ThePianist97
Level 1 (0 points)

Q: file recovery after partition deletion

Hi all, again, i've seen all this come up in the past, but i had to install some repair drivers as my mac functions were not working properly after the windows 10 update. it also meant i was unable to use my macbook's trackpad too! I accidentally selected the option on bootcamp assistant to delete an existing partition and have now literally lost all my college work and everything. Is there anything at all i can do to recover files?

MacBook Pro, null

Posted on Aug 9, 2015 3:15 AM

Close
ThePianist97

Q: file recovery after partition deletion

  • All replies
  • Helpful answers

first Previous Page 9 of 13 last Next

  • by ThePianist97,

    ThePianist97 ThePianist97 Aug 23, 2015 9:53 AM in response to Loner T
    Level 1 (0 points)
    Aug 23, 2015 9:53 AM in response to Loner T

    i think on the gpt entries, i rushed the last one which caused thisScreen Shot 2015-08-23 at 17.52.08.png

  • by Loner T,

    Loner T Loner T Aug 23, 2015 10:00 AM in response to ThePianist97
    Level 7 (24,855 points)
    Safari
    Aug 23, 2015 10:00 AM in response to ThePianist97

    You seem to have missed a digit. 31172872 is incorrect, GPT2 should end at 311372872. Can you correct it?

  • by ThePianist97,

    ThePianist97 ThePianist97 Aug 23, 2015 10:38 AM in response to Loner T
    Level 1 (0 points)
    Aug 23, 2015 10:38 AM in response to Loner T

    so do i just follow the previous steps or do i find another way to re write it?

  • by Loner T,

    Loner T Loner T Aug 23, 2015 10:51 AM in response to ThePianist97
    Level 7 (24,855 points)
    Safari
    Aug 23, 2015 10:51 AM in response to ThePianist97

    Follow the previous steps and test booting from the internal disk.

  • by ThePianist97,

    ThePianist97 ThePianist97 Aug 23, 2015 11:21 AM in response to Loner T
    Level 1 (0 points)
    Aug 23, 2015 11:21 AM in response to Loner T

    it's all back to normal for my mac side now which is great! how can i reformat my USB stick back to what it was?

  • by Loner T,

    Loner T Loner T Aug 23, 2015 11:29 AM in response to ThePianist97
    Level 7 (24,855 points)
    Safari
    Aug 23, 2015 11:29 AM in response to ThePianist97

    Please post the output of the gpt command for the record. Boot from your internal disk, and run Disk Utility and erase your USB. Make sure you only touch the USB for erase.

  • by ThePianist97,

    ThePianist97 ThePianist97 Aug 23, 2015 11:45 AM in response to Loner T
    Level 1 (0 points)
    Aug 23, 2015 11:45 AM in response to Loner T

    sure thing, thanks, which command is that one?

  • by ThePianist97,

    ThePianist97 ThePianist97 Aug 23, 2015 11:51 AM in response to Loner T
    Level 1 (0 points)
    Aug 23, 2015 11:51 AM in response to Loner T

    This is 9/11 just to be sure theres nothing that can be done for the windows side

    Screen Shot 2015-08-23 at 19.49.54.pngScreen Shot 2015-08-23 at 19.50.07.png

  • by Loner T,

    Loner T Loner T Aug 23, 2015 11:55 AM in response to ThePianist97
    Level 7 (24,855 points)
    Safari
    Aug 23, 2015 11:55 AM in response to ThePianist97

    No, it is not like a standard NTFS header which looks like the following...

     

    sudo dd if=/dev/rdisk0s4 count=1 2>/dev/null | hexdump -C

    Password:

    00000000  eb 52 90 4e 54 46 53 20  20 20 20 00 02 08 00 00  |.R.NTFS    .....|

    00000010  00 00 00 00 00 f8 00 00  3f 00 ff 00 00 50 06 0f  |........?....P..|

    00000020  00 00 00 00 80 00 80 00  ff df c8 0e 00 00 00 00  |................|

    00000030  00 00 0c 00 00 00 00 00  02 00 00 00 00 00 00 00  |................|

    00000040  f6 00 00 00 01 00 00 00  e1 b7 f7 ec f4 f7 ec 2a  |...............*|

    00000050  00 00 00 00 fa 33 c0 8e  d0 bc 00 7c fb 68 c0 07  |.....3.....|.h..|

    00000060  1f 1e 68 66 00 cb 88 16  0e 00 66 81 3e 03 00 4e  |..hf......f.>..N|

    00000070  54 46 53 75 15 b4 41 bb  aa 55 cd 13 72 0c 81 fb  |TFSu..A..U..r...|

    00000080  55 aa 75 06 f7 c1 01 00  75 03 e9 dd 00 1e 83 ec  |U.u.....u.......|

    00000090  18 68 1a 00 b4 48 8a 16  0e 00 8b f4 16 1f cd 13  |.h...H..........|

    000000a0  9f 83 c4 18 9e 58 1f 72  e1 3b 06 0b 00 75 db a3  |.....X.r.;...u..|

    000000b0  0f 00 c1 2e 0f 00 04 1e  5a 33 db b9 00 20 2b c8  |........Z3... +.|

    000000c0  66 ff 06 11 00 03 16 0f  00 8e c2 ff 06 16 00 e8  |f...............|

    000000d0  4b 00 2b c8 77 ef b8 00  bb cd 1a 66 23 c0 75 2d  |K.+.w......f#.u-|

    000000e0  66 81 fb 54 43 50 41 75  24 81 f9 02 01 72 1e 16  |f..TCPAu$....r..|

    000000f0  68 07 bb 16 68 52 11 16  68 09 00 66 53 66 53 66  |h...hR..h..fSfSf|

    00000100  55 16 16 16 68 b8 01 66  61 0e 07 cd 1a 33 c0 bf  |U...h..fa....3..|

    00000110  0a 13 b9 f6 0c fc f3 aa  e9 fe 01 90 90 66 60 1e  |.............f`.|

    00000120  06 66 a1 11 00 66 03 06  1c 00 1e 66 68 00 00 00  |.f...f.....fh...|

    00000130  00 66 50 06 53 68 01 00  68 10 00 b4 42 8a 16 0e  |.fP.Sh..h...B...|

    00000140  00 16 1f 8b f4 cd 13 66  59 5b 5a 66 59 66 59 1f  |.......fY[ZfYfY.|

    00000150  0f 82 16 00 66 ff 06 11  00 03 16 0f 00 8e c2 ff  |....f...........|

    00000160  0e 16 00 75 bc 07 1f 66  61 c3 a1 f6 01 e8 09 00  |...u...fa.......|

    00000170  a1 fa 01 e8 03 00 f4 eb  fd 8b f0 ac 3c 00 74 09  |............<.t.|

    00000180  b4 0e bb 07 00 cd 10 eb  f2 c3 0d 0a 41 20 64 69  |............A di|

    00000190  73 6b 20 72 65 61 64 20  65 72 72 6f 72 20 6f 63  |sk read error oc|

    000001a0  63 75 72 72 65 64 00 0d  0a 42 4f 4f 54 4d 47 52  |curred...BOOTMGR|

    000001b0  20 69 73 20 63 6f 6d 70  72 65 73 73 65 64 00 0d  | is compressed..|

    000001c0  0a 50 72 65 73 73 20 43  74 72 6c 2b 41 6c 74 2b  |.Press Ctrl+Alt+|

    000001d0  44 65 6c 20 74 6f 20 72  65 73 74 61 72 74 0d 0a  |Del to restart..|

    000001e0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|

    000001f0  00 00 00 00 00 00 8a 01  a7 01 bf 01 00 00 55 aa  |..............U.|

    00000200

  • by ThePianist97,

    ThePianist97 ThePianist97 Aug 23, 2015 12:35 PM in response to Loner T
    Level 1 (0 points)
    Aug 23, 2015 12:35 PM in response to Loner T

    So there can't be anything more i can do then?

  • by Loner T,

    Loner T Loner T Aug 23, 2015 12:58 PM in response to ThePianist97
    Level 7 (24,855 points)
    Safari
    Aug 23, 2015 12:58 PM in response to ThePianist97

    To be 100% certain, and depending on how much time you want to spend on this, run Testdisk one more time and post the output of the Quick Search.

  • by ThePianist97,

    ThePianist97 ThePianist97 Aug 23, 2015 1:36 PM in response to Loner T
    Level 1 (0 points)
    Aug 23, 2015 1:36 PM in response to Loner T

    Here is what it came up with

    Screen Shot 2015-08-23 at 21.34.39.pngScreen Shot 2015-08-23 at 21.35.13.png Shall i run a deep search overnight?

  • by ThePianist97,

    ThePianist97 ThePianist97 Aug 23, 2015 1:50 PM in response to Loner T
    Level 1 (0 points)
    Aug 23, 2015 1:50 PM in response to Loner T

    oh, also, on booting holding alt during startup, my mac disk says EFI Boot, is that a problem or no? in the finder, it labels it as Macintosh HD so it doesn't seem like something to worry about, just curious

  • by Loner T,

    Loner T Loner T Aug 23, 2015 3:22 PM in response to ThePianist97
    Level 7 (24,855 points)
    Safari
    Aug 23, 2015 3:22 PM in response to ThePianist97

    From a Terminal Window, triple click each individual like, copy and past in the terminal window and post the output. Most likely, the EFI directory has some remnants of Microsoft updating the partition.

    mkdir /Volumes/EFI

    sudo mount -t msdos /dev/disk0s1 /Volumes/EFI

    cd /Volumes/EFI

    ls -lR

  • by ThePianist97,

    ThePianist97 ThePianist97 Aug 23, 2015 3:45 PM in response to Loner T
    Level 1 (0 points)
    Aug 23, 2015 3:45 PM in response to Loner T

    This occurred upon entering all the entries in the same window however the last command on a regular new terminal window comes up with a plethora of dataScreen Shot 2015-08-23 at 23.40.18.png

first Previous Page 9 of 13 last Next