Can't find Bootcamp Partition

Question

Can't find Bootcamp Partition

Hi, I have similar problems with the Bootcamp issue that everyone has after installing Yosemite. Can you please help me? I'm really not at all a techy person and I've read a lot of threads on this issue and I just don't understand how to do any of this. I've download Testdisk and GDisk but I don't know what to do from there. I don't want to mess up any of my files so can you take me through this step by step? Sorry if I ask stupid questions because I really don't know anything about computers in general.

Jonathans-MacBook-Pro:~ jonathanlee$ diskutil list

/dev/disk0

#: TYPE NAME SIZE IDENTIFIER

0: GUID_partition_scheme *251.0 GB disk0

1: EFI EFI 209.7 MB disk0s1

2: Apple_CoreStorage 125.6 GB disk0s2

3: Apple_Boot Recovery HD 650.0 MB disk0s3

4: Microsoft Basic Data 60.0 GB disk0s4

/dev/disk1

#: TYPE NAME SIZE IDENTIFIER

0: Apple_HFS Macintosh HD *125.2 GB disk1

Logical Volume on disk0s2

B926FC93-2E73-42BF-B9CB-944BCA78B53E

Unlocked Encrypted

/dev/disk2

#: TYPE NAME SIZE IDENTIFIER

0: FDisk_partition_scheme *16.0 GB disk2

1: DOS_FAT_32 WININSTALL 16.0 GB disk2s1

/dev/disk3

#: TYPE NAME SIZE IDENTIFIER

0: GRMCPRXFRER_EN_DVD *3.3 GB disk3

/dev/disk4

#: TYPE NAME SIZE IDENTIFIER

0: Boot Camp *1.4 GB disk4

Jonathans-MacBook-Pro:~ jonathanlee$ diskutil cs list

CoreStorage logical volume groups (1 found)

|

+-- Logical Volume Group 65117B31-1276-4070-BC3E-FC635D8DD8F3

=========================================================

Name: Macintosh HD

Status: Online

Size: 125604552704 B (125.6 GB)

Free Space: 10313728 B (10.3 MB)

|

+-< Physical Volume 2F25B860-39AE-46FF-AF76-0F4A13C820D6

| ----------------------------------------------------

| Index: 0

| Disk: disk0s2

| Status: Online

| Size: 125604552704 B (125.6 GB)

|

+-> Logical Volume Family 204273EC-E1F7-4BEF-9E64-DA9A80003FBA

----------------------------------------------------------

Encryption Status: Unlocked

Encryption Type: AES-XTS

Conversion Status: Complete

Conversion Direction: -none-

Has Encrypted Extents: Yes

Fully Secure: Yes

Passphrase Required: Yes

|

+-> Logical Volume B926FC93-2E73-42BF-B9CB-944BCA78B53E

---------------------------------------------------

Disk: disk1

Status: Online

Size (Total): 125241917440 B (125.2 GB)

Conversion Progress: -none-

Revertible: Yes (unlock and decryption required)

LV Name: Macintosh HD

Volume Name: Macintosh HD

Content Hint: Apple_HFS

Jonathans-MacBook-Pro:~ jonathanlee$ sudo gpt -vv -r show /dev/disk0

Password:

gpt show: /dev/disk0: mediasize=251000193024; sectorsize=512; blocks=490234752

gpt show: /dev/disk0: Suspicious MBR at sector 0

gpt show: /dev/disk0: Pri GPT at sector 1

gpt show: /dev/disk0: Sec GPT at sector 490234751

start size index contents

0 1 MBR

1 1 Pri GPT header

2 32 Pri GPT table

34 6

40 409600 1 GPT part - C12A7328-F81F-11D2-BA4B-00A0C93EC93B

409640 245321392 2 GPT part - 53746F72-6167-11AA-AA11-00306543ECAC

245731032 1269536 3 GPT part - 426F6F74-0000-11AA-AA11-00306543ECAC

247000568 126046728

373047296 117186560 4 GPT part - EBD0A0A2-B9E5-4433-87C0-68B6B72699C7

490233856 863

490234719 32 Sec GPT table

490234751 1 Sec GPT header

Jonathans-MacBook-Pro:~ jonathanlee$ sudo fdisk /dev/disk0

Disk: /dev/disk0 geometry: 30515/255/63 [490234752 sectors]

Signature: 0xAA55

Starting Ending

#: id cyl hd sec - cyl hd sec [ start - size]

------------------------------------------------------------------------

1: EE 1023 254 63 - 1023 254 63 [ 1 - 409639] <Unknown ID>

2: AC 1023 254 63 - 1023 254 63 [ 409640 - 245321392] <Unknown ID>

3: AB 1023 254 63 - 1023 254 63 [ 245731032 - 1269536] Darwin Boot

4: 0C 1023 254 63 - 1023 254 63 [ 373047296 - 117186560] Win95 FAT32L

MacBook Pro with Retina display, OS X Yosemite (10.10)

Posted on Nov 17, 2014 4:28 PM

Reply

Answer 1

Loner T

Level 9

59,513 points

Nov 17, 2014 4:48 PM in response to jonathansayshi

From OS X terminal run sudo testdisk /dev/rdisk0 (or wherever you downloaded Testdisk to).

The goal is to find the 'lost' NTFS partition using the step-by-step link I posted on the previous thread.

Reply

Answer 2

Nov 17, 2014 5:58 PM in response to Loner T

So is there a way to run testdisk through OS X terminal? I typed that in and it didn't work. I do however have a completely different program called TestDisk and when I go onto it, there's 3 options called Create, Append, and No Log. Which do I choose to find the 'lost' NTFS partition?

Reply

Answer 3

Loner T

Level 9

59,513 points

Nov 17, 2014 6:15 PM in response to jonathansayshi

My Testdisk is located in the Downloads folder. The first you use Create, but subsequent iterations should use Append, so that you have a single log which can be used to look at history, if necessary.

Choose EFI partition type. It will show you the current configuration and Quick Search which you should execute. Look at each MS Data partition for familiar files. If the start/end/size in Testdisk match the current GPT4 start/end/size, it is unlikely to be valid, otherwise you bootcamp/windows should already be working.

sudo ~/Downloads/testdisk-7.0-WIP/testdisk

Password:

TestDisk 7.0-WIP, Data Recovery Utility, August 2014

Christophe GRENIER <grenier@cgsecurity.org>

http://www.cgsecurity.org

Reply

Answer 4

Nov 17, 2014 6:26 PM in response to Loner T

Okay, this is what I got.

TestDisk 7.0-WIP, Data Recovery Utility, October 2014

Christophe GRENIER <grenier@cgsecurity.org>

http://www.cgsecurity.org

Disk /dev/rdisk0 - 251 GB / 233 GiB - 490234752 sectors (RO)

Current partition structure:

Partition Start End Size in sectors

1 P EFI System 40 409639 409600 [EFI System Partitio

2 P Unknown 409640 245731031 245321392 [Macintosh HD]

3 P Mac Boot 245731032 247000567 1269536 [Recovery HD]

No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker

4 P MS Data 373047296 490233855 117186560 [BOOTCAMP]

P=Primary D=Deleted

>[Quick Search] [ Backup ]

Try to locate partition

Reply

Answer 5

Loner T

Level 9

59,513 points

Nov 17, 2014 7:09 PM in response to jonathansayshi

Run Quick Search.

Reply

Answer 6

Nov 17, 2014 7:13 PM in response to jonathansayshi

Do I just let it keep running?

Reply

Answer 7

Loner T

Level 9

59,513 points

Nov 17, 2014 7:26 PM in response to jonathansayshi

Quick Search will usually finish quickly. The Deeper Search can take hours.

Reply

Answer 8

Nov 17, 2014 7:45 PM in response to Loner T

Well, it's been going like this for a while.

TestDisk 7.0-WIP, Data Recovery Utility, October 2014

Christophe GRENIER <grenier@cgsecurity.org>

http://www.cgsecurity.org

Disk /dev/rdisk0 - 251 GB / 233 GiB - 490234752 sectors (RO)

Analyse sector 84312064/490234751: 00%

check_FAT: Unusual media descriptor (0xf0!=0xf8)

Warning: number of heads/cylinder mismatches 16 (FAT) != 1 (HD)

Warning: number of sectors per track mismatches 32 (FAT) != 1 (HD)

EFI System 40 409639 409600 [EFI]

The number after Analyse sector has been running ever since the post before this.

Reply

Answer 9

Loner T

Level 9

59,513 points

Nov 17, 2014 7:50 PM in response to jonathansayshi

This can take several hours. Please let it continue.

Reply

Answer 10

Nov 17, 2014 8:55 PM in response to Loner T

Okay, I got this.

TestDisk 7.0-WIP, Data Recovery Utility, October 2014

Christophe GRENIER <grenier@cgsecurity.org>

http://www.cgsecurity.org

Disk /dev/rdisk0 - 251 GB / 233 GiB - 490234752 sectors (RO)

The harddisk (251 GB / 233 GiB) seems too small! (< 310 GB / 289 GiB)

Check the harddisk size: HD jumpers settings, BIOS detection...

The following partitions can't be recovered:

Partition Start End Size in sectors

> MS Data 490233855 607420414 117186560

Mac HFS 490234708 491504243 1269536

[ Continue ]

NTFS, blocksize=4096, 59 GB / 55 GiB

Reply

Answer 11

Loner T

Level 9

59,513 points

Nov 18, 2014 3:30 AM in response to jonathansayshi

Please click on Continue.

Reply

Answer 12

Nov 18, 2014 9:07 AM in response to jonathansayshi

Now this.

TestDisk 7.0-WIP, Data Recovery Utility, October 2014

Christophe GRENIER <grenier@cgsecurity.org>

http://www.cgsecurity.org

Disk /dev/rdisk0 - 251 GB / 233 GiB - 490234752 sectors (RO)

Partition Start End Size in sectors

>P EFI System 40 409639 409600 [EFI]

D MS Data 3768328 247001088 243232761

D Mac HFS 245731032 247000567 1269536

D MS Data 247001088 490233848 243232761

D MS Data 373047296 490233855 117186560

D Mac HFS 488965176 490234711 1269536

Structure: Ok. Use Up/Down Arrow keys to select partition.

Use Left/Right Arrow keys to CHANGE partition characteristics:

P=Primary D=Deleted

Keys A: add partition, L: load backup, T: change type, P: list files,

Enter: to continue

FAT32, blocksize=512, 209 MB / 200 MiB

Reply

Answer 13

Loner T

Level 9

59,513 points

Nov 18, 2014 9:33 AM in response to jonathansayshi

The following two look the most interesting. My guess is the second entry makes the most sense and is the closest to the combined size of the current GPT4 and the Gap size. Please look in these two using 'P' to list files. Do not use left/right arrow keys.

D MS Data 3768328 247001088 243232761

D MS Data 247001088 490233848 243232761

This looks like your current GPT4 and is not very interesting because it is the incorrect size.

D MS Data 373047296 490233855 117186560

This is a small table that I use to verify if it looks reasonable.

GPT 3 Start	GPT 3 Size	GPT 3 End	NTFS Start	Byte Offset	NTFS Size	NTFS End
245731032	1269536	247000568	247001088	520	243232761	490233849

Reply

Answer 14

Nov 18, 2014 12:45 PM in response to Loner T

Okay so when I pressed P for

D MS Data 3768328 247001088 243232761

it told me that I can't view it because my filesystem is damaged.

When I pressed P for

D MS Data 247001088 490233848 243232761

it showed me

TestDisk 7.0-WIP, Data Recovery Utility, October 2014

Christophe GRENIER <grenier@cgsecurity.org>

http://www.cgsecurity.org

MS Data 247001088 490233848 243232761

Directory /

>dr-xr-xr-x 0 0 0 21-Oct-2014 14:58 .

dr-xr-xr-x 0 0 0 21-Oct-2014 14:58 ..

dr-xr-xr-x 0 0 0 13-Apr-2014 06:02 $Recycle.Bin

dr-xr-xr-x 0 0 0 14-Apr-2014 01:41 Boot

dr-xr-xr-x 0 0 0 13-Apr-2014 05:57 Intel

dr-xr-xr-x 0 0 0 10-Oct-2014 16:32 Nexon

dr-xr-xr-x 0 0 0 13-Jul-2009 20:20 PerfLogs

dr-xr-xr-x 0 0 0 11-Oct-2014 22:16 Program Files

dr-xr-xr-x 0 0 0 15-Oct-2014 08:27 Program Files (x86)

dr-xr-xr-x 0 0 0 20-Oct-2014 21:07 ProgramData

dr-xr-xr-x 0 0 0 13-Apr-2014 05:51 Recovery

dr-xr-xr-x 0 0 0 10-Aug-2014 23:21 Riot Games

dr-xr-xr-x 0 0 0 12-Nov-2014 09:19 System Volume Information

dr-xr-xr-x 0 0 0 25-Sep-2014 22:12 TEMP_PARALLELS_TOOLS

dr-xr-xr-x 0 0 0 13-Apr-2014 05:51 Users

dr-xr-xr-x 0 0 0 10-Oct-2014 16:16 Windows

-r--r--r-- 0 0 8192 14-Apr-2014 01:41 BOOTSECT.BAK

-r--r--r-- 0 0 2066 13-Apr-2014 05:55 RHDSetup.log

-r--r--r-- 0 0 383786 20-Nov-2010 19:23 bootmgr

-r--r--r-- 0 0 905 10-Oct-2014 15:46 console.log

-r--r--r-- 0 0 6370631680 23-Oct-2014 22:34 hiberfil.sys

-r--r--r-- 0 0 16220528640 13-Nov-2014 17:42 pagefile.sys

q to quit, : to select the current file, a to select all files

C to copy the selected files, c to copy the current file

Reply

Answer 15

Loner T

Level 9

59,513 points

Nov 18, 2014 2:52 PM in response to jonathansayshi

You can now quit from Testdisk since you have found the lost 'NTFS' partition.

From a similar thread Bootcamp partition has disappeared after upgrade to Yosemite 10.10

You have correct start/end/size as 247001088 490233848 243232761.

Use the following steps...

Rebuild using start/end offsets from Testdisk DeepSearch using GPT disk

Sudo gdisk /dev/rdisk0
P (print the full list of parts)
D (delete)
4 (part 4)
N (new part)
4 (part 4)
Start offset in bytes (start point for Bootcamp part)
+(Size offset as opposed to End offset)
0700 (Windows part type)
P (print list of all parts just to see what changes will be made)
W (Write the new GPT)
Y (Yes! really write the new GPT)

This will delete and re-write the GPT partition info for /dev/disk0s4.

Rebuild MBR to match the new GPT information thus resetting the Hybrid MBR

Sudo gdisk /dev/disk0
P (Print list of parts)
R (Recover)
H (chooses Hybrid)
Partitions numbers to be hybridized: 2 3 4
Y (boot flag 1)
N (part 2 flag)
N (part 3 flag)
Y (part 4 flag make bootable partition)
W (Write the new MBR)
Y (Yes! write the new MBR)
Reboot

Check all partitions with fdisk on reboot.

sudo fdisk /dev/disk0 (everything should match and Bootcamp should be visible everywhere)

You may need to use Windows Recovery to fix the windows partition once booted into Bootcamp. Keep a boot disk handy. May also require fixing the bootfiles with EasyBCD, so have that on hand as well to finish up recovery in the Windows partition.

Reply