Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Level 1

8 points

El Captain deleted my Windows partition and I cannot reclaim the space back.

Hey guys. After upgrading to El Captain I have recently discovered that my Windows partition was erased for a reason that I don't know. I thought this was ok as I would re-install it again, yet I have come across some difficulty. In the 'About This Mac' Storage tab, there is no acknowledgement of the 60gb drive that I used for windows, yet for Mac I only have 430gb/500gb max, meaning the 60 gb is still an unknown drive. I opened up Disk Utility (image below) and as I thought there is a 60gb drive named Untitled that I cannot reclaim when I try to partition the hard drive. Furthermore, as you can see, the drive is not on the left hand side.

I am new to technology really and not great with following complicated steps, so if someone could assist me with this is a simple yet effective way I would be more than grateful!

MacBook Pro, OS X El Capitan (10.11.2)

Posted on Feb 1, 2016 11:27 AM

Best reply

Loner T

Level 9

59,471 points

Posted on Feb 1, 2016 12:38 PM

El Capitan Upgrade can cause problems with installed Windows. It may still be recoverable.

From/run Applications -> Utilities -> Terminal, triple-click each of the following highlighted lines, Copy each line using (Command+C) and Paste (Command+V) in Terminal window. Post the output and after editing it to remove any personal information.

The "sudo" commands will prompt for your password, and it will not be echoed back. You may also see a warning about improper use of "sudo" and potential data loss due to "abuse" of the command.

diskutil list

diskutil cs list

sudo gpt -vv -r show /dev/disk0

sudo fdisk /dev/disk0

View in context

32 replies

Loner T

Level 9

59,471 points

Feb 2, 2016 3:06 PM in response to ADRumbler

Scroll to each MS Data entry and use 'p' to list files. Post a screen shot. Press Escape (only once) to get back to this entry list.

ADRumbler Author

Level 1

8 points

Feb 2, 2016 3:11 PM in response to Loner T

The first one had nothing on it

The second one came out like this

TestDisk 7.0, Data Recovery Utility, April 2015

Christophe GRENIER <grenier@cgsecurity.org>

http://www.cgsecurity.org

MS Data 758464512 976773112 218308601

Directory /

>dr-xr-xr-x 0 0 0 11-Nov-2015 13:03 .

dr-xr-xr-x 0 0 0 11-Nov-2015 13:03 ..

dr-xr-xr-x 0 0 0 3-Apr-2015 18:57 $Recycle.Bin

dr-xr-xr-x 0 0 0 27-Feb-2015 10:10 Boot

dr-xr-xr-x 0 0 0 26-Oct-2015 18:01 GOG Games

dr-xr-xr-x 0 0 0 5-Mar-2015 00:34 Intel

dr-xr-xr-x 0 0 0 29-Mar-2015 18:48 MovieWizard

dr-xr-xr-x 0 0 0 22-Aug-2013 16:22 PerfLogs

dr-xr-xr-x 0 0 0 3-Nov-2015 22:27 Program Files

dr-xr-xr-x 0 0 0 27-Oct-2015 17:08 Program Files (x86)

dr-xr-xr-x 0 0 0 11-Nov-2015 13:03 ProgramData

dr-xr-xr-x 0 0 0 27-Feb-2015 10:10 Recovery

dr-xr-xr-x 0 0 0 24-Nov-2015 17:39 System Volume Information

dr-xr-xr-x 0 0 0 27-Feb-2015 02:28 Users

dr-xr-xr-x 0 0 0 3-Nov-2015 21:25 Windows

dr-xr-xr-x 0 0 0 13-Mar-2015 01:37 found.000

-r--r--r-- 0 0 1 18-Jun-2013 13:18 BOOTNXT

-r--r--r-- 0 0 2066 3-Nov-2015 21:25 RHDSetup.log

-r--r--r-- 0 0 427680 22-Aug-2013 06:31 bootmgr

-r--r--r-- 0 0 13665624064 24-Nov-2015 17:18 hiberfil.sys

-r--r--r-- 0 0 7201103872 24-Nov-2015 17:42 pagefile.sys

-r--r--r-- 0 0 0 24-Nov-2015 17:42 pagefile.sys

-r--r--r-- 0 0 268435456 24-Nov-2015 17:18 swapfile.sys

-r--r--r-- 0 0 0 24-Nov-2015 17:18 swapfile.sys

Use Right to change directory, h to hide Alternate Data Stream

q to quit, : to select the current file, a to select all files

C to copy the selected files, c to copy the current file

The third one had nothing!

Loner T

Level 9

59,471 points

Feb 2, 2016 3:31 PM in response to ADRumbler

The problem you now have is two fold.

1. Your CS volume shows reboot required. You should reboot first.

2. Your current GPT entries do not correctly reflect the state prior to your issue. Here is table which accounts for the correct layout.

GPT 3 Start	GPT 3 Size	GPT 3 End	NTFS Start	Sector Offset	NTFS Size	NTFS End	Sector Offset (MB)	NTFS(Gb)	Disk End	Disk Difference
757194032	1269536	758463568	758464512	944	218308601	976773112	0	104.10	976773168	56

This shows your Windows installation to be 104GiB.

Did you try and resize any partitions in the past?

Loner T

Level 9

59,471 points

Feb 2, 2016 3:33 PM in response to ADRumbler

After you reboot, post the output of the four commands we have used earlier again.

ADRumbler Author

Level 1

8 points

Feb 2, 2016 3:35 PM in response to Loner T

Yes back in the past I had an initial size for windows and then increased it's partition. I can't quite remember how I did it or the sizes for anything but I did attempt it. I will reboot now and use those 4 commands we used at the start in terminal and paste the output

ADRumbler Author

Level 1

8 points

Feb 2, 2016 3:46 PM in response to Loner T

Adams-MacBook-Pro:~ Adam$ diskutil list

/dev/disk0 (internal, physical):

#: TYPE NAME SIZE IDENTIFIER

0: GUID_partition_scheme *500.1 GB disk0

1: EFI EFI 209.7 MB disk0s1

2: Apple_CoreStorage Macintosh HD 439.2 GB disk0s2

3: Apple_Boot Recovery HD 650.0 MB disk0s3

4: Microsoft Basic Data 60.0 GB disk0s4

/dev/disk1 (internal, virtual):

#: TYPE NAME SIZE IDENTIFIER

0: Apple_HFS Mac Disk +438.9 GB disk1

Logical Volume on disk0s2

F0AB3D49-1FD2-4F82-8E3A-56C22728E2B1

Unlocked Encrypted

Adams-MacBook-Pro:~ Adam$

Adams-MacBook-Pro:~ Adam$ diskutil cs list

CoreStorage logical volume groups (1 found)

+-- Logical Volume Group C5CEAAAD-E6E9-4247-AF17-F6B811F9BA78

=========================================================

Name: Macintosh HD

Status: Online

Size: 439248580608 B (439.2 GB)

Free Space: 18878464 B (18.9 MB)

+-< Physical Volume 9AFA7155-54CE-4CC9-A0B0-70D66CD7808A

| ----------------------------------------------------

| Index: 0

| Disk: disk0s2

| Status: Online

| Size: 439248580608 B (439.2 GB)

+-> Logical Volume Family 5816227E-EA55-4FE8-9987-4A8DD59C66E6

----------------------------------------------------------

Encryption Type: AES-XTS

Encryption Status: Unlocked

Conversion Status: Complete

High Level Queries: Fully Secure

| Passphrase Required

| Accepts New Users

| Has Visible Users

| Has Volume Key

+-> Logical Volume F0AB3D49-1FD2-4F82-8E3A-56C22728E2B1

---------------------------------------------------

Disk: disk1

Status: Online

Size (Total): 438877380608 B (438.9 GB)

Revertible: Yes (unlock and decryption required)

LV Name: Mac Disk

Volume Name: Mac Disk

Content Hint: Apple_HFS

Adams-MacBook-Pro:~ Adam$ sudo gpt -vv -r show /dev/disk0

Password:

gpt show: /dev/disk0: mediasize=500107862016; sectorsize=512; blocks=976773168

gpt show: /dev/disk0: Suspicious MBR at sector 0

gpt show: /dev/disk0: Pri GPT at sector 1

gpt show: /dev/disk0: Sec GPT at sector 976773167

start size index contents

0 1 MBR

1 1 Pri GPT header

2 32 Pri GPT table

34 6

40 409600 1 GPT part - C12A7328-F81F-11D2-BA4B-00A0C93EC93B

409640 857907384 2 GPT part - 53746F72-6167-11AA-AA11-00306543ECAC

858317024 1269536 3 GPT part - 426F6F74-0000-11AA-AA11-00306543ECAC

859586560 117186560 4 GPT part - EBD0A0A2-B9E5-4433-87C0-68B6B72699C7

976773120 15

976773135 32 Sec GPT table

976773167 1 Sec GPT header

Adams-MacBook-Pro:~ Adam$ sudo fdisk /dev/disk0

Disk: /dev/disk0 geometry: 60801/255/63 [976773168 sectors]

Signature: 0xAA55

Starting Ending

#: id cyl hd sec - cyl hd sec [ start - size]

------------------------------------------------------------------------

1: EE 1023 254 63 - 1023 254 63 [ 1 - 409639] <Unknown ID>

2: AC 1023 254 63 - 1023 254 63 [ 409640 - 857907384] <Unknown ID>

3: AB 1023 254 63 - 1023 254 63 [ 858317024 - 1269536] Darwin Boot

4: 0C 1023 254 63 - 1023 254 63 [ 859586560 - 117186560] Win95 FAT32L

Loner T

Level 9

59,471 points

Feb 2, 2016 4:18 PM in response to ADRumbler

1. Disable FileVault2 - OS X El Capitan: FileVault pane of Security & Privacy preferences .

2. Revert your CS volume to JHFS+. It can be re-converted to a CS volume after Windows is corrected. Boot into Internet Recovery (Command+Opt+R) - OS X: About OS X Recovery - Apple Support and run the following command.

diskutil cs revert F0AB3D49-1FD2-4F82-8E3A-56C22728E2B1

3. Boot normally. At this point we can rebuild your OSX and Windows partitions with additional Gdisk commands.

ADRumbler Author

Level 1

8 points

Feb 2, 2016 4:24 PM in response to Loner T

Seems like we are getting somewhere LonerT! Is it ok if we finish this tomorrow as I need to be up for University tomorrow and need to go to bed aha! Just to confirm to boot into internet recovery I restart my mac, but as it is booting up I hold Command+Opt+R and a terminal will appear in which I can input the command? Will you be able to guide me on how to reconvert it again afterwards? You've been amazing I can't thank you enough!

Loner T

Level 9

59,471 points

Feb 2, 2016 6:33 PM in response to ADRumbler

Yes, it is perfectly fine to finish it tomorrow. G'night.

ADRumbler Author

Level 1

8 points

Feb 3, 2016 9:10 AM in response to Loner T

Hey LonerT, something has come up today and I won't be able to work on it until tomorrow instead! Hope ya have a good day and I'll get back as soon as I can to you! Thanks a ton again for helping me out!

ADRumbler Author

Level 1

8 points

Feb 4, 2016 11:05 AM in response to Loner T

I restarted into Recovery Mode and put the code into terminal but it said it wasn't a valid something or other!

Loner T

Level 9

59,471 points

Feb 4, 2016 11:12 AM in response to ADRumbler

Is this csrutil? If you type csrutil and press Enter/Return, what does it show?

ADRumbler Author

Level 1

8 points

Feb 4, 2016 1:06 PM in response to Loner T

Adams-MacBook-Pro:~ Adam$ csrutil

usage: csrutil <command>

Modify the System Integrity Protection configuration. All configuration changes apply to the entire machine.

Available commands:

clear

Clear the existing configuration. Only available in Recovery OS.

disable

Disable the protection on the machine. Only available in Recovery OS.

enable

Enable the protection on the machine. Only available in Recovery OS.

status

Display the current configuration.

netboot

add <address>

Insert a new IPv4 address in the list of allowed NetBoot sources.

list

Print the list of allowed NetBoot sources.

remove <address>

Remove an IPv4 address from the list of allowed NetBoot sources.

Adams-MacBook-Pro:~ Adam$

I didn't start in recovery mode to write do this I used terminal from the desktop

Loner T

Level 9

59,471 points

Feb 4, 2016 5:23 PM in response to ADRumbler

1. You can only csrutil status when booted normally.

2. Only Local Recovery (not Internet Recovery) will let you disable it.

ADRumbler Author

Level 1

8 points

Feb 7, 2016 12:56 PM in response to Loner T

So I need to boot into Local Recovery, then type in csrutil and disable protection, then type in diskutil cs revert F0AB3D49-1FD2-4F82-8E3A-56C22728E2B1

El Captain deleted my Windows partition and I cannot reclaim the space back.