ThePianist97
Level 1 (0 points)

Q: file recovery after partition deletion

Hi all, again, i've seen all this come up in the past, but i had to install some repair drivers as my mac functions were not working properly after the windows 10 update. it also meant i was unable to use my macbook's trackpad too! I accidentally selected the option on bootcamp assistant to delete an existing partition and have now literally lost all my college work and everything. Is there anything at all i can do to recover files?

MacBook Pro, null

Posted on Aug 9, 2015 3:15 AM

Close
ThePianist97

Q: file recovery after partition deletion

  • All replies
  • Helpful answers

first Previous Page 6 of 13 last Next

  • by Loner T,

    Loner T Loner T Aug 15, 2015 12:34 PM in response to ThePianist97
    Level 7 (24,855 points)
    Safari
    Aug 15, 2015 12:34 PM in response to ThePianist97

    Shutdown your Mac and power it back up.

  • by ThePianist97,

    ThePianist97 ThePianist97 Aug 15, 2015 12:55 PM in response to Loner T
    Level 1 (0 points)
    Aug 15, 2015 12:55 PM in response to Loner T

    This is what the sudo command gave meScreen Shot 2015-08-15 at 20.54.23.png

  • by Loner T,

    Loner T Loner T Aug 15, 2015 1:02 PM in response to ThePianist97
    Level 7 (24,855 points)
    Safari
    Aug 15, 2015 1:02 PM in response to ThePianist97

    Your ability to boot into OSX has not been impaired, which is a good sign.

     

    Try

     

    sudo dd if=/dev/rdisk0s4 count=1 2>/dev/null | hexdump -C

  • by ThePianist97,

    ThePianist97 ThePianist97 Aug 15, 2015 1:08 PM in response to Loner T
    Level 1 (0 points)
    Aug 15, 2015 1:08 PM in response to Loner T

    This is the list of what it gave me

    Screen Shot 2015-08-15 at 21.05.48.pngScreen Shot 2015-08-15 at 21.07.19.png

  • by Loner T,

    Loner T Loner T Aug 15, 2015 2:39 PM in response to ThePianist97
    Level 7 (24,855 points)
    Safari
    Aug 15, 2015 2:39 PM in response to ThePianist97

    On page 2 of this discussion, using the second Testdisk screen, we used the first MS Data value in step 19 on page 5. Please repeat the page 5 steps with the start values of the next MS Data entry and post the output of the 'dd' command after the Reboot.

  • by ThePianist97,

    ThePianist97 ThePianist97 Aug 15, 2015 2:57 PM in response to Loner T
    Level 1 (0 points)
    Aug 15, 2015 2:57 PM in response to Loner T

    Where do i find the next MS data entry? and for the dd command, i just enter that in terminal and post the result?

  • by Loner T,

    Loner T Loner T Aug 15, 2015 4:21 PM in response to ThePianist97
    Level 7 (24,855 points)
    Safari
    Aug 15, 2015 4:21 PM in response to ThePianist97

    Use these with the same end address as in the last attempt.

     

    Pianist-NTFS-1.png

    Pianist-NTFS-2.png

    Pianist-NTFS-3.png

  • by ThePianist97,

    ThePianist97 ThePianist97 Aug 15, 2015 4:28 PM in response to Loner T
    Level 1 (0 points)
    Aug 15, 2015 4:28 PM in response to Loner T

    Im sorry I'm so, so useless but can you do a step by step for me with the values? and please don't feel you need to rush, i am so grateful for your help so I'm more than happy if you want to take your time if it's ok, of course.

  • by Loner T,

    Loner T Loner T Aug 15, 2015 4:54 PM in response to ThePianist97
    Level 7 (24,855 points)
    Safari
    Aug 15, 2015 4:54 PM in response to ThePianist97

    In the following steps, in step 23, substitute the values in the first column in the previous post one at a time and try the reboot and the dd command. The number of iterations for the following steps is 11.

     

    Rebuild GPT2,3,4 using start/end offsets and size

     

    1. Sudo gdisk /dev/rdisk0
    2. P  (print the full list of parts)
    3. x (Expert)
    4. l (Alignment)
    5. 1
    6. m (Main menu)
    7. D  (delete)
    8. 2  (part 2)
    9. D  (delete)
    10. 3  (part 3)
    11. N  (new)
    12. 2  (part 2)
    13. 409640 ( - Start offset in sectors or the start point for Bootcamp part)
    14. 311372871 ( End offset)
    15. AF00 (HFS+)
    16. N  (new part)
    17. 3  (part 3)
    18. 311372872 ( - Start offset in sectors or the start point for Bootcamp part)
    19. +1269536 ( - Size offset, as opposed to End offset)
    20. AB00 (Recovery HD)
    21. N (new part)
    22. 4 (part 4)
    23. 321167968
    24. +312498176 ( - Size offset, as opposed to End offset)
    25. 0700
    26. P  (print list of all parts just to see what changes will be made)
    27. W (Write the new GPT)
    28. Y  (Yes! really write the new GPT)

    This will delete and re-write the GPT partition info for /dev/disk0s[2,3,4].

  • by ThePianist97,

    ThePianist97 ThePianist97 Aug 15, 2015 5:23 PM in response to Loner T
    Level 1 (0 points)
    Aug 15, 2015 5:23 PM in response to Loner T

    Ok, thanks for the guidance, at step 22 it says that 4 isn't a valid number, shall i use 5 instead?Screen Shot 2015-08-16 at 01.23.24.png

  • by Loner T,

    Loner T Loner T Aug 15, 2015 5:59 PM in response to ThePianist97
    Level 7 (24,855 points)
    Safari
    Aug 15, 2015 5:59 PM in response to ThePianist97

    No. Initially you have 2 and 3, and we added 4, so now the d commands need to delete 2,3 and 4. and start over again. The numbers will always be 2,3,4 in your specific case.

  • by ThePianist97,

    ThePianist97 ThePianist97 Aug 16, 2015 4:11 AM in response to Loner T
    Level 1 (0 points)
    Aug 16, 2015 4:11 AM in response to Loner T

    It still isn't letting me choose 4, its saying 5 minimum

    Screen Shot 2015-08-16 at 12.09.49.png

  • by Loner T,Helpful

    Loner T Loner T Aug 16, 2015 5:54 AM in response to ThePianist97
    Level 7 (24,855 points)
    Safari
    Aug 16, 2015 5:54 AM in response to ThePianist97

    Did you execute 'd' and 4 prior to starting with the 'n' commands?

     

    The new steps are

     

    Rebuild GPT2,3,4 using start/end offsets and size

     

    1. Sudo gdisk /dev/rdisk0
    2. P  (print the full list of parts)
    3. x (Expert)
    4. l (Alignment)
    5. 1
    6. m (Main menu)
    7. D  (delete)
    8. 2  (part 2)
    9. D  (delete)
    10. 3  (part 3)
    11. D (delete)
    12. 4 (part 4)
    13. N  (new)
    14. 2  (part 2)
    15. 409640 ( - Start offset in sectors or the start point for Bootcamp part)
    16. 311372871 ( End offset)
    17. AF00 (HFS+)
    18. N  (new part)
    19. 3  (part 3)
    20. 311372872 ( - Start offset in sectors or the start point for Bootcamp part)
    21. +1269536 ( - Size offset, as opposed to End offset)
    22. AB00 (Recovery HD)
    23. N (new part)
    24. 4 (part 4)
    25. (iterate through the start list as discussed)
    26. (use the fixed end address as discussed)
    27. 0700
    28. P  (print list of all parts just to see what changes will be made)
    29. W (Write the new GPT)
    30. Y  (Yes! really write the new GPT)

    This will delete and re-write the GPT partition info for /dev/disk0s[2,3,4].

  • by ThePianist97,

    ThePianist97 ThePianist97 Aug 16, 2015 6:17 AM in response to Loner T
    Level 1 (0 points)
    Aug 16, 2015 6:17 AM in response to Loner T

    Fantastic, thanks, the fixed end address is always +312498176 right?

  • by Loner T,

    Loner T Loner T Aug 16, 2015 6:20 AM in response to ThePianist97
    Level 7 (24,855 points)
    Safari
    Aug 16, 2015 6:20 AM in response to ThePianist97

    ThePianist97 wrote:

     

    Fantastic, thanks, the fixed end address is always +312498176 right?

    No. Please see this...

    Instead of using the + notation in step 23, use the absolute value of 625142414 which is the last sector right before the secondary GPT table entries.
first Previous Page 6 of 13 last Next