Iwan_SG

Q: missiong operating system BootCamp windows on MBA Late-2010 10.9

Hi,

 

I've installed win7 on my MBA 13inch Late-2010 with OS X Installed 10.9.5. After shrinkin my OS X partition then windows can't start any more. Following are mya data :

 

Zens-MacBook-Air:~ noimba256$ diskutil list

/dev/disk0

   #:                       TYPE NAME                    SIZE       IDENTIFIER

   0:      GUID_partition_scheme                        *251.0 GB   disk0

   1:                        EFI EFI                     209.7 MB   disk0s1

   2:                  Apple_HFS Air HD                  212.0 GB   disk0s2

   3:                 Apple_Boot Recovery HD             650.0 MB   disk0s3

   4:       Microsoft Basic Data                         29.0 GB    disk0s4

Zens-MacBook-Air:~ noimba256$ sudo fdisk /dev/disk0

Password:

Disk: /dev/disk0 geometry: 30515/255/63 [490234752 sectors]

Signature: 0xAA55

         Starting       Ending

#: id  cyl  hd sec -  cyl  hd sec [     start -       size]

------------------------------------------------------------------------

1: EE 1023 254  63 - 1023 254  63 [         1 -     409639] <Unknown ID>

2: AF 1023 254  63 - 1023 254  63 [    409640 -  414062496] HFS+       

3: AB 1023 254  63 - 1023 254  63 [ 414472136 -    1269536] Darwin Boot

*4: 07 1023 254  63 - 1023 254  63 [ 433594368 -   56639488] HPFS/QNX/AUX

Zens-MacBook-Air:~ noimba256$ sudo gpt -r -vv show disk0

gpt show: disk0: mediasize=251000193024; sectorsize=512; blocks=490234752

gpt show: disk0: Suspicious MBR at sector 0

gpt show: disk0: Pri GPT at sector 1

gpt show: disk0: Sec GPT at sector 490234751

      start       size  index  contents

          0          1         MBR

          1          1         Pri GPT header

          2         32         Pri GPT table

         34          6        

         40     409600      1  GPT part - C12A7328-F81F-11D2-BA4B-00A0C93EC93B

     409640  414062496      2  GPT part - 48465300-0000-11AA-AA11-00306543ECAC

  414472136    1269536      3  GPT part - 426F6F74-0000-11AA-AA11-00306543ECAC

  415741672   17852696        

  433594368   56639488      4  GPT part - EBD0A0A2-B9E5-4433-87C0-68B6B72699C7

  490233856        863        

  490234719         32         Sec GPT table

  490234751          1         Sec GPT header

Zens-MacBook-Air:~ noimba256$ sudo dd if=/dev/rdisk0s4 count=1 2>/dev/null | hexdump -C

00000000  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|

*

00000020  00 00 00 00 00 00 00 ff  00 00 00 ff 00 00 00 00  |................|

00000030  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|

00000040  00 00 00 00 00 00 00 00  00 00 00 ff 00 00 00 ff  |................|

00000050  00 00 00 ff 00 00 00 ff  00 00 00 ff 00 00 00 00  |................|

00000060  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|

*

000000a0  00 00 00 00 00 00 00 ff  00 00 00 ff 00 00 00 00  |................|

000000b0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|

000000c0  00 00 00 00 00 00 00 00  00 00 00 ff 00 00 00 ff  |................|

000000d0  00 00 00 ff 00 00 00 ff  00 00 00 ff 00 00 00 00  |................|

000000e0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|

*

00000120  00 00 00 00 00 00 00 ff  00 00 00 ff 00 00 00 ff  |................|

00000130  00 00 00 ff 00 00 00 ff  00 00 00 ff 00 00 00 ff  |................|

*

00000150  00 00 00 ff 00 00 00 ff  00 00 00 ff 00 00 00 00  |................|

00000160  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|

*

000001a0  00 00 00 00 00 00 00 ff  00 00 00 ff 00 00 00 ff  |................|

000001b0  00 00 00 ff 00 00 00 ff  00 00 00 ff 00 00 00 ff  |................|

*

000001d0  00 00 00 ff 00 00 00 ff  00 00 00 ff 00 00 00 00  |................|

000001e0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|

*

00000200

 

 

Anyone can help me out?

MacBook Air, OS X Mavericks (10.9.5), 13 Inch late-2010

Posted on Mar 4, 2015 4:02 PM

Close

Q: missiong operating system BootCamp windows on MBA Late-2010 10.9

  • All replies
  • Helpful answers

  • by Loner T,

    Loner T Loner T Mar 4, 2015 4:09 PM in response to Iwan_SG
    Level 7 (24,307 points)
    Safari
    Mar 4, 2015 4:09 PM in response to Iwan_SG

    Resizing/re-partitioning is not allowed on a Mac with Bootcamp and OSX.

     

    From Boot Camp 5.1: Frequently asked questions - Apple Support

     

    Can I resize the Windows partition after installing Windows?

    No. Back up your important files, then use Boot Camp Assistant to delete the old partition and create a new one.

     

    Can you use Windows 7 Removed after update Yosemite as a reference and  download Testdisk and GPT Fdisk and start a scan with Testdisk. The gap between GPT3/GPT4 indicates is the likely place for your lost NTFS partition.

  • by Iwan_SG,

    Iwan_SG Iwan_SG Mar 4, 2015 5:51 PM in response to Loner T
    Level 1 (0 points)
    Mar 4, 2015 5:51 PM in response to Loner T

    Hi Loner,

     

    Thx for immediate reply. I'll try your suggestion. and let you know the result.

  • by Iwan_SG,

    Iwan_SG Iwan_SG Mar 4, 2015 11:19 PM in response to Loner T
    Level 1 (0 points)
    Mar 4, 2015 11:19 PM in response to Loner T

    Hi Loner,

    Before "Quick Search" following information was shown

     

    TestDisk 7.0-WIP, Data Recovery Utility, March 2015

    Christophe GRENIER <grenier@cgsecurity.org>

    http://www.cgsecurity.org

     

    Disk /dev/rdisk0 - 251 GB / 233 GiB - 490234752 sectors (RO)

    Current partition structure:

         Partition                  Start        End    Size in sectors

     

    1 P EFI System                    40     409639     409600 [EFI System Partitio

    2 P Mac HFS                   409640  414472135  414062496 [Untitled 1]

    3 P Mac Boot               414472136  415741671    1269536 [Recovery HD]

    No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker

    4 P MS Data                433594368  490233855   56639488 [BOOTCAMP]

    4 P MS Data                433594368  490233855   56639488 [BOOTCAMP]

     

     

     

     

     

     

     

                    P=Primary  D=Deleted

    >[Quick Search]  [ Backup ]

                               Try to locate partition

     

    this is the result of testdisk. could you analyze what does it mean?

     

     

     

    TestDisk 7.0-WIP, Data Recovery Utility, March 2015

    Christophe GRENIER <grenier@cgsecurity.org>

    http://www.cgsecurity.org

     

    Disk /dev/rdisk0 - 251 GB / 233 GiB - 490234752 sectors (RO)

        Partition              Start        End    Size in sectors

    >P EFI System                    40    409639    409600 [EFI]

    D Mac HFS                  409640  414472135  414062496

    D MS Data                353517576  421875712  68358137

    D Mac HFS                414472136  415741671    1269536

    D Mac HFS                420604952  421874487    1269536

    D MS Data                421875712  490233848  68358137

    D MS Data                433594368  490233855  56639488

    D Mac HFS                488965176  490234711    1269536

     

     

     

     

     

    Structure: Ok.  Use Up/Down Arrow keys to select partition.

    Use Left/Right Arrow keys to CHANGE partition characteristics:

                    P=Primary  D=Deleted

    Keys A: add partition, L: load backup, T: change type, P: list files,

        Enter: to continue

    FAT32, blocksize=512, 209 MB / 200 MiB

  • by Loner T,Helpful

    Loner T Loner T Mar 5, 2015 6:01 AM in response to Iwan_SG
    Level 7 (24,307 points)
    Safari
    Mar 5, 2015 6:01 AM in response to Iwan_SG

    This table should help explain what I see. Was the disk resized by about 3 GB?

     

    GPT 3 StartGPT 3 SizeGPT 3 EndNTFS StartSector OffsetNTFS SizeNTFS EndSector Offset (GB)
    41447213612695364157416724218757126134040683581374902338492.92

     

    In your Testdisk output, you have three MS Data entries. The table is built using the second MS Data entry.

     

    1. The first entry has a start at 353517576 which points it to somewhere in your OSX Partition, given the start sector falls somewhere between the start/end of the following entry (GPT 2 - OSX)

        409640  414062496      2  GPT part - 48465300-0000-11AA-AA11-00306543ECAC

    2. The second MS Data entry with start at 421875712 exists in the following gap (just before GPT 4).

    415741672   17852696        

    433594368   56639488      4  GPT part - EBD0A0A2-B9E5-4433-87C0-68B6B72699C7

    Scroll down to this entry and use 'P - List Files' (type the letter 'P') and you should see familiar Windows files. This is the most likely candidate.

     

    3. The third MS Data entry with the start at 433594368 is the same as GPT 4, which is the incorrect and non-working entry.

     

    Post the output of List Files, and I can provide steps to update the GPT/MBR to allow access to the NTFS partition and get your Windows back up and running.

  • by Iwan_SG,

    Iwan_SG Iwan_SG Mar 5, 2015 7:21 PM in response to Loner T
    Level 1 (0 points)
    Mar 5, 2015 7:21 PM in response to Loner T

    Hi Loner,

     

    Thank you for reply, this is windows files listed on screen. Hope this is good news for me ...

     

    TestDisk 7.0-WIP, Data Recovery Utility, March 2015

    Christophe GRENIER <grenier@cgsecurity.org>

    http://www.cgsecurity.org

         MS Data                421875712  490233848   68358137

    Directory /

     

    >dr-xr-xr-x     0     0         0  3-Mar-2015 17:46 .

    dr-xr-xr-x     0     0         0  3-Mar-2015 17:46 ..

    dr-xr-xr-x     0     0         0  5-Nov-2014 17:32 $AVG

    dr-xr-xr-x     0     0         0  5-Nov-2014 12:39 $Recycle.Bin

    dr-xr-xr-x     0     0         0  6-Nov-2014 18:01 .Trashes

    dr-xr-xr-x     0     0         0 13-Nov-2014 06:20 3d61160d61dd85f84e9fe6e203ce

    dr-xr-xr-x     0     0         0  6-Nov-2014 05:37 Boot

    dr-xr-xr-x     0     0         0  5-Nov-2014 12:47 Intel

    dr-xr-xr-x     0     0         0 14-Jul-2009 10:20 PerfLogs

    dr-xr-xr-x     0     0         0  2-Dec-2014 12:48 Program Files

    dr-xr-xr-x     0     0         0 12-Feb-2015 00:35 Program Files (x86)

    dr-xr-xr-x     0     0         0  3-Mar-2015 08:16 ProgramData

    dr-xr-xr-x     0     0         0  5-Nov-2014 12:36 Recovery

    dr-xr-xr-x     0     0         0  3-Mar-2015 17:45 Surya

    dr-xr-xr-x     0     0         0 26-Feb-2015 10:53 System Volume Information

    dr-xr-xr-x     0     0         0  6-Nov-2014 06:40 Users

    dr-xr-xr-x     0     0         0  2-Mar-2015 23:13 Windows

    -r--r--r--     0     0         8  3-Mar-2015 17:46 ..:^EC0B21842-99B8-46E2-A991-EC7EEE7FEF28^E

    -r--r--r--     0     0         8  3-Mar-2015 17:46 .:^EC0B21842-99B8-46E2-A991-EC7EEE7FEF28^E

    -r--r--r--     0     0        20  6-Nov-2014 18:01 .Trashes:Mac_Metadata

    -r--r--r--     0     0      4096  5-Nov-2014 19:58 ._.Trashes

    -r--r--r--     0     0      8192  5-Nov-2014 20:22 BOOTSECT.BAK

    -r--r--r--     0     0      2066  5-Nov-2014 12:46 RHDSetup.log

    -r--r--r--     0     0    383786 20-Nov-2010 19:40 bootmgr

    -r--r--r--     0     0    171136  2-Aug-2009 15:59 grldr

    -r--r--r--     0     0 1401917440  3-Mar-2015 09:46 hiberfil.sys

    -r--r--r--     0     0 418267136  3-Mar-2015 09:46 pagefile.sys

     

     

     

                                                       Next

    Use Right to change directory, h to hide Alternate Data Stream

        q to quit, : to select the current file, a to select all files

        C to copy the selected files, c to copy the current file

  • by Loner T,Solvedanswer

    Loner T Loner T Mar 5, 2015 7:57 PM in response to Iwan_SG
    Level 7 (24,307 points)
    Safari
    Mar 5, 2015 7:57 PM in response to Iwan_SG

    Yes, it is indeed good news.

     

    Leave your Testdisk display and start a new Terminal Window.

     

    You need to use the following steps. If you see any error messages during the following steps, please stop and post back here with the error message. The following steps have values from your Testdisk output (and you can verify) in Steps 7 and 8.

     

    Rebuild GPT4 using start/end offsets

     

    1. Sudo gdisk /dev/rdisk0
    2. P  (print the full list of parts)
    3. D  (delete)
    4. 4  (part 4)
    5. N  (new part)
    6. 4   (part 4)
    7. 421875712 - Start offset in bytes  (start point for Bootcamp part)
    8. +68358137 (Size offset as opposed to End offset)
    9. 0700     (Windows part type)
    10. P           (print list of all parts just to see what changes will be made)
    11. W         (Write the new GPT)
    12. Y           (Yes! really write the new GPT)

      This will delete and re-write the GPT partition info for /dev/disk0s4. 

     


    Rebuild MBR to match the new GPT information thus resetting the Hybrid MBR. Use defaults for other questions (like partition codes). The only values that need modifications are the Boot flags and step 6. Accept all other defaults that Gdisk offers.

    1. Sudo gdisk /dev/disk0
    2. P  (Print list of parts)
    3. R   (Recover)
    4. H (chooses Hybrid)
    5. Partitions numbers to be hybridized: 2 3 4
    6. Y (Good for GRUB question)
    7. N (part 2 boot flag)
    8. N (part 3 boot flag)
    9. Y  (part 4 boot flag make NTFS bootable partition)
    10. W  (Write the new MBR)
    11. Y    (Yes! write the new MBR)
    12. Reboot

     

    This is an example for the second set.

     

    Place EFI GPT (0xEE) partition first in MBR (good for GRUB)? (Y/N): Y

     

    Creating entry for GPT partition #2 (MBR partition #2)

    Enter an MBR hex code (default AF): Press Enter/Return

    Set the bootable flag? (Y/N): N

     

    Creating entry for GPT partition #3 (MBR partition #3)

    Enter an MBR hex code (default AB): Press Enter/Return

    Set the bootable flag? (Y/N): N

     

    Creating entry for GPT partition #4 (MBR partition #4)

    Enter an MBR hex code (default 07): 07

    Set the bootable flag? (Y/N): Y

     

    Test 1 - Does Bootcamp Volume show up in Finder?

    Test 2 - Can you see files in Bootcamp Volume?

    Test 3 - Can you select Bootcamp in System Preferences -> Startup Disk?

    Test 4 - If Test 3 is successful, select Bootcamp and Click Restart.

  • by Iwan_SG,

    Iwan_SG Iwan_SG Mar 6, 2015 1:52 AM in response to Loner T
    Level 1 (0 points)
    Mar 6, 2015 1:52 AM in response to Loner T

    Hi Loner

     

    I really need to thank you greatly, I can reboot my windows again and get my data on that OS after runnin your instruction......  But Test 3 is failed. because I can't see Bootcamp disk to set as startup disk. But I still can start windows usin EFI. Again. thank you very much ... you're very helpful.

     

    regards

  • by Loner T,

    Loner T Loner T Mar 6, 2015 5:10 AM in response to Iwan_SG
    Level 7 (24,307 points)
    Safari
    Mar 6, 2015 5:10 AM in response to Iwan_SG

    Iwan_SG wrote:

     

    I really need to thank you greatly, I can reboot my windows again and get my data on that OS after runnin your instruction......  But Test 3 is failed. because I can't see Bootcamp disk to set as startup disk.

    Can you post the output of the following commands?

     

    sudo gpt -vv -r show /dev/disk0

    sudo fdisk /dev/disk0

     

    But I still can start windows usin EFI. Again. thank you very much ... you're very helpful.

    Are you using the EFI Boot on the Windows Installer to boot from BC partition? Are using a Virtualization engine (Vmware, Parallels, VirtualBox) to boot BC partition?