Repairing Boot Camp after creating new partition

Question

Level 1

8 points

Repairing Boot Camp after creating new partition

I did the stupid thing to create a 3rd partition while having bootcamp..

I know there are very similar posts, but i need help to make sure to get it right repairing the MBR..(if possible?)

Here is the situation ( diskutil list, gpt, fdisk, gdisk results) I'll be very grateful if someone knowledgeable answer me... ( will i have the chance to get a response from Christopher Murphy...?)

MAC OS X (10.9.5 )

diskutil list

/dev/disk0

#: TYPE NAME SIZE IDENTIFIER

0: GUID_partition_scheme *251.0 GB disk0

1: EFI EFI 209.7 MB disk0s1

2: Apple_HFS Macintosh HD 188.9 GB disk0s2

3: Apple_Boot Recovery HD 650.0 MB disk0s3

4: Microsoft Basic Data BOOTCAMP 60.0 GB disk0s4

sudo gpt -r -vv show disk0

gpt show: disk0: mediasize=251000193024; sectorsize=512; blocks=490234752

gpt show: disk0: Suspicious MBR at sector 0

gpt show: disk0: Pri GPT at sector 1

gpt show: disk0: Sec GPT at sector 490234751

start size index contents

0 1 MBR

1 1 Pri GPT header

2 32 Pri GPT table

34 6

40 409600 1 GPT part - C12A7328-F81F-11D2-BA4B-00A0C93EC93B

409640 368908440 2 GPT part - 48465300-0000-11AA-AA11-00306543ECAC

369318080 1269536 3 GPT part - 426F6F74-0000-11AA-AA11-00306543ECAC

370587616 2459680

373047296 117186560 4 GPT part - EBD0A0A2-B9E5-4433-87C0-68B6B72699C7

490233856 863

490234719 32 Sec GPT table

490234751 1 Sec GPT header

sudo fdisk /dev/disk0

Disk: /dev/disk0 geometry: 30515/255/63 [490234752 sectors]

Signature: 0xAA55

Starting Ending

#: id cyl hd sec - cyl hd sec [ start - size]

------------------------------------------------------------------------

1: EE 1023 254 63 - 1023 254 63 [ 1 - 409639] <Unknown ID>

2: AF 1023 254 63 - 1023 254 63 [ 409640 - 368908440] HFS+

3: AB 1023 254 63 - 1023 254 63 [ 369318080 - 1269536] Darwin Boot

4: 0C 1023 254 63 - 1023 254 63 [ 373047296 - 117186560] Win95 FAT32L

MacBook-Pro-de-Gilles:~ gilles$ diskutil list

/dev/disk0

#: TYPE NAME SIZE IDENTIFIER

0: GUID_partition_scheme *251.0 GB disk0

1: EFI EFI 209.7 MB disk0s1

2: Apple_HFS Macintosh HD 188.9 GB disk0s2

3: Apple_Boot Recovery HD 650.0 MB disk0s3

4: Microsoft Basic Data BOOTCAMP 60.0 GB disk0s4

sudo gdisk /dev/disk0

Password:

GPT fdisk (gdisk) version 1.0.0

Warning: Devices opened with shared lock will not have their

partition table automatically reloaded!

Partition table scan:

MBR: hybrid

BSD: not present

APM: not present

GPT: present

Found valid GPT with hybrid MBR; using GPT.

Command (? for help): p

Disk /dev/disk0: 490234752 sectors, 233.8 GiB

Logical sector size: 512 bytes

Disk identifier (GUID): CC0F4C25-407E-49FF-9BC0-235DAD29CA3A

Partition table holds up to 128 entries

First usable sector is 34, last usable sector is 490234718

Partitions will be aligned on 8-sector boundaries

Total free space is 2460549 sectors (1.2 GiB)

Number Start (sector) End (sector) Size Code Name

1 40 409639 200.0 MiB EF00 EFI System Partition

2 409640 369318079 175.9 GiB AF00 Customer

3 369318080 370587615 619.9 MiB AB00 Recovery HD

4 373047296 490233855 55.9 GiB 0700 BOOTCAMP

MacBook Pro with Retina display, OS X Mavericks (10.9.5)

Posted on May 2, 2015 8:25 AM

Reply

Answer 1

Loner T

Level 9

59,471 points

May 2, 2015 9:55 AM in response to gillus

You need to find the 'lost' NTFS partition in the gap between GPT3 and GPT4. Can you use Boot Camp missing after upgrade as a reference and start a scan with Testdisk?

Reply

Answer 2

gillus Author

Level 1

8 points

May 2, 2015 3:04 PM in response to Loner T

Here is what I get after running testDisk as you suggested (thanks for your help, I do not now what to do with it...) :

Disk /dev/rdisk0 - 251 GB / 233 GiB - 490234752 sectors (RO)

Current partition structure:

Partition Start End Size in sectors

1 P EFI System 40 409639 409600 [EFI System Partitio

2 P Mac HFS 409640 369318079 368908440 [Customer]

3 P Mac Boot 369318080 370587615 1269536 [Recovery HD]

Warning: number of heads/cylinder mismatches 255 (NTFS) != 1 (HD)

Warning: number of sectors per track mismatches 63 (NTFS) != 1 (HD)

4 P MS Data 373047296 490233855 117186560 [BOOTCAMP]

-----------------------------------------------------

(More to come..)

Reply

Answer 3

gillus Author

Level 1

8 points

May 2, 2015 3:06 PM in response to gillus

And :

Disk /dev/rdisk0 - 251 GB / 233 GiB - 490234752 sectors (RO)

Partition Start End Size in sectors

>P EFI System 40 409639 409600 [EFI]

D Mac HFS 409640 369318079 368908440

..

Reply

Answer 4

gillus Author

Level 1

8 points

May 2, 2015 3:08 PM in response to gillus

Disk /dev/rdisk0 - 251 GB / 233 GiB - 490234752 sectors (RO)

Partition Start End Size in sectors

>P EFI System 40 409639 409600 [EFI]

D Mac HFS 409640 369318079 368908440

....

D MS Data 457439755 457460493 20739 [NO NAME]

D MS Data 469324288 469327167 2880 [EFISECTOR]

D MS Data 473800635 473806808 6174

D MS Data 473806808 473812981 6174 [Boot]

D MS Data 476726835 476733008 6174

D MS Data 476733008 476739181 6174 [Boot]

D Mac HFS 488965176 490234711 1269536

Reply

Answer 5

gillus Author

Level 1

8 points

May 2, 2015 3:08 PM in response to gillus

Sorry, I have trouble sending (texte format problem..)

Is that enough ?

Reply

Answer 6

gillus Author

Level 1

8 points

May 2, 2015 3:09 PM in response to gillus

There is also:

D MS Data 373047296 490233855 117186560

D MS Data 457439755 457460493 20739 [NO NAME]

D MS Data 469324288 469327167 2880 [EFISECTOR]

Reply

Answer 7

Loner T

Level 9

59,471 points

May 2, 2015 5:00 PM in response to gillus

None of these start in the highlighted Gap

370587616 2459680

373047296 117186560 4 GPT part - EBD0A0A2-B9E5-4433-87C0-68B6B72699C7

And you can see the current GPT4 entry in Testdisk as highlighted

D MS Data 373047296 490233855 117186560

Do you see any more MS Data entries which are close to 370587616 start address?

Reply

Answer 8

gillus Author

Level 1

8 points

May 2, 2015 9:57 PM in response to Loner T

Yes, I can see :

D MS Data 362001280 479187839 117186560

D Mac HFS 369318080 370587615 1269536

D Mac HFS 370670648 371940183 1269536

D Mac HFS 372785148 435841595 63056448

D MS Data 373047296 490233855 117186560

D MS Data 457439755 457460493 20739 [NO NAME]

I am running deeper search, it is about 20 % in 6 hours...)

Reply

Answer 9

gillus Author

Level 1

8 points

May 3, 2015 1:16 AM in response to gillus

I run DeepScan, 1st screen :

Disk /dev/rdisk0 - 251 GB / 233 GiB - 490234752 sectors (RO)

The harddisk (251 GB / 233 GiB) seems too small! (< 1434 GB / 1335 GiB)

Check the harddisk size: HD jumpers settings, BIOS detection...

The following partitions can't be recovered:

Partition Start End Size in sectors

> Mac HFS 369318076 738226515 368908440

MS Data 399708383 516894942 117186560

MS Data 409041504 526228063 117186560

MS Data 415055488 532242047 117186560

Mac HFS 443452262 2801306471 2357854210 [Oq^A^P]

MS Data 443488464 560675023 117186560

Mac HFS 450843658 589255947 138412290

MS Data 454726720 571913279 117186560

MS Data 455387615 572574174 117186560

MS Data 474735600 591922159 117186560

-----------------------

The closest I found in the long long list is 370587612 :

D Mac HFS 369417334 370686869 1269536

D Mac HFS 369417406 370686941 1269536

D Mac HFS 369417486 370687021 1269536

>D Mac HFS 370587612 371857147 1269536

D Mac HFS 370670648 371940183 1269536

D Mac HFS 370670707 371940242 1269536

D Mac HFS 370670811 371940346 1269536

D Mac HFS 370670883 371940418 1269536

D Mac HFS 370670963 371940498 1269536

D Mac HFS 370671035 371940570 1269536

D Mac HFS 370671131 371940666 1269536

Is this repairable...?

Reply

Answer 10

gillus Author

Level 1

8 points

May 3, 2015 4:23 AM in response to Loner T

The closest I could find is 372785148..(MAC HFS).

Disk /dev/rdisk0 - 251 GB / 233 GiB - 490234752 sectors (RO)

Partition Start End Size in sectors

P EFI System 40 409639 409600 [EFI]

..

D Mac HFS 370670648 371940183 1269536

>D Mac HFS 372785148 435841595 63056448

D MS Data 373047296 490233855 117186560

Reply

Answer 11

Loner T

Level 9

59,471 points

May 3, 2015 5:54 AM in response to gillus

Can you post the output of

sudo dd if=/dev/rdisk0s4 count=1 2>/dev/null | hexdump -C

What was the size of the new partition you were trying to create? Is it roughly 1.2 Gb?

Reply

Answer 12

gillus Author

Level 1

8 points

May 3, 2015 5:28 AM in response to Loner T

It xas a 30 Gb FAT partition, but I then try to remove it (could not), and then reduced it to effectively 1,2 Gb.

output requested :

00000000 eb 52 90 4e 54 46 53 20 20 20 20 00 02 08 00 00 |.R.NTFS .....|

00000010 00 00 00 00 00 f8 00 00 3f 00 ff 00 00 40 3c 16 |........?....@<.|

00000020 00 00 00 00 80 00 80 00 ff 1f fc 06 00 00 00 00 |................|

00000030 00 00 0c 00 00 00 00 00 02 00 00 00 00 00 00 00 |................|

00000040 f6 00 00 00 01 00 00 00 f1 f7 89 fa 20 8a fa 1a |............ ...|

00000050 00 00 00 00 fa 33 c0 8e d0 bc 00 7c fb 68 c0 07 |.....3.....|.h..|

00000060 1f 1e 68 66 00 cb 88 16 0e 00 66 81 3e 03 00 4e |..hf......f.>..N|

00000070 54 46 53 75 15 b4 41 bb aa 55 cd 13 72 0c 81 fb |TFSu..A..U..r...|

00000080 55 aa 75 06 f7 c1 01 00 75 03 e9 dd 00 1e 83 ec |U.u.....u.......|

00000090 18 68 1a 00 b4 48 8a 16 0e 00 8b f4 16 1f cd 13 |.h...H..........|

000000a0 9f 83 c4 18 9e 58 1f 72 e1 3b 06 0b 00 75 db a3 |.....X.r.;...u..|

000000b0 0f 00 c1 2e 0f 00 04 1e 5a 33 db b9 00 20 2b c8 |........Z3... +.|

000000c0 66 ff 06 11 00 03 16 0f 00 8e c2 ff 06 16 00 e8 |f...............|

000000d0 4b 00 2b c8 77 ef b8 00 bb cd 1a 66 23 c0 75 2d |K.+.w......f#.u-|

000000e0 66 81 fb 54 43 50 41 75 24 81 f9 02 01 72 1e 16 |f..TCPAu$....r..|

000000f0 68 07 bb 16 68 70 0e 16 68 09 00 66 53 66 53 66 |h...hp..h..fSfSf|

00000100 55 16 16 16 68 b8 01 66 61 0e 07 cd 1a 33 c0 bf |U...h..fa....3..|

00000110 28 10 b9 d8 0f fc f3 aa e9 5f 01 90 90 66 60 1e |(........_...f`.|

00000120 06 66 a1 11 00 66 03 06 1c 00 1e 66 68 00 00 00 |.f...f.....fh...|

00000130 00 66 50 06 53 68 01 00 68 10 00 b4 42 8a 16 0e |.fP.Sh..h...B...|

00000140 00 16 1f 8b f4 cd 13 66 59 5b 5a 66 59 66 59 1f |.......fY[ZfYfY.|

00000150 0f 82 16 00 66 ff 06 11 00 03 16 0f 00 8e c2 ff |....f...........|

00000160 0e 16 00 75 bc 07 1f 66 61 c3 a0 f8 01 e8 09 00 |...u...fa.......|

00000170 a0 fb 01 e8 03 00 f4 eb fd b4 01 8b f0 ac 3c 00 |..............<.|

00000180 74 09 b4 0e bb 07 00 cd 10 eb f2 c3 0d 0a 41 20 |t.............A |

00000190 64 69 73 6b 20 72 65 61 64 20 65 72 72 6f 72 20 |disk read error |

000001a0 6f 63 63 75 72 72 65 64 00 0d 0a 42 4f 4f 54 4d |occurred...BOOTM|

000001b0 47 52 20 69 73 20 6d 69 73 73 69 6e 67 00 0d 0a |GR is missing...|

000001c0 42 4f 4f 54 4d 47 52 20 69 73 20 63 6f 6d 70 72 |BOOTMGR is compr|

000001d0 65 73 73 65 64 00 0d 0a 50 72 65 73 73 20 43 74 |essed...Press Ct|

000001e0 72 6c 2b 41 6c 74 2b 44 65 6c 20 74 6f 20 72 65 |rl+Alt+Del to re|

000001f0 73 74 61 72 74 0d 0a 00 8c a9 be d6 00 00 55 aa |start.........U.|

Reply

Answer 13

Loner T

Level 9

59,471 points

May 3, 2015 5:54 AM in response to gillus

Try the simpler fix first. Please ignorethe i386 MBR error message when you run thefollowing commands.

sudo fdisk -e /dev/disk0

p

setpid 4

07

flag 4

p

w

y

Test 1 - Does Bootcamp Volume show up in Finder?

Test 2 - Can you see files in Bootcamp Volume?

Test 3 - Can you select Bootcamp in System Preferences -> Startup Disk?

Test 4 - If Test 3 is successful, select Bootcamp and Click Restart.

Reply

Answer 14

gillus Author

Level 1

8 points

May 3, 2015 5:54 AM in response to Loner T

Loner T, I owe you...a lot !

Thank you so much being patient with a "first time posting on the net" guy...

It works fine, I got back all my C++ and Java programing environnement under Windows...

One thing, the 1, 9 Gb are unused, is it save to extend MAC partition to get all those bytes back ?

THANK YOU SO MUCH !

I kiss you (only if you are a pretty looking girl..)

Reply

Answer 15

Loner T

Level 9

59,471 points

May 3, 2015 7:10 AM in response to gillus

I am glad it solved you issue. The Testdisk was not really needed in your specific case. It is needed in some others, depending on the history before the problem occurred. (BTW, I am a very ugly girl 😉 - just kidding).

1. Please back up OS X and Windows to separate external disks, as a baseline for the future.

2. It is a pain to recover the 1.9 GB, because it is sitting between Windows and Recovery HD. If you really want it back. you will temporarily lose Recovery HD and will have to reinstall OS X. Let me know if you want to pursue it further.

Reply