Trying to recover Windows bootcamp and data within using instructions on this community

Question

Level 1

0 points

Trying to recover Windows bootcamp and data within using instructions on this community

Hi there,

I had Windows bootcamp installed on my Macbook air and was working fine until I created a new partition to mount it on top of 25GB (i reckon) windows partition. I lost the Windows boot when I created this new partition from disk utility. On rebooting Windows option disappeared.

I followed below steps by "Loner T" to recover windows bootability:

sudo fdisk -e /dev/disk0

p

setpid 4

07

flag 4

p

write

y

Now Reboot and hold the ALT key and check if Windows shows up and is bootable.

Following above, I could now see the boot icon on Alt+Start but when trying Windows I got "Missing Operating System" To resolve this, I am trying to follow instructions via this post - BOOTCAMP Partition lost after some updates in Yosemite and other interlinking posts./threads [NOTE: I have not attempted Yosemite upgrade at all]

I have installed GPTF Disk and TestDisk and followed steps on http://imgur.com/a/PjmnK to do a quick search. Below is the output. Can you please suggest me next steps to recover bootcamp along with the data. Had quite a bit of data saved there and really hoping to get it all back safe. Please Help!!

MacBook Air, OS X Mavericks (10.9.5)

Posted on Jul 6, 2015 5:52 AM

Reply

Answer 1

Loner T

Level 9

59,471 points

Jul 6, 2015 5:54 AM in response to davesam00

Can you post the output of the following Terminal commands?

diskutil list

diskutil cs list

sudo gpt -vv -r show /dev/disk0

sudo fdisk /dev/disk0

The "sudo" commands will prompt for your password, and it will not be echoed back. You may also see a warning about improper use of "sudo" and potential data loss due to "abuse" of the command.

Reply

Answer 2

davesam00 Author

Level 1

0 points

Jul 6, 2015 6:19 AM in response to Loner T

Thanks Loner T for prompt reply.

Please find below the snapshot showing output of all mentioned commands -

Reply

Answer 3

Loner T

Level 9

59,471 points

Jul 6, 2015 6:43 AM in response to davesam00

Can you post the output of

sudo dd if=/dev/rdisk0s4 count=1 2>/dev/null | hexdump -C

Reply

Answer 4

davesam00 Author

Level 1

0 points

Jul 6, 2015 6:48 AM in response to Loner T

Here we go! really appreciate this - looks rocket science to me! 🙂

this is all I got -

Reply

Answer 5

Loner T

Level 9

59,471 points

Jul 6, 2015 7:40 AM in response to davesam00

The gap between GPT3 and GPT4 indicates a lost NTFS header. Can you use "Missing operating system" after Yosemite upgrade / MBR repair as a reference and start a Testdisk scan?

Reply

Answer 6

davesam00 Author

Level 1

0 points

Jul 6, 2015 7:59 AM in response to Loner T

Hi, I did try to follow the steps in above post and Windows 7 Vanished after Yosemite update... help? to do the quick search using TestDisk. Not sure if I did it right but i exactly followed the steps on http://imgur.com/a/PjmnK.

The result of my Quick Search is attached in my first post - below again for reference - have I done this right or missed something?

Please let me know if I should this this all over again to copy previous snapshots before I hit Quick Search.

FYI I select EFI GPT option before selecting Analyse.

Reply

Answer 7

Loner T

Level 9

59,471 points

Jul 6, 2015 9:09 AM in response to davesam00

Do not use left/right arrow/cursor keys anywhere in Testdisk.

Use down arrow to scroll down to the MS Data starting at 148434944 and enter 'P' to list files. Please post a screen shot.

Reply

Answer 8

davesam00 Author

Level 1

0 points

Jul 6, 2015 9:14 AM in response to Loner T

Here it is - the screenshot for MS Data starting 148434944

Reply

Answer 9

Loner T

Level 9

59,471 points

Jul 6, 2015 9:24 AM in response to davesam00

Press Escape once only, and scroll down to the next MS Data at 188151808 and press 'P' to list files. Please post a screen shot.

Reply

Answer 10

davesam00 Author

Level 1

0 points

Jul 6, 2015 9:27 AM in response to Loner T

This doesn't look good - snapshot of MS Data starting at 188151808 below -

Reply

Answer 11

Loner T

Level 9

59,471 points

Jul 6, 2015 9:36 AM in response to davesam00

This is expected. You can have only one viable NTFS partition. This validates the available partitions.

Here is a table for verification.

GPT 3 Start	GPT 3 Size	GPT 3 End	NTFS Start	Sector Offset	NTFS Size	NTFS End	Sector Offset (MB)	NTFS(Gb)
129038008	1269536	130307544	148434944	18127400	88541177	236976120	8,851	42.21972322

Can you use the Gdisk steps in the linked thread and replace steps 7 and 8 values with 148434944 and 88541177 and run both sets of Gdisk steps? Do not forget the '+' sign in step 8 in the first set of Gdisk steps.

Reply

Answer 12

davesam00 Author

Level 1

0 points

Jul 6, 2015 9:45 AM in response to Loner T

Thanks Loner T..

I have done the first part of the instruction successfully - Hence I believe I have now "delete and re-write the GPT partition info for /dev/disk0s4."

Question: Where do I perform the second set of instructions i.e. Where do I follow second set of steps 1 to 14. Do I do this in the sae Terminal window where I followed the first set?

Thanks again for all the prompt replies.

Reply

Answer 13

Loner T

Level 9

59,471 points

Jul 6, 2015 9:48 AM in response to davesam00

Execute the second set in the same terminal Window. The previous set of Gdisk steps should have put you at the terminal command prompt.

Reply

Answer 14

davesam00 Author

Level 1

0 points

Jul 6, 2015 9:57 AM in response to Loner T

Yup I did return to terminal command prompt after first set.

I am in middle of the second part and seek assistant before I mess up anything.

In re to step 8 and 9 - do I have to N twice for partition 2 and partition 3... I am currently confused/stuck at below screen. Should I follow as per step 11 or do i need to restart and do N for both questions of part 2 and part 3

Reply

Answer 15

davesam00 Author

Level 1

0 points

Jul 6, 2015 10:04 AM in response to davesam00

Aah, I think I saw what I had to do in your instructions, how do I restart this process?

Reply