davesam00

Level 1 (0 points)

Q: Trying to recover Windows bootcamp and data within using instructions on this community

Hi there,

I had Windows bootcamp installed on my Macbook air and was working fine until I created a new partition to mount it on top of 25GB (i reckon) windows partition. I lost the Windows boot when I created this new partition from disk utility. On rebooting Windows option disappeared.

I followed below steps by "Loner T" to recover windows bootability:

sudo fdisk -e /dev/disk0

setpid 4

flag 4

write

Now Reboot and hold the ALT key and check if Windows shows up and is bootable.

Following above, I could now see the boot icon on Alt+Start but when trying Windows I got "Missing Operating System" To resolve this, I am trying to follow instructions via this post - BOOTCAMP Partition lost after some updates in Yosemite and other interlinking posts./threads [NOTE: I have not attempted Yosemite upgrade at all]

I have installed GPTF Disk and TestDisk and followed steps on http://imgur.com/a/PjmnK to do a quick search. Below is the output. Can you please suggest me next steps to recover bootcamp along with the data. Had quite a bit of data saved there and really hoping to get it all back safe. Please Help!!

MacBook Air, OS X Mavericks (10.9.5)

Posted on Jul 6, 2015 5:52 AM

I have this question too

Solved

Loner T

Level 7 (24,825 points)

Safari

You can abort the steps using a 'q' or Control+C and start again.

This is incorrect. See this part.

Here is sample Q&A for this section. Please notice the Press Enter/Return.

Place EFI GPT (0xEE) partition first in MBR (good for GRUB)? (Y/N): Y

Creating entry for GPT partition #2 (MBR partition #2)
Enter an MBR hex code (default AF): Press Enter/Return
Set the bootable flag? (Y/N): N

Creating entry for GPT partition #3 (MBR partition #3)
Enter an MBR hex code (default AB): Press Enter/Return
Set the bootable flag? (Y/N): N

Creating entry for GPT partition #4 (MBR partition #4)
Enter an MBR hex code (default 07): Press Enter/Return
Set the bootable flag? (Y/N): Y

Posted on Jul 6, 2015 10:06 AM

Q: Trying to recover Windows bootcamp and data within using instructions on this community

All replies

Helpful answers

Page 1

by Loner T,

Loner T Jul 6, 2015 5:54 AM in response to davesam00
Level 7 (24,825 points)

Safari

Jul 6, 2015 5:54 AM in response to davesam00

Can you post the output of the following Terminal commands?

diskutil list
diskutil cs list
sudo gpt -vv -r show /dev/disk0
sudo fdisk /dev/disk0

The "sudo" commands will prompt for your password, and it will not be echoed back. You may also see a warning about improper use of "sudo" and potential data loss due to "abuse" of the command.
Reply options

Link to this post

by davesam00,

davesam00 Jul 6, 2015 6:19 AM in response to Loner T
Level 1 (0 points)

Jul 6, 2015 6:19 AM in response to Loner T

Thanks Loner T for prompt reply.

Please find below the snapshot showing output of all mentioned commands -
Reply options

Link to this post

by Loner T,

Loner T Jul 6, 2015 6:43 AM in response to davesam00
Level 7 (24,825 points)

Safari

Jul 6, 2015 6:43 AM in response to davesam00

Can you post the output of

sudo dd if=/dev/rdisk0s4 count=1 2>/dev/null | hexdump -C
Reply options

Link to this post

by davesam00,

davesam00 Jul 6, 2015 6:48 AM in response to Loner T
Level 1 (0 points)

Jul 6, 2015 6:48 AM in response to Loner T

Here we go! really appreciate this - looks rocket science to me!

this is all I got -
Reply options

Link to this post

by Loner T,

Loner T Jul 6, 2015 7:40 AM in response to davesam00
Level 7 (24,825 points)

Safari

Jul 6, 2015 7:40 AM in response to davesam00

The gap between GPT3 and GPT4 indicates a lost NTFS header. Can you use "Missing operating system" after Yosemite upgrade / MBR repair as a reference and start a Testdisk scan?
Reply options

Link to this post

by davesam00,

davesam00 Jul 6, 2015 7:59 AM in response to Loner T
Level 1 (0 points)

Jul 6, 2015 7:59 AM in response to Loner T

Hi, I did try to follow the steps in above post and Windows 7 Vanished after Yosemite update... help? to do the quick search using TestDisk. Not sure if I did it right but i exactly followed the steps on http://imgur.com/a/PjmnK.

The result of my Quick Search is attached in my first post - below again for reference - have I done this right or missed something?

Please let me know if I should this this all over again to copy previous snapshots before I hit Quick Search.
FYI I select EFI GPT option before selecting Analyse.
Reply options

Link to this post

by Loner T,

Loner T Jul 6, 2015 9:09 AM in response to davesam00
Level 7 (24,825 points)

Safari

Jul 6, 2015 9:09 AM in response to davesam00

Do not use left/right arrow/cursor keys anywhere in Testdisk.

Use down arrow to scroll down to the MS Data starting at 148434944 and enter 'P' to list files. Please post a screen shot.
Reply options

Link to this post

by davesam00,

davesam00 Jul 6, 2015 9:14 AM in response to Loner T
Level 1 (0 points)

Jul 6, 2015 9:14 AM in response to Loner T

Here it is - the screenshot for MS Data starting 148434944
Reply options

Link to this post

by Loner T,

Loner T Jul 6, 2015 9:24 AM in response to davesam00
Level 7 (24,825 points)

Safari

Jul 6, 2015 9:24 AM in response to davesam00

Press Escape once only, and scroll down to the next MS Data at 188151808 and press 'P' to list files. Please post a screen shot.
Reply options

Link to this post

by davesam00,

davesam00 Jul 6, 2015 9:27 AM in response to Loner T
Level 1 (0 points)

Jul 6, 2015 9:27 AM in response to Loner T

This doesn't look good - snapshot of MS Data starting at 188151808 below -
Reply options

Link to this post

by Loner T,

Loner T Jul 6, 2015 9:36 AM in response to davesam00
Level 7 (24,825 points)

Safari

Jul 6, 2015 9:36 AM in response to davesam00

This is expected. You can have only one viable NTFS partition. This validates the available partitions.

Here is a table for verification.

GPT 3 Start GPT 3 Size GPT 3 End NTFS Start Sector Offset NTFS Size NTFS End Sector Offset (MB) NTFS(Gb)
129038008 1269536 130307544 148434944 18127400 88541177 236976120 8,851 42.21972322

Can you use the Gdisk steps in the linked thread and replace steps 7 and 8 values with 148434944 and 88541177 and run both sets of Gdisk steps? Do not forget the '+' sign in step 8 in the first set of Gdisk steps.
Reply options

Link to this post

by davesam00,

davesam00 Jul 6, 2015 9:45 AM in response to Loner T
Level 1 (0 points)

Jul 6, 2015 9:45 AM in response to Loner T

Thanks Loner T..

I have done the first part of the instruction successfully - Hence I believe I have now "delete and re-write the GPT partition info for /dev/disk0s4."

Question: Where do I perform the second set of instructions i.e. Where do I follow second set of steps 1 to 14. Do I do this in the sae Terminal window where I followed the first set?

Thanks again for all the prompt replies.
Reply options

Link to this post

by Loner T,

Loner T Jul 6, 2015 9:48 AM in response to davesam00
Level 7 (24,825 points)

Safari

Jul 6, 2015 9:48 AM in response to davesam00

Execute the second set in the same terminal Window. The previous set of Gdisk steps should have put you at the terminal command prompt.
Reply options

Link to this post

by davesam00,

davesam00 Jul 6, 2015 9:57 AM in response to Loner T
Level 1 (0 points)

Jul 6, 2015 9:57 AM in response to Loner T

Yup I did return to terminal command prompt after first set.

I am in middle of the second part and seek assistant before I mess up anything.

In re to step 8 and 9 - do I have to N twice for partition 2 and partition 3... I am currently confused/stuck at below screen. Should I follow as per step 11 or do i need to restart and do N for both questions of part 2 and part 3
Reply options

Link to this post

Page 1

GPT 3 Start	GPT 3 Size	GPT 3 End	NTFS Start	Sector Offset	NTFS Size	NTFS End	Sector Offset (MB)	NTFS(Gb)
129038008	1269536	130307544	148434944	18127400	88541177	236976120	8,851	42.21972322

Q: Trying to recover Windows bootcamp and data within using instructions on this community

All replies Helpful answers

by Loner T,

by davesam00,

by Loner T,

by davesam00,

by Loner T,

by davesam00,

by Loner T,

by davesam00,

by Loner T,

by davesam00,

by Loner T,

by davesam00,

by Loner T,

by davesam00,

All replies

Helpful answers