Boot camp parition missing after upgrade to OS X Yosemite

Question

Boot camp parition missing after upgrade to OS X Yosemite

Lately I upgraded my Mac OS X to Yosemite, and my Boot camp parition is gone.

It would be nice if someone would help me to recover it.

$ diskutil list

/dev/disk0

#: TYPE NAME SIZE IDENTIFIER

0: GUID_partition_scheme *120.0 GB disk0

1: EFI EFI 209.7 MB disk0s1

2: Apple_HFS Macbook 79.5 GB disk0s2

3: Apple_Boot Recovery HD 650.0 MB disk0s3

4: Apple_HFS 9.6 GB disk0s4

5: Microsoft Basic Data 30.0 GB disk0s5

$ diskutil cs list

No CoreStorage logical volume groups found

$ sudo gpt -vv -r show /dev/disk0

gpt show: /dev/disk0: mediasize=120034123776; sectorsize=512; blocks=234441648

gpt show: /dev/disk0: Suspicious MBR at sector 0

gpt show: /dev/disk0: Pri GPT at sector 1

gpt show: /dev/disk0: Sec GPT at sector 234441647

start size index contents

0 1 MBR

1 1 Pri GPT header

2 32 Pri GPT table

34 6

40 409600 1 GPT part - C12A7328-F81F-11D2-BA4B-00A0C93EC93B

409640 155242608 2 GPT part - 48465300-0000-11AA-AA11-00306543ECAC

155652248 1269536 3 GPT part - 426F6F74-0000-11AA-AA11-00306543ECAC

156921784 18665544 4 GPT part - 48465300-0000-11AA-AA11-00306543ECAC

175587328 262144

175849472 58591232 5 GPT part - EBD0A0A2-B9E5-4433-87C0-68B6B72699C7

234440704 911

234441615 32 Sec GPT table

234441647 1 Sec GPT header

$ sudo fdisk /dev/disk0

Signature: 0xAA55

Starting Ending

#: id cyl hd sec - cyl hd sec [ start - size]

------------------------------------------------------------------------

1: EE 0 0 2 - 1023 254 63 [ 1 - 175849471] <Unknown ID>

*2: 07 1023 254 63 - 1023 254 63 [ 175849472 - 58591232] HPFS/QNX/AUX

3: 00 0 0 0 - 0 0 0 [ 0 - 0] unused

4: 00 0 0 0 - 0 0 0 [ 0 - 0] unused

I've followed the instructions: http://nerdr.com/bootcamp-partition-lost-repairing-mac-partitions/ and added partition 5 to MBR, now when my mac is booting up and I hold ALT key, I can choose Windows, but when I do there is info: Missing operating system.

Is there any way to fix it?

Thanks!

MacBook Pro, OS X Yosemite (10.10.1), half of 2010

Posted on Dec 8, 2014 10:15 AM

Reply

Answer 1

Loner T

Level 9

59,477 points

Dec 8, 2014 11:28 AM in response to lponiewierski

Please post the output of the following terminal command.

sudo dd if=/dev/rdisk0s5 count=1 2>/dev/null | hexdump -C

Reply

Answer 2

Dec 8, 2014 12:45 PM in response to Loner T

$ sudo dd if=/dev/rdisk0s5 count=1 2>/dev/null | hexdump -C

00000000 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|

*

00000200

maybe this also be helpful:

$ sudo dd if=/dev/rdisk0s4 count=1 2>/dev/null | hexdump -C

00000000 46 49 4c 45 30 00 03 00 5d 4c 65 2e 00 00 00 00 |FILE0...]Le.....|

00000010 04 00 02 00 38 00 03 00 d8 03 00 00 00 04 00 00 |....8...........|

00000020 00 00 00 00 00 00 00 00 05 00 00 00 2c fb 01 00 |............,...|

00000030 05 00 34 00 00 00 00 00 10 00 00 00 60 00 00 00 |..4.........`...|

00000040 00 00 00 00 00 00 00 00 48 00 00 00 18 00 00 00 |........H.......|

00000050 60 e9 b1 7b 8d 34 cf 01 80 37 b2 7b 8d 34 cf 01 |`..{.4...7.{.4..|

00000060 80 37 b2 7b 8d 34 cf 01 80 37 b2 7b 8d 34 cf 01 |.7.{.4...7.{.4..|

00000070 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|

00000080 00 00 00 00 ab 01 00 00 00 00 00 00 00 00 00 00 |................|

00000090 e8 14 47 0d 00 00 00 00 30 00 00 00 78 00 00 00 |..G.....0...x...|

000000a0 00 00 00 00 00 00 03 00 5a 00 00 00 18 00 01 00 |........Z.......|

000000b0 f7 0a 00 00 00 00 01 00 60 e9 b1 7b 8d 34 cf 01 |........`..{.4..|

000000c0 60 e9 b1 7b 8d 34 cf 01 60 e9 b1 7b 8d 34 cf 01 |`..{.4..`..{.4..|

000000d0 60 e9 b1 7b 8d 34 cf 01 00 00 00 00 00 00 00 00 |`..{.4..........|

000000e0 00 00 00 00 00 00 00 00 00 00 00 10 00 00 00 00 |................|

000000f0 0c 02 58 00 38 00 46 00 32 00 31 00 42 00 7e 00 |..X.8.F.2.1.B.~.|

00000100 31 00 2e 00 31 00 36 00 34 00 74 00 2d 00 77 00 |1...1.6.4.t.-.w.|

00000110 30 00 00 00 28 01 00 00 00 00 00 00 00 00 02 00 |0...(...........|

00000120 0a 01 00 00 18 00 01 00 f7 0a 00 00 00 00 01 00 |................|

00000130 60 e9 b1 7b 8d 34 cf 01 60 e9 b1 7b 8d 34 cf 01 |`..{.4..`..{.4..|

*

00000150 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|

00000160 00 00 00 10 00 00 00 00 64 01 78 00 38 00 36 00 |........d.x.8.6.|

00000170 5f 00 6d 00 69 00 63 00 72 00 6f 00 73 00 6f 00 |_.m.i.c.r.o.s.o.|

00000180 66 00 74 00 2d 00 77 00 69 00 6e 00 64 00 6f 00 |f.t.-.w.i.n.d.o.|

00000190 77 00 73 00 2d 00 69 00 65 00 2d 00 62 00 65 00 |w.s.-.i.e.-.b.e.|

000001a0 68 00 61 00 76 00 69 00 6f 00 72 00 73 00 2e 00 |h.a.v.i.o.r.s...|

000001b0 72 00 65 00 73 00 6f 00 75 00 72 00 63 00 65 00 |r.e.s.o.u.r.c.e.|

000001c0 73 00 5f 00 33 00 31 00 62 00 66 00 33 00 38 00 |s._.3.1.b.f.3.8.|

000001d0 35 00 36 00 61 00 64 00 33 00 36 00 34 00 65 00 |5.6.a.d.3.6.4.e.|

000001e0 33 00 35 00 5f 00 31 00 31 00 2e 00 32 00 2e 00 |3.5._.1.1...2...|

000001f0 39 00 36 00 30 00 30 00 2e 00 31 00 36 00 05 00 |9.6.0.0...1.6...|

00000200

Reply

Answer 3

Loner T

Level 9

59,477 points

Dec 8, 2014 12:41 PM in response to lponiewierski

You do not have a valid NTFS header. You will need Testdisk and GPT Fdisk (disk).

Please see Bootcamp partition has disappeared after upgrade to Yosemite 10.10 as an example of the next steps.

Reply

Answer 4

Dec 8, 2014 10:36 PM in response to Loner T

Disk /dev/rdisk0 - 120 GB / 111 GiB - 234441648 sectors (RO)

Current partition structure:

Partition Start End Size in sectors

1 P EFI System 40 409639 409600 [EFI System Partition]

2 P Mac HFS 409640 155652247 155242608 [Macbook]

3 P Mac Boot 155652248 156921783 1269536 [Recovery HD]

No HFS or HFS+ structure

4 P Mac HFS 156921784 175587327 18665544 [Macbook 2]

No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker

5 P MS Data 175849472 234440703 58591232 [BOOTCAMP]

after quick search:

Disk /dev/rdisk0 - 120 GB / 111 GiB - 234441648 sectors (RO)

The harddisk (120 GB / 111 GiB) seems too small! (< 159 GB / 148 GiB)

Check the harddisk size: HD jumpers settings, BIOS detection...

The following partitions can't be recovered:

Partition Start End Size in sectors

MS Data 185967416 244558647 58591232

MS Data 234440696 312221680 77780985

> MS Data 234440703 293031934 58591232

after deep search:

Disk /dev/rdisk0 - 120 GB / 111 GiB - 234441648 sectors (RO)

The harddisk (120 GB / 111 GiB) seems too small! (< 159 GB / 148 GiB)

Check the harddisk size: HD jumpers settings, BIOS detection...

The following partitions can't be recovered:

Partition Start End Size in sectors

> Mac HFS 155652244 310894851 155242608

MS Data 185967416 244558647 58591232

MS Data 234440696 312221680 77780985

MS Data 234440703 293031934 58591232

when continue:

Disk /dev/rdisk0 - 120 GB / 111 GiB - 234441648 sectors (RO)

Partition Start End Size in sectors

>D EFI System 40 409639 409600 [EFI]

D EFI System 46 409645 409600 [EFI]

D Mac HFS 409640 155652247 155242608

D Mac HFS 417336 155659943 155242608

D Mac HFS 419393 155662000 155242608

D Mac HFS 420098 155662705 155242608

D Mac HFS 420307 155662914 155242608

D Mac HFS 420516 155663123 155242608

D Mac HFS 420733 155663340 155242608

D Mac HFS 421718 155664325 155242608

D Mac HFS 422343 155664950 155242608

D Mac HFS 422952 155665559 155242608

D Mac HFS 423609 155666216 155242608

D Mac HFS 424162 155666769 155242608

D Mac HFS 424771 155667378 155242608

D Mac HFS 425171 155667778 155242608

D Mac HFS 425428 155668035 155242608

D Mac HFS 425653 155668260 155242608

D Mac HFS 425910 155668517 155242608

D Mac HFS 426199 155668806 155242608

D Mac HFS 426536 155669143 155242608

D Mac HFS 427217 155669824 155242608

D Mac HFS 427546 155670153 155242608

D Mac HFS 427771 155670378 155242608

D Mac HFS 428244 155670851 155242608

D Mac HFS 428661 155671268 155242608

D Mac HFS 428926 155671533 155242608

D Mac HFS 429247 155671854 155242608

D Mac HFS 429720 155672327 155242608

D Mac HFS 430201 155672808 155242608

D Mac HFS 430498 155673105 155242608

D Mac HFS 430747 155673354 155242608

D Mac HFS 431020 155673627 155242608

D Mac HFS 431477 155674084 155242608

D Mac HFS 432414 155675021 155242608

D Mac HFS 432959 155675566 155242608

D Mac HFS 433504 155676111 155242608

D Mac HFS 433857 155676464 155242608

D Mac HFS 434418 155677025 155242608

D Mac HFS 434843 155677450 155242608

D Mac HFS 435644 155678251 155242608

D Mac HFS 436325 155678932 155242608

D Mac HFS 436862 155679469 155242608

D Mac HFS 437311 155679918 155242608

D Mac HFS 437784 155680391 155242608

D Mac HFS 438001 155680608 155242608

D Mac HFS 438210 155680817 155242608

D Mac HFS 438427 155681034 155242608

D Mac HFS 438908 155681515 155242608

D Mac HFS 439309 155681916 155242608

D Mac HFS 439894 155682501 155242608

D Mac HFS 440303 155682910 155242608

D Mac HFS 440792 155683399 155242608

D Mac HFS 441169 155683776 155242608

D Mac HFS 441706 155684313 155242608

D Mac HFS 442099 155684706 155242608

D Mac HFS 442668 155685275 155242608

D Mac HFS 443069 155685676 155242608

D Mac HFS 443558 155686165 155242608

D Mac HFS 444015 155686622 155242608

D Mac HFS 444536 155687143 155242608

D Mac HFS 444969 155687576 155242608

D Mac HFS 445450 155688057 155242608

D Mac HFS 445875 155688482 155242608

D Mac HFS 446412 155689019 155242608

D Mac HFS 446805 155689412 155242608

D Mac HFS 447646 155690253 155242608

D MS Data 13622511 13628684 6174

D MS Data 13628684 13634857 6174 [Boot]

D MS Data 13634972 13655710 20739 [NO NAME]

D MS Data 43476960 121257944 77780985

D MS Data 62666720 121257951 58591232

D MS Data 112968699 112989437 20739 [NO NAME]

D MS Data 121257944 199038928 77780985

D MS Data 121257951 179849182 58591232

D MS Data 127376185 185967416 58591232

D Mac HFS 154382716 155652251 1269536

D Mac HFS 154382979 155652514 1269536

D Mac HFS 154383260 155652795 1269536

D Mac HFS 154383453 155652988 1269536

D Mac HFS 154383678 155653213 1269536

D Mac HFS 155652248 156921783 1269536

D Mac HFS 155652511 156922046 1269536

D Mac HFS 155652792 156922327 1269536

D Mac HFS 155652985 156922520 1269536

D Mac HFS 155653210 156922745 1269536

D MS Data 156659712 234440696 77780985

D Mac HFS 156921780 158191315 1269536

D MS Data 167981947 168002685 20739 [NO NAME]

D MS Data 175849472 234440703 58591232

D MS Data 191525163 191531336 6174

D MS Data 191531336 191537509 6174 [Boot]

D MS Data 191531355 191537528 6174

D MS Data 191537528 191543701 6174 [Boot]

D MS Data 195134515 195140688 6174

>D MS Data 195140688 195146861 6174 [Boot]

Structure: Ok. Use Up/Down Arrow keys to select partition.

Use Left/Right Arrow keys to CHANGE partition characteristics:

P=Primary D=Deleted

Keys A: add partition, L: load backup, T: change type, P: list files,

Enter: to continue

Could you help me with start and end offset?

Reply

Answer 5

Loner T

Level 9

59,477 points

Dec 9, 2014 5:24 AM in response to lponiewierski

How was this specific configuration created? You have a 9.6GB HFS+ as GPT#4. Can you please describe the partition changes made to this Mac in the past?

156921784 18665544 4 GPT part - 48465300-0000-11AA-AA11-00306543ECAC

175587328 262144

175849472 58591232 5 GPT part - EBD0A0A2-B9E5-4433-87C0-68B6B72699C7

Did you have two versions of OSX at some point on this Mac?

4 P Mac HFS 156921784 175587327 18665544 [Macbook 2]

4 P Mac HFS 156921784 175587327 18665544 [Macbook 2]

Reply

Answer 6

Dec 9, 2014 8:19 AM in response to Loner T

First I created boot camp partition with 30 GB, next I extended it to 40.

Now I've got only one version of OS X.

Reply

Answer 7

Loner T

Level 9

59,477 points

Dec 9, 2014 11:58 AM in response to lponiewierski

Resizing Windows or adding/removing partitions creates many issues. If Testdisk cannot find the appropriate header, there may not be an option other than re-installation of Windows after creating a single-partition OSX disk.

sudo dd if=/dev/rdisk0s4 count=1 2>/dev/null | hexdump -C

Can you post the output of

sudo dd if=/dev/rdisk0s5 count=1 2>/dev/null | hexdump -C

since your fifth entry (disk0s5) is Bootcamp, not disk0s4.

Reply

Answer 8

Dec 9, 2014 1:28 PM in response to Loner T

I've posted it before, when you asked me to do it for the first time.

Reply

Answer 9

Loner T

Level 9

59,477 points

Dec 9, 2014 2:59 PM in response to lponiewierski

Ah, I see it now. There is no NTFS header on rdisk0s5. 😟

175587328 262144

175849472 58591232 5 GPT part - EBD0A0A2-B9E5-4433-87C0-68B6B72699C7

Can you check these entries from your Testdisk output, for files?

D MS Data 121257944 199038928 77780985

D MS Data 121257951 179849182 58591232

D MS Data 127376185 185967416 58591232

D MS Data 156659712 234440696 77780985

The first three entries are located somewhere in your OSX partition and may be damaged. This is your GPT3.

155652248 1269536 3 GPT part - 426F6F74-0000-11AA-AA11-00306543ECAC

If the following table is used to look at the last entry that I have listed in the four MS Data entries, I get

GPT 3 Start	GPT 3 Size	GPT 3 End	NTFS Start	Sector Offset	NTFS Size	NTFS End
155652248	1269536	156921784	156659712	-262072	77780985	234440697	-127.9648438

NTFS Size is roughly 37+ GB, and this partition is about 127MB inside your Recovery HD, which means you will lose GPT#4 and parts of GPT#3. It can be tested, but Testdisk should be used first to look for familiar files first.

Reply

Answer 10

Dec 11, 2014 12:21 AM in response to Loner T

Can't open filesystem. Filesystem seems damaged.

:/

Reply

Answer 11

Loner T

Level 9

59,477 points

Dec 11, 2014 5:21 AM in response to lponiewierski

Please look at the others in this list as well.

Reply

Answer 12

Dec 12, 2014 9:49 AM in response to Loner T

I've checked all.

In most of them there is the same info.

In few of them there is only one entry System Volume Information.

In one I found more entries but names weren't familiar to me.

drwxr-xr-x 0 0 3508176671 30-Oct-1916 11:10 ~N~TG >~G

>dr-xr-xr-x 0 0 3529124969 18-Sep-1960 13:15 /kWC ~^".

-rwxr-xr-x 0 0 3210166732 17-Mar-2005 07:11 Ǳ^SW ^D.J

-rwxr-xr-x 0 0 3507088867 18-Dec-1935 06:37 Z*m .

-r-xr-xr-x 0 0 1076041519 21-Feb-2027 21:40 ^Z ^V^L^N5.

dr-xr-xr-x 0 0 1469335860 1-Dec-1920 12:15 ^KF E~[ %[n

-r-xr-xr-x 0 0 3778361690 10-Apr-1962 17:40 ~Xft K ~I^A. ,^Q

-rwxr-xr-x 0 0 1678626243 27-Apr-1907 23:20 gx=~U~\^_^].!)

drwxr-xr-x 0 0 244965433 16-Jun-1961 23:02 8 S(.^\

-rwxr-xr-x 0 0 2907995155 9-Aug-1945 00:58 ~XG ^T

-r-xr-xr-x 0 0 3575919011 30-Jul-1935 05:02 0 ~W~Z

dr-xr-xr-x 0 0 3987199204 1-Apr-1943 11:56 +Y.^K@~[

drwxr-xr-x 0 0 3604974758 1-May-1996 07:33 `N(!~W ȓ.D^Y,

dr-xr-xr-x 0 0 1374260411 11-Jul-1990 03:02 *^R. Qޠ. 7

dr-xr-xr-x 0 0 3101050474 25-Oct-1948 13:51 d ~Dv> ~\:.p=

drwxr-xr-x 0 0 837758736 31-Mar-2033 14:27 ^DR . g

-r-xr-xr-x 0 0 274855253 17-Apr-1958 10:28 n^X~Em~G"'^S.ps

-r-xr-xr-x 0 0 3227312331 19-May-1957 10:21 Q~R~Iϛ0F. ~I

~Qrwxr-xr-x 0 0 3698341093 27-Jan-1927 11:34 ~B^\l.-

-r-xr-xr-x 0 0 2632236692 12-Mar-2007 15:46 338.k

-rwxr-xr-x 0 0 4049906661 25-Sep-1918 03:39 T=.m 2

-rwxr-xr-x 0 0 2078454823 27-May-2006 15:22 8 &^C ^Y. ~F

-r-xr-xr-x 0 0 813090960 23-Jan-2001 15:17 ~_^F^A^D~GG .

drwxr-xr-x 0 0 2303902399 10-Feb-1956 14:17 > ) nQ^G y

Reply

Answer 13

Loner T

Level 9

59,477 points

Dec 12, 2014 10:15 AM in response to lponiewierski

The size and dates indicate bad corruption in the MFT. Are there any other MS Data entries in Deeper Search output?

Reply

Answer 14

Dec 12, 2014 11:05 AM in response to Loner T

I've posted the whole list earlier, there is about 20, and I've checked all of them.

I think I'll have to deal with it 😐

Reply

Answer 15

Loner T

Level 9

59,477 points

Dec 12, 2014 11:16 AM in response to lponiewierski

You can try a tool called PhotoRec, but it cannot figure out the files names if MFT is corrupted. You may be able to retrieve files.

Your last resort to a full clean install of Bootcamp/Windows. It is rather unfortunate.

Reply