: The kernel may continue to use old or deleted partitions.

You should reboot or remove the drive.

The operation has completed successfully.

Lauras-iMac:~ I-mac-lbds$

Can you start a new thread and post some of your Testdisk screens? Without seeing the context, it is hard to see what could be wrong. The obvious issue are the three different sizes tested?

Last sector (650117200-976773134, default = 976773134) or {+-}size{KMGTP}: +326656000

Last sector (650117200-976773134, default = 976773134) or {+-}size{KMGTP}: +326656300

Last sector (650117200-976773134, default = 976773134) or {+-}size{KMGTP}: +326655900

Thank you for your quick response, here is the result of some command I ran before those steps.

I am not sure about step 7 and 8!

Lauras-iMac:~ I-mac-lbds$ sudo gpt -r -vv show disk0

Password:

gpt show: disk0: mediasize=500107862016; sectorsize=512; blocks=976773168

gpt show: disk0: Suspicious MBR at sector 0

gpt show: disk0: Pri GPT at sector 1

gpt show: disk0: Sec GPT at sector 976773167

      start       size  index  contents

          0          1         MBR

          1          1         Pri GPT header

          2         32         Pri GPT table

         34          6        

         40     409600      1  GPT part - C12A7328-F81F-11D2-BA4B-00A0C93EC93B

     409640  648437504      2  GPT part - 48465300-0000-11AA-AA11-00306543ECAC

  648847144    1269536      3  GPT part - 426F6F74-0000-11AA-AA11-00306543ECAC

  650116680        440        

  650117120  326656000      4  GPT part - EBD0A0A2-B9E5-4433-87C0-68B6B72699C7

  976773120         15        

  976773135         32         Sec GPT table

  976773167          1         Sec GPT header

Lauras-iMac:~ I-mac-lbds$ sudo fdisk /dev/disk0

Disk: /dev/disk0 geometry: 60801/255/63 [976773168 sectors]

Signature: 0xAA55

         Starting       Ending

#: id  cyl  hd sec -  cyl  hd sec [     start -       size]

------------------------------------------------------------------------

1: EE 1023 254  63 - 1023 254  63 [         1 -     409639] <Unknown ID>

2: AF 1023 254  63 - 1023 254  63 [    409640 -  648437504] HFS+       

3: AB 1023 254  63 - 1023 254  63 [ 648847144 -    1269536] Darwin Boot

4: 0C 1023 254  63 - 1023 254  63 [ 650117120 -  326656000] Win95 FAT32L

Lauras-iMac:~ I-mac-lbds$ diskutil list

/dev/disk0 (internal, physical):

   #:                       TYPE NAME                    SIZE       IDENTIFIER

   0:      GUID_partition_scheme                        *500.1 GB   disk0

   1:                        EFI EFI                     209.7 MB   disk0s1

   2:                  Apple_HFS Macintosh HD            332.0 GB   disk0s2

   3:                 Apple_Boot Recovery HD             650.0 MB   disk0s3

   4:       Microsoft Basic Data                         167.2 GB   disk0s4

Lauras-iMac:~ I-mac-lbds$

Please post the output of

sudo dd if=/dev/rdisk0s4 count=1 2>/dev/null | hexdump -C

Here is the output:

Lauras-iMac:~ I-mac-lbds$ sudo dd if=/dev/rdisk0s4 count=1 2>/dev/null | hexdump -C

Password:

00000000  00 00 00 00 00 00 00 00  00 43 00 6c 00 65 00 61  |.........C.l.e.a|

00000010  00 6e 00 4e 00 49 00 43  00 61 00 63 00 68 00 65  |.n.N.I.C.a.c.h.e|

00000020  00 00 00 00 00 00 00 00  00 4e 00 67 00 65 00 6e  |.........N.g.e.n|

00000030  00 55 00 70 00 64 00 61  00 74 00 65 00 48 00 69  |.U.p.d.a.t.e.H.i|

00000040  00 67 00 68 00 65 00 73  00 74 00 56 00 65 00 72  |.g.h.e.s.t.V.e.r|

00000050  00 73 00 69 00 6f 00 6e  00 00 00 00 00 00 00 00  |.s.i.o.n........|

00000060  00 43 00 68 00 65 00 63  00 6b 00 53 00 65 00 72  |.C.h.e.c.k.S.e.r|

00000070  00 76 00 69 00 63 00 65  00 00 00 00 00 00 00 00  |.v.i.c.e........|

00000080  00 00 00 00 00 00 00 00  00 43 00 61 00 6e 00 6e  |.........C.a.n.n|

00000090  00 6f 00 74 00 20 00 6f  00 70 00 65 00 6e 00 20  |.o.t. .o.p.e.n. |

000000a0  00 53 00 65 00 72 00 76  00 69 00 63 00 65 00 20  |.S.e.r.v.i.c.e. |

000000b0  00 43 00 6f 00 6e 00 74  00 72 00 6f 00 6c 00 20  |.C.o.n.t.r.o.l. |

000000c0  00 4d 00 61 00 6e 00 61  00 67 00 65 00 72 00 2e  |.M.a.n.a.g.e.r..|

000000d0  00 20 00 4f 00 70 00 65  00 6e 00 53 00 43 00 4d  |. .O.p.e.n.S.C.M|

000000e0  00 61 00 6e 00 61 00 67  00 65 00 72 00 20 00 72  |.a.n.a.g.e.r. .r|

000000f0  00 65 00 74 00 75 00 72  00 6e 00 65 00 64 00 20  |.e.t.u.r.n.e.d. |

00000100  00 4e 00 55 00 4c 00 4c  00 2e 00 00 00 00 00 00  |.N.U.L.L........|

00000110  00 00 00 00 00 00 00 00  00 53 00 65 00 72 00 76  |.........S.e.r.v|

00000120  00 69 00 63 00 65 00 20  00 43 00 6f 00 6e 00 74  |.i.c.e. .C.o.n.t|

00000130  00 72 00 6f 00 6c 00 20  00 4d 00 61 00 6e 00 61  |.r.o.l. .M.a.n.a|

00000140  00 67 00 65 00 72 00 20  00 6f 00 70 00 65 00 6e  |.g.e.r. .o.p.e.n|

00000150  00 65 00 64 00 20 00 6f  00 6b 00 00 00 00 00 00  |.e.d. .o.k......|

00000160  00 69 00 69 00 73 00 61  00 64 00 6d 00 69 00 6e  |.i.i.s.a.d.m.i.n|

00000170  00 00 00 00 00 00 00 00  00 43 00 61 00 6e 00 6e  |.........C.a.n.n|

00000180  00 6f 00 74 00 20 00 6f  00 70 00 65 00 6e 00 20  |.o.t. .o.p.e.n. |

00000190  00 73 00 65 00 72 00 76  00 69 00 63 00 65 00 20  |.s.e.r.v.i.c.e. |

000001a0  00 27 00 69 00 69 00 73  00 61 00 64 00 6d 00 69  |.'.i.i.s.a.d.m.i|

000001b0  00 6e 00 27 00 20 00 77  00 69 00 74 00 68 00 20  |.n.'. .w.i.t.h. |

000001c0  00 27 00 53 00 45 00 52  00 56 00 49 00 43 00 45  |.'.S.E.R.V.I.C.E|

000001d0  00 5f 00 41 00 4c 00 4c  00 5f 00 41 00 43 00 43  |._.A.L.L._.A.C.C|

000001e0  00 45 00 53 00 53 00 27  00 2e 00 20 00 4f 00 70  |.E.S.S.'... .O.p|

000001f0  00 65 00 6e 00 53 00 65  00 72 00 76 00 69 00 63  |.e.n.S.e.r.v.i.c|

00000200

Lauras-iMac:~ I-mac-lbds$

This is not a valid NTFS header. Can you run Testdisk Quick Search?

Lauras-iMac:~ I-mac-lbds$ sudo gpt -r -vv show disk0

gpt show: disk0: mediasize=500107862016; sectorsize=512; blocks=976773168

gpt show: disk0: Suspicious MBR at sector 0

gpt show: disk0: Pri GPT at sector 1

gpt show: disk0: Sec GPT at sector 976773167

      start       size  index  contents

          0          1         MBR

          1          1         Pri GPT header

          2         32         Pri GPT table

         34          6        

         40     409600      1  GPT part - C12A7328-F81F-11D2-BA4B-00A0C93EC93B

     409640  648437504      2  GPT part - 48465300-0000-11AA-AA11-00306543ECAC

  648847144    1269536      3  GPT part - 426F6F74-0000-11AA-AA11-00306543ECAC

  650116680        440        

  650117120  326656000      4  GPT part - EBD0A0A2-B9E5-4433-87C0-68B6B72699C7

  976773120         15        

  976773135         32         Sec GPT table

  976773167          1         Sec GPT header

Lauras-iMac:~ I-mac-lbds$ sudo fdisk /dev/disk0

Disk: /dev/disk0 geometry: 60801/255/63 [976773168 sectors]

Signature: 0xAA55

         Starting       Ending

#: id  cyl  hd sec -  cyl  hd sec [     start -       size]

------------------------------------------------------------------------

1: EE    0   0   2 -   25 127  14 [         1 -     409639] <Unknown ID>

2: AF   25 127  15 - 1023 254  63 [    409640 -  648437504] HFS+       

3: AB 1023 254  63 - 1023 254  63 [ 648847144 -    1269536] Darwin Boot

*4: 07 1023 254  63 - 1023 254  63 [ 650117120 -  326656000] HPFS/QNX/AUX

Lauras-iMac:~ I-mac-lbds$ diskutil list

/dev/disk0 (internal, physical):

   #:                       TYPE NAME                    SIZE       IDENTIFIER

   0:      GUID_partition_scheme                        *500.1 GB   disk0

   1:                        EFI EFI                     209.7 MB   disk0s1

   2:                  Apple_HFS Macintosh HD            332.0 GB   disk0s2

   3:                 Apple_Boot Recovery HD             650.0 MB   disk0s3

   4:       Microsoft Basic Data                         167.2 GB   disk0s4

Lauras-iMac:~ I-mac-lbds$

Sorry I'm not sure how to run Testdisk Quick Search!

Was it what you asked for?