AJVeMacV

Q: Yosemite Upgrade broke bootcamp partition

I am having Mac Book Pro A1278. mid 2010 after I upgraded os to OS x Yosemite. I am missing my partition in Bootcamp and no longer able to switch back to W7

S-Reddys-MacBook-Pro:~ Sreddy$ diskutil list

/dev/disk0

   #:                       TYPE NAME                    SIZE       IDENTIFIER

   0:      GUID_partition_scheme                        *250.1 GB   disk0

   1:                        EFI EFI                     209.7 MB   disk0s1

   2:                  Apple_HFS Macintosh HD            124.5 GB   disk0s2

   3:                 Apple_Boot Recovery HD             650.0 MB   disk0s3

   4:       Microsoft Basic Data                         124.7 GB   disk0s4

S-Reddys-MacBook-Pro:~ Sreddy$ diskutil cs list

No CoreStorage logical volume groups found

S-Reddys-MacBook-Pro:~ Sreddy$

S-Reddys-MacBook-Pro:~ Sreddy$ sudo gpt -vv -r show /dev/disk0

Password:

gpt show: /dev/disk0: mediasize=250059350016; sectorsize=512; blocks=488397168

gpt show: /dev/disk0: Suspicious MBR at sector 0

gpt show: /dev/disk0: Pri GPT at sector 1

gpt show: /dev/disk0: Sec GPT at sector 488397167

      start       size  index  contents

          0          1         MBR

          1          1         Pri GPT header

          2         32         Pri GPT table

         34          6        

         40     409600      1  GPT part - C12A7328-F81F-11D2-BA4B-00A0C93EC93B

     409640  243134648      2  GPT part - 48465300-0000-11AA-AA11-00306543ECAC

  243544288    1269536      3  GPT part - 426F6F74-0000-11AA-AA11-00306543ECAC

  244813824  243582976      4  GPT part - EBD0A0A2-B9E5-4433-87C0-68B6B72699C7

  488396800        335        

  488397135         32         Sec GPT table

  488397167          1         Sec GPT header

 

 

S-Reddys-MacBook-Pro:~ Sreddy$ sudo fdisk /dev/disk0

Disk: /dev/disk0 geometry: 30401/255/63 [488397168 sectors]

Signature: 0xAA55

         Starting       Ending

#: id  cyl  hd sec -  cyl  hd sec [     start -       size]

------------------------------------------------------------------------

1: EE 1023 254  63 - 1023 254  63 [         1 -     409639] <Unknown ID>

2: AF 1023 254  63 - 1023 254  63 [    409640 -  243134648] HFS+       

3: AB 1023 254  63 - 1023 254  63 [ 243544288 -    1269536] Darwin Boot

4: 0C 1023 254  63 - 1023 254  63 [ 244813824 -  243582976] Win95 FAT32L

 

 

S-Reddys-MacBook-Pro:~ Sreddy$ sudo dd if=/dev/rdisk0s4 count=1 2>/dev/null | hexdump -C

00000000  03 02 1a 05 00 a0 81 d1  30 18 06 09 2a 86 48 86  |........0...*.H.|

00000010  f7 0d 01 09 03 31 0b 06  09 2b 06 01 04 01 82 37  |.....1...+.....7|

00000020  0a 01 30 1c 06 0a 2b 06  01 04 01 82 37 02 01 0b  |..0...+.....7...|

00000030  31 0e 30 0c 06 0a 2b 06  01 04 01 82 37 02 01 15  |1.0...+.....7...|

00000040  30 23 06 09 2a 86 48 86  f7 0d 01 09 04 31 16 04  |0#..*.H......1..|

00000050  14 ce 03 bd 75 10 1c c5  42 53 e7 4b 85 8f 0e 7a  |....u...BS.K...z|

00000060  9c df c3 4c 06 30 72 06  0a 2b 06 01 04 01 82 37  |...L.0r..+.....7|

00000070  02 01 0c 31 64 30 62 a0  44 80 42 00 57 00 69 00  |...1d0b.D.B.W.i.|

00000080  6e 00 64 00 6f 00 77 00  73 00 20 00 45 00 78 00  |n.d.o.w.s. .E.x.|

00000090  70 00 72 00 65 00 73 00  73 00 20 00 53 00 65 00  |p.r.e.s.s. .S.e.|

000000a0  63 00 75 00 72 00 69 00  74 00 79 00 20 00 43 00  |c.u.r.i.t.y. .C.|

000000b0  61 00 74 00 61 00 6c 00  6f 00 67 00 73 a1 1a 80  |a.t.a.l.o.g.s...|

000000c0  18 68 74 74 70 3a 2f 2f  77 77 77 2e 6d 69 63 72  |.http://www.micr|

000000d0  6f 73 6f 66 74 2e 63 6f  6d 30 0d 06 09 2a 86 48  |osoft.com0...*.H|

000000e0  86 f7 0d 01 01 01 05 00  04 82 01 00 4a 67 b6 21  |............Jg.!|

000000f0  ef f3 b2 04 ce dc cb fc  88 1b 32 c1 c6 a8 bf c1  |..........2.....|

00000100  60 44 f9 05 58 dd ff f8  01 d8 a2 05 c5 0d 17 45  |`D..X..........E|

00000110  88 4f 94 81 b0 b1 2d 6e  fd bb ea 72 98 03 ae ed  |.O....-n...r....|

00000120  84 8a ae c9 d5 ed 2d 87  81 c5 22 fc 63 c5 5c b0  |......-...".c.\.|

00000130  4a 25 e8 28 d0 62 80 5a  cd 85 14 3c be eb eb 3a  |J%.(.b.Z...<...:|

00000140  f6 ad 2a 11 32 ea 5b 5b  b0 c4 6d 64 9c 43 90 cc  |..*.2.[[..md.C..|

00000150  78 da 59 55 b1 37 5c 30  35 1c e4 29 0b a6 68 22  |x.YU.7\05..)..h"|

00000160  69 a0 e6 e5 0e b5 29 f9  c7 90 7a 57 58 d6 99 14  |i.....)...zWX...|

00000170  b8 63 54 6e b7 d3 1d bd  99 0a 1a ec e5 3f e1 89  |.cTn.........?..|

00000180  25 60 5b 8f 7e 20 1d 7a  e8 4b f4 66 db e0 5d 68  |%`[.~ .z.K.f..]h|

00000190  35 c9 dc 84 89 f0 ba 4b  1c a8 d8 96 c6 f0 51 09  |5......K......Q.|

000001a0  1c f9 d2 24 1a 15 81 37  02 24 fd 01 c3 0a 6c 3c  |...$...7.$....l<|

000001b0  8b c3 75 7e 9a 9b 45 f0  37 52 00 c4 2e 08 3f 6e  |..u~..E.7R....?n|

000001c0  d5 aa 63 12 a6 85 db 06  c2 e1 32 81 00 e0 80 80  |..c.......2.....|

000001d0  41 20 8c d3 c0 f5 6c 62  d2 8a 1d 8f 58 a3 9d 77  |A ....lb....X..w|

000001e0  f0 b2 29 37 96 21 11 f9  94 6b dc 52 a1 82 02 1d  |..)7.!...k.R....|

000001f0  30 82 02 19 06 09 2a 86  48 86 f7 0d 01 09 06 31  |0.....*.H......1|

00000200

MacBook Pro, OS X Yosemite (10.10)

Posted on Nov 3, 2014 1:40 PM

Close

Q: Yosemite Upgrade broke bootcamp partition

  • All replies
  • Helpful answers

Previous Page 2 of 3 last Next
  • by Loner T,

    Loner T Loner T Nov 5, 2014 5:44 AM in response to AJVeMacV
    Level 7 (24,202 points)
    Safari
    Nov 5, 2014 5:44 AM in response to AJVeMacV

    1. Please post the output of diskutil list.

    2. The GPT start/size are correct as shown in your Testdisk output.

    3. Were there any messages after the test disk output?

    4. Another poster has a similar thread, and the NTFS header according to Testdisk is in the OSX partition - Bootcamp not working after Yosemite update.

  • by AJVeMacV,

    AJVeMacV AJVeMacV Nov 5, 2014 10:01 AM in response to Loner T
    Level 1 (0 points)
    Nov 5, 2014 10:01 AM in response to Loner T

    I did not see any message after test disk output. Do you want me to run it again

     

    diskutil list

    /dev/disk0

       #:                       TYPE NAME                    SIZE       IDENTIFIER

       0:      GUID_partition_scheme                        *250.1 GB   disk0

       1:                        EFI EFI                     209.7 MB   disk0s1

       2:                  Apple_HFS Macintosh HD            124.5 GB   disk0s2

       3:       Microsoft Basic Data

  • by AJVeMacV,

    AJVeMacV AJVeMacV Nov 5, 2014 10:02 AM in response to AJVeMacV
    Level 1 (0 points)
    Nov 5, 2014 10:02 AM in response to AJVeMacV

    diskutil list

    /dev/disk0

       #:                       TYPE NAME                    SIZE       IDENTIFIER

       0:      GUID_partition_scheme                        *250.1 GB   disk0

       1:                        EFI EFI                     209.7 MB   disk0s1

       2:                  Apple_HFS Macintosh HD            124.5 GB   disk0s2

       3:       Microsoft Basic Data                         124.7 GB   disk0s3

  • by Loner T,

    Loner T Loner T Nov 5, 2014 10:04 AM in response to AJVeMacV
    Level 7 (24,202 points)
    Safari
    Nov 5, 2014 10:04 AM in response to AJVeMacV

    Let us confirm the Testdisk output. Unfortunately, it means you have to run it again.

  • by AJVeMacV,

    AJVeMacV AJVeMacV Nov 6, 2014 7:39 AM in response to Loner T
    Level 1 (0 points)
    Nov 6, 2014 7:39 AM in response to Loner T

    New Testdisk out put

     

    TestDisk 7.0-WIP, Data Recovery Utility, October 2014

    Christophe GRENIER <grenier@cgsecurity.org>

    http://www.cgsecurity.org

     

    Disk /dev/rdisk0 - 250 GB / 232 GiB - 488397168 sectors (RO)

     

    The harddisk (250 GB / 232 GiB) seems too small! (< 374 GB / 349 GiB)

    Check the harddisk size: HD jumpers settings, BIOS detection...

     

    The following partitions can't be recovered:

         Partition               Start        End    Size in sectors

    >  MS Data                367552960  611191231  243638272

       MS Data                385240064  628878335  243638272

       MS Data                415922408  499804391   83881984

       MS Data                438955304  522837287   83881984

       MS Data                438955400  522837383   83881984

       MS Data                438955800  522837783   83881984

       MS Data                438955848  522837831   83881984

       MS Data                438955896  522837879   83881984

       MS Data                445868152  529750135   83881984

       MS Data                485191216  569073199   83881984

     

    [ Continue ]

    NTFS, blocksize=4096, 124 GB / 116 GiB

  • by AJVeMacV,

    AJVeMacV AJVeMacV Nov 6, 2014 7:48 AM in response to AJVeMacV
    Level 1 (0 points)
    Nov 6, 2014 7:48 AM in response to AJVeMacV

    TestDisk 7.0-WIP, Data Recovery Utility, October 2014

    Christophe GRENIER <grenier@cgsecurity.org>

    http://www.cgsecurity.org

     

    Disk /dev/rdisk0 - 250 GB / 232 GiB - 488397168 sectors (RO)

         Partition               Start        End    Size in sectors

    >P EFI System                    40     409639     409600 [EFI]

    D Mac HFS                   409640  243544287  243134648

    D MS Data                123914689  367552960  243638272

    D MS Data                141601793  385240064  243638272

    D Mac HFS                243544288  244813823    1269536

    D MS Data                244756480  488394751  243638272

    D Mac HFS                244985164  253373773    8388610 [    D^A]

    D MS Data                257988907  258009645      20739 [NO NAME]

    D MS Data                274959371  274965544       6174

    D MS Data                274965544  274971717       6174 [Boot]

    D MS Data                274965563  274971736       6174

    D MS Data                274971736  274977909       6174 [Boot]

    D MS Data                274971755  274977928       6174

    D MS Data                274977928  274984101       6174 [Boot]

    D MS Data                274986984  274989863       2880 [EFISECTOR]

    D MS Data                275754059  275760232       6174

    D MS Data                275760232  275766405       6174 [Boot]

    D MS Data                292496336  292499215       2880 [EFISECTOR]

    D MS Data                303660208  303663087       2880 [EFISECTOR]

    D MS Data                328732224  345390655   16658432

    D MS Data                332040425  415922408   83881984

    D MS Data                335574592  339393471    3818880

    D MS Data                336657984  336674367      16384 [NO NAME]

    D MS Data                336712768  336891927     179160 [NO NAME]

    D MS Data                339393471  343212350    3818880

    D MS Data                345390655  362049086   16658432

    D MS Data                355073321  438955304   83881984

    D MS Data                355073417  438955400   83881984

    D MS Data                355073817  438955800   83881984

    D MS Data                355073865  438955848   83881984

    D MS Data                355073913  438955896   83881984

    D MS Data                361986169  445868152   83881984

    D MS Data                369426768  369429647       2880 [EFISECTOR]

    D MS Data                372702209  382394065    9691857 [NO NAME]

    D MS Data                387407304  387410183       2880 [EFISECTOR]

    D MS Data                389974472  389977351       2880 [EFISECTOR]

    D MS Data                397477696  397480575       2880 [EFISECTOR]

    Structure: Ok.  Use Up/Down Arrow keys to select partition.

    Use Left/Right Arrow keys to CHANGE partition characteristics:

                    P=Primary  D=Deleted

    Keys A: add partition, L: load backup, T: change type, P: list files,

         Enter: to continue

    FAT32, blocksize=512, 209 MB / 200 MiB

  • by Loner T,

    Loner T Loner T Nov 6, 2014 7:50 AM in response to AJVeMacV
    Level 7 (24,202 points)
    Safari
    Nov 6, 2014 7:50 AM in response to AJVeMacV

    Can you check the files in the following partitions?

     

    D MS Data                123914689  367552960  243638272

    D MS Data                141601793  385240064  243638272

     

    D MS Data                244756480  488394751  243638272

  • by AJVeMacV,

    AJVeMacV AJVeMacV Nov 6, 2014 7:54 AM in response to AJVeMacV
    Level 1 (0 points)
    Nov 6, 2014 7:54 AM in response to AJVeMacV

    TestDisk 7.0-WIP, Data Recovery Utility, October 2014

    Christophe GRENIER <grenier@cgsecurity.org>

    http://www.cgsecurity.org

       P EFI System                    40     409639     409600 [EFI]

    Directory /

     

    >drwxr-xr-x     0     0         0 15-May-2010 10:10 EFI

    drwxr-xr-x     0     0         0 15-May-2010 10:10 .Trashes

    drwxr-xr-x     0     0         0 16-May-2010 07:43 .fseventsd

     

     

    TestDisk 7.0-WIP, Data Recovery Utility, October 2014

    Christophe GRENIER <grenier@cgsecurity.org>

    http://www.cgsecurity.org

     

         Mac HFS                   409640  243544287  243134648

     

     

     

    Support for this filesystem hasn't been enable during compilation.

     

    TestDisk 7.0-WIP, Data Recovery Utility, October 2014

    Christophe GRENIER <grenier@cgsecurity.org>

    http://www.cgsecurity.org

     

         MS Data                123914689  367552960  243638272

     

     

     

    Can't open filesystem. Filesystem seems damaged.

     

     

    TestDisk 7.0-WIP, Data Recovery Utility, October 2014

    Christophe GRENIER <grenier@cgsecurity.org>

    http://www.cgsecurity.org

     

         MS Data                141601793  385240064  243638272

     

     

     

    Can't open filesystem. Filesystem seems damaged.

     

    TestDisk 7.0-WIP, Data Recovery Utility, October 2014

    Christophe GRENIER <grenier@cgsecurity.org>

    http://www.cgsecurity.org

     

         Mac HFS                243544288  244813823    1269536

     

     

     

    Support for this filesystem hasn't been enable during compilation.

     

     

    TestDisk 7.0-WIP, Data Recovery Utility, October 2014

    Christophe GRENIER <grenier@cgsecurity.org>

    http://www.cgsecurity.org

         MS Data                244756480  488394751  243638272

    Directory /

     

    >dr-xr-xr-x     0     0         0 30-Oct-2014 22:57 .

    dr-xr-xr-x     0     0         0 30-Oct-2014 22:57 ..

    dr-xr-xr-x     0     0         0  8-Jun-2014 19:00 $Recycle.Bin

    dr-xr-xr-x     0     0         0  8-Jun-2014 08:13 Intel

    dr-xr-xr-x     0     0         0  5-Aug-2014 11:24 NVIDIA

    dr-xr-xr-x     0     0         0 13-Jul-2009 22:20 PerfLogs

    dr-xr-xr-x     0     0         0 30-Oct-2014 22:57 Program Files

    dr-xr-xr-x     0     0         0 20-Oct-2014 10:47 Program Files (x86)

    dr-xr-xr-x     0     0         0 30-Oct-2014 22:21 ProgramData

    dr-xr-xr-x     0     0         0  8-Jun-2014 06:56 Recovery

    dr-xr-xr-x     0     0         0 30-Oct-2014 22:50 System Volume Information

    dr-xr-xr-x     0     0         0 30-Sep-2014 09:38 Users

    dr-xr-xr-x     0     0         0 30-Oct-2014 23:06 Windows

    -r--r--r--     0     0      2058 30-Oct-2014 22:55 RHDSetup.log

    -r--r--r--     0     0 3012501504 30-Oct-2014 23:00 hiberfil.sys

    -r--r--r--     0     0 4016672768 30-Oct-2014 23:00 pagefile.sys

     

    TestDisk 7.0-WIP, Data Recovery Utility, October 2014

    Christophe GRENIER <grenier@cgsecurity.org>

    http://www.cgsecurity.org

     

         Mac HFS                244985164  253373773    8388610 [    D^A]

     

     

     

    Support for this filesystem hasn't been enable during compilation.

  • by AJVeMacV,

    AJVeMacV AJVeMacV Nov 6, 2014 7:56 AM in response to AJVeMacV
    Level 1 (0 points)
    Nov 6, 2014 7:56 AM in response to AJVeMacV

    TestDisk 7.0-WIP, Data Recovery Utility, October 2014

    Christophe GRENIER <grenier@cgsecurity.org>

    http://www.cgsecurity.org

         MS Data                257988907  258009645      20739 [NO NAME]

    Directory /

     

    >dr-xr-xr-x     0     0 2986088216 11-May-1941 15:51 V> # Y>.V

    -r-xr-xr-x     0     0 4164594992 29-Nov-1947 21:15 ^]s}  +!.)(N

    drwxr-xr-x     0     0 2598875031 16-Jan-1993 07:13   1"~Z ~V~Ro

    dr-xr-xr-x     0     0 568694710  3-Dec-1962 10:03  PrN=  ^^N5

    -r-xr-xr-x     0     0 2276153308 15-Dec-1935 21:35  3p~L  F.~Y@{

    dr-xr-xr-x     0     0 597286355 15-Sep-1960 09:58 ~J~T^Z<~\b~Tf.~Y

    dr-xr-xr-x     0     0 1246707698  9-Jan-1984 14:48 ^Tg~A zT.~[ ^\

    -r-xr-xr-x     0     0 4187222305  4-Mar-1917 06:18  c `~Q  q

    -r-xr-xr-x     0     0 2081681720  5-Apr-2003 21:17 ~J  63. ~Y

    -r-xr-xr-x     0     0 2074953569 24-Nov-1906 03:31 ~WG    ~^^_

    dr-xr-xr-x     0     0 4046970920 19-Nov-2000 23:47 W&9~ ^].

    -r-xr-xr-x     0     0 792833475  4-Jan-2029 00:02 Q~^J ɥQ.

    -r-xr-xr-x     0     0 3966235218 25-Jan-1903 22:47 wZ S ^N. h~Z

     

     

    TestDisk 7.0-WIP, Data Recovery Utility, October 2014

    Christophe GRENIER <grenier@cgsecurity.org>

    http://www.cgsecurity.org

     

         MS Data                274959371  274965544       6174

     

     

     

    Can't open filesystem. Filesystem seems damaged.

     

     

    TestDisk 7.0-WIP, Data Recovery Utility, October 2014

    Christophe GRENIER <grenier@cgsecurity.org>

    http://www.cgsecurity.org

         MS Data                274965544  274971717       6174 [Boot]

    Directory /

     

    >dr-xr-xr-x     0     0         0 15-Feb-2005 15:33 .

    dr-xr-xr-x     0     0         0 15-Feb-2005 15:33 ..

    dr-xr-xr-x     0     0         0 15-Feb-2005 15:33 System Volume Information

     

     

    TestDisk 7.0-WIP, Data Recovery Utility, October 2014

    Christophe GRENIER <grenier@cgsecurity.org>

    http://www.cgsecurity.org

     

         MS Data                274965563  274971736       6174

     

     

     

    Can't open filesystem. Filesystem seems damaged.

  • by AJVeMacV,

    AJVeMacV AJVeMacV Nov 6, 2014 7:59 AM in response to AJVeMacV
    Level 1 (0 points)
    Nov 6, 2014 7:59 AM in response to AJVeMacV

    TestDisk 7.0-WIP, Data Recovery Utility, October 2014

    Christophe GRENIER <grenier@cgsecurity.org>

    http://www.cgsecurity.org

         MS Data                274971736  274977909       6174 [Boot]

    Directory /

     

    >dr-xr-xr-x     0     0         0 15-Feb-2005 15:33 .

    dr-xr-xr-x     0     0         0 15-Feb-2005 15:33 ..

    dr-xr-xr-x     0     0         0 15-Feb-2005 15:33 System Volume Information

     

     

     

     

     

     

    TestDisk 7.0-WIP, Data Recovery Utility, October 2014

    Christophe GRENIER <grenier@cgsecurity.org>

    http://www.cgsecurity.org

     

         MS Data                274971755  274977928       6174

     

     

     

    Can't open filesystem. Filesystem seems damaged.

     

    TestDisk 7.0-WIP, Data Recovery Utility, October 2014

    Christophe GRENIER <grenier@cgsecurity.org>

    http://www.cgsecurity.org

         MS Data                274977928  274984101       6174 [Boot]

    Directory /

     

    >dr-xr-xr-x     0     0         0 15-Feb-2005 15:33 .

    dr-xr-xr-x     0     0         0 15-Feb-2005 15:33 ..

    dr-xr-xr-x     0     0         0 15-Feb-2005 15:33 System Volume Information

     

     

     

    TestDisk 7.0-WIP, Data Recovery Utility, October 2014

    Christophe GRENIER <grenier@cgsecurity.org>

    http://www.cgsecurity.org

         MS Data                274986984  274989863       2880 [EFISECTOR]

    Directory /

     

    >drwxr-xr-x     0     0         0 13-Jul-2009 10:20 EFI

  • by AJVeMacV,

    AJVeMacV AJVeMacV Nov 6, 2014 8:07 AM in response to AJVeMacV
    Level 1 (0 points)
    Nov 6, 2014 8:07 AM in response to AJVeMacV

    TestDisk 7.0-WIP, Data Recovery Utility, October 2014

    Christophe GRENIER <grenier@cgsecurity.org>

    http://www.cgsecurity.org

         MS Data                275760232  275766405       6174 [Boot]

    Directory /

     

    >dr-xr-xr-x     0     0         0 15-Feb-2005 15:33 .

    dr-xr-xr-x     0     0         0 15-Feb-2005 15:33 ..

    dr-xr-xr-x     0     0         0 15-Feb-2005 15:33 System Volume Information

     

     

    TestDisk 7.0-WIP, Data Recovery Utility, October 2014

    Christophe GRENIER <grenier@cgsecurity.org>

    http://www.cgsecurity.org

         MS Data                303660208  303663087       2880 [EFISECTOR]

    Directory /

     

    >drwxr-xr-x     0     0         0 19-Nov-2010 17:19 EFI

     

     

    TestDisk 7.0-WIP, Data Recovery Utility, October 2014

    Christophe GRENIER <grenier@cgsecurity.org>

    http://www.cgsecurity.org

     

         MS Data                328732224  345390655   16658432

     

     

     

    Can't open filesystem. Filesystem seems damaged.

    TestDisk 7.0-WIP, Data Recovery Utility, October 2014

    Christophe GRENIER <grenier@cgsecurity.org>

    http://www.cgsecurity.org

     

         MS Data                332040425  415922408   83881984

     

     

     

    Can't open filesystem. Filesystem seems damaged.

     

    TestDisk 7.0-WIP, Data Recovery Utility, October 2014

    Christophe GRENIER <grenier@cgsecurity.org>

    http://www.cgsecurity.org

     

         MS Data                335574592  339393471    3818880

     

     

     

    Can't open filesystem. Filesystem seems damaged.

     

    TestDisk 7.0-WIP, Data Recovery Utility, October 2014

    Christophe GRENIER <grenier@cgsecurity.org>

    http://www.cgsecurity.org

         MS Data                336657984  336674367      16384 [NO NAME]

    Directory /

     

    >drwxr-xr-x     0     0         0 26-Dec-2013 10:14 ACPI

    -rwxr-xr-x     0     0   2949174 23-Dec-2013 11:14 LOGO1.BMP

    -rwxr-xr-x     0     0   2949176 26-Dec-2013 08:53 LOGO2.BMP

    drwxr-xr-x     0     0         0 26-Dec-2013 10:14 SMBIOS

    -rwxr-xr-x     0     0         0 23-Dec-2013 11:14 UEFI_CFG.TXT

    drwxr-xr-x     0     0         0 26-Dec-2013 10:14 Windows

     

    TestDisk 7.0-WIP, Data Recovery Utility, October 2014

    Christophe GRENIER <grenier@cgsecurity.org>

    http://www.cgsecurity.org

         MS Data                336712768  336891927     179160 [NO NAME]

    Directory /

     

    >-rwxr-xr-x     0     0  77882396 23-Aug-2013 13:57 MMOS.WIM

    drwxr-xr-x     0     0         0 26-Dec-2013 10:14 Windows

    TestDisk 7.0-WIP, Data Recovery Utility, October 2014

    Christophe GRENIER <grenier@cgsecurity.org>

    http://www.cgsecurity.org

     

         MS Data                339393471  343212350    3818880

     

     

     

    Can't open filesystem. Filesystem seems damaged.

     

     

    TestDisk 7.0-WIP, Data Recovery Utility, October 2014

    Christophe GRENIER <grenier@cgsecurity.org>

    http://www.cgsecurity.org

         MS Data                369426768  369429647       2880 [EFISECTOR]

    Directory /

     

    >-r-xr-xr-x     0     0 3933229385 26-Jan-2033 05:02 u^Y  6B    

    drwxr-xr-x     0     0 1625561160  8-Dec-1928 16:19 G#^G={ ^K. kY

    -r-xr-xr-x     0     0 2903412641 15-Oct-2004 12:27 ^Py  ) W.w6

    -rwxr-xr-x     0     0 980364044 18-Dec-2016 09:13 O.3(U

    drwxr-xr-x     0     0 1218145006 28-Nov-1905 17:55  * qu

    drwxr-xr-x     0     0 2127540711  3-Dec-1982 13:02 ~H tۛ8

    -rwxr-xr-x     0     0 1632145441  4-Jun-1930 18:39 s~VrG~V B^_.J

    dr-xr-xr-x     0     0 1050748806 17-Dec-2034 03:09 m  `

    drwxr-xr-x     0     0 3943687189 20-Mar-2020 09:01   ? | .^Y^[

    dr-xr-xr-x     0     0 2636937548 15-Dec-1956 02:54  .7~R~D

    drwxr-xr-x     0     0 3249601521 21-May-1993 05:18  l A CK&

    drwxr-xr-x     0     0 2253251338 14-Sep-1926 08:32 ~F@F G .%~D

    dr-xr-xr-x     0     0 1629808513 24-Jan-1999 00:52 ^[ ^C ~Lg^C.9?

    dr-xr-xr-x     0     0 549472278 31-Jul-1924 17:16 E~Y^R1] #.i~^

    drwxr-xr-x     0     0 2991775434 12-Jun-1927 22:57 ~N ~D+.^_~]

    dr-xr-xr-x     0     0 726954800 17-Jun-1958 00:59  /A

    drwxr-xr-x     0     0 2478990977 22-Apr-1945 02:37 ^QD"~I^U~I .~L ^^

    dr-xr-xr-x     0     0 3251519916 15-Mar-1923 19:02   6~A .~^@<

    drwxr-xr-x     0     0 3362401299 26-Aug-1934 16:02 ~P^_9 ^K X.^U

    -rwxr-xr-x     0     0 1418827248  3-Dec-1935 00:07   {    e

    dr-xr-xr-x     0     0 4242120231 12-Apr-2036 21:50 ~_-[~F'  Y !

    drwxr-xr-x     0     0 569312117 21-Sep-2011 23:46

    -rwxr-xr-x     0     0 1550982237 10-Jul-1912 11:28   Ww

    -r-xr-xr-x     0     0 2751639310 16-Dec-1949 04:51 ,rEr F >.~Yv

    dr-xr-xr-x     0     0 912757579 26-Aug-1949 20:06   ^[~[ ?^N.

    drwxr-xr-x     0     0 2664163184 10-Dec-1964 22:47 %~ÒFq .Uxa

    dr-xr-xr-x     0     0 2216600460 17-Jan-1988 00:47  ~L rY ."~S

    -rwxr-xr-x     0     0 654362450  5-Sep-1905 13:50  ^Y  ^KF. ^R

    dr-xr-xr-x     0     0 3340059526 18-Jun-1959 08:44 ʧ #܁   o

    drwxr-xr-x     0     0 4188514084  2-Oct-1941 21:58 ي^D ^[      @.pv~S

    -r-xr-xr-x     0     0 3398007946 29-Jan-1987 08:13 F:    . ~Q

    dr-xr-xr-x     0     0 1416080814 30-Oct-2007 05:17   ^B^B

    dr-xr-xr-x     0     0 2313368380  3-Apr-1969 21:59  ^? u  r.iw

    -rwxr-xr-x     0     0 662853633 19-Nov-1986 14:02 ~Q^Z^S`i~Sn. d

    dr-xr-xr-x     0     0 2065672080 20-Apr-1962 19:59 -~^

    -rwxr-xr-x     0     0 2523829409  4-Jan-2016 21:39  KɚF~P..~R

    dr-xr-xr-x     0     0 2046264083 14-Jul-1990 11:19 H 8 +) ~U~I

    -r-xr-xr-x     0     0 2635340235 28-Nov-1915 23:16 p &&~D.~Vd~S

    dr-xr-xr-x     0     0 4289428158 18-Apr-1959 22:27 ~M~^ ^\V~\z.ן^\

  • by Loner T,

    Loner T Loner T Nov 6, 2014 8:38 AM in response to AJVeMacV
    Level 7 (24,202 points)
    Safari
    Nov 6, 2014 8:38 AM in response to AJVeMacV

    In your screen shots,      MS Data                244756480  488394751  243638272

    has your files. This is what was used and despite Testdisk reporting the files and NTFS header, when you run the dd it does not show the NTFS header that Testdisk found.

     

    Can you run sudo gdisk /dev/disk0 and post the output of 'p' command?

     

    Can you verify this what you currently have?

     

         409640  243134648      2  GPT part - 48465300-0000-11AA-AA11-00306543ECAC

      243544288    1212192        

      244756480  243638272      3  GPT part - EBD0A0A2-B9E5-4433-87C0-68B6B72699C7

  • by AJVeMacV,

    AJVeMacV AJVeMacV Nov 6, 2014 9:39 AM in response to Loner T
    Level 1 (0 points)
    Nov 6, 2014 9:39 AM in response to Loner T

    sudo gdisk /dev/disk0

    Password:

    GPT fdisk (gdisk) version 0.8.10

     

    Warning: Devices opened with shared lock will not have their

    partition table automatically reloaded!

    Partition table scan:

      MBR: hybrid

      BSD: not present

      APM: not present

      GPT: present

     

    Found valid GPT with hybrid MBR; using GPT.

     

    Command (? for help): p

    Disk /dev/disk0: 488397168 sectors, 232.9 GiB

    Logical sector size: 512 bytes

    Disk identifier (GUID): 0000677A-6BE0-0000-DF26-0000FF3D0000

    Partition table holds up to 128 entries

    First usable sector is 34, last usable sector is 488397134

    Partitions will be aligned on 8-sector boundaries

    Total free space is 1214581 sectors (593.1 MiB)

     

    Number  Start (sector)    End (sector)  Size       Code  Name

       1              40          409639   200.0 MiB   EF00  EFI system partition

       2          409640       243544287   115.9 GiB   AF00  Customer

       3       244756480       488394751   116.2 GiB   0700  Microsoft basic data

     

     

     

    sudo gpt -vv -r show /dev/disk0

    Password:

    gpt show: /dev/disk0: mediasize=250059350016; sectorsize=512; blocks=488397168

    gpt show: /dev/disk0: Suspicious MBR at sector 0

    gpt show: /dev/disk0: Pri GPT at sector 1

    gpt show: /dev/disk0: Sec GPT at sector 488397167

          start       size  index  contents

              0          1         MBR

              1          1         Pri GPT header

              2         32         Pri GPT table

             34          6        

             40     409600      1  GPT part - C12A7328-F81F-11D2-BA4B-00A0C93EC93B

         409640  243134648      2  GPT part - 48465300-0000-11AA-AA11-00306543ECAC

      243544288    1212192        

      244756480  243638272      3  GPT part - EBD0A0A2-B9E5-4433-87C0-68B6B72699C7

      488394752       2383        

      488397135         32         Sec GPT table

      488397167          1         Sec GPT header

  • by Loner T,

    Loner T Loner T Nov 6, 2014 9:36 AM in response to AJVeMacV
    Level 7 (24,202 points)
    Safari
    Nov 6, 2014 9:36 AM in response to AJVeMacV

    This looks correct. Was there a message from Testdisk about using a backup sector  to build the NTFS header?

  • by AJVeMacV,

    AJVeMacV AJVeMacV Nov 6, 2014 9:42 AM in response to Loner T
    Level 1 (0 points)
    Nov 6, 2014 9:42 AM in response to Loner T

    I dont recall seeing that message. Do I get that before search

Previous Page 2 of 3 last Next