Yosemite Upgrade broke bootcamp partition

Question

Level 1

0 points

Yosemite Upgrade broke bootcamp partition

I am having Mac Book Pro A1278. mid 2010 after I upgraded os to OS x Yosemite. I am missing my partition in Bootcamp and no longer able to switch back to W7

S-Reddys-MacBook-Pro:~ Sreddy$ diskutil list

/dev/disk0

#: TYPE NAME SIZE IDENTIFIER

0: GUID_partition_scheme *250.1 GB disk0

1: EFI EFI 209.7 MB disk0s1

2: Apple_HFS Macintosh HD 124.5 GB disk0s2

3: Apple_Boot Recovery HD 650.0 MB disk0s3

4: Microsoft Basic Data 124.7 GB disk0s4

S-Reddys-MacBook-Pro:~ Sreddy$ diskutil cs list

No CoreStorage logical volume groups found

S-Reddys-MacBook-Pro:~ Sreddy$

S-Reddys-MacBook-Pro:~ Sreddy$ sudo gpt -vv -r show /dev/disk0

Password:

gpt show: /dev/disk0: mediasize=250059350016; sectorsize=512; blocks=488397168

gpt show: /dev/disk0: Suspicious MBR at sector 0

gpt show: /dev/disk0: Pri GPT at sector 1

gpt show: /dev/disk0: Sec GPT at sector 488397167

start size index contents

0 1 MBR

1 1 Pri GPT header

2 32 Pri GPT table

34 6

40 409600 1 GPT part - C12A7328-F81F-11D2-BA4B-00A0C93EC93B

409640 243134648 2 GPT part - 48465300-0000-11AA-AA11-00306543ECAC

243544288 1269536 3 GPT part - 426F6F74-0000-11AA-AA11-00306543ECAC

244813824 243582976 4 GPT part - EBD0A0A2-B9E5-4433-87C0-68B6B72699C7

488396800 335

488397135 32 Sec GPT table

488397167 1 Sec GPT header

S-Reddys-MacBook-Pro:~ Sreddy$ sudo fdisk /dev/disk0

Disk: /dev/disk0 geometry: 30401/255/63 [488397168 sectors]

Signature: 0xAA55

Starting Ending

#: id cyl hd sec - cyl hd sec [ start - size]

------------------------------------------------------------------------

1: EE 1023 254 63 - 1023 254 63 [ 1 - 409639] <Unknown ID>

2: AF 1023 254 63 - 1023 254 63 [ 409640 - 243134648] HFS+

3: AB 1023 254 63 - 1023 254 63 [ 243544288 - 1269536] Darwin Boot

4: 0C 1023 254 63 - 1023 254 63 [ 244813824 - 243582976] Win95 FAT32L

S-Reddys-MacBook-Pro:~ Sreddy$ sudo dd if=/dev/rdisk0s4 count=1 2>/dev/null | hexdump -C

00000000 03 02 1a 05 00 a0 81 d1 30 18 06 09 2a 86 48 86 |........0...*.H.|

00000010 f7 0d 01 09 03 31 0b 06 09 2b 06 01 04 01 82 37 |.....1...+.....7|

00000020 0a 01 30 1c 06 0a 2b 06 01 04 01 82 37 02 01 0b |..0...+.....7...|

00000030 31 0e 30 0c 06 0a 2b 06 01 04 01 82 37 02 01 15 |1.0...+.....7...|

00000040 30 23 06 09 2a 86 48 86 f7 0d 01 09 04 31 16 04 |0#..*.H......1..|

00000050 14 ce 03 bd 75 10 1c c5 42 53 e7 4b 85 8f 0e 7a |....u...BS.K...z|

00000060 9c df c3 4c 06 30 72 06 0a 2b 06 01 04 01 82 37 |...L.0r..+.....7|

00000070 02 01 0c 31 64 30 62 a0 44 80 42 00 57 00 69 00 |...1d0b.D.B.W.i.|

00000080 6e 00 64 00 6f 00 77 00 73 00 20 00 45 00 78 00 |n.d.o.w.s. .E.x.|

00000090 70 00 72 00 65 00 73 00 73 00 20 00 53 00 65 00 |p.r.e.s.s. .S.e.|

000000a0 63 00 75 00 72 00 69 00 74 00 79 00 20 00 43 00 |c.u.r.i.t.y. .C.|

000000b0 61 00 74 00 61 00 6c 00 6f 00 67 00 73 a1 1a 80 |a.t.a.l.o.g.s...|

000000c0 18 68 74 74 70 3a 2f 2f 77 77 77 2e 6d 69 63 72 |.http://www.micr|

000000d0 6f 73 6f 66 74 2e 63 6f 6d 30 0d 06 09 2a 86 48 |osoft.com0...*.H|

000000e0 86 f7 0d 01 01 01 05 00 04 82 01 00 4a 67 b6 21 |............Jg.!|

000000f0 ef f3 b2 04 ce dc cb fc 88 1b 32 c1 c6 a8 bf c1 |..........2.....|

00000100 60 44 f9 05 58 dd ff f8 01 d8 a2 05 c5 0d 17 45 |`D..X..........E|

00000110 88 4f 94 81 b0 b1 2d 6e fd bb ea 72 98 03 ae ed |.O....-n...r....|

00000120 84 8a ae c9 d5 ed 2d 87 81 c5 22 fc 63 c5 5c b0 |......-...".c.\.|

00000130 4a 25 e8 28 d0 62 80 5a cd 85 14 3c be eb eb 3a |J%.(.b.Z...<...:|

00000140 f6 ad 2a 11 32 ea 5b 5b b0 c4 6d 64 9c 43 90 cc |..*.2.[[..md.C..|

00000150 78 da 59 55 b1 37 5c 30 35 1c e4 29 0b a6 68 22 |x.YU.7\05..)..h"|

00000160 69 a0 e6 e5 0e b5 29 f9 c7 90 7a 57 58 d6 99 14 |i.....)...zWX...|

00000170 b8 63 54 6e b7 d3 1d bd 99 0a 1a ec e5 3f e1 89 |.cTn.........?..|

00000180 25 60 5b 8f 7e 20 1d 7a e8 4b f4 66 db e0 5d 68 |%`[.~ .z.K.f..]h|

00000190 35 c9 dc 84 89 f0 ba 4b 1c a8 d8 96 c6 f0 51 09 |5......K......Q.|

000001a0 1c f9 d2 24 1a 15 81 37 02 24 fd 01 c3 0a 6c 3c |...$...7.$....l<|

000001b0 8b c3 75 7e 9a 9b 45 f0 37 52 00 c4 2e 08 3f 6e |..u~..E.7R....?n|

000001c0 d5 aa 63 12 a6 85 db 06 c2 e1 32 81 00 e0 80 80 |..c.......2.....|

000001d0 41 20 8c d3 c0 f5 6c 62 d2 8a 1d 8f 58 a3 9d 77 |A ....lb....X..w|

000001e0 f0 b2 29 37 96 21 11 f9 94 6b dc 52 a1 82 02 1d |..)7.!...k.R....|

000001f0 30 82 02 19 06 09 2a 86 48 86 f7 0d 01 09 06 31 |0.....*.H......1|

00000200

MacBook Pro, OS X Yosemite (10.10)

Posted on Nov 3, 2014 1:40 PM

Reply

Answer 1

Loner T

Level 9

59,513 points

Nov 3, 2014 2:25 PM in response to AJVeMacV

1. Please download Testdisk (http://www.cgsecurity.org/wiki/TestDisk) and GPT Fdisk (http://sourceforge.net/projects/gptfdisk/).

2. Start Testdisk and use the EFI partition type to start searching. Quick Search is seldom useful but is a good starting point. This is a step-by-step guide - http://www.cgsecurity.org/wiki/TestDisk_Step_By_Step

3. You may lose your Recovery HD, but it can be rebuilt by re-installing OS X after Windows becomes functional.

Reply

Answer 2

AJVeMacV Author

Level 1

0 points

Nov 4, 2014 7:33 AM in response to Loner T

i am getting below. Diskos4 is already unmounted

TestDisk 7.0-WIP, Data Recovery Utility, October 2014

Christophe GRENIER <grenier@cgsecurity.org>

http://www.cgsecurity.org

Disk /dev/rdisk0 - 250 GB / 232 GiB (RO)

Write access for this media is not available.

TestDisk won't be able to modify it.

- No partition from this disk must be mounted:

Open the Disk Utility (In Finder -> Application -> Utility folder)

and press Unmount button for each volume from this disk

- This media may be physically write-protected, check the jumpers.

[ Continue ] Continue even if write access isn't available

>[ Quit ] Return to disk selection

Reply

Answer 3

Loner T

Level 9

59,513 points

Nov 4, 2014 7:36 AM in response to AJVeMacV

Since you have a booted OS from this disk, click on Continue. Please use EFI/GPT partition type.

Reply

Answer 4

AJVeMacV Author

Level 1

0 points

Nov 4, 2014 8:27 AM in response to Loner T

Thank you. TestDisk is still Analyzing. This is what I got so far

TestDisk 7.0-WIP, Data Recovery Utility, October 2014

Christophe GRENIER <grenier@cgsecurity.org>

http://www.cgsecurity.org

Disk /dev/rdisk0 - 250 GB / 232 GiB - 488397168 sectors (RO)

Current partition structure:

Partition Start End Size in sectors

1 P EFI System 40 409639 409600 [EFI system partitio

2 P Mac HFS 409640 243544287 243134648 [Customer]

3 P Mac Boot 243544288 244813823 1269536 [Recovery HD]

No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker

4 P MS Data 244813824 488396799 243582976 [BOOTCAMP]

P=Primary D=Deleted

>[Quick Search] [ Backup ]

TestDisk 7.0-WIP, Data Recovery Utility, October 2014

Christophe GRENIER <grenier@cgsecurity.org>

http://www.cgsecurity.org

Disk /dev/rdisk0 - 250 GB / 232 GiB - 488397168 sectors (RO)

Analyse sector 280199168/488397167: 00%

Warning: number of sectors per track mismatches 2 (NTFS) != 1 (HD)

MS Data 274971755 274977928 6174

Warning: number of heads/cylinder mismatches 16 (NTFS) != 1 (HD)

Warning: number of sectors per track mismatches 2 (NTFS) != 1 (HD)

MS Data 274977928 274984101 6174 [Boot]

Warning: number of heads/cylinder mismatches 2 (FAT) != 1 (HD)

Warning: number of sectors per track mismatches 18 (FAT) != 1 (HD)

MS Data 274986984 274989863 2880 [EFISECTOR]

Warning: number of heads/cylinder mismatches 16 (NTFS) != 1 (HD)

Warning: number of sectors per track mismatches 2 (NTFS) != 1 (HD)

MS Data 275754059 275760232 6174

Warning: number of heads/cylinder mismatches 16 (NTFS) != 1 (HD)

Warning: number of sectors per track mismatches 2 (NTFS) != 1 (HD)

MS Data 275760232 275766405 6174 [Boot]

Reply

Answer 5

Loner T

Level 9

59,513 points

Nov 4, 2014 8:39 AM in response to AJVeMacV

This is a slow process because it is a sector-by-sector scan.

Keep an eye on the percentage.

Analyse sector 280199168/488397167: 00%

Reply

Answer 6

AJVeMacV Author

Level 1

0 points

Nov 4, 2014 1:07 PM in response to Loner T

Finally its finished analyzing. below is the result.

TestDisk 7.0-WIP, Data Recovery Utility, October 2014

Christophe GRENIER <grenier@cgsecurity.org>

http://www.cgsecurity.org

Disk /dev/rdisk0 - 250 GB / 232 GiB - 488397168 sectors (RO)

The harddisk (250 GB / 232 GiB) seems too small! (< 374 GB / 349 GiB)

Check the harddisk size: HD jumpers settings, BIOS detection...

The following partitions can't be recovered:

Partition Start End Size in sectors

> MS Data 367552960 611191231 243638272

MS Data 385240064 628878335 243638272

MS Data 415922408 499804391 83881984

MS Data 438955304 522837287 83881984

MS Data 438955400 522837383 83881984

MS Data 438955800 522837783 83881984

MS Data 438955848 522837831 83881984

MS Data 438955896 522837879 83881984

MS Data 445868152 529750135 83881984

MS Data 485191216 569073199 83881984

[ Continue ]

NTFS, blocksize=4096, 124 GB / 116 GiB

Reply

Answer 7

Loner T

Level 9

59,513 points

Nov 4, 2014 2:14 PM in response to AJVeMacV

Click on Continue and use P to list files. Repeat this process for each MS Data you may have only on, perhaps two partitions with files that will look familiar.

Reply

Answer 8

AJVeMacV Author

Level 1

0 points

Nov 4, 2014 3:11 PM in response to Loner T

I have run on all of them but listed only that have files thank you

TestDisk 7.0-WIP, Data Recovery Utility, October 2014

Christophe GRENIER <grenier@cgsecurity.org>

http://www.cgsecurity.org

P EFI System 40 409639 409600 [EFI]

Directory /

>drwxr-xr-x 0 0 0 15-May-2010 10:10 EFI

drwxr-xr-x 0 0 0 15-May-2010 10:10 .Trashes

drwxr-xr-x 0 0 0 16-May-2010 07:43 .fseventsd

TestDisk 7.0-WIP, Data Recovery Utility, October 2014

Christophe GRENIER <grenier@cgsecurity.org>

http://www.cgsecurity.org

Disk /dev/rdisk0 - 250 GB / 232 GiB - 488397168 sectors (RO)

Partition Start End Size in sectors

P EFI System 40 409639 409600 [EFI]

D Mac HFS 409640 243544287 243134648

D MS Data 123914689 367552960 243638272

D MS Data 141601793 385240064 243638272

D Mac HFS 243544288 244813823 1269536

D MS Data 244756480 488394751 243638272

D Mac HFS 244985164 253373773 8388610 [ D^A]

>D MS Data 257988907 258009645 20739 [NO NAME]

D MS Data 274959371 274965544 6174

D MS Data 274965544 274971717 6174 [Boot]

D MS Data 274965563 274971736 6174

D MS Data 274971736 274977909 6174 [Boot]

D MS Data 274971755 274977928 6174

D MS Data 274977928 274984101 6174 [Boot]

D MS Data 274986984 274989863 2880 [EFISECTOR]

D MS Data 275754059 275760232 6174

Structure: Ok. Use Up/Down Arrow keys to select partition.

Use Left/Right Arrow keys to CHANGE partition characteristics:

P=Primary D=Deleted

Keys A: add partition, L: load backup, T: change type, P: list files,

Enter: to continue

FAT12, blocksize=4096, 10 MB / 10 MiB

TestDisk 7.0-WIP, Data Recovery Utility, October 2014

Christophe GRENIER <grenier@cgsecurity.org>

http://www.cgsecurity.org

MS Data 274965544 274971717 6174 [Boot]

Directory /

>dr-xr-xr-x 0 0 0 15-Feb-2005 15:33 .

dr-xr-xr-x 0 0 0 15-Feb-2005 15:33 ..

dr-xr-xr-x 0 0 0 15-Feb-2005 15:33 System Volume Information

TestDisk 7.0-WIP, Data Recovery Utility, October 2014

Christophe GRENIER <grenier@cgsecurity.org>

http://www.cgsecurity.org

MS Data 274971736 274977909 6174 [Boot]

Directory /

>dr-xr-xr-x 0 0 0 15-Feb-2005 15:33 .

dr-xr-xr-x 0 0 0 15-Feb-2005 15:33 ..

dr-xr-xr-x 0 0 0 15-Feb-2005 15:33 System Volume Information

TestDisk 7.0-WIP, Data Recovery Utility, October 2014

Christophe GRENIER <grenier@cgsecurity.org>

http://www.cgsecurity.org

MS Data 274977928 274984101 6174 [Boot]

Directory /

>dr-xr-xr-x 0 0 0 15-Feb-2005 15:33 .

dr-xr-xr-x 0 0 0 15-Feb-2005 15:33 ..

dr-xr-xr-x 0 0 0 15-Feb-2005 15:33 System Volume Information

TestDisk 7.0-WIP, Data Recovery Utility, October 2014

Christophe GRENIER <grenier@cgsecurity.org>

http://www.cgsecurity.org

MS Data 274986984 274989863 2880 [EFISECTOR]

Directory /

>drwxr-xr-x 0 0 0 13-Jul-2009 10:20 EFI

q to quit, : to select the current file, a to select all files

C to copy the selected files, c to copy the current file

Reply

Answer 9

Loner T

Level 9

59,513 points

Nov 4, 2014 3:28 PM in response to AJVeMacV

Your GPT is

243544288 1269536 3 GPT part - 426F6F74-0000-11AA-AA11-00306543ECAC

244813824 243582976 4 GPT part - EBD0A0A2-B9E5-4433-87C0-68B6B72699C7

What is in these? Anything smaller than your original Windows partition does not make much sense. The last entry makes the most sense, but that means you will lose your Recovery HD.

D MS Data 123914689 367552960 243638272

D MS Data 141601793 385240064 243638272

D MS Data 244756480 488394751 243638272

Reply

Answer 10

AJVeMacV Author

Level 1

0 points

Nov 4, 2014 5:15 PM in response to Loner T

I am ok loosing Recovery HD. I have original install CD's . I think I forgot to include these last time

TestDisk 7.0-WIP, Data Recovery Utility, October 2014

Christophe GRENIER <grenier@cgsecurity.org>

http://www.cgsecurity.org

MS Data 244756480 488394751 243638272

Directory /

>dr-xr-xr-x 0 0 0 30-Oct-2014 22:57 .

dr-xr-xr-x 0 0 0 30-Oct-2014 22:57 ..

dr-xr-xr-x 0 0 0 8-Jun-2014 19:00 $Recycle.Bin

dr-xr-xr-x 0 0 0 8-Jun-2014 08:13 Intel

dr-xr-xr-x 0 0 0 5-Aug-2014 11:24 NVIDIA

dr-xr-xr-x 0 0 0 13-Jul-2009 22:20 PerfLogs

dr-xr-xr-x 0 0 0 30-Oct-2014 22:57 Program Files

dr-xr-xr-x 0 0 0 20-Oct-2014 10:47 Program Files (x86)

dr-xr-xr-x 0 0 0 30-Oct-2014 22:21 ProgramData

dr-xr-xr-x 0 0 0 8-Jun-2014 06:56 Recovery

dr-xr-xr-x 0 0 0 30-Oct-2014 22:50 System Volume Information

dr-xr-xr-x 0 0 0 30-Sep-2014 09:38 Users

dr-xr-xr-x 0 0 0 30-Oct-2014 23:06 Windows

-r--r--r-- 0 0 2058 30-Oct-2014 22:55 RHDSetup.log

-r--r--r-- 0 0 3012501504 30-Oct-2014 23:00 hiberfil.sys

-r--r--r-- 0 0 4016672768 30-Oct-2014 23:00 pagefile.sys

Reply

Answer 11

Loner T

Level 9

59,513 points

Nov 4, 2014 6:19 PM in response to AJVeMacV

This is included here to explain the logic that follows.

GPT 3 Start	GPT 3 Size	GPT 3 End	NTFS Start	Byte Offset
243544288	1269536	244813824	244756480	-57344

Your NTFS header is 57K bytes within the Recovery HD. This means GPT 3 and GPT4 as they currently are, have to be deleted. This does not remove the data, but the pointers to partitions are being manipulated. If you get an error about read-only disk0, it is because you are booted from it.

Please stop if you see any other error messages.

1. Delete the old entries for GPT 3 and 4, and create a new entry at GPT 3, using the start/end from your post.

sudo gdisk /dev/disk0

p

d

3

d

4

n

3

244756480

488394751

0700

p

w

y

2. You want to check after the second 'p'rint command that it looks reasonable, before the 'w'rite and 'y'es to confirm.

3. You will need to reboot after the change, because the disk you are booted from is the one being modified. Reboot will rebuild disk0s3 using the start/end you entered.

4. Run the dd command - sudo dd if=/dev/rdisk0s3 count=1 2>/dev/null | hexdump -C and check that the first line contains "R.NTFS".

5. Once you have a working GPT 3, a new hybrid MBR needs to be created which will overwrite what you see in your Fdisk output. This is also done using GPT Fdisk (Gdisk).

You need to create the Hybrid MBR. Here is an example... (You do not have a Recovery HD anymore after step 1).

sudo gdisk /dev/disk0

GPT fdisk (gdisk) version 0.8.10

Warning: Devices opened with shared lock will not have their

partition table automatically reloaded!

Partition table scan:

MBR: hybrid

BSD: not present

APM: not present

GPT: present

Found valid GPT with hybrid MBR; using GPT.

Command (? for help): p

Disk /dev/disk0: 490234752 sectors, 233.8 GiB

Logical sector size: 512 bytes

Disk identifier (GUID): 59BDFEEB-1EB4-4529-94FE-3CBC2C3CD513

Partition table holds up to 128 entries

First usable sector is 34, last usable sector is 490234718

Partitions will be aligned on 8-sector boundaries

Total free space is 2604 sectors (1.3 MiB)

Number Start (sector) End (sector) Size Code Name

1 40 409639 200.0 MiB EF00 EF

2 409640 401060383 191.0 GiB AF05 Macintosh HD

3 402331648 490233848 41.9 GiB 0700 Microsoft basic data

Command (? for help): r

Recovery/transformation command (? for help): h

WARNING! Hybrid MBRs are flaky and dangerous! If you decide not to use one,

just hit the Enter key at the below prompt and your MBR partition table will

be untouched.

Type from one to three GPT partition numbers, separated by spaces, to be

added to the hybrid MBR, in sequence: 2 3

Place EFI GPT (0xEE) partition first in MBR (good for GRUB)? (Y/N): y

Creating entry for GPT partition #2 (MBR partition #2)

Enter an MBR hex code (default AF): AF

Set the bootable flag? (Y/N): n

Creating entry for GPT partition #3 (MBR partition #3)

Enter an MBR hex code (default 07): 07

Set the bootable flag? (Y/N): y

Recovery/transformation command (? for help): w

Final checks complete. About to write GPT data. THIS WILL OVERWRITE EXISTING

PARTITIONS!!

Do you want to proceed? (Y/N): y

OK; writing new GUID partition table (GPT) to /dev/disk0.

Warning: Devices opened with shared lock will not have their

partition table automatically reloaded!

Warning: The kernel may continue to use old or deleted partitions.

You should reboot or remove the drive.

The operation has completed successfully.

Now Reboot and verify the output of fdisk again.

6. a. Test 1 - Can you see your Bootcamp volume in Finder.

b. Test 2 - Can you files in the Bootcamp volume?

c. Test 3 - Can you see Bootcamp in your System Preferences -> Startup Disk.

d. Test 4 - If Test 1-3 are successful, select Bootcamp and click on Restart. You may need Windows startup repair, if you see a hanging underline cursor at the top left corner of your screen. In most cases, it is not required.

Here is an example of deleting/adding partition 4 start/end information, which has the Recovery HD as well.

Command (? for help): d

Partition number (1-4): 4

Command (? for help): n

Partition number (4-128, default 4): 4

First sector (34-1954210086, default = 1454210080) or {+-}size{KMGTP}: 1454211072

Last sector (1454211072-1954210086, default = 1954210086) or {+-}size{KMGTP}: 1954209791

Current type is 'Apple HFS/HFS+'

Hex code or GUID (L to show codes, Enter = AF00): 0700

Changed type of partition to 'Microsoft basic data'

Command (? for help): p

Disk /dev/disk0: 1954210120 sectors, 931.8 GiB

Logical sector size: 512 bytes

Disk identifier (GUID): 6ED0C429-00D1-4759-B50E-04B6FB80D0E3

Partition table holds up to 128 entries

First usable sector is 34, last usable sector is 1954210086

Partitions will be aligned on 8-sector boundaries

Total free space is 1293 sectors (646.5 KiB)

Number Start (sector) End (sector) Size Code Name

1 40 409639 200.0 MiB EF00 EFI System Partition

2 409640 1452940543 692.6 GiB AF00 Customer

3 1452940544 1454210079 619.9 MiB AB00 Recovery HD

4 1454211072 1954209791 238.4 GiB 0700 Microsoft basic data

Reply

Answer 12

AJVeMacV Author

Level 1

0 points

Nov 5, 2014 3:57 AM in response to Loner T

I got below after rebooting and running dd command. does this look good. I don't see R.NTFS

sudo dd if=/dev/rdisk0s3 count=1 2>/dev/null | hexdump -C

Password:

00000000 44 9f b2 1d 7a 84 0f 7e 8f 99 fb 24 15 64 6b 31 |D...z..~...$.dk1|

00000010 65 e0 65 16 95 43 61 8a ed ef 99 8d fa 87 d2 fe |e.e..Ca.........|

00000020 3d b3 2a fe 13 11 cd d6 1f 19 2e df 32 bc 94 24 |=.*.........2..$|

00000030 15 f5 64 f4 b2 56 54 a2 a1 be b9 22 7c aa 91 be |..d..VT...."|...|

00000040 b1 42 c3 f9 9b bb 34 9c c5 5b 18 ce d5 ef 9a f5 |.B....4..[......|

00000050 ef d4 4d 1a 86 ec 07 ef aa c8 ee ba cb 80 6c 10 |..M...........l.|

00000060 5e c8 8b 02 ff a3 af 2d d4 df cd 74 da 64 ca c1 |^......-...t.d..|

00000070 cd 28 be e0 5b 03 5a 33 df 35 de 89 ae d4 d0 ea |.(..[.Z3.5......|

00000080 6b 44 ab b7 8e 56 07 1d ad b3 e9 0c ad bb 08 ad |kD...V..........|

00000090 ca e6 68 59 34 b4 72 8d 68 bd 72 17 a3 a1 46 f1 |..hY4.r.h.r...F.|

000000a0 43 4a c3 82 48 52 6e 81 77 ef 7a ec 6d c0 b4 11 |CJ..HRn.w.z.m...|

000000b0 b7 c9 63 2d 14 e9 ea 80 ea 46 6c df 12 46 6b 74 |..c-.....Fl..Fkt|

000000c0 5b 53 aa fc ce c4 79 7f 50 14 70 ec 90 dd 0c 2e |[S....y.P.p.....|

000000d0 7a 8b 22 72 ad 66 b9 da bb a4 f5 c4 e9 b2 6f 29 |z."r.f........o)|

000000e0 39 a0 da 18 a8 e3 c2 b4 f8 17 a2 42 87 f4 8b 88 |9..........B....|

000000f0 1a bf 69 d4 e8 56 6e 56 e3 ff a4 94 13 29 40 3a |..i..VnV.....)@:|

00000100 b5 44 75 01 cf bf 72 8e f5 66 a4 b8 75 81 39 fc |.Du...r..f..u.9.|

00000110 11 ed 53 90 3c 6a 50 ea e7 ab a4 40 dd 40 27 c5 |..S.<jP....@.@'.|

00000120 db 59 4d 49 71 72 7e 24 29 4a e6 93 c7 dd a6 38 |.YMIqr~$)J.....8|

00000130 07 bb 00 22 0b cb e8 90 28 12 a2 96 25 ae a7 91 |..."....(...%...|

00000140 20 dd c9 66 f8 de 9c ea 63 2e 16 7d ca 15 f7 66 | ..f....c..}...f|

00000150 67 3b 30 77 b7 e9 8b ca dc 41 65 d0 07 38 51 6f |g;0w.....Ae..8Qo|

00000160 a1 43 13 95 83 87 2e 66 ab 17 b4 b3 56 9e 9c 6f |.C.....f....V..o|

00000170 d6 43 9d da 8a 4e 68 54 e1 cb b4 fd 18 20 c2 d5 |.C...NhT..... ..|

00000180 3b 49 8b 84 e4 dd bd d8 01 5c f2 7c b3 21 77 ce |;I.......\.|.!w.|

00000190 c1 9f 19 e5 98 09 ee 9f f3 54 92 2c ea 67 20 c9 |.........T.,.g .|

000001a0 d2 7e 44 12 8c 9f 87 48 ec 9b 67 36 58 ed 2d 61 |.~D....H..g6X.-a|

000001b0 8d dc a3 7c 31 4f 6f ba 53 9a 80 b7 9a 24 9a 6a |...|1Oo.S....$.j|

000001c0 95 ef e7 32 fd 12 a7 1a d2 2f f1 87 44 c4 08 95 |...2...../..D...|

000001d0 7b 43 2d f8 37 0f c1 4f 3a 7f 64 d3 ad 5a 46 04 |{C-.7..O:.d..ZF.|

000001e0 9d 9a d0 a8 4f 06 a3 51 d7 f7 19 8d 22 6b cc a5 |....O..Q...."k..|

000001f0 1a 9d e2 1f d2 12 56 e9 ee bf 2b 8d 4e e1 a3 0e |......V...+.N...|

00000200

Reply

Answer 13

Loner T

Level 9

59,513 points

Nov 5, 2014 4:06 AM in response to AJVeMacV

No, this is not correct. Can you post the output of

sudo gpt -vv -r show /dev/disk0.

Reply

Answer 14

AJVeMacV Author

Level 1

0 points

Nov 5, 2014 5:04 AM in response to Loner T

sudo gpt -vv -r show /dev/disk0

Password:

gpt show: /dev/disk0: mediasize=250059350016; sectorsize=512; blocks=488397168

gpt show: /dev/disk0: Suspicious MBR at sector 0

gpt show: /dev/disk0: Pri GPT at sector 1

gpt show: /dev/disk0: Sec GPT at sector 488397167

start size index contents

0 1 MBR

1 1 Pri GPT header

2 32 Pri GPT table

34 6

40 409600 1 GPT part - C12A7328-F81F-11D2-BA4B-00A0C93EC93B

409640 243134648 2 GPT part - 48465300-0000-11AA-AA11-00306543ECAC

243544288 1212192

244756480 243638272 3 GPT part - EBD0A0A2-B9E5-4433-87C0-68B6B72699C7

488394752 2383

488397135 32 Sec GPT table

488397167 1 Sec GPT header

Reply

Answer 15

Loner T

Level 9

59,513 points

Nov 5, 2014 5:44 AM in response to AJVeMacV

1. Please post the output of diskutil list.

2. The GPT start/size are correct as shown in your Testdisk output.

3. Were there any messages after the test disk output?

4. Another poster has a similar thread, and the NTFS header according to Testdisk is in the OSX partition - Bootcamp not working after Yosemite update.

Reply