Apple Event: May 7th at 7 am PT

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Level 1

0 points

Yosemite Upgrade broke bootcamp partition

I am having Mac Book Pro A1278. mid 2010 after I upgraded os to OS x Yosemite. I am missing my partition in Bootcamp and no longer able to switch back to W7

S-Reddys-MacBook-Pro:~ Sreddy$ diskutil list

/dev/disk0

#: TYPE NAME SIZE IDENTIFIER

0: GUID_partition_scheme *250.1 GB disk0

1: EFI EFI 209.7 MB disk0s1

2: Apple_HFS Macintosh HD 124.5 GB disk0s2

3: Apple_Boot Recovery HD 650.0 MB disk0s3

4: Microsoft Basic Data 124.7 GB disk0s4

S-Reddys-MacBook-Pro:~ Sreddy$ diskutil cs list

No CoreStorage logical volume groups found

S-Reddys-MacBook-Pro:~ Sreddy$

S-Reddys-MacBook-Pro:~ Sreddy$ sudo gpt -vv -r show /dev/disk0

Password:

gpt show: /dev/disk0: mediasize=250059350016; sectorsize=512; blocks=488397168

gpt show: /dev/disk0: Suspicious MBR at sector 0

gpt show: /dev/disk0: Pri GPT at sector 1

gpt show: /dev/disk0: Sec GPT at sector 488397167

start size index contents

0 1 MBR

1 1 Pri GPT header

2 32 Pri GPT table

34 6

40 409600 1 GPT part - C12A7328-F81F-11D2-BA4B-00A0C93EC93B

409640 243134648 2 GPT part - 48465300-0000-11AA-AA11-00306543ECAC

243544288 1269536 3 GPT part - 426F6F74-0000-11AA-AA11-00306543ECAC

244813824 243582976 4 GPT part - EBD0A0A2-B9E5-4433-87C0-68B6B72699C7

488396800 335

488397135 32 Sec GPT table

488397167 1 Sec GPT header

S-Reddys-MacBook-Pro:~ Sreddy$ sudo fdisk /dev/disk0

Disk: /dev/disk0 geometry: 30401/255/63 [488397168 sectors]

Signature: 0xAA55

Starting Ending

#: id cyl hd sec - cyl hd sec [ start - size]

------------------------------------------------------------------------

1: EE 1023 254 63 - 1023 254 63 [ 1 - 409639] <Unknown ID>

2: AF 1023 254 63 - 1023 254 63 [ 409640 - 243134648] HFS+

3: AB 1023 254 63 - 1023 254 63 [ 243544288 - 1269536] Darwin Boot

4: 0C 1023 254 63 - 1023 254 63 [ 244813824 - 243582976] Win95 FAT32L

S-Reddys-MacBook-Pro:~ Sreddy$ sudo dd if=/dev/rdisk0s4 count=1 2>/dev/null | hexdump -C

00000000 03 02 1a 05 00 a0 81 d1 30 18 06 09 2a 86 48 86 |........0...*.H.|

00000010 f7 0d 01 09 03 31 0b 06 09 2b 06 01 04 01 82 37 |.....1...+.....7|

00000020 0a 01 30 1c 06 0a 2b 06 01 04 01 82 37 02 01 0b |..0...+.....7...|

00000030 31 0e 30 0c 06 0a 2b 06 01 04 01 82 37 02 01 15 |1.0...+.....7...|

00000040 30 23 06 09 2a 86 48 86 f7 0d 01 09 04 31 16 04 |0#..*.H......1..|

00000050 14 ce 03 bd 75 10 1c c5 42 53 e7 4b 85 8f 0e 7a |....u...BS.K...z|

00000060 9c df c3 4c 06 30 72 06 0a 2b 06 01 04 01 82 37 |...L.0r..+.....7|

00000070 02 01 0c 31 64 30 62 a0 44 80 42 00 57 00 69 00 |...1d0b.D.B.W.i.|

00000080 6e 00 64 00 6f 00 77 00 73 00 20 00 45 00 78 00 |n.d.o.w.s. .E.x.|

00000090 70 00 72 00 65 00 73 00 73 00 20 00 53 00 65 00 |p.r.e.s.s. .S.e.|

000000a0 63 00 75 00 72 00 69 00 74 00 79 00 20 00 43 00 |c.u.r.i.t.y. .C.|

000000b0 61 00 74 00 61 00 6c 00 6f 00 67 00 73 a1 1a 80 |a.t.a.l.o.g.s...|

000000c0 18 68 74 74 70 3a 2f 2f 77 77 77 2e 6d 69 63 72 |.http://www.micr|

000000d0 6f 73 6f 66 74 2e 63 6f 6d 30 0d 06 09 2a 86 48 |osoft.com0...*.H|

000000e0 86 f7 0d 01 01 01 05 00 04 82 01 00 4a 67 b6 21 |............Jg.!|

000000f0 ef f3 b2 04 ce dc cb fc 88 1b 32 c1 c6 a8 bf c1 |..........2.....|

00000100 60 44 f9 05 58 dd ff f8 01 d8 a2 05 c5 0d 17 45 |`D..X..........E|

00000110 88 4f 94 81 b0 b1 2d 6e fd bb ea 72 98 03 ae ed |.O....-n...r....|

00000120 84 8a ae c9 d5 ed 2d 87 81 c5 22 fc 63 c5 5c b0 |......-...".c.\.|

00000130 4a 25 e8 28 d0 62 80 5a cd 85 14 3c be eb eb 3a |J%.(.b.Z...<...:|

00000140 f6 ad 2a 11 32 ea 5b 5b b0 c4 6d 64 9c 43 90 cc |..*.2.[[..md.C..|

00000150 78 da 59 55 b1 37 5c 30 35 1c e4 29 0b a6 68 22 |x.YU.7\05..)..h"|

00000160 69 a0 e6 e5 0e b5 29 f9 c7 90 7a 57 58 d6 99 14 |i.....)...zWX...|

00000170 b8 63 54 6e b7 d3 1d bd 99 0a 1a ec e5 3f e1 89 |.cTn.........?..|

00000180 25 60 5b 8f 7e 20 1d 7a e8 4b f4 66 db e0 5d 68 |%`[.~ .z.K.f..]h|

00000190 35 c9 dc 84 89 f0 ba 4b 1c a8 d8 96 c6 f0 51 09 |5......K......Q.|

000001a0 1c f9 d2 24 1a 15 81 37 02 24 fd 01 c3 0a 6c 3c |...$...7.$....l<|

000001b0 8b c3 75 7e 9a 9b 45 f0 37 52 00 c4 2e 08 3f 6e |..u~..E.7R....?n|

000001c0 d5 aa 63 12 a6 85 db 06 c2 e1 32 81 00 e0 80 80 |..c.......2.....|

000001d0 41 20 8c d3 c0 f5 6c 62 d2 8a 1d 8f 58 a3 9d 77 |A ....lb....X..w|

000001e0 f0 b2 29 37 96 21 11 f9 94 6b dc 52 a1 82 02 1d |..)7.!...k.R....|

000001f0 30 82 02 19 06 09 2a 86 48 86 f7 0d 01 09 06 31 |0.....*.H......1|

00000200

MacBook Pro, OS X Yosemite (10.10)

Posted on Nov 3, 2014 1:40 PM

37 replies

AJVeMacV Author

Level 1

0 points

Nov 5, 2014 10:01 AM in response to Loner T

I did not see any message after test disk output. Do you want me to run it again

diskutil list

/dev/disk0

#: TYPE NAME SIZE IDENTIFIER

0: GUID_partition_scheme *250.1 GB disk0

1: EFI EFI 209.7 MB disk0s1

2: Apple_HFS Macintosh HD 124.5 GB disk0s2

3: Microsoft Basic Data

AJVeMacV Author

Level 1

0 points

Nov 5, 2014 10:02 AM in response to AJVeMacV

diskutil list

/dev/disk0

#: TYPE NAME SIZE IDENTIFIER

0: GUID_partition_scheme *250.1 GB disk0

1: EFI EFI 209.7 MB disk0s1

2: Apple_HFS Macintosh HD 124.5 GB disk0s2

3: Microsoft Basic Data 124.7 GB disk0s3

Loner T

Level 9

59,471 points

Nov 5, 2014 10:04 AM in response to AJVeMacV

Let us confirm the Testdisk output. Unfortunately, it means you have to run it again.

AJVeMacV Author

Level 1

0 points

Nov 6, 2014 7:39 AM in response to Loner T

New Testdisk out put

TestDisk 7.0-WIP, Data Recovery Utility, October 2014

Christophe GRENIER <grenier@cgsecurity.org>

http://www.cgsecurity.org

Disk /dev/rdisk0 - 250 GB / 232 GiB - 488397168 sectors (RO)

The harddisk (250 GB / 232 GiB) seems too small! (< 374 GB / 349 GiB)

Check the harddisk size: HD jumpers settings, BIOS detection...

The following partitions can't be recovered:

Partition Start End Size in sectors

> MS Data 367552960 611191231 243638272

MS Data 385240064 628878335 243638272

MS Data 415922408 499804391 83881984

MS Data 438955304 522837287 83881984

MS Data 438955400 522837383 83881984

MS Data 438955800 522837783 83881984

MS Data 438955848 522837831 83881984

MS Data 438955896 522837879 83881984

MS Data 445868152 529750135 83881984

MS Data 485191216 569073199 83881984

[ Continue ]

NTFS, blocksize=4096, 124 GB / 116 GiB

AJVeMacV Author

Level 1

0 points

Nov 6, 2014 7:48 AM in response to AJVeMacV

TestDisk 7.0-WIP, Data Recovery Utility, October 2014

Christophe GRENIER <grenier@cgsecurity.org>

http://www.cgsecurity.org

Disk /dev/rdisk0 - 250 GB / 232 GiB - 488397168 sectors (RO)

Partition Start End Size in sectors

>P EFI System 40 409639 409600 [EFI]

D Mac HFS 409640 243544287 243134648

D MS Data 123914689 367552960 243638272

D MS Data 141601793 385240064 243638272

D Mac HFS 243544288 244813823 1269536

D MS Data 244756480 488394751 243638272

D Mac HFS 244985164 253373773 8388610 [ D^A]

D MS Data 257988907 258009645 20739 [NO NAME]

D MS Data 274959371 274965544 6174

D MS Data 274965544 274971717 6174 [Boot]

D MS Data 274965563 274971736 6174

D MS Data 274971736 274977909 6174 [Boot]

D MS Data 274971755 274977928 6174

D MS Data 274977928 274984101 6174 [Boot]

D MS Data 274986984 274989863 2880 [EFISECTOR]

D MS Data 275754059 275760232 6174

D MS Data 275760232 275766405 6174 [Boot]

D MS Data 292496336 292499215 2880 [EFISECTOR]

D MS Data 303660208 303663087 2880 [EFISECTOR]

D MS Data 328732224 345390655 16658432

D MS Data 332040425 415922408 83881984

D MS Data 335574592 339393471 3818880

D MS Data 336657984 336674367 16384 [NO NAME]

D MS Data 336712768 336891927 179160 [NO NAME]

D MS Data 339393471 343212350 3818880

D MS Data 345390655 362049086 16658432

D MS Data 355073321 438955304 83881984

D MS Data 355073417 438955400 83881984

D MS Data 355073817 438955800 83881984

D MS Data 355073865 438955848 83881984

D MS Data 355073913 438955896 83881984

D MS Data 361986169 445868152 83881984

D MS Data 369426768 369429647 2880 [EFISECTOR]

D MS Data 372702209 382394065 9691857 [NO NAME]

D MS Data 387407304 387410183 2880 [EFISECTOR]

D MS Data 389974472 389977351 2880 [EFISECTOR]

D MS Data 397477696 397480575 2880 [EFISECTOR]

Structure: Ok. Use Up/Down Arrow keys to select partition.

Use Left/Right Arrow keys to CHANGE partition characteristics:

P=Primary D=Deleted

Keys A: add partition, L: load backup, T: change type, P: list files,

Enter: to continue

FAT32, blocksize=512, 209 MB / 200 MiB

Loner T

Level 9

59,471 points

Nov 6, 2014 7:50 AM in response to AJVeMacV

Can you check the files in the following partitions?

D MS Data 123914689 367552960 243638272

D MS Data 141601793 385240064 243638272

D MS Data 244756480 488394751 243638272

AJVeMacV Author

Level 1

0 points

Nov 6, 2014 7:54 AM in response to AJVeMacV

TestDisk 7.0-WIP, Data Recovery Utility, October 2014

Christophe GRENIER <grenier@cgsecurity.org>

http://www.cgsecurity.org

P EFI System 40 409639 409600 [EFI]

Directory /

>drwxr-xr-x 0 0 0 15-May-2010 10:10 EFI

drwxr-xr-x 0 0 0 15-May-2010 10:10 .Trashes

drwxr-xr-x 0 0 0 16-May-2010 07:43 .fseventsd

TestDisk 7.0-WIP, Data Recovery Utility, October 2014

Christophe GRENIER <grenier@cgsecurity.org>

http://www.cgsecurity.org

Mac HFS 409640 243544287 243134648

Support for this filesystem hasn't been enable during compilation.

TestDisk 7.0-WIP, Data Recovery Utility, October 2014

Christophe GRENIER <grenier@cgsecurity.org>

http://www.cgsecurity.org

MS Data 123914689 367552960 243638272

Can't open filesystem. Filesystem seems damaged.

TestDisk 7.0-WIP, Data Recovery Utility, October 2014

Christophe GRENIER <grenier@cgsecurity.org>

http://www.cgsecurity.org

MS Data 141601793 385240064 243638272

Can't open filesystem. Filesystem seems damaged.

TestDisk 7.0-WIP, Data Recovery Utility, October 2014

Christophe GRENIER <grenier@cgsecurity.org>

http://www.cgsecurity.org

Mac HFS 243544288 244813823 1269536

Support for this filesystem hasn't been enable during compilation.

TestDisk 7.0-WIP, Data Recovery Utility, October 2014

Christophe GRENIER <grenier@cgsecurity.org>

http://www.cgsecurity.org

MS Data 244756480 488394751 243638272

Directory /

>dr-xr-xr-x 0 0 0 30-Oct-2014 22:57 .

dr-xr-xr-x 0 0 0 30-Oct-2014 22:57 ..

dr-xr-xr-x 0 0 0 8-Jun-2014 19:00 $Recycle.Bin

dr-xr-xr-x 0 0 0 8-Jun-2014 08:13 Intel

dr-xr-xr-x 0 0 0 5-Aug-2014 11:24 NVIDIA

dr-xr-xr-x 0 0 0 13-Jul-2009 22:20 PerfLogs

dr-xr-xr-x 0 0 0 30-Oct-2014 22:57 Program Files

dr-xr-xr-x 0 0 0 20-Oct-2014 10:47 Program Files (x86)

dr-xr-xr-x 0 0 0 30-Oct-2014 22:21 ProgramData

dr-xr-xr-x 0 0 0 8-Jun-2014 06:56 Recovery

dr-xr-xr-x 0 0 0 30-Oct-2014 22:50 System Volume Information

dr-xr-xr-x 0 0 0 30-Sep-2014 09:38 Users

dr-xr-xr-x 0 0 0 30-Oct-2014 23:06 Windows

-r--r--r-- 0 0 2058 30-Oct-2014 22:55 RHDSetup.log

-r--r--r-- 0 0 3012501504 30-Oct-2014 23:00 hiberfil.sys

-r--r--r-- 0 0 4016672768 30-Oct-2014 23:00 pagefile.sys

TestDisk 7.0-WIP, Data Recovery Utility, October 2014

Christophe GRENIER <grenier@cgsecurity.org>

http://www.cgsecurity.org

Mac HFS 244985164 253373773 8388610 [ D^A]

Support for this filesystem hasn't been enable during compilation.

AJVeMacV Author

Level 1

0 points

Nov 6, 2014 7:56 AM in response to AJVeMacV

TestDisk 7.0-WIP, Data Recovery Utility, October 2014

Christophe GRENIER <grenier@cgsecurity.org>

http://www.cgsecurity.org

MS Data 257988907 258009645 20739 [NO NAME]

Directory /

>dr-xr-xr-x 0 0 2986088216 11-May-1941 15:51 V> # Y>.V

-r-xr-xr-x 0 0 4164594992 29-Nov-1947 21:15 ^]s} +!.)(N

drwxr-xr-x 0 0 2598875031 16-Jan-1993 07:13 1"~Z ~V~Ro

dr-xr-xr-x 0 0 568694710 3-Dec-1962 10:03 PrN= ^^N5

-r-xr-xr-x 0 0 2276153308 15-Dec-1935 21:35 3p~L F.~Y@{

dr-xr-xr-x 0 0 597286355 15-Sep-1960 09:58 ~J~T^Z<~\b~Tf.~Y

dr-xr-xr-x 0 0 1246707698 9-Jan-1984 14:48 ^Tg~A zT.~[ ^\

-r-xr-xr-x 0 0 4187222305 4-Mar-1917 06:18 c `~Q q

-r-xr-xr-x 0 0 2081681720 5-Apr-2003 21:17 ~J 63. ~Y

-r-xr-xr-x 0 0 2074953569 24-Nov-1906 03:31 ~WG ~^^_

dr-xr-xr-x 0 0 4046970920 19-Nov-2000 23:47 W&9~ ^].

-r-xr-xr-x 0 0 792833475 4-Jan-2029 00:02 Q~^J ɥQ.

-r-xr-xr-x 0 0 3966235218 25-Jan-1903 22:47 wZ S ^N. h~Z

TestDisk 7.0-WIP, Data Recovery Utility, October 2014

Christophe GRENIER <grenier@cgsecurity.org>

http://www.cgsecurity.org

MS Data 274959371 274965544 6174

Can't open filesystem. Filesystem seems damaged.

TestDisk 7.0-WIP, Data Recovery Utility, October 2014

Christophe GRENIER <grenier@cgsecurity.org>

http://www.cgsecurity.org

MS Data 274965544 274971717 6174 [Boot]

Directory /

>dr-xr-xr-x 0 0 0 15-Feb-2005 15:33 .

dr-xr-xr-x 0 0 0 15-Feb-2005 15:33 ..

dr-xr-xr-x 0 0 0 15-Feb-2005 15:33 System Volume Information

TestDisk 7.0-WIP, Data Recovery Utility, October 2014

Christophe GRENIER <grenier@cgsecurity.org>

http://www.cgsecurity.org

MS Data 274965563 274971736 6174

Can't open filesystem. Filesystem seems damaged.

AJVeMacV Author

Level 1

0 points

Nov 6, 2014 7:59 AM in response to AJVeMacV

TestDisk 7.0-WIP, Data Recovery Utility, October 2014

Christophe GRENIER <grenier@cgsecurity.org>

http://www.cgsecurity.org

MS Data 274971736 274977909 6174 [Boot]

Directory /

>dr-xr-xr-x 0 0 0 15-Feb-2005 15:33 .

dr-xr-xr-x 0 0 0 15-Feb-2005 15:33 ..

dr-xr-xr-x 0 0 0 15-Feb-2005 15:33 System Volume Information

TestDisk 7.0-WIP, Data Recovery Utility, October 2014

Christophe GRENIER <grenier@cgsecurity.org>

http://www.cgsecurity.org

MS Data 274971755 274977928 6174

Can't open filesystem. Filesystem seems damaged.

TestDisk 7.0-WIP, Data Recovery Utility, October 2014

Christophe GRENIER <grenier@cgsecurity.org>

http://www.cgsecurity.org

MS Data 274977928 274984101 6174 [Boot]

Directory /

>dr-xr-xr-x 0 0 0 15-Feb-2005 15:33 .

dr-xr-xr-x 0 0 0 15-Feb-2005 15:33 ..

dr-xr-xr-x 0 0 0 15-Feb-2005 15:33 System Volume Information

TestDisk 7.0-WIP, Data Recovery Utility, October 2014

Christophe GRENIER <grenier@cgsecurity.org>

http://www.cgsecurity.org

MS Data 274986984 274989863 2880 [EFISECTOR]

Directory /

>drwxr-xr-x 0 0 0 13-Jul-2009 10:20 EFI

AJVeMacV Author

Level 1

0 points

Nov 6, 2014 8:07 AM in response to AJVeMacV

TestDisk 7.0-WIP, Data Recovery Utility, October 2014

Christophe GRENIER <grenier@cgsecurity.org>

http://www.cgsecurity.org

MS Data 275760232 275766405 6174 [Boot]

Directory /

>dr-xr-xr-x 0 0 0 15-Feb-2005 15:33 .

dr-xr-xr-x 0 0 0 15-Feb-2005 15:33 ..

dr-xr-xr-x 0 0 0 15-Feb-2005 15:33 System Volume Information

TestDisk 7.0-WIP, Data Recovery Utility, October 2014

Christophe GRENIER <grenier@cgsecurity.org>

http://www.cgsecurity.org

MS Data 303660208 303663087 2880 [EFISECTOR]

Directory /

>drwxr-xr-x 0 0 0 19-Nov-2010 17:19 EFI

TestDisk 7.0-WIP, Data Recovery Utility, October 2014

Christophe GRENIER <grenier@cgsecurity.org>

http://www.cgsecurity.org

MS Data 328732224 345390655 16658432

Can't open filesystem. Filesystem seems damaged.

TestDisk 7.0-WIP, Data Recovery Utility, October 2014

Christophe GRENIER <grenier@cgsecurity.org>

http://www.cgsecurity.org

MS Data 332040425 415922408 83881984

Can't open filesystem. Filesystem seems damaged.

TestDisk 7.0-WIP, Data Recovery Utility, October 2014

Christophe GRENIER <grenier@cgsecurity.org>

http://www.cgsecurity.org

MS Data 335574592 339393471 3818880

Can't open filesystem. Filesystem seems damaged.

TestDisk 7.0-WIP, Data Recovery Utility, October 2014

Christophe GRENIER <grenier@cgsecurity.org>

http://www.cgsecurity.org

MS Data 336657984 336674367 16384 [NO NAME]

Directory /

>drwxr-xr-x 0 0 0 26-Dec-2013 10:14 ACPI

-rwxr-xr-x 0 0 2949174 23-Dec-2013 11:14 LOGO1.BMP

-rwxr-xr-x 0 0 2949176 26-Dec-2013 08:53 LOGO2.BMP

drwxr-xr-x 0 0 0 26-Dec-2013 10:14 SMBIOS

-rwxr-xr-x 0 0 0 23-Dec-2013 11:14 UEFI_CFG.TXT

drwxr-xr-x 0 0 0 26-Dec-2013 10:14 Windows

TestDisk 7.0-WIP, Data Recovery Utility, October 2014

Christophe GRENIER <grenier@cgsecurity.org>

http://www.cgsecurity.org

MS Data 336712768 336891927 179160 [NO NAME]

Directory /

>-rwxr-xr-x 0 0 77882396 23-Aug-2013 13:57 MMOS.WIM

drwxr-xr-x 0 0 0 26-Dec-2013 10:14 Windows

TestDisk 7.0-WIP, Data Recovery Utility, October 2014

Christophe GRENIER <grenier@cgsecurity.org>

http://www.cgsecurity.org

MS Data 339393471 343212350 3818880

Can't open filesystem. Filesystem seems damaged.

TestDisk 7.0-WIP, Data Recovery Utility, October 2014

Christophe GRENIER <grenier@cgsecurity.org>

http://www.cgsecurity.org

MS Data 369426768 369429647 2880 [EFISECTOR]

Directory /

>-r-xr-xr-x 0 0 3933229385 26-Jan-2033 05:02 u^Y 6B

drwxr-xr-x 0 0 1625561160 8-Dec-1928 16:19 G#^G={ ^K. kY

-r-xr-xr-x 0 0 2903412641 15-Oct-2004 12:27 ^Py ) W.w6

-rwxr-xr-x 0 0 980364044 18-Dec-2016 09:13 O.3(U

drwxr-xr-x 0 0 1218145006 28-Nov-1905 17:55 * qu

drwxr-xr-x 0 0 2127540711 3-Dec-1982 13:02 ~H tۛ8

-rwxr-xr-x 0 0 1632145441 4-Jun-1930 18:39 s~VrG~V B^_.J

dr-xr-xr-x 0 0 1050748806 17-Dec-2034 03:09 m `

drwxr-xr-x 0 0 3943687189 20-Mar-2020 09:01 ? | .^Y^[

dr-xr-xr-x 0 0 2636937548 15-Dec-1956 02:54 .7~R~D

drwxr-xr-x 0 0 3249601521 21-May-1993 05:18 l A CK&

drwxr-xr-x 0 0 2253251338 14-Sep-1926 08:32 ~F@F G .%~D

dr-xr-xr-x 0 0 1629808513 24-Jan-1999 00:52 ^[ ^C ~Lg^C.9?

dr-xr-xr-x 0 0 549472278 31-Jul-1924 17:16 E~Y^R1] #.i~^

drwxr-xr-x 0 0 2991775434 12-Jun-1927 22:57 ~N ~D+.^_~]

dr-xr-xr-x 0 0 726954800 17-Jun-1958 00:59 /A

drwxr-xr-x 0 0 2478990977 22-Apr-1945 02:37 ^QD"~I^U~I .~L ^^

dr-xr-xr-x 0 0 3251519916 15-Mar-1923 19:02 6~A .~^@<

drwxr-xr-x 0 0 3362401299 26-Aug-1934 16:02 ~P^_9 ^K X.^U

-rwxr-xr-x 0 0 1418827248 3-Dec-1935 00:07 { e

dr-xr-xr-x 0 0 4242120231 12-Apr-2036 21:50 ~_-[~F' Y !

drwxr-xr-x 0 0 569312117 21-Sep-2011 23:46

-rwxr-xr-x 0 0 1550982237 10-Jul-1912 11:28 Ww

-r-xr-xr-x 0 0 2751639310 16-Dec-1949 04:51 ,rEr F >.~Yv

dr-xr-xr-x 0 0 912757579 26-Aug-1949 20:06 ^[~[ ?^N.

drwxr-xr-x 0 0 2664163184 10-Dec-1964 22:47 %~ÒFq .Uxa

dr-xr-xr-x 0 0 2216600460 17-Jan-1988 00:47 ~L rY ."~S

-rwxr-xr-x 0 0 654362450 5-Sep-1905 13:50 ^Y ^KF. ^R

dr-xr-xr-x 0 0 3340059526 18-Jun-1959 08:44 ʧ #܁ o

drwxr-xr-x 0 0 4188514084 2-Oct-1941 21:58 ي^D ^[ @.pv~S

-r-xr-xr-x 0 0 3398007946 29-Jan-1987 08:13 F: . ~Q

dr-xr-xr-x 0 0 1416080814 30-Oct-2007 05:17 ^B^B

dr-xr-xr-x 0 0 2313368380 3-Apr-1969 21:59 ^? u r.iw

-rwxr-xr-x 0 0 662853633 19-Nov-1986 14:02 ~Q^Z^S`i~Sn. d

dr-xr-xr-x 0 0 2065672080 20-Apr-1962 19:59 -~^

-rwxr-xr-x 0 0 2523829409 4-Jan-2016 21:39 KɚF~P..~R

dr-xr-xr-x 0 0 2046264083 14-Jul-1990 11:19 H 8 +) ~U~I

-r-xr-xr-x 0 0 2635340235 28-Nov-1915 23:16 횿p &&~D.~Vd~S

dr-xr-xr-x 0 0 4289428158 18-Apr-1959 22:27 ~M~^ ^\V~\z.ן^\

Loner T

Level 9

59,471 points

Nov 6, 2014 8:38 AM in response to AJVeMacV

In your screen shots, MS Data 244756480 488394751 243638272

has your files. This is what was used and despite Testdisk reporting the files and NTFS header, when you run the dd it does not show the NTFS header that Testdisk found.

Can you run sudo gdisk /dev/disk0 and post the output of 'p' command?

Can you verify this what you currently have?

409640 243134648 2 GPT part - 48465300-0000-11AA-AA11-00306543ECAC

243544288 1212192

244756480 243638272 3 GPT part - EBD0A0A2-B9E5-4433-87C0-68B6B72699C7

AJVeMacV Author

Level 1

0 points

Nov 6, 2014 9:39 AM in response to Loner T

sudo gdisk /dev/disk0

Password:

GPT fdisk (gdisk) version 0.8.10

Warning: Devices opened with shared lock will not have their

partition table automatically reloaded!

Partition table scan:

MBR: hybrid

BSD: not present

APM: not present

GPT: present

Found valid GPT with hybrid MBR; using GPT.

Command (? for help): p

Disk /dev/disk0: 488397168 sectors, 232.9 GiB

Logical sector size: 512 bytes

Disk identifier (GUID): 0000677A-6BE0-0000-DF26-0000FF3D0000

Partition table holds up to 128 entries

First usable sector is 34, last usable sector is 488397134

Partitions will be aligned on 8-sector boundaries

Total free space is 1214581 sectors (593.1 MiB)

Number Start (sector) End (sector) Size Code Name

1 40 409639 200.0 MiB EF00 EFI system partition

2 409640 243544287 115.9 GiB AF00 Customer

3 244756480 488394751 116.2 GiB 0700 Microsoft basic data

sudo gpt -vv -r show /dev/disk0

Password:

gpt show: /dev/disk0: mediasize=250059350016; sectorsize=512; blocks=488397168

gpt show: /dev/disk0: Suspicious MBR at sector 0

gpt show: /dev/disk0: Pri GPT at sector 1

gpt show: /dev/disk0: Sec GPT at sector 488397167

start size index contents

0 1 MBR

1 1 Pri GPT header

2 32 Pri GPT table

34 6

40 409600 1 GPT part - C12A7328-F81F-11D2-BA4B-00A0C93EC93B

409640 243134648 2 GPT part - 48465300-0000-11AA-AA11-00306543ECAC

243544288 1212192

244756480 243638272 3 GPT part - EBD0A0A2-B9E5-4433-87C0-68B6B72699C7

488394752 2383

488397135 32 Sec GPT table

488397167 1 Sec GPT header

Loner T

Level 9

59,471 points

Nov 6, 2014 9:36 AM in response to AJVeMacV

This looks correct. Was there a message from Testdisk about using a backup sector to build the NTFS header?

AJVeMacV Author

Level 1

0 points

Nov 6, 2014 9:42 AM in response to Loner T

I dont recall seeing that message. Do I get that before search

Loner T

Level 9

59,471 points

Nov 6, 2014 9:43 AM in response to AJVeMacV

If you created a log for Testdisk, it should be in there.

Yosemite Upgrade broke bootcamp partition