Apple Event: May 7th at 7 am PT

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Level 1

0 points

Boot Camp disappeared after El Capitan update

I am a sailor and due to report to my ship & sail out this coming Saturday 10/10/2015.

I have a mid-2009 13" silver MBP which also has win10 loaded using boot camp. The Win 10 side has all my USCG certifications, professional licenses, email exchanges with USCG, accounts, etc.

I downloaded and installed El Capitan and after rebooting, I noticed the option of booting up in Win 10 gone. Pressing the Option key gave me 2 options of booting up either in El Capitan or the Recovery Disk. A friend put in the following sudo command, "sudo nvram boot-args="kext-dev-mode=1 rootless=0” and now the boot select screen does not show that option either.

This is what diskutil list shows:

/dev/disk0 (internal, physical):

#: TYPE NAME SIZE IDENTIFIER

0: GUID_partition_scheme *250.1 GB disk0

1: EFI EFI 209.7 MB disk0s1

2: Apple_HFS Xxxx Xxxxxxxxx 154.1 GB disk0s2

3: Apple_Boot Recovery HD 650.0 MB disk0s3

4: Microsoft Basic Data 75.2 GB disk0s4

When I type diskutil cs list into Terminal, I get No CoreStorage logical volume groups found.

Typing sudo gpt -vv -r show /dev/disk0 got

gpt show: disk0: mediasize=250059350016; sectorsize=512; blocks=488397168

gpt show: disk0: Suspicious MBR at sector 0

gpt show: disk0: Pri GPT at sector 1

gpt show: disk0: Sec GPT at sector 488397167

start size index contents

0 1 MBR

1 1 Pri GPT header

2 32 Pri GPT table

34 6

40 409600 1 GPT part - C12A7328-F81F-11D2-BA4B-00A0C93EC93B

409640 301020320 2 GPT part - 48465300-0000-11AA-AA11-00306543ECAC

301429960 1269536 3 GPT part - 426F6F74-0000-11AA-AA11-00306543ECAC

302699496 38824984

341524480 146872320 4 GPT part - EBD0A0A2-B9E5-4433-87C0-68B6B72699C7

488396800 335

488397135 32 Sec GPT table

488397167 1 Sec GPT header

Typing sudo fdisk /dev/disk0 got:

Disk: /dev/disk0 geometry: 30401/255/63 [488397168 sectors]

Signature: 0xAA55

Starting Ending

#: id cyl hd sec - cyl hd sec [ start - size]

------------------------------------------------------------------------

1: EE 1023 254 63 - 1023 254 63 [ 1 - 409639] <Unknown ID>

2: AF 1023 254 63 - 1023 254 63 [ 409640 - 301020320] HFS+

3: AB 1023 254 63 - 1023 254 63 [ 301429960 - 1269536] Darwin Boot

4: 0C 1023 254 63 - 1023 254 63 [ 341524480 - 146872320] Win95 FAT32L

Typing sudo dd if=/dev/rdisk0s4 count=1 2>/dev/null | hexdump -C gave me:

00000090 18 68 1a 00 b4 48 8a 16 0e 00 8b f4 16 1f cd 13 |.h...H..........|

000000a0 9f 83 c4 18 9e 58 1f 72 e1 3b 06 0b 00 75 db a3 |.....X.r.;...u..|

000000b0 0f 00 c1 2e 0f 00 04 1e 5a 33 db b9 00 20 2b c8 |........Z3... +.|

000000c0 66 ff 06 11 00 03 16 0f 00 8e c2 ff 06 16 00 e8 |f...............|

000000d0 4b 00 2b c8 77 ef b8 00 bb cd 1a 66 23 c0 75 2d |K.+.w......f#.u-|

000000e0 66 81 fb 54 43 50 41 75 24 81 f9 02 01 72 1e 16 |f..TCPAu$....r..|

000000f0 68 07 bb 16 68 70 0e 16 68 09 00 66 53 66 53 66 |h...hp..h..fSfSf|

00000100 55 16 16 16 68 b8 01 66 61 0e 07 cd 1a 33 c0 bf |U...h..fa....3..|

00000110 28 10 b9 d8 0f fc f3 aa e9 5f 01 90 90 66 60 1e |(........_...f`.|

00000120 06 66 a1 11 00 66 03 06 1c 00 1e 66 68 00 00 00 |.f...f.....fh...|

00000130 00 66 50 06 53 68 01 00 68 10 00 b4 42 8a 16 0e |.fP.Sh..h...B...|

00000140 00 16 1f 8b f4 cd 13 66 59 5b 5a 66 59 66 59 1f |.......fY[ZfYfY.|

00000150 0f 82 16 00 66 ff 06 11 00 03 16 0f 00 8e c2 ff |....f...........|

00000160 0e 16 00 75 bc 07 1f 66 61 c3 a0 f8 01 e8 09 00 |...u...fa.......|

00000170 a0 fb 01 e8 03 00 f4 eb fd b4 01 8b f0 ac 3c 00 |..............<.|

00000180 74 09 b4 0e bb 07 00 cd 10 eb f2 c3 0d 0a 41 20 |t.............A |

00000190 64 69 73 6b 20 72 65 61 64 20 65 72 72 6f 72 20 |disk read error |

000001a0 6f 63 63 75 72 72 65 64 00 0d 0a 42 4f 4f 54 4d |occurred...BOOTM|

000001b0 47 52 20 69 73 20 6d 69 73 73 69 6e 67 00 0d 0a |GR is missing...|

000001c0 42 4f 4f 54 4d 47 52 20 69 73 20 63 6f 6d 70 72 |BOOTMGR is compr|

000001d0 65 73 73 65 64 00 0d 0a 50 72 65 73 73 20 43 74 |essed...Press Ct|

000001e0 72 6c 2b 41 6c 74 2b 44 65 6c 20 74 6f 20 72 65 |rl+Alt+Del to re|

000001f0 73 74 61 72 74 0d 0a 00 8c a9 be d6 00 00 55 aa |start.........U.|

00000200

Typing diskutil info /dev/disk0s4 got me the following:

Device Identifier: disk0s4

Device Node: /dev/disk0s4

Whole: No

Part of Whole: disk0

Device / Media Name: BOOTCAMP

Volume Name:

Mounted: No

File System Personality: MS-DOS

Type (Bundle): msdos

Name (User Visible): MS-DOS (FAT)

Partition Type: Microsoft Basic Data

OS Can Be Installed: No

Media Type: Generic

Protocol: SATA

SMART Status: Verified

Disk / Partition UUID: 26E51FF2-1C10-406A-8099-D2DD8ADBC1A8

Total Size: 75.2 GB (75198627840 Bytes) (exactly 146872320 512-Byte-Units)

Volume Free Space: 0 B (0 Bytes) (exactly 0 512-Byte-Units)

Device Block Size: 512 Bytes

Read-Only Media: No

Read-Only Volume: Not applicable (not mounted)

Device Location: Internal

Removable Media: No

Solid State: No

Also, a few months back I had re-partitioned the hard disk with both Yosemite and Win 7 on it, to make space for Win 10.

How can I undo the sudo command and get back the Win 10 partition? I can't see the Boot Camp/Win 10 partition neither in .

Someone has suggested that I use the sudo bless –folder /System/Library/CoreServices –setBoot command. Should I?

PLEASE HELP. I need to get access to my documents and co email before Saturday.

Thanks in advance.

Posted on Oct 5, 2015 8:11 PM

Best reply

Loner T

Level 9

59,471 points

Posted on Oct 7, 2015 4:07 PM

smokeysailor wrote:

Typing sudo dd if=/dev/rdisk0s4 count=1 2>/dev/null | hexdump -C gave me:

00000090 18 68 1a 00 b4 48 8a 16 0e 00 8b f4 16 1f cd 13 |.h...H..........|

000000a0 9f 83 c4 18 9e 58 1f 72 e1 3b 06 0b 00 75 db a3 |.....X.r.;...u..|

000000b0 0f 00 c1 2e 0f 00 04 1e 5a 33 db b9 00 20 2b c8 |........Z3... +.|

000000c0 66 ff 06 11 00 03 16 0f 00 8e c2 ff 06 16 00 e8 |f...............|

000000d0 4b 00 2b c8 77 ef b8 00 bb cd 1a 66 23 c0 75 2d |K.+.w......f#.u-|

000000e0 66 81 fb 54 43 50 41 75 24 81 f9 02 01 72 1e 16 |f..TCPAu$....r..|

000000f0 68 07 bb 16 68 70 0e 16 68 09 00 66 53 66 53 66 |h...hp..h..fSfSf|

00000100 55 16 16 16 68 b8 01 66 61 0e 07 cd 1a 33 c0 bf |U...h..fa....3..|

00000110 28 10 b9 d8 0f fc f3 aa e9 5f 01 90 90 66 60 1e |(........_...f`.|

00000120 06 66 a1 11 00 66 03 06 1c 00 1e 66 68 00 00 00 |.f...f.....fh...|

00000130 00 66 50 06 53 68 01 00 68 10 00 b4 42 8a 16 0e |.fP.Sh..h...B...|

00000140 00 16 1f 8b f4 cd 13 66 59 5b 5a 66 59 66 59 1f |.......fY[ZfYfY.|

00000150 0f 82 16 00 66 ff 06 11 00 03 16 0f 00 8e c2 ff |....f...........|

00000160 0e 16 00 75 bc 07 1f 66 61 c3 a0 f8 01 e8 09 00 |...u...fa.......|

00000170 a0 fb 01 e8 03 00 f4 eb fd b4 01 8b f0 ac 3c 00 |..............<.|

00000180 74 09 b4 0e bb 07 00 cd 10 eb f2 c3 0d 0a 41 20 |t.............A |

00000190 64 69 73 6b 20 72 65 61 64 20 65 72 72 6f 72 20 |disk read error |

000001a0 6f 63 63 75 72 72 65 64 00 0d 0a 42 4f 4f 54 4d |occurred...BOOTM|

000001b0 47 52 20 69 73 20 6d 69 73 73 69 6e 67 00 0d 0a |GR is missing...|

000001c0 42 4f 4f 54 4d 47 52 20 69 73 20 63 6f 6d 70 72 |BOOTMGR is compr|

000001d0 65 73 73 65 64 00 0d 0a 50 72 65 73 73 20 43 74 |essed...Press Ct|

000001e0 72 6c 2b 41 6c 74 2b 44 65 6c 20 74 6f 20 72 65 |rl+Alt+Del to re|

000001f0 73 74 61 72 74 0d 0a 00 8c a9 be d6 00 00 55 aa |start.........U.|

00000200

This is an example from my working system.

sudo dd if=/dev/rdisk0s4 count=1 2>/dev/null | hexdump -C

Password:

00000000 eb 52 90 4e 54 46 53 20 20 20 20 00 02 08 00 00 |.R.NTFS .....|

00000010 00 00 00 00 00 f8 00 00 3f 00 ff 00 00 50 06 0f |........?....P..|

00000020 00 00 00 00 80 00 80 00 ff df c8 0e 00 00 00 00 |................|

00000030 00 00 0c 00 00 00 00 00 02 00 00 00 00 00 00 00 |................|

00000040 f6 00 00 00 01 00 00 00 e1 b7 f7 ec f4 f7 ec 2a |...............*|

00000050 00 00 00 00 fa 33 c0 8e d0 bc 00 7c fb 68 c0 07 |.....3.....|.h..|

00000060 1f 1e 68 66 00 cb 88 16 0e 00 66 81 3e 03 00 4e |..hf......f.>..N|

00000070 54 46 53 75 15 b4 41 bb aa 55 cd 13 72 0c 81 fb |TFSu..A..U..r...|

00000080 55 aa 75 06 f7 c1 01 00 75 03 e9 dd 00 1e 83 ec |U.u.....u.......|

00000090 18 68 1a 00 b4 48 8a 16 0e 00 8b f4 16 1f cd 13 |.h...H..........|

000000a0 9f 83 c4 18 9e 58 1f 72 e1 3b 06 0b 00 75 db a3 |.....X.r.;...u..|

000000b0 0f 00 c1 2e 0f 00 04 1e 5a 33 db b9 00 20 2b c8 |........Z3... +.|

000000c0 66 ff 06 11 00 03 16 0f 00 8e c2 ff 06 16 00 e8 |f...............|

000000d0 4b 00 2b c8 77 ef b8 00 bb cd 1a 66 23 c0 75 2d |K.+.w......f#.u-|

000000e0 66 81 fb 54 43 50 41 75 24 81 f9 02 01 72 1e 16 |f..TCPAu$....r..|

000000f0 68 07 bb 16 68 52 11 16 68 09 00 66 53 66 53 66 |h...hR..h..fSfSf|

00000100 55 16 16 16 68 b8 01 66 61 0e 07 cd 1a 33 c0 bf |U...h..fa....3..|

00000110 0a 13 b9 f6 0c fc f3 aa e9 fe 01 90 90 66 60 1e |.............f`.|

00000120 06 66 a1 11 00 66 03 06 1c 00 1e 66 68 00 00 00 |.f...f.....fh...|

00000130 00 66 50 06 53 68 01 00 68 10 00 b4 42 8a 16 0e |.fP.Sh..h...B...|

00000140 00 16 1f 8b f4 cd 13 66 59 5b 5a 66 59 66 59 1f |.......fY[ZfYfY.|

00000150 0f 82 16 00 66 ff 06 11 00 03 16 0f 00 8e c2 ff |....f...........|

00000160 0e 16 00 75 bc 07 1f 66 61 c3 a1 f6 01 e8 09 00 |...u...fa.......|

00000170 a1 fa 01 e8 03 00 f4 eb fd 8b f0 ac 3c 00 74 09 |............<.t.|

00000180 b4 0e bb 07 00 cd 10 eb f2 c3 0d 0a 41 20 64 69 |............A di|

00000190 73 6b 20 72 65 61 64 20 65 72 72 6f 72 20 6f 63 |sk read error oc|

000001a0 63 75 72 72 65 64 00 0d 0a 42 4f 4f 54 4d 47 52 |curred...BOOTMGR|

000001b0 20 69 73 20 63 6f 6d 70 72 65 73 73 65 64 00 0d | is compressed..|

000001c0 0a 50 72 65 73 73 20 43 74 72 6c 2b 41 6c 74 2b |.Press Ctrl+Alt+|

000001d0 44 65 6c 20 74 6f 20 72 65 73 74 61 72 74 0d 0a |Del to restart..|

000001e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|

000001f0 00 00 00 00 00 00 8a 01 a7 01 bf 01 00 00 55 aa |..............U.|

00000200

Your output does not have addresses 00-90. Can you please post it for verification?

Also, a few months back I had re-partitioned the hard disk with both Yosemite and Win 7 on it, to make space for Win 10.

This is a bit confusing. Did you have all three, Yosemite, Windows 7 and Windows 10 as separate OSes at the same time? And you could switch between all three? If yes, it would require some esoteric partitioning on your 2009 Mac. Your 2009 Mac officially does not support W10 according to Apple.

How can I undo the sudo command and get back the Win 10 partition? I can't see the Boot Camp/Win 10 partition neither in .

Someone has suggested that I use the sudo bless –folder /System/Library/CoreServices –setBoot command. Should I?

PLEASE HELP. I need to get access to my documents and co email before Saturday.

Let us do one step at a time. In the current state, I do not want to make the problem any worse than what it is. The Bless is just controlling boot ability. If the partition header(s) is(are) incorrect, no amount of such commands will help.

Can you also download the following two pieces of software?

Testdisk - http://www.cgsecurity.org/wiki/TestDisk_Download

GPT Fdisk - http://sourceforge.net/projects/gptfdisk/

These will help in scanning the disk and for potential issues and fixing them as necessary.

View in context

55 replies

smokeysailor Author

Level 1

0 points

Oct 9, 2015 7:59 PM in response to Loner T

Yeah, hopefully the nearby Walmart has one. Although, they'll be selling the cheap Memorex ones. My sailing has probably been postponed to Wednesday, but not sure. What would be the procedure to do a disk copy, incase I sail out and won't have access to internet? Also, once I copy, do I do the earlier process that you suggested of rebooting from Startup, etc?

Loner T

Level 9

59,471 points

Oct 9, 2015 8:39 PM in response to smokeysailor

The Memorex DVDs are fairly good. In my experience, Verbatim are the most reliable. Please see Disk Utility 12.x: Duplicate a disk, CD, or DVD . Use the earlier steps, which are much more reliable, but the fallback of using Alt/Option can also be used.

WEE ER

Level 1

8 points

Dec 6, 2015 10:37 PM in response to Loner T

Hi loner

i lose my windows partition after i upgrading to El Capitan.This is the information i can give. i not sure that whether i can follow the step on top.

Last login: Mon Dec 7 13:33:44 on ttys000

DME-MB1455700:~ ertarwee$ diskutil list

/dev/disk0 (internal, physical):

#: TYPE NAME SIZE IDENTIFIER

0: GUID_partition_scheme *500.1 GB disk0

1: EFI EFI 209.7 MB disk0s1

2: Apple_CoreStorage Macintosh HD 320.4 GB disk0s2

3: Apple_Boot Recovery HD 650.0 MB disk0s3

4: Microsoft Basic Data 80.0 GB disk0s4

/dev/disk1 (internal, virtual):

#: TYPE NAME SIZE IDENTIFIER

0: Apple_HFS Macintosh HD +320.0 GB disk1

Logical Volume on disk0s2

8E69B371-667C-4F08-8A5A-792FD82F4C26

Unlocked Encrypted

DME-MB1455700:~ ertarwee$ diskutil cs list

CoreStorage logical volume groups (1 found)

+-- Logical Volume Group 5E40D0AB-1F00-4327-8F5C-A499053E7F1A

=========================================================

Name: Macintosh HD

Status: Online

Size: 320377606144 B (320.4 GB)

Free Space: 18894848 B (18.9 MB)

+-< Physical Volume B334FFE9-B4A9-42B1-A6B4-E190A79040B9

| ----------------------------------------------------

| Index: 0

| Disk: disk0s2

| Status: Online

| Size: 320377606144 B (320.4 GB)

+-> Logical Volume Family 3EB48281-B3C4-4E3C-B94A-34DC5293534D

----------------------------------------------------------

Encryption Type: AES-XTS

Encryption Status: Unlocked

Conversion Status: Converting (forward)

High Level Queries: Not Fully Secure

| Passphrase Required

| Accepts New Users

| Has Visible Users

| Has Volume Key

+-> Logical Volume 8E69B371-667C-4F08-8A5A-792FD82F4C26

---------------------------------------------------

Disk: disk1

Status: Online

Size (Total): 320006389760 B (320.0 GB)

Conversion Progress: 65%

Revertible: Yes (unlock and decryption required)

LV Name: Macintosh HD

Volume Name: Macintosh HD

Content Hint: Apple_HFS

DME-MB1455700:~ ertarwee$ sudo gpt -vv -r show/dev/disk0

Password:

gpt: unknown command: show/dev/disk0

DME-MB1455700:~ ertarwee$ sudo gpt -vv -r show /dev/disk0

gpt show: /dev/disk0: mediasize=500107862016; sectorsize=512; blocks=976773168

gpt show: /dev/disk0: Suspicious MBR at sector 0

gpt show: /dev/disk0: Pri GPT at sector 1

gpt show: /dev/disk0: Sec GPT at sector 976773167

start size index contents

0 1 MBR

1 1 Pri GPT header

2 32 Pri GPT table

34 6

40 409600 1 GPT part - C12A7328-F81F-11D2-BA4B-00A0C93EC93B

409640 625737512 2 GPT part - 53746F72-6167-11AA-AA11-00306543ECAC

626147152 1269536 3 GPT part - 426F6F74-0000-11AA-AA11-00306543ECAC

627416688 193108368

820525056 156248064 4 GPT part - EBD0A0A2-B9E5-4433-87C0-68B6B72699C7

976773120 15

976773135 32 Sec GPT table

976773167 1 Sec GPT header

DME-MB1455700:~ ertarwee$ sudo fdisk /dev/disk0

Disk: /dev/disk0 geometry: 60801/255/63 [976773168 sectors]

Signature: 0xAA55

Starting Ending

#: id cyl hd sec - cyl hd sec [ start - size]

------------------------------------------------------------------------

1: EE 1023 254 63 - 1023 254 63 [ 1 - 409639] <Unknown ID>

2: AC 1023 254 63 - 1023 254 63 [ 409640 - 625737512] <Unknown ID>

3: AB 1023 254 63 - 1023 254 63 [ 626147152 - 1269536] Darwin Boot

4: 0C 1023 254 63 - 1023 254 63 [ 820525056 - 156248064] Win95 FAT32L

DME-MB1455700:~ ertarwee$

Loner T

Level 9

59,471 points

Dec 7, 2015 5:13 AM in response to WEE ER

Can you start a new discussion (Find answers and ask new questions) and post the same output on the new discussion? It avoids confusion on steps which may be unique to you.

Can you use El Capitan has deleted my bootcamp windows partition as a reference and download Testdisk and GPT Fdisk and start a Testdisk scan and run a Quick Search?

Dec 23, 2015 6:14 AM in response to Loner T

I'm not computer savy and cannot follow these instructions to fix this issue. Can i use time machine to go back to my last back up before i installed el capitan? Will that fix the issue?

Loner T

Level 9

59,471 points

Dec 23, 2015 7:04 AM in response to sirenita55

Can I suggest starting a new discussion and posting details? This may require a bit of Terminal work, but let that not daunt/deter you from trying it. I can provide specific commands, etc.

Mar 31, 2016 8:37 AM in response to Loner T

Hi,

I have similar, but not the same situation. Bootcamp partition dissapeared after El Captain upgrade (and is NOT visible from StartUp Disk utility) but is visible in boot menu (when you start a computer with Alt key). I can start Windows from this place but after each shutdown (in Windows) it reboots into OSX (unless I press Alt as mentioned)

What procedure should I use in this situation?

Additional question - does your solution delete data on "broken" bootcamp partition?

Wojtek

Loner T

Level 9

59,471 points

Mar 31, 2016 11:33 AM in response to WojtasWWW

Please start a new discussion and post the output of commands as requested in this discussion. None of the steps delete any user data, they only manipulate partitions and related MBRs.

Techy007

Level 1

4 points

Aug 28, 2016 9:06 PM in response to smokeysailor

Hi all,

@ Loner T or @smokeysailor - I have this very problem which since has been 'solved'. What I would like to know is will doing the above solution keep the existing partition data/information?

I had bootcamp running perfectly on Yosemite and needed to update to El Capitan due to Sketch software requirements. I did do an initial search and for all I could find upgrading to El Capitan on the OSX partition should have been fine however I discovered it was not.

I am very much hoping the above solution simply fixes the MBR table and does not wipe any of the data on my windows partition which I so badly need.

Please advise. Thanks!

Loner T

Level 9

59,471 points

Aug 29, 2016 3:48 AM in response to Techy007

Techy007 wrote:

I am very much hoping the above solution simply fixes the MBR table and does not wipe any of the data on my windows partition which I so badly need.

Data is not touched. Only the partition tables - GPT and MBR - are manipulated.

Boot Camp disappeared after El Capitan update