BOOTCAMP Partition lost after some updates in Yosemite

Question

BOOTCAMP Partition lost after some updates in Yosemite

Hello Everyone,

I have a Mac Mini, bought in Dec 2013 and have been using Windows 8.1 since more than a year now. I did update it to OS Yosemite whenever it was available. But just 2 weeks back, I thought that its been many months now since I rebooted into Mac and there might be lots of updates pending. So I did that but right after the updates completed, when the Mac rebooted itself to finish installing the updates, the Bootcamp partition was gone.😟 When I forcefully shut it down and rebooted back into Mac, the Bootcamp was not there in both, StartUp Disk Manager and Disk Utility. 😟

Please Help Me. I have loads of important data on Bootcamp which I cannot afford to lose. Please save me from going into a state of depression if I lose that data.

On searching other threads I found that I have to post the output of the following commands from Terminal. So here's all the ground work done.

Please see below and help.

Maneesh-Mac:~ Maneesh$ df -h

Filesystem Size Used Avail Capacity iused ifree %iused Mounted on

/dev/disk0s2 559Gi 94Gi 465Gi 17% 24623723 121860650 17% /

devfs 180Ki 180Ki 0Bi 100% 622 0 100% /dev

map -hosts 0Bi 0Bi 0Bi 100% 0 0 100% /net

map auto_home 0Bi 0Bi 0Bi 100% 0 0 100% /home

Maneesh-Mac:~ Maneesh$ diskutil list

/dev/disk0

#: TYPE NAME SIZE IDENTIFIER

0: GUID_partition_scheme *1.0 TB disk0

1: EFI EFI 209.7 MB disk0s1

2: Apple_HFS Macintosh HD 600.0 GB disk0s2

3: Apple_Boot Recovery HD 650.0 MB disk0s3

4: Microsoft Basic Data 149.0 GB disk0s4

Maneesh-Mac:~ Maneesh$ diskutil cs list

No CoreStorage logical volume groups found

Maneesh-Mac:~ Maneesh$ sudo gpt -vv -r show /dev/disk0

Password:

gpt show: /dev/disk0: mediasize=1000204886016; sectorsize=512; blocks=1953525168

gpt show: /dev/disk0: Suspicious MBR at sector 0

gpt show: /dev/disk0: Pri GPT at sector 1

gpt show: /dev/disk0: Sec GPT at sector 1953525167

start size index contents

0 1 MBR

1 1 Pri GPT header

2 32 Pri GPT table

34 6

40 409600 1 GPT part - C12A7328-F81F-11D2-BA4B-00A0C93EC93B

409640 1171875000 2 GPT part - 48465300-0000-11AA-AA11-00306543ECAC

1172284640 1269536 3 GPT part - 426F6F74-0000-11AA-AA11-00306543ECAC

1173554176 488956928

1662511104 291012608 4 GPT part - EBD0A0A2-B9E5-4433-87C0-68B6B72699C7

1953523712 1423

1953525135 32 Sec GPT table

1953525167 1 Sec GPT header

Maneesh-Mac:~ Maneesh$ sudo fdisk /dev/disk0

Disk: /dev/disk0 geometry: 121601/255/63 [1953525168 sectors]

Signature: 0xAA55

Starting Ending

#: id cyl hd sec - cyl hd sec [ start - size]

------------------------------------------------------------------------

1: EE 1023 254 63 - 1023 254 63 [ 1 - 409639] <Unknown ID>

2: AF 1023 254 63 - 1023 254 63 [ 409640 - 1171875000] HFS+

3: AB 1023 254 63 - 1023 254 63 [1172284640 - 1269536] Darwin Boot

4: 0C 1023 254 63 - 1023 254 63 [1662511104 - 291012608] Win95 FAT32L

Maneesh-Mac:~ Maneesh$ sudo dd if=/dev/rdisk0 count=1 2>/dev/null | hexdump -C

00000000 33 c0 8e d0 bc 00 7c 8e c0 8e d8 be 00 7c bf 00 |3.....|......|..|

00000010 06 b9 00 02 fc f3 a4 50 68 1c 06 cb fb b9 04 00 |.......Ph.......|

00000020 bd be 07 80 7e 00 00 7c 0b 0f 85 0e 01 83 c5 10 |....~..|........|

00000030 e2 f1 cd 18 88 56 00 55 c6 46 11 05 c6 46 10 00 |.....V.U.F...F..|

00000040 b4 41 bb aa 55 cd 13 5d 72 0f 81 fb 55 aa 75 09 |.A..U..]r...U.u.|

00000050 f7 c1 01 00 74 03 fe 46 10 66 60 80 7e 10 00 74 |....t..F.f`.~..t|

00000060 26 66 68 00 00 00 00 66 ff 76 08 68 00 00 68 00 |&fh....f.v.h..h.|

00000070 7c 68 01 00 68 10 00 b4 42 8a 56 00 8b f4 cd 13 ||h..h...B.V.....|

00000080 9f 83 c4 10 9e eb 14 b8 01 02 bb 00 7c 8a 56 00 |............|.V.|

00000090 8a 76 01 8a 4e 02 8a 6e 03 cd 13 66 61 73 1c fe |.v..N..n...fas..|

000000a0 4e 11 75 0c 80 7e 00 80 0f 84 8a 00 b2 80 eb 84 |N.u..~..........|

000000b0 55 32 e4 8a 56 00 cd 13 5d eb 9e 81 3e fe 7d 55 |U2..V...]...>.}U|

000000c0 aa 75 6e ff 76 00 e8 8d 00 75 17 fa b0 d1 e6 64 |.un.v....u.....d|

000000d0 e8 83 00 b0 df e6 60 e8 7c 00 b0 ff e6 64 e8 75 |......`.|....d.u|

000000e0 00 fb b8 00 bb cd 1a 66 23 c0 75 3b 66 81 fb 54 |.......f#.u;f..T|

000000f0 43 50 41 75 32 81 f9 02 01 72 2c 66 68 07 bb 00 |CPAu2....r,fh...|

00000100 00 66 68 00 02 00 00 66 68 08 00 00 00 66 53 66 |.fh....fh....fSf|

00000110 53 66 55 66 68 00 00 00 00 66 68 00 7c 00 00 66 |SfUfh....fh.|..f|

00000120 61 68 00 00 07 cd 1a 5a 32 f6 ea 00 7c 00 00 cd |ah.....Z2...|...|

00000130 18 a0 b7 07 eb 08 a0 b6 07 eb 03 a0 b5 07 32 e4 |..............2.|

00000140 05 00 07 8b f0 ac 3c 00 74 09 bb 07 00 b4 0e cd |......<.t.......|

00000150 10 eb f2 f4 eb fd 2b c9 e4 64 eb 00 24 02 e0 f8 |......+..d..$...|

00000160 24 02 c3 49 6e 76 61 6c 69 64 20 70 61 72 74 69 |$..Invalid parti|

00000170 74 69 6f 6e 20 74 61 62 6c 65 00 45 72 72 6f 72 |tion table.Error|

00000180 20 6c 6f 61 64 69 6e 67 20 6f 70 65 72 61 74 69 | loading operati|

00000190 6e 67 20 73 79 73 74 65 6d 00 4d 69 73 73 69 6e |ng system.Missin|

000001a0 67 20 6f 70 65 72 61 74 69 6e 67 20 73 79 73 74 |g operating syst|

000001b0 65 6d 00 00 00 63 7b 9a 43 7b 00 00 00 00 00 fe |em...c{.C{......|

000001c0 ff ff ee fe ff ff 01 00 00 00 27 40 06 00 00 fe |..........'@....|

000001d0 ff ff af fe ff ff 28 40 06 00 b8 64 d9 45 00 fe |......(@...d.E..|

000001e0 ff ff ab fe ff ff e0 a4 df 45 20 5f 13 00 00 fe |.........E _....|

000001f0 ff ff 0c fe ff ff 00 e8 17 63 00 80 58 11 55 aa |.........c..X.U.|

00000200

Maneesh-Mac:~ Maneesh$

Additionally, I thought even these might be helpful to analyze.

Maneesh-Mac:~ Maneesh$ sudo gdisk /dev/disk0

GPT fdisk (gdisk) version 1.0.0

Warning: Devices opened with shared lock will not have their

partition table automatically reloaded!

Partition table scan:

MBR: hybrid

BSD: not present

APM: not present

GPT: present

Found valid GPT with hybrid MBR; using GPT.

Command (? for help): p

Disk /dev/disk0: 1953525168 sectors, 931.5 GiB

Logical sector size: 512 bytes

Disk identifier (GUID): 000038B3-79FB-0000-8A21-000018200000

Partition table holds up to 128 entries

First usable sector is 34, last usable sector is 1953525134

Partitions will be aligned on 8-sector boundaries

Total free space is 488958357 sectors (233.2 GiB)

Number Start (sector) End (sector) Size Code Name

1 40 409639 200.0 MiB EF00 EFI system partition

2 409640 1172284639 558.8 GiB AF00 Customer

3 1172284640 1173554175 619.9 MiB AB00 Recovery HD

4 1662511104 1953523711 138.8 GiB 0700 BOOTCAMP

Command (? for help): r

Recovery/transformation command (? for help): o

Disk size is 1953525168 sectors (931.5 GiB)

MBR disk identifier: 0x00007B43

MBR partitions:

Number Boot Start Sector End Sector Status Code

1 1 409639 primary 0xEE

2 409640 1172284639 primary 0xAF

3 1172284640 1173554175 primary 0xAB

4 1662511104 1953523711 primary 0x0C

Thanks in advance for all the help.

Maneesh

Mac mini, OS X Yosemite (10.10.3)

Posted on Jun 20, 2015 10:48 AM

Reply

Answer 1

Jun 20, 2015 11:16 AM in response to ManeeshAgarwal

Hello again,

P.S that I'm in India and responses from me can be delayed due to time zone differences. Otherwise I'm badly in need of a solution to fix it.

Maneesh

Reply

Answer 2

Loner T

Level 9

59,513 points

Jun 20, 2015 11:29 AM in response to ManeeshAgarwal

The large gap in your GPT output between GPT3 and GPT4 entries is where your BC NTFS header is most likely located. Was your Windows partition resized at any point in time?

Please use Lost my Windows 7 Boot Camp partition after upgrading to Yosemite. Help! as a reference and download

1. GPT Fdisk - http://sourceforge.net/projects/gptfdisk/

2. Testdisk - http://www.cgsecurity.org/wiki/TestDisk

Start a Testdisk scan using http://imgur.com/a/PjmnK as starting UI Guide and run Quick Search. Post a screen shot after Quick Search is complete.

Reply

Answer 3

Jun 20, 2015 11:39 AM in response to Loner T

Hi Loner T,

No I never resized my windows partition but theres an unused amount of space which I did not allocate to either MAC or Bootcamp.

I tried using Testdisk before but it went on for hours without stopping. I couldn't find how to do a quick search in that URL.

Maneesh

Reply

Answer 4

Loner T

Level 9

59,513 points

Jun 20, 2015 11:48 AM in response to ManeeshAgarwal

Deeper Search can take several hours or overnight. It is a sector-by-sector scan. Patience is big virtue when running Deeper Search.

Reply

Answer 5

Jun 20, 2015 12:13 PM in response to Loner T

I still couldn't start a Quick Search.. it only gives me Deeper search.. Am i missing something here.. Can you please guide me.

Also, can you please tell me which option do I select among these two. Is the right one selected?

The following partitions can't be recovered:

Partition Start End Size in sectors

MS Data 1953523711 2733492215 779968505

> Mac HFS 1953525124 1954794659 1269536

After this I get many options, Is the one selected correct?

Disk /dev/rdisk0 - 1000 GB / 931 GiB - 1953525168 sectors (RO)

Partition Start End Size in sectors

P EFI System 40 409639 409600 [EFI]

D Mac HFS 409640 1172284639 1171875000

D MS Data 393586696 1173555200 779968505

D Mac HFS 1172284640 1173554175 1269536

>D MS Data 1173555200 1953523704 779968505

D MS Data 1173555207 1953523711 779968505

D Mac HFS 1952255592 1953525127 1269536

Structure: Ok. Use Up/Down Arrow keys to select partition.

Use Left/Right Arrow keys to CHANGE partition characteristics:

P=Primary D=Deleted

Keys A: add partition, L: load backup, T: change type, P: list files,

Enter: to continue

NTFS, blocksize=4096, 399 GB / 371 GiB

After this I get only Deeper Search.. see below..

Disk /dev/rdisk0 - 1000 GB / 931 GiB - 1953525168 sectors (RO)

Partition Start End Size in sectors

1 P EFI System 40 409639 409600 [EFI]

[ Quit ] >[Deeper Search] [ Write ]

Try to find more partitions

Reply

Answer 6

Loner T

Level 9

59,513 points

Jun 20, 2015 12:20 PM in response to ManeeshAgarwal

Press Escape and go back to the previous screen. Press 'P' to list files on the MS Data entry highlighted and post a screen shot. Do the same for the next MS Data entry. You may not need a Deeper Search.

GPT 3 Start	GPT 3 Size	GPT 3 End	NTFS Start	Sector Offset	NTFS Size	NTFS End	Sector Offset (MB)	NTFS(Gb)
1172284640	1269536	1173554176	1173555200	1024	779968505	1953523704	1	371.9179654

Here is table with the second MS Data entry from the top, which is the most likely candidate. The next one is a further 7 sectors away.

Reply

Answer 7

Jun 20, 2015 12:29 PM in response to Loner T

OK.. as you say...

In the 1st MS Data row... I got..

MS Data 393586696 1173555200 779968505

Can't open filesystem. Filesystem seems damaged.

In the 2nd MS Data entry, I got..

MS Data 1173555200 1953523704 779968505

Directory /

>dr-xr-xr-x 0 0 0 2-Jun-2015 23:23 .

dr-xr-xr-x 0 0 0 2-Jun-2015 23:23 ..

dr-xr-xr-x 0 0 0 1-Nov-2014 23:43 $Recycle.Bin

dr-xr-xr-x 0 0 0 19-Sep-2014 00:04 AdwCleaner

dr-xr-xr-x 0 0 0 18-Sep-2014 22:17 Boot

dr-xr-xr-x 0 0 0 19-May-2014 18:09 Intel

dr-xr-xr-x 0 0 0 20-May-2014 00:14 MSOCache

dr-xr-xr-x 0 0 0 7-Apr-2015 23:41 Maneesh

dr-xr-xr-x 0 0 0 13-May-2015 00:48 Movies

dr-xr-xr-x 0 0 0 27-May-2015 00:06 Music

dr-xr-xr-x 0 0 0 22-Aug-2013 20:52 PerfLogs

dr-xr-xr-x 0 0 0 11-Apr-2015 16:07 Program Files

dr-xr-xr-x 0 0 0 16-May-2015 14:06 Program Files (x86)

dr-xr-xr-x 0 0 0 11-Apr-2015 16:07 ProgramData

dr-xr-xr-x 0 0 0 19-May-2014 18:10 Recovery

dr-xr-xr-x 0 0 0 26-May-2015 23:39 Softwares

dr-xr-xr-x 0 0 0 1-Jun-2015 23:23 System Volume Information

dr-xr-xr-x 0 0 0 4-Feb-2015 22:58 Users

dr-xr-xr-x 0 0 0 15-Mar-2015 01:03 Windows

-r--r--r-- 0 0 1 18-Jun-2013 17:48 BOOTNXT

-r--r--r-- 0 0 8192 20-May-2014 07:36 BOOTSECT.BAK

-r--r--r-- 0 0 2064 19-May-2014 18:29 RHDSetup.log

-r--r--r-- 0 0 404250 14-Jun-2014 16:16 bootmgr

-r--r--r-- 0 0 3357687808 2-Jun-2015 22:35 hiberfil.sys

-r--r--r-- 0 0 738197504 2-Jun-2015 22:35 pagefile.sys

-r--r--r-- 0 0 268435456 2-Jun-2015 22:35 swapfile.sys

In the 2nd MS Data entry, I got..

MS Data 1173555207 1953523711 779968505

Can't open filesystem. Filesystem seems damaged.

Now what do I do?

Reply

Answer 8

Loner T

Level 9

59,513 points

Jun 20, 2015 12:44 PM in response to ManeeshAgarwal

Install GPT Fdisk (aka gdisk).

Leave your Testdisk display and start a new Terminal Window. You need to use the following steps. If you see any error messages during the following steps, please stop and post back here with the error message. The following steps have values from your Testdisk output (and you can verify) in Steps 7 and 8. Please notice the '+' sign in step 8 (this is called offset notation). The text in parentheses is for informational purpose to describe the action being taken. Gdisk has one-character commands except when entering numbers.

Rebuild GPT4 using start/end offsets

Sudo gdisk /dev/rdisk0
P (print the full list of parts)
D (delete)
4 (part 4)
N (new part)
4 (part 4)
1173555200 ( - Start offset in bytes or the start point for Bootcamp part)
+779968505 ( - Size offset, as opposed to End offset)
0700 (Windows part type)
P (print list of all parts just to see what changes will be made)
W (Write the new GPT)
Y (Yes! really write the new GPT)

This will delete and re-write the GPT partition info for /dev/disk0s4.

Rebuild MBR to match the new GPT information thus resetting the Hybrid MBR. Use defaults for other questions (like partition codes). The only values that need modifications are the Boot flags and step 10. Accept all other defaults that Gdisk offers. Please see thesample Q&A as an example. These steps can be repeated if you make a mistake before you get to Step 12, otherwise start from Step 1 for these steps. Step 6 has numbers which are typed with a space between the numbers.

Sudo gdisk /dev/rdisk0
P (Print list of parts)
R (Recover)
O (print current Hybrid MBR)
H (chooses Hybrid)
Partitions numbers to be hybridized: 2 3 4
Y (Good for GRUB question)
N (part 2 boot flag)
N (part 3 boot flag)
Y (part 4 boot flag make NTFS bootable partition)
O (print current Hybrid MBR)
W (Write the new MBR)
Y (Yes! write the new MBR)
Reboot

Here is sample Q&A for this section. Please notice the Press Enter/Return.

Place EFI GPT (0xEE) partition first in MBR (good for GRUB)? (Y/N): Y

Creating entry for GPT partition #2 (MBR partition #2)

Enter an MBR hex code (default AF): Press Enter/Return

Set the bootable flag? (Y/N): N

Creating entry for GPT partition #3 (MBR partition #3)

Enter an MBR hex code (default AB): Press Enter/Return

Set the bootable flag? (Y/N): N

Creating entry for GPT partition #4 (MBR partition #4)

Enter an MBR hex code (default 07): Press Enter/Return

Set the bootable flag? (Y/N): Y

Test 1 - Does Bootcamp Volume show up in Finder?

Test 2 - Can you see files in Bootcamp Volume?

Test 3 - Can you select Bootcamp in System Preferences -> Startup Disk?

Test 4 - If Test 3 is successful, select Bootcamp and Click Restart.

Reply

Answer 9

Jun 20, 2015 1:08 PM in response to Loner T

YAY !! 🙂 THANK YOU SO MUCH LONER T !!

YOU ARE A GENIUS !! That worked for me. I guess probably the sectors thing you mentioned is where I need to focus to understand the entire solution.

All the tests worked fine. The first thing I'm gonna do is back up everything from Windows onto MAC. Can never take that risk again.

I owe you a drink buddy. Thanks again and thanks a Ton !! You are my saviour. Time to sleep peacefully.

Maneesh

Reply

Answer 10

Loner T

Level 9

59,513 points

Jun 20, 2015 1:35 PM in response to ManeeshAgarwal

Excellent. 😎

Reply

Answer 11

Spena

Level 1

0 points

Jun 24, 2015 8:30 AM in response to Loner T

Loner T, I've been struggling with a similar issue and hope you could help. Through my research on this site it seems you've helped many and would like to benefit from your knowledge as well.

I'd like to be able to boot into Windows and can't do it. Yes...I re-sized my Mac Partition using disk util, and my Bootcamp drive disappeared from the start up disk utility in System Preferences. Here's the requisite information, please let me know if you need something else to further analyze. Thank you.

Last login: Wed Jun 24 16:52:44 on ttys001

franks-imac:~ frankmertes$ diskutil list /dev/disk0

/dev/disk0

#: TYPE NAME SIZE IDENTIFIER

0: GUID_partition_scheme *500.1 GB disk0

1: EFI 209.7 MB disk0s1

2: Apple_HFS Macintosh HD 61.8 GB disk0s2

3: Apple_Boot Recovery HD 650.0 MB disk0s3

4: Microsoft Basic Data 200.2 GB disk0s4

franks-imac:~ frankmertes$ sudo gpt -r -vv show disk0

Password:

gpt show: disk0: mediasize=500107862016; sectorsize=512; blocks=976773168

gpt show: disk0: Suspicious MBR at sector 0

gpt show: disk0: Pri GPT at sector 1

gpt show: disk0: Sec GPT at sector 976773167

start size index contents

0 1 MBR

1 1 Pri GPT header

2 32 Pri GPT table

34 6

40 409600 1 GPT part - C12A7328-F81F-11D2-BA4B-00A0C93EC93B

409640 120750376 2 GPT part - 48465300-0000-11AA-AA11-00306543ECAC

121160016 1269536 3 GPT part - 426F6F74-0000-11AA-AA11-00306543ECAC

122429552 463234960

585664512 391108608 4 GPT part - EBD0A0A2-B9E5-4433-87C0-68B6B72699C7

976773120 15

976773135 32 Sec GPT table

976773167 1 Sec GPT header

franks-imac:~ frankmertes$ sudo fdisk /dev/disk0

Disk: /dev/disk0 geometry: 60801/255/63 [976773168 sectors]

Signature: 0xAA55

Starting Ending

#: id cyl hd sec - cyl hd sec [ start - size]

------------------------------------------------------------------------

1: EE 0 0 2 - 25 127 14 [ 1 - 409639] <Unknown ID>

2: AF 25 127 15 - 1023 254 63 [ 409640 - 120750376] HFS+

3: AB 1023 254 63 - 1023 254 63 [ 121160016 - 1269536] Darwin Boot

*4: 07 1023 254 63 - 1023 254 63 [ 585664512 - 391108608] HPFS/QNX/AUX

franks-imac:~ frankmertes$

Reply

Answer 12

Loner T

Level 9

59,513 points

Jun 24, 2015 8:40 AM in response to Spena

Can you start a new discussion and post this information on the new discussion thread? This avoids confusion for users who read the discussions after the problem has been addressed.

Can you use Lost my Windows 7 Boot Camp partition after upgrading to Yosemite. Help! as a reference and download GPT Fdisk and Testdisk and start a Testdisk scan?

Reply