chinacat2002

Q: Camptune toasted my Bootcamp.  Recovery help requested.

I have a 2 TB hard disk on my late 2011 27" Mac.  Running El Capitan.

 

I had 750 GB for OSX and the rest for Windows 7.

 

I got a new windows machine and decided to shrink the windows to 750 and expand the OSX to 1.25 TB.

 

I tried to save some effort by using Camptune, but that turned out to be a bad idea.

 

Now, Bootcamp is gone, my machine can only see 1.5 TB of the existing 2 TB.

 

I would like to

 

1)  Have access to the full 2 TB.

 

2) See the existing Boot Camp.

 

I can trash the existing Boot Camp if necessary and start again, but I still want to get the full 2 TB.

 

Loner T helped me with a similar problem last year.

 

Ed

iMac (27-inch Mid 2011), OS X El Capitan (10.11.1)

Posted on Oct 4, 2016 5:30 PM

Close

Q: Camptune toasted my Bootcamp.  Recovery help requested.

  • All replies
  • Helpful answers

Page 1 Next
  • by Loner T,Helpful

    Loner T Loner T Oct 4, 2016 9:11 PM in response to chinacat2002
    Level 7 (24,738 points)
    Safari
    Oct 4, 2016 9:11 PM in response to chinacat2002

    Please post the output of the following OS X Terminal commands (hopefully it will quicker than the last time).

     

    diskutil list

    diskutil cs list

    sudo gpt -vv -r show /dev/disk0

    sudo fdisk /dev/disk0

  • by chinacat2002,Helpful

    chinacat2002 chinacat2002 Oct 4, 2016 9:11 PM in response to Loner T
    Level 1 (4 points)
    Windows Software
    Oct 4, 2016 9:11 PM in response to Loner T

    Here is the requested info.  I also show what Paragon HDM can see.  (It sees the whole 2 TB, whereas diskutil currently only sees 1.5 GB in partitions.

     

    Thanks for all your help last time.  I don't think I got back to you with the final resolution, which of course was success.

    If my memory serves me right, that was an egregious oversight on my part.  I was extremely grateful then, as I am now.

     

    Is it possible for me to send you an email.  If not, I understand.  If so, you can connect to me using EHAYESJ

    which is my yahoo! account.  so,  xxxxxxxATyahxx.com

     

     

     

    This time around, the Windows data is not that critical as it has been largely ported off this machine.  If I can save it for one last look and backup, I will do so, but if not, I plan to reformat it in either case as Camptune has already proved not to be a time saver!

     

    Lastly, is there a better way to post my data to your replies that using the screen shot?

     

    Screen Shot 2016-10-04 at 9.16.43 PM.png

    Screen Shot 2016-10-04 at 9.16.43 PM.png

  • by Loner T,

    Loner T Loner T Oct 4, 2016 6:44 PM in response to chinacat2002
    Level 7 (24,738 points)
    Safari
    Oct 4, 2016 6:44 PM in response to chinacat2002

    Your GPT also shows the full 2TB as does diskutil list. If you notice there is about 400+GB after GPT4 which is Free Space. Due to it's partition table, it can only be absorbed into Windows. If you want to do that, you can use a GParted Live CD and this link.

     

     

    Is it possible for me to send you an email.  If not, I understand.  If so, you can connect to me using EHAYESJ

    which is my yahoo! account.  so,  xxxxxxxATyahxx.com

    Did you change your password in yahoo? (Remember Yahoo was compromised - https://www.cnet.com/news/yahoo-500-million-accounts-hacked-data-breach/ ). Just kidding!

     

     

     

    This time around, the Windows data is not that critical as it has been largely ported off this machine.  If I can save it for one last look and backup, I will do so, but if not, I plan to reformat it in either case as Camptune has already proved not to be a time saver

    Can you see the Windows side files using OS X Finder? They should be visible.

     

     

    Lastly, is there a better way to post my data to your replies that using the screen shot?

    Text versions work better, if I have to copy/paste.

  • by chinacat2002,

    chinacat2002 chinacat2002 Oct 4, 2016 7:13 PM in response to Loner T
    Level 1 (4 points)
    Windows Software
    Oct 4, 2016 7:13 PM in response to Loner T

    1) I don't think I can see my Windows side in Finder.  I tried and did some research.  Under "My iMac", I can only see Mac HD with size 709 GB.

     

    2) Is it possible for me to trash the reclaim the whole 1.25 TB on the non-Mac system by doing some kind of wipe?  I can live without the data there.

     

    If necessary, I can step through the GParted Live CD part, but it looks like more trouble than it is worth.

     

    My goal is to expand my Mac side to 1.3 TB or so and keep a small Windows side for busy work as needed.

     

    Thanks again LonerT.

  • by Loner T,Solvedanswer

    Loner T Loner T Oct 4, 2016 8:24 PM in response to chinacat2002
    Level 7 (24,738 points)
    Safari
    Oct 4, 2016 8:24 PM in response to chinacat2002

    chinacat2002 wrote:

     

    1) I don't think I can see my Windows side in Finder.  I tried and did some research.  Under "My iMac", I can only see Mac HD with size 709 GB.

    Can you post the output of

         sudo dd if=/dev/rdisk0s4 count=1 2>/dev/null | hexdump -C

     

     

    2) Is it possible for me to trash the reclaim the whole 1.25 TB on the non-Mac system by doing some kind of wipe?  I can live without the data there.

    If you remove Windows using BC Assistant, after we resolve the partition header issue, you can get all the disk space back into OS X by using Boot Camp for Mac: Remove Windows from your Mac . You can then re-install a smaller Windows instance.

  • by chinacat2002,

    chinacat2002 chinacat2002 Oct 4, 2016 8:30 PM in response to Loner T
    Level 1 (4 points)
    Windows Software
    Oct 4, 2016 8:30 PM in response to Loner T

    output of sudo ...

     

    00000000  49 4e 44 58 28 00 09 00  34 8d 6c e2 06 00 00 00  |INDX(...4.l.....|

    00000010  00 00 00 00 00 00 00 00  28 00 00 00 48 04 00 00  |........(...H...|

    00000020  e8 0f 00 00 00 00 00 00  29 00 00 00 d1 01 20 00  |........)..... .|

    00000030  d1 01 01 00 01 00 6c 00  00 00 00 00 00 00 00 00  |......l.........|

    00000040  28 fe 01 00 00 00 02 00  70 00 60 00 00 00 00 00  |(.......p.`.....|

    00000050  a2 01 00 00 00 00 01 00  a3 38 18 13 85 92 d1 01  |.........8......|

    00000060  06 23 19 13 85 92 d1 01  4b f6 64 45 90 94 d1 01  |.#......K.dE....|

    00000070  a3 38 18 13 85 92 d1 01  00 10 00 00 00 00 00 00  |.8..............|

    00000080  29 09 00 00 00 00 00 00  20 00 00 00 00 00 00 00  |)....... .......|

    00000090  0f 01 41 00 63 00 63 00  65 00 73 00 73 00 20 00  |..A.c.c.e.s.s. .|

    000000a0  32 00 30 00 31 00 36 00  2e 00 6c 00 6e 00 6b 00  |2.0.1.6...l.n.k.|

    000000b0  a3 01 00 00 00 00 01 00  68 00 58 00 00 00 00 00  |........h.X.....|

    000000c0  a2 01 00 00 00 00 01 00  ac bc 9d fd 31 04 ca 01  |............1...|

    000000d0  d4 06 81 5e 90 4a d1 01  d4 06 81 5e 90 4a d1 01  |...^.J.....^.J..|

    000000e0  55 ac 9e e8 92 46 d1 01  00 00 00 00 00 00 00 00  |U....F..........|

    000000f0  00 00 00 00 00 00 00 00  01 00 00 10 00 00 00 00  |................|

    00000100  0b 01 41 00 63 00 63 00  65 00 73 00 73 00 6f 00  |..A.c.c.e.s.s.o.|

    00000110  72 00 69 00 65 00 73 00  a3 01 00 00 00 00 01 00  |r.i.e.s.........|

    00000120  68 00 52 00 00 00 00 00  a2 01 00 00 00 00 01 00  |h.R.............|

    00000130  ac bc 9d fd 31 04 ca 01  d4 06 81 5e 90 4a d1 01  |....1......^.J..|

    00000140  d4 06 81 5e 90 4a d1 01  55 ac 9e e8 92 46 d1 01  |...^.J..U....F..|

    00000150  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|

    00000160  01 00 00 10 00 00 00 00  08 02 41 00 43 00 43 00  |..........A.C.C.|

    00000170  45 00 53 00 53 00 7e 00  31 00 00 00 00 00 00 00  |E.S.S.~.1.......|

    00000180  28 fe 01 00 00 00 02 00  70 00 5a 00 00 00 00 00  |(.......p.Z.....|

    00000190  a2 01 00 00 00 00 01 00  a3 38 18 13 85 92 d1 01  |.........8......|

    000001a0  06 23 19 13 85 92 d1 01  4b f6 64 45 90 94 d1 01  |.#......K.dE....|

    000001b0  a3 38 18 13 85 92 d1 01  00 10 00 00 00 00 00 00  |.8..............|

    000001c0  29 09 00 00 00 00 00 00  20 00 00 00 00 00 00 00  |)....... .......|

    000001d0  0c 02 41 00 43 00 43 00  45 00 53 00 53 00 7e 00  |..A.C.C.E.S.S.~.|

    000001e0  31 00 2e 00 4c 00 4e 00  4b 00 65 00 72 00 20 00  |1...L.N.K.e.r. .|

    000001f0  f0 55 06 00 00 00 03 00  80 00 6c 00 00 00 29 00  |.U........l...).|

    00000200


    Just as an FYI.  For the moment, if I run BCA to start the "Remove Windows partition", it thinks the OSX will have 1.5GB.  I presume you already know this, but I thought I would throw it in.


  • by Loner T,

    Loner T Loner T Oct 4, 2016 8:39 PM in response to chinacat2002
    Level 7 (24,738 points)
    Safari
    Oct 4, 2016 8:39 PM in response to chinacat2002

    Camptune seems to have failed miserably. This is not a valid NTFS header, hence OS X Finder cannot see Windows files. Testdisk can be used to scan the disk and find the 'lost' NTFS header, which can correct the Windows issue.

     

    If you want to use Testdisk, please see El Capitan has deleted my bootcamp windows partition as an example of using Testdisk. It has the Testdisk UI screen progression.

  • by chinacat2002,

    chinacat2002 chinacat2002 Oct 4, 2016 9:11 PM in response to Loner T
    Level 1 (4 points)
    Windows Software
    Oct 4, 2016 9:11 PM in response to Loner T

    Ok, I think I got the TestDisk data (see below, text and screenshot).  I presume you want me to use

      MS Data               1465624576 3039275007 1573650432


    for steps 7 and 8 of the

    1. Sudo gdisk /dev/rdisk0

     

    sequence.



     

     

     

    TestDisk 7.0, Data Recovery Utility, April 2015

    Christophe GRENIER <grenier@cgsecurity.org>

    http://www.cgsecurity.org

     

    Disk /dev/rdisk0 - 2000 GB / 1863 GiB - 3907029168 sectors (RO)

    Analyse sector  3041951744/3907029167: 77%

     

     

    check_FAT: Unusual media descriptor (0xf0!=0xf8)

    Warning: number of heads/cylinder mismatches 16 (FAT) != 1 (HD)

    Warning: number of sectors per track mismatches 32 (FAT) != 1 (HD)

      EFI System                    40     409639     409600 [EFI]

      Mac HFS                   409640 1464353383 1463943744

      Mac HFS               1464353384 1465622919    1269536

    Warning: number of heads/cylinder mismatches 255 (NTFS) != 1 (HD)

    Warning: number of sectors per track mismatches 63 (NTFS) != 1 (HD)

    Warning: number of heads/cylinder mismatches 255 (NTFS) != 1 (HD)

    Warning: number of sectors per track mismatches 63 (NTFS) != 1 (HD)

      MS Data               1465624576 3039275007 1573650432

     

     

     

      Stop 


    Screen Shot 2016-10-05 at 12.09.17 AM.png

     

  • by Loner T,

    Loner T Loner T Oct 5, 2016 3:47 AM in response to chinacat2002
    Level 7 (24,738 points)
    Safari
    Oct 5, 2016 3:47 AM in response to chinacat2002

    Not yet. You need to let the scan finish. Testdisk will first list unrecoverable/damaged partitions, and if you look at the UI flow in the linked discussion, you can see the partition that eventually gets used for rebuilding the MBR.

  • by chinacat2002,

    chinacat2002 chinacat2002 Oct 5, 2016 10:03 PM in response to Loner T
    Level 1 (4 points)
    Windows Software
    Oct 5, 2016 10:03 PM in response to Loner T

    It looks like it could be a while.

     

    Got to 77% immediately.  I may have put it to sleep overnight, as it was only at 80% when I got back in late this evening.

     

    Now at 82%.  At this rate it could be a day or two.

     

    I will let it run and check in the a.m.

     

    Best

     

    Screen Shot 2016-10-06 at 1.00.55 AM.png

  • by chinacat2002,

    chinacat2002 chinacat2002 Oct 6, 2016 9:47 PM in response to Loner T
    Level 1 (4 points)
    Windows Software
    Oct 6, 2016 9:47 PM in response to Loner T

    Hi again LT!

     

    I hope all is well!!

     

    Here is the result of testdisk.

     

    Screen Shot 2016-10-07 at 12.45.06 AM.png

  • by Loner T,

    Loner T Loner T Oct 7, 2016 12:34 AM in response to chinacat2002
    Level 7 (24,738 points)
    Safari
    Oct 7, 2016 12:34 AM in response to chinacat2002

    This is a list of non-recoverable partitions. There should be a Continue selection at bottom left of your screen. Press Return/Enter to Continue.

  • by chinacat2002,

    chinacat2002 chinacat2002 Oct 9, 2016 3:34 PM in response to Loner T
    Level 1 (4 points)
    Windows Software
    Oct 9, 2016 3:34 PM in response to Loner T

    Hi LonerT

     

    Here is the result of "continue".  I was out of town for a few days.

     

     

    Screen Shot 2016-10-09 at 6.32.26 PM.png

  • by Loner T,

    Loner T Loner T Oct 9, 2016 6:58 PM in response to chinacat2002
    Level 7 (24,738 points)
    Safari
    Oct 9, 2016 6:58 PM in response to chinacat2002

    Can you scroll down to the fifth (5) MS Data entry and use the 'p' command for a listing of the directory? If you do not see familiar files, can you check each MS Data entry? If you are in a directory listing, use Escape only once, otherwise you may end up having to start over again.

Page 1 Next