missiong operating system BootCamp windows on MBA Late-2010 10.9

Question

Level 1

0 points

missiong operating system BootCamp windows on MBA Late-2010 10.9

Hi,

I've installed win7 on my MBA 13inch Late-2010 with OS X Installed 10.9.5. After shrinkin my OS X partition then windows can't start any more. Following are mya data :

Zens-MacBook-Air:~ noimba256$ diskutil list

/dev/disk0

#: TYPE NAME SIZE IDENTIFIER

0: GUID_partition_scheme *251.0 GB disk0

1: EFI EFI 209.7 MB disk0s1

2: Apple_HFS Air HD 212.0 GB disk0s2

3: Apple_Boot Recovery HD 650.0 MB disk0s3

4: Microsoft Basic Data 29.0 GB disk0s4

Zens-MacBook-Air:~ noimba256$ sudo fdisk /dev/disk0

Password:

Disk: /dev/disk0 geometry: 30515/255/63 [490234752 sectors]

Signature: 0xAA55

Starting Ending

#: id cyl hd sec - cyl hd sec [ start - size]

------------------------------------------------------------------------

1: EE 1023 254 63 - 1023 254 63 [ 1 - 409639] <Unknown ID>

2: AF 1023 254 63 - 1023 254 63 [ 409640 - 414062496] HFS+

3: AB 1023 254 63 - 1023 254 63 [ 414472136 - 1269536] Darwin Boot

*4: 07 1023 254 63 - 1023 254 63 [ 433594368 - 56639488] HPFS/QNX/AUX

Zens-MacBook-Air:~ noimba256$ sudo gpt -r -vv show disk0

gpt show: disk0: mediasize=251000193024; sectorsize=512; blocks=490234752

gpt show: disk0: Suspicious MBR at sector 0

gpt show: disk0: Pri GPT at sector 1

gpt show: disk0: Sec GPT at sector 490234751

start size index contents

0 1 MBR

1 1 Pri GPT header

2 32 Pri GPT table

34 6

40 409600 1 GPT part - C12A7328-F81F-11D2-BA4B-00A0C93EC93B

409640 414062496 2 GPT part - 48465300-0000-11AA-AA11-00306543ECAC

414472136 1269536 3 GPT part - 426F6F74-0000-11AA-AA11-00306543ECAC

415741672 17852696

433594368 56639488 4 GPT part - EBD0A0A2-B9E5-4433-87C0-68B6B72699C7

490233856 863

490234719 32 Sec GPT table

490234751 1 Sec GPT header

Zens-MacBook-Air:~ noimba256$ sudo dd if=/dev/rdisk0s4 count=1 2>/dev/null | hexdump -C

00000000 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|

*

00000020 00 00 00 00 00 00 00 ff 00 00 00 ff 00 00 00 00 |................|

00000030 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|

00000040 00 00 00 00 00 00 00 00 00 00 00 ff 00 00 00 ff |................|

00000050 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 00 |................|

00000060 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|

*

000000a0 00 00 00 00 00 00 00 ff 00 00 00 ff 00 00 00 00 |................|

000000b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|

000000c0 00 00 00 00 00 00 00 00 00 00 00 ff 00 00 00 ff |................|

000000d0 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 00 |................|

000000e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|

*

00000120 00 00 00 00 00 00 00 ff 00 00 00 ff 00 00 00 ff |................|

00000130 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff |................|

*

00000150 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 00 |................|

00000160 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|

*

000001a0 00 00 00 00 00 00 00 ff 00 00 00 ff 00 00 00 ff |................|

000001b0 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff |................|

*

000001d0 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 00 |................|

000001e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|

*

00000200

Anyone can help me out?

MacBook Air, OS X Mavericks (10.9.5), 13 Inch late-2010

Posted on Mar 4, 2015 4:02 PM

Reply

Answer 1

Loner T

Level 9

59,471 points

Mar 4, 2015 4:09 PM in response to Iwan_SG

Resizing/re-partitioning is not allowed on a Mac with Bootcamp and OSX.

From Boot Camp 5.1: Frequently asked questions - Apple Support

Can I resize the Windows partition after installing Windows?

No. Back up your important files, then use Boot Camp Assistant to delete the old partition and create a new one.

Can you use Windows 7 Removed after update Yosemite as a reference and download Testdisk and GPT Fdisk and start a scan with Testdisk. The gap between GPT3/GPT4 indicates is the likely place for your lost NTFS partition.

Reply

Answer 2

Iwan_SG Author

Level 1

0 points

Mar 4, 2015 5:51 PM in response to Loner T

Hi Loner,

Thx for immediate reply. I'll try your suggestion. and let you know the result.

Reply

Answer 3

Iwan_SG Author

Level 1

0 points

Mar 4, 2015 11:19 PM in response to Loner T

Hi Loner,

Before "Quick Search" following information was shown

TestDisk 7.0-WIP, Data Recovery Utility, March 2015

Christophe GRENIER <grenier@cgsecurity.org>

http://www.cgsecurity.org

Disk /dev/rdisk0 - 251 GB / 233 GiB - 490234752 sectors (RO)

Current partition structure:

Partition Start End Size in sectors

1 P EFI System 40 409639 409600 [EFI System Partitio

2 P Mac HFS 409640 414472135 414062496 [Untitled 1]

3 P Mac Boot 414472136 415741671 1269536 [Recovery HD]

No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker

4 P MS Data 433594368 490233855 56639488 [BOOTCAMP]

P=Primary D=Deleted

>[Quick Search] [ Backup ]

Try to locate partition

this is the result of testdisk. could you analyze what does it mean?

TestDisk 7.0-WIP, Data Recovery Utility, March 2015

Christophe GRENIER <grenier@cgsecurity.org>

http://www.cgsecurity.org

Disk /dev/rdisk0 - 251 GB / 233 GiB - 490234752 sectors (RO)

Partition Start End Size in sectors

>P EFI System 40 409639 409600 [EFI]

D Mac HFS 409640 414472135 414062496

D MS Data 353517576 421875712 68358137

D Mac HFS 414472136 415741671 1269536

D Mac HFS 420604952 421874487 1269536

D MS Data 421875712 490233848 68358137

D MS Data 433594368 490233855 56639488

D Mac HFS 488965176 490234711 1269536

Structure: Ok. Use Up/Down Arrow keys to select partition.

Use Left/Right Arrow keys to CHANGE partition characteristics:

P=Primary D=Deleted

Keys A: add partition, L: load backup, T: change type, P: list files,

Enter: to continue

FAT32, blocksize=512, 209 MB / 200 MiB

Reply

Answer 4

Loner T

Level 9

59,471 points

Mar 5, 2015 6:01 AM in response to Iwan_SG

This table should help explain what I see. Was the disk resized by about 3 GB?

GPT 3 Start	GPT 3 Size	GPT 3 End	NTFS Start	Sector Offset	NTFS Size	NTFS End	Sector Offset (GB)
414472136	1269536	415741672	421875712	6134040	68358137	490233849	2.92

In your Testdisk output, you have three MS Data entries. The table is built using the second MS Data entry.

1. The first entry has a start at 353517576 which points it to somewhere in your OSX Partition, given the start sector falls somewhere between the start/end of the following entry (GPT 2 - OSX)

409640 414062496 2 GPT part - 48465300-0000-11AA-AA11-00306543ECAC

2. The second MS Data entry with start at 421875712 exists in the following gap (just before GPT 4).

415741672 17852696

433594368 56639488 4 GPT part - EBD0A0A2-B9E5-4433-87C0-68B6B72699C7

Scroll down to this entry and use 'P - List Files' (type the letter 'P') and you should see familiar Windows files. This is the most likely candidate.

3. The third MS Data entry with the start at 433594368 is the same as GPT 4, which is the incorrect and non-working entry.

Post the output of List Files, and I can provide steps to update the GPT/MBR to allow access to the NTFS partition and get your Windows back up and running.

Reply

Answer 5

Iwan_SG Author

Level 1

0 points

Mar 5, 2015 7:21 PM in response to Loner T

Hi Loner,

Thank you for reply, this is windows files listed on screen. Hope this is good news for me ...

TestDisk 7.0-WIP, Data Recovery Utility, March 2015

Christophe GRENIER <grenier@cgsecurity.org>

http://www.cgsecurity.org

MS Data 421875712 490233848 68358137

Directory /

>dr-xr-xr-x 0 0 0 3-Mar-2015 17:46 .

dr-xr-xr-x 0 0 0 3-Mar-2015 17:46 ..

dr-xr-xr-x 0 0 0 5-Nov-2014 17:32 $AVG

dr-xr-xr-x 0 0 0 5-Nov-2014 12:39 $Recycle.Bin

dr-xr-xr-x 0 0 0 6-Nov-2014 18:01 .Trashes

dr-xr-xr-x 0 0 0 13-Nov-2014 06:20 3d61160d61dd85f84e9fe6e203ce

dr-xr-xr-x 0 0 0 6-Nov-2014 05:37 Boot

dr-xr-xr-x 0 0 0 5-Nov-2014 12:47 Intel

dr-xr-xr-x 0 0 0 14-Jul-2009 10:20 PerfLogs

dr-xr-xr-x 0 0 0 2-Dec-2014 12:48 Program Files

dr-xr-xr-x 0 0 0 12-Feb-2015 00:35 Program Files (x86)

dr-xr-xr-x 0 0 0 3-Mar-2015 08:16 ProgramData

dr-xr-xr-x 0 0 0 5-Nov-2014 12:36 Recovery

dr-xr-xr-x 0 0 0 3-Mar-2015 17:45 Surya

dr-xr-xr-x 0 0 0 26-Feb-2015 10:53 System Volume Information

dr-xr-xr-x 0 0 0 6-Nov-2014 06:40 Users

dr-xr-xr-x 0 0 0 2-Mar-2015 23:13 Windows

-r--r--r-- 0 0 8 3-Mar-2015 17:46 ..:^EC0B21842-99B8-46E2-A991-EC7EEE7FEF28^E

-r--r--r-- 0 0 8 3-Mar-2015 17:46 .:^EC0B21842-99B8-46E2-A991-EC7EEE7FEF28^E

-r--r--r-- 0 0 20 6-Nov-2014 18:01 .Trashes:Mac_Metadata

-r--r--r-- 0 0 4096 5-Nov-2014 19:58 ._.Trashes

-r--r--r-- 0 0 8192 5-Nov-2014 20:22 BOOTSECT.BAK

-r--r--r-- 0 0 2066 5-Nov-2014 12:46 RHDSetup.log

-r--r--r-- 0 0 383786 20-Nov-2010 19:40 bootmgr

-r--r--r-- 0 0 171136 2-Aug-2009 15:59 grldr

-r--r--r-- 0 0 1401917440 3-Mar-2015 09:46 hiberfil.sys

-r--r--r-- 0 0 418267136 3-Mar-2015 09:46 pagefile.sys

q to quit, : to select the current file, a to select all files

C to copy the selected files, c to copy the current file

Reply

Answer 6

Loner T

Level 9

59,471 points

Mar 5, 2015 7:57 PM in response to Iwan_SG

Yes, it is indeed good news.

Leave your Testdisk display and start a new Terminal Window.

You need to use the following steps. If you see any error messages during the following steps, please stop and post back here with the error message. The following steps have values from your Testdisk output (and you can verify) in Steps 7 and 8.

Rebuild GPT4 using start/end offsets

Sudo gdisk /dev/rdisk0
P (print the full list of parts)
D (delete)
4 (part 4)
N (new part)
4 (part 4)
421875712 - Start offset in bytes (start point for Bootcamp part)
+68358137 (Size offset as opposed to End offset)
0700 (Windows part type)
P (print list of all parts just to see what changes will be made)
W (Write the new GPT)
Y (Yes! really write the new GPT)

This will delete and re-write the GPT partition info for /dev/disk0s4.

Rebuild MBR to match the new GPT information thus resetting the Hybrid MBR. Use defaults for other questions (like partition codes). The only values that need modifications are the Boot flags and step 6. Accept all other defaults that Gdisk offers.

Sudo gdisk /dev/disk0
P (Print list of parts)
R (Recover)
H (chooses Hybrid)
Partitions numbers to be hybridized: 2 3 4
Y (Good for GRUB question)
N (part 2 boot flag)
N (part 3 boot flag)
Y (part 4 boot flag make NTFS bootable partition)
W (Write the new MBR)
Y (Yes! write the new MBR)
Reboot

This is an example for the second set.

Place EFI GPT (0xEE) partition first in MBR (good for GRUB)? (Y/N): Y

Creating entry for GPT partition #2 (MBR partition #2)

Enter an MBR hex code (default AF): Press Enter/Return

Set the bootable flag? (Y/N): N

Creating entry for GPT partition #3 (MBR partition #3)

Enter an MBR hex code (default AB): Press Enter/Return

Set the bootable flag? (Y/N): N

Creating entry for GPT partition #4 (MBR partition #4)

Enter an MBR hex code (default 07): 07

Set the bootable flag? (Y/N): Y

Test 1 - Does Bootcamp Volume show up in Finder?

Test 2 - Can you see files in Bootcamp Volume?

Test 3 - Can you select Bootcamp in System Preferences -> Startup Disk?

Test 4 - If Test 3 is successful, select Bootcamp and Click Restart.

Reply

Answer 7

Iwan_SG Author

Level 1

0 points

Mar 6, 2015 1:52 AM in response to Loner T

Hi Loner

I really need to thank you greatly, I can reboot my windows again and get my data on that OS after runnin your instruction...... But Test 3 is failed. because I can't see Bootcamp disk to set as startup disk. But I still can start windows usin EFI. Again. thank you very much ... you're very helpful.

regards

Reply

Answer 8

Loner T

Level 9

59,471 points

Mar 6, 2015 5:10 AM in response to Iwan_SG

Iwan_SG wrote:

I really need to thank you greatly, I can reboot my windows again and get my data on that OS after runnin your instruction...... But Test 3 is failed. because I can't see Bootcamp disk to set as startup disk.

Can you post the output of the following commands?

sudo gpt -vv -r show /dev/disk0

sudo fdisk /dev/disk0

But I still can start windows usin EFI. Again. thank you very much ... you're very helpful.

Are you using the EFI Boot on the Windows Installer to boot from BC partition? Are using a Virtualization engine (Vmware, Parallels, VirtualBox) to boot BC partition?

Reply