ozeegers

Q: bootcamp partition renamed untitled after booting in MacOS

Can anybody please help me ?

 

I had succesfully installed Windows 10 on my Macbook Pro and ran Windows already several weeks smoothly.

Unfortunately I did not make a backup of my windows files yet.

 

Today when I booted to El Capitan to connect my iPad to iTunes Windows gave me a message that it needed repair when I tried to reboot to the bootcamp Windows version.

It did not succeed in repairing and only gave my an advanced options menu.

I booted back into MacOS to find that the windows partition was renamed to 'Untitled' and that no files were visible in Finder.

 

I than ran Disk Utility and selected First Aid on this partition, I thought this was read only to check for disk errors.

Now when booting from Windows it says no operation system available and Disk Utility shows 496 GB empty space on this partition !

 

I hope not all my files are lost !!

What can I do to repair the bootcamp partition ? I tried to install setup bootcamp files on USB but cannot boot from USB (does not show the USB drive)

 

thank you !

 

Olivier

MacBook Pro, OS X El Capitan (10.11.3), Bootcamp Windows 10

Posted on Apr 5, 2016 11:34 AM

Close

Q: bootcamp partition renamed untitled after booting in MacOS

  • All replies
  • Helpful answers

first Previous Page 16 of 20 last Next
  • by ozeegers,

    ozeegers ozeegers Apr 27, 2016 1:03 PM in response to ozeegers
    Level 1 (5 points)
    Windows Software
    Apr 27, 2016 1:03 PM in response to ozeegers

    now its okay, but still nothing in finder....

     

    sudo fdisk /dev/disk0

    Password:

    Disk: /dev/disk0 geometry: 91201/255/63 [1465149168 sectors]

    Signature: 0xAA55

             Starting       Ending

    #: id  cyl  hd sec -  cyl  hd sec [     start -       size]

    ------------------------------------------------------------------------

    1: EE    0   0   2 -   25 127  14 [         1 -     409639] <Unknown ID>

    2: AF   25 127  15 - 1023 254  63 [    409640 -  538198808] HFS+       

    3: AB 1023 254  63 - 1023 254  63 [ 538608448 -    1269536] Darwin Boot

    *4: 07 1023 254  63 - 1023 254  63 [ 539879424 -  925265920] HPFS/QNX/AUX

  • by Loner T,

    Loner T Loner T Apr 27, 2016 1:47 PM in response to ozeegers
    Level 7 (24,202 points)
    Safari
    Apr 27, 2016 1:47 PM in response to ozeegers

    Is the NTFS file system mounted? What is the output of the dd command on this partition?

  • by ozeegers,

    ozeegers ozeegers Apr 27, 2016 10:24 PM in response to Loner T
    Level 1 (5 points)
    Windows Software
    Apr 27, 2016 10:24 PM in response to Loner T

    diskutil info disk0s4

       Device Identifier:        disk0s4

       Device Node:              /dev/disk0s4

       Whole:                    No

       Part of Whole:            disk0

       Device / Media Name:      Microsoft basic data

     

       Volume Name:             

     

       Mounted:                  No

     

       File System Personality:  MS-DOS

       Type (Bundle):            msdos

       Name (User Visible):      MS-DOS (FAT)

     

       Partition Type:           Microsoft Basic Data

       OS Can Be Installed:      No

       Media Type:               Generic

       Protocol:                 SATA

       SMART Status:             Verified

       Disk / Partition UUID:    2DA5EBCE-D5BA-4071-A608-4BBBABC24A67

     

       Total Size:               473.7 GB (473736151040 Bytes) (exactly 925265920 512-Byte-Units)

       Volume Free Space:        0 B (0 Bytes) (exactly 0 512-Byte-Units)

       Device Block Size:        512 Bytes

     

       Read-Only Media:          No

       Read-Only Volume:         Not applicable (not mounted)

     

       Device Location:          Internal

       Removable Media:          No

     

       Solid State:              No

     

     

    sudo dd if=/dev/rdisk0s4 count=1 2>/dev/null | hexdump -C

    Password:

    00000000  00 00 00 40 00 00 00 20  00 00 00 00 00 00 00 00  |...@... ........|

    00000010  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 20  |............... |

    00000020  00 00 00 00 00 00 00 00  00 00 00 30 00 00 00 00  |...........0....|

    00000030  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|

    00000040  00 00 00 00 00 00 00 00  00 00 00 e0 00 00 00 60  |...............`|

    00000050  00 00 00 00 00 00 00 80  00 00 00 70 00 00 00 00  |...........p....|

    00000060  00 00 00 60 00 00 00 10  00 00 00 80 00 00 00 40  |...`...........@|

    00000070  00 00 00 70 00 00 00 b0  00 00 00 10 00 00 00 f0  |...p............|

    00000080  00 00 00 00 00 00 00 00  00 00 00 d0 00 00 00 e0  |................|

    00000090  00 00 00 00 00 00 00 10  00 00 00 f0 00 00 00 10  |................|

    000000a0  00 00 00 10 00 00 00 70  00 00 00 00 00 00 00 a0  |.......p........|

    000000b0  00 00 00 20 00 00 00 10  00 00 00 b0 00 00 00 c0  |... ............|

    000000c0  00 00 00 10 00 00 00 00  00 00 00 f0 00 00 00 e0  |................|

    000000d0  00 00 00 c0 00 00 00 00  00 00 00 60 00 00 00 20  |...........`... |

    000000e0  00 00 00 50 00 00 00 70  00 00 00 00 00 00 00 10  |...P...p........|

    000000f0  00 00 00 10 00 00 00 10  00 00 00 60 00 00 00 60  |...........`...`|

    00000100  00 00 00 10 00 00 00 60  00 00 00 c0 00 00 00 b0  |.......`........|

    00000110  00 00 00 f0 00 00 00 a0  00 00 00 90 00 00 00 10  |................|

    00000120  00 00 00 10 00 00 00 00  00 00 00 60 00 00 00 00  |...........`....|

    00000130  00 00 00 00 00 00 00 00  00 00 00 b0 00 00 00 00  |................|

    00000140  00 00 00 80 00 00 00 60  00 00 00 60 00 00 00 10  |.......`...`....|

    00000150  00 00 00 00 00 00 00 10  00 00 00 00 00 00 00 f0  |................|

    00000160  00 00 00 70 00 00 00 60  00 00 00 f0 00 00 00 00  |...p...`........|

    00000170  00 00 00 e0 00 00 00 e0  00 00 00 a0 00 00 00 00  |................|

    00000180  00 00 00 00 00 00 00 e0  00 00 00 00 00 00 00 60  |...............`|

    00000190  00 00 00 70 00 00 00 20  00 00 00 60 00 00 00 60  |...p... ...`...`|

    000001a0  00 00 00 70 00 00 00 00  00 00 00 40 00 00 00 50  |...p.......@...P|

    000001b0  00 00 00 20 00 00 00 70  00 00 00 70 00 00 00 00  |... ...p...p....|

    000001c0  00 00 00 60 00 00 00 40  00 00 00 20 00 00 00 20  |...`...@... ... |

    000001d0  00 00 00 20 00 00 00 70  00 00 00 60 00 00 00 00  |... ...p...`....|

    000001e0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|

    000001f0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 a0  |................|

    00000200

  • by ozeegers,

    ozeegers ozeegers Apr 27, 2016 10:30 PM in response to Loner T
    Level 1 (5 points)
    Windows Software
    Apr 27, 2016 10:30 PM in response to Loner T

    how can i see if it is mounted ?

    is the above what you mean ?

  • by ozeegers,

    ozeegers ozeegers Apr 27, 2016 10:33 PM in response to ozeegers
    Level 1 (5 points)
    Windows Software
    Apr 27, 2016 10:33 PM in response to ozeegers

    Screen Shot 2016-04-28 at 07.32.05.png

  • by ozeegers,

    ozeegers ozeegers Apr 28, 2016 1:20 PM in response to ozeegers
    Level 1 (5 points)
    Windows Software
    Apr 28, 2016 1:20 PM in response to ozeegers

    chinese to me

  • by ozeegers,

    ozeegers ozeegers Apr 29, 2016 9:09 AM in response to ozeegers
    Level 1 (5 points)
    Windows Software
    Apr 29, 2016 9:09 AM in response to ozeegers

    Hello Loner T ? Please help me ! thank you

  • by Loner T,

    Loner T Loner T Apr 29, 2016 10:15 AM in response to ozeegers
    Level 7 (24,202 points)
    Safari
    Apr 29, 2016 10:15 AM in response to ozeegers

    Traveling till Sunday night. Monday is the earliest we can look.

  • by ozeegers,

    ozeegers ozeegers Apr 29, 2016 12:29 PM in response to Loner T
    Level 1 (5 points)
    Windows Software
    Apr 29, 2016 12:29 PM in response to Loner T

    ok, wish you a good trip !

  • by Loner T,

    Loner T Loner T Apr 29, 2016 3:31 PM in response to ozeegers
    Level 7 (24,202 points)
    Safari
    Apr 29, 2016 3:31 PM in response to ozeegers

    In your Testdisk screens the entry we current have as GPT4, shows up as MS Data (with pagefil.sys). It should either show up as FAT or NTFS, but the dd output shows neither.

     

    Can you post the output of

     

    sudo dd if=/dev/rdisk0s3 skip=1269536 count=5 2>/dev/null | hexdump -C

  • by ozeegers,

    ozeegers ozeegers Apr 29, 2016 10:20 PM in response to Loner T
    Level 1 (5 points)
    Windows Software
    Apr 29, 2016 10:20 PM in response to Loner T

    sure, but this gives no output at all ?

     

    Oliviers-MBP:~ ozeegers$ sudo dd if=/dev/rdisk0s3 skip=1269536 count=5 2>/dev/null | hexdump -C

    Oliviers-MBP:~ ozeegers$ sudo dd if=/dev/rdisk0s3 skip=1269536 count=5 2>/dev/null | hexdump -C

     

    do you mean rdisk0s4 ? this is the output of rdisk04:

     

    ozeegers$ sudo dd if=/dev/rdisk0s4 skip=1269536 count=5 2>/dev/null | hexdump -C

    00000000  41 00 20 00 66 00 6f 00  6e 00 74 00 20 00 77 00  |A. .f.o.n.t. .w.|

    00000010  69 00 74 00 68 00 20 00  61 00 6e 00 20 00 6f 00  |i.t.h. .a.n. .o.|

    00000020  62 00 66 00 75 00 73 00  63 00 61 00 74 00 65 00  |b.f.u.s.c.a.t.e.|

    00000030  64 00 20 00 63 00 6f 00  6e 00 74 00 65 00 6e 00  |d. .c.o.n.t.e.n.|

    00000040  74 00 20 00 74 00 79 00  70 00 65 00 20 00 6d 00  |t. .t.y.p.e. .m.|

    00000050  75 00 73 00 74 00 20 00  68 00 61 00 76 00 65 00  |u.s.t. .h.a.v.e.|

    00000060  20 00 61 00 6e 00 20 00  6f 00 62 00 66 00 75 00  | .a.n. .o.b.f.u.|

    00000070  73 00 63 00 61 00 74 00  65 00 64 00 20 00 75 00  |s.c.a.t.e.d. .u.|

    00000080  72 00 69 00 00 00 00 00  00 00 00 00 00 00 00 00  |r.i.............|

    00000090  55 00 6e 00 65 00 78 00  70 00 65 00 63 00 74 00  |U.n.e.x.p.e.c.t.|

    000000a0  65 00 64 00 20 00 64 00  6f 00 63 00 75 00 6d 00  |e.d. .d.o.c.u.m.|

    000000b0  65 00 6e 00 74 00 20 00  74 00 79 00 70 00 65 00  |e.n.t. .t.y.p.e.|

    000000c0  20 00 6f 00 6e 00 20 00  73 00 65 00 72 00 69 00  | .o.n. .s.e.r.i.|

    000000d0  61 00 6c 00 69 00 7a 00  61 00 74 00 69 00 6f 00  |a.l.i.z.a.t.i.o.|

    000000e0  6e 00 00 00 00 00 00 00  49 00 6e 00 76 00 61 00  |n.......I.n.v.a.|

    000000f0  6c 00 69 00 64 00 20 00  74 00 68 00 75 00 6d 00  |l.i.d. .t.h.u.m.|

    00000100  62 00 6e 00 61 00 69 00  6c 00 20 00 74 00 79 00  |b.n.a.i.l. .t.y.|

    00000110  70 00 65 00 00 00 00 00  64 00 63 00 74 00 65 00  |p.e.....d.c.t.e.|

    00000120  72 00 6d 00 73 00 3a 00  57 00 33 00 43 00 44 00  |r.m.s.:.W.3.C.D.|

    00000130  54 00 46 00 00 00 00 00  57 00 33 00 43 00 44 00  |T.F.....W.3.C.D.|

    00000140  54 00 46 00 00 00 00 00  43 00 6f 00 6e 00 74 00  |T.F.....C.o.n.t.|

    00000150  65 00 6e 00 74 00 20 00  61 00 6c 00 72 00 65 00  |e.n.t. .a.l.r.e.|

    00000160  61 00 64 00 79 00 20 00  61 00 64 00 64 00 65 00  |a.d.y. .a.d.d.e.|

    00000170  64 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |d...............|

    00000180  43 00 68 00 69 00 6c 00  64 00 20 00 61 00 64 00  |C.h.i.l.d. .a.d.|

    00000190  64 00 65 00 64 00 2c 00  20 00 63 00 61 00 6e 00  |d.e.d.,. .c.a.n.|

    000001a0  6e 00 6f 00 74 00 20 00  61 00 64 00 64 00 20 00  |n.o.t. .a.d.d. .|

    000001b0  63 00 6f 00 6e 00 74 00  65 00 6e 00 74 00 00 00  |c.o.n.t.e.n.t...|

    000001c0  43 00 61 00 6c 00 6c 00  20 00 74 00 6f 00 20 00  |C.a.l.l. .t.o. .|

    000001d0  63 00 68 00 61 00 72 00  61 00 63 00 74 00 65 00  |c.h.a.r.a.c.t.e.|

    000001e0  72 00 73 00 20 00 66 00  61 00 69 00 6c 00 65 00  |r.s. .f.a.i.l.e.|

    000001f0  64 00 20 00 77 00 69 00  74 00 68 00 20 00 48 00  |d. .w.i.t.h. .H.|

    00000200  52 00 65 00 73 00 75 00  6c 00 74 00 20 00 30 00  |R.e.s.u.l.t. .0.|

    00000210  78 00 25 00 58 00 2e 00  00 00 00 00 00 00 00 00  |x.%.X...........|

    00000220  4e 00 6f 00 74 00 20 00  76 00 61 00 6c 00 69 00  |N.o.t. .v.a.l.i.|

    00000230  64 00 20 00 74 00 6f 00  20 00 63 00 61 00 6c 00  |d. .t.o. .c.a.l.|

    00000240  6c 00 20 00 58 00 70 00  73 00 4f 00 4d 00 50 00  |l. .X.p.s.O.M.P.|

    00000250  61 00 63 00 6b 00 61 00  67 00 65 00 43 00 6f 00  |a.c.k.a.g.e.C.o.|

    00000260  6e 00 73 00 75 00 6d 00  65 00 72 00 20 00 61 00  |n.s.u.m.e.r. .a.|

    00000270  6c 00 72 00 65 00 61 00  64 00 79 00 20 00 66 00  |l.r.e.a.d.y. .f.|

    00000280  61 00 69 00 6c 00 65 00  64 00 00 00 00 00 00 00  |a.i.l.e.d.......|

    00000290  4e 00 6f 00 74 00 20 00  76 00 61 00 6c 00 69 00  |N.o.t. .v.a.l.i.|

    000002a0  64 00 20 00 74 00 6f 00  20 00 63 00 61 00 6c 00  |d. .t.o. .c.a.l.|

    000002b0  6c 00 20 00 58 00 70 00  73 00 4f 00 4d 00 50 00  |l. .X.p.s.O.M.P.|

    000002c0  61 00 63 00 6b 00 61 00  67 00 65 00 43 00 6f 00  |a.c.k.a.g.e.C.o.|

    000002d0  6e 00 73 00 75 00 6d 00  65 00 72 00 20 00 61 00  |n.s.u.m.e.r. .a.|

    000002e0  6c 00 72 00 65 00 61 00  64 00 79 00 20 00 63 00  |l.r.e.a.d.y. .c.|

    000002f0  6c 00 6f 00 73 00 65 00  64 00 00 00 00 00 00 00  |l.o.s.e.d.......|

    00000300  43 00 61 00 6c 00 6c 00  20 00 74 00 6f 00 20 00  |C.a.l.l. .t.o. .|

    00000310  43 00 72 00 65 00 61 00  74 00 65 00 50 00 61 00  |C.r.e.a.t.e.P.a.|

    00000320  72 00 74 00 55 00 72 00  69 00 20 00 66 00 61 00  |r.t.U.r.i. .f.a.|

    00000330  69 00 6c 00 65 00 64 00  20 00 77 00 69 00 74 00  |i.l.e.d. .w.i.t.|

    00000340  68 00 20 00 48 00 52 00  65 00 73 00 75 00 6c 00  |h. .H.R.e.s.u.l.|

    00000350  74 00 20 00 30 00 78 00  25 00 58 00 2e 00 00 00  |t. .0.x.%.X.....|

    00000360  43 00 6f 00 6d 00 70 00  61 00 63 00 74 00 47 00  |C.o.m.p.a.c.t.G.|

    00000370  75 00 69 00 64 00 00 00  00 00 00 00 00 00 00 00  |u.i.d...........|

    00000380  50 00 61 00 63 00 6b 00  61 00 67 00 65 00 20 00  |P.a.c.k.a.g.e. .|

    00000390  77 00 72 00 69 00 74 00  65 00 72 00 20 00 6e 00  |w.r.i.t.e.r. .n.|

    000003a0  6f 00 74 00 20 00 75 00  73 00 61 00 62 00 6c 00  |o.t. .u.s.a.b.l.|

    000003b0  65 00 20 00 61 00 66 00  74 00 65 00 72 00 20 00  |e. .a.f.t.e.r. .|

    000003c0  66 00 61 00 69 00 6c 00  75 00 72 00 65 00 20 00  |f.a.i.l.u.r.e. .|

    000003d0  68 00 61 00 73 00 20 00  6f 00 63 00 63 00 75 00  |h.a.s. .o.c.c.u.|

    000003e0  72 00 72 00 65 00 64 00  00 00 00 00 00 00 00 00  |r.r.e.d.........|

    000003f0  52 00 65 00 73 00 6f 00  75 00 72 00 63 00 65 00  |R.e.s.o.u.r.c.e.|

    00000400  20 00 61 00 6c 00 72 00  65 00 61 00 64 00 79 00  | .a.l.r.e.a.d.y.|

    00000410  20 00 61 00 64 00 64 00  65 00 64 00 20 00 6f 00  | .a.d.d.e.d. .o.|

    00000420  72 00 20 00 6e 00 6f 00  20 00 72 00 65 00 6c 00  |r. .n.o. .r.e.l.|

    00000430  61 00 74 00 69 00 6f 00  6e 00 73 00 68 00 69 00  |a.t.i.o.n.s.h.i.|

    00000440  70 00 73 00 20 00 65 00  78 00 69 00 73 00 74 00  |p.s. .e.x.i.s.t.|

    00000450  20 00 74 00 6f 00 20 00  74 00 68 00 69 00 73 00  | .t.o. .t.h.i.s.|

    00000460  20 00 72 00 65 00 73 00  6f 00 75 00 72 00 63 00  | .r.e.s.o.u.r.c.|

    00000470  65 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |e...............|

    00000480  43 00 61 00 6c 00 6c 00  20 00 74 00 6f 00 20 00  |C.a.l.l. .t.o. .|

    00000490  43 00 72 00 65 00 61 00  74 00 65 00 50 00 72 00  |C.r.e.a.t.e.P.r.|

    000004a0  69 00 6e 00 74 00 54 00  69 00 63 00 6b 00 65 00  |i.n.t.T.i.c.k.e.|

    000004b0  74 00 52 00 65 00 73 00  6f 00 75 00 72 00 63 00  |t.R.e.s.o.u.r.c.|

    000004c0  65 00 20 00 66 00 61 00  69 00 6c 00 65 00 64 00  |e. .f.a.i.l.e.d.|

    000004d0  20 00 77 00 69 00 74 00  68 00 20 00 48 00 52 00  | .w.i.t.h. .H.R.|

    000004e0  65 00 73 00 75 00 6c 00  74 00 20 00 30 00 78 00  |e.s.u.l.t. .0.x.|

    000004f0  25 00 58 00 2e 00 00 00  00 00 00 00 00 00 00 00  |%.X.............|

    00000500  43 00 61 00 6c 00 6c 00  20 00 74 00 6f 00 20 00  |C.a.l.l. .t.o. .|

    00000510  43 00 72 00 65 00 61 00  74 00 65 00 53 00 74 00  |C.r.e.a.t.e.S.t.|

    00000520  72 00 65 00 61 00 6d 00  4f 00 6e 00 48 00 47 00  |r.e.a.m.O.n.H.G.|

    00000530  6c 00 6f 00 62 00 61 00  6c 00 20 00 66 00 61 00  |l.o.b.a.l. .f.a.|

    00000540  69 00 6c 00 65 00 64 00  20 00 77 00 69 00 74 00  |i.l.e.d. .w.i.t.|

    00000550  68 00 20 00 48 00 52 00  65 00 73 00 75 00 6c 00  |h. .H.R.e.s.u.l.|

    00000560  74 00 20 00 30 00 78 00  25 00 58 00 2e 00 00 00  |t. .0.x.%.X.....|

    00000570  2f 00 4d 00 65 00 74 00  61 00 64 00 61 00 74 00  |/.M.e.t.a.d.a.t.|

    00000580  61 00 2f 00 45 00 6d 00  70 00 74 00 79 00 5f 00  |a./.E.m.p.t.y._.|

    00000590  50 00 54 00 5f 00 25 00  7b 00 43 00 6f 00 6d 00  |P.T._.%.{.C.o.m.|

    000005a0  70 00 61 00 63 00 74 00  47 00 75 00 69 00 64 00  |p.a.c.t.G.u.i.d.|

    000005b0  7d 00 2e 00 78 00 6d 00  6c 00 00 00 00 00 00 00  |}...x.m.l.......|

    000005c0  3c 3f 78 6d 6c 20 76 65  72 73 69 6f 6e 3d 22 31  |<?xml version="1|

    000005d0  2e 30 22 20 65 6e 63 6f  64 69 6e 67 3d 22 55 54  |.0" encoding="UT|

    000005e0  46 2d 38 22 3f 3e 3c 70  73 66 3a 50 72 69 6e 74  |F-8"?><psf:Print|

    000005f0  54 69 63 6b 65 74 20 78  6d 6c 6e 73 3a 70 73 66  |Ticket xmlns:psf|

    00000600  3d 22 68 74 74 70 3a 2f  2f 73 63 68 65 6d 61 73  |="http://schemas|

    00000610  2e 6d 69 63 72 6f 73 6f  66 74 2e 63 6f 6d 2f 77  |.microsoft.com/w|

    00000620  69 6e 64 6f 77 73 2f 32  30 30 33 2f 30 38 2f 70  |indows/2003/08/p|

    00000630  72 69 6e 74 69 6e 67 2f  70 72 69 6e 74 73 63 68  |rinting/printsch|

    00000640  65 6d 61 66 72 61 6d 65  77 6f 72 6b 22 20 78 6d  |emaframework" xm|

    00000650  6c 6e 73 3a 78 73 69 3d  22 68 74 74 70 3a 2f 2f  |lns:xsi="http://|

    00000660  77 77 77 2e 77 33 2e 6f  72 67 2f 32 30 30 31 2f  |www.w3.org/2001/|

    00000670  58 4d 4c 53 63 68 65 6d  61 2d 69 6e 73 74 61 6e  |XMLSchema-instan|

    00000680  63 65 22 20 78 6d 6c 6e  73 3a 78 73 64 3d 22 68  |ce" xmlns:xsd="h|

    00000690  74 74 70 3a 2f 2f 77 77  77 2e 77 33 2e 6f 72 67  |ttp://www.w3.org|

    000006a0  2f 32 30 30 31 2f 58 4d  4c 53 63 68 65 6d 61 22  |/2001/XMLSchema"|

    000006b0  20 76 65 72 73 69 6f 6e  3d 22 31 22 20 78 6d 6c  | version="1" xml|

    000006c0  6e 73 3a 70 73 6b 3d 22  68 74 74 70 3a 2f 2f 73  |ns:psk="http://s|

    000006d0  63 68 65 6d 61 73 2e 6d  69 63 72 6f 73 6f 66 74  |chemas.microsoft|

    000006e0  2e 63 6f 6d 2f 77 69 6e  64 6f 77 73 2f 32 30 30  |.com/windows/200|

    000006f0  33 2f 30 38 2f 70 72 69  6e 74 69 6e 67 2f 70 72  |3/08/printing/pr|

    00000700  69 6e 74 73 63 68 65 6d  61 6b 65 79 77 6f 72 64  |intschemakeyword|

    00000710  73 22 2f 3e 00 00 00 00  aa 7c a3 57 7a 36 40 45  |s"/>.....|.Wz6@E|

    00000720  91 6b f1 83 c5 09 3a 4b  e8 06 7d 31 24 5f 3d 43  |.k....:K..}1$_=C|

    00000730  bd f7 79 ce 68 d8 ab c2  82 fa fc 60 25 f7 46 4d  |..y.h......`%.FM|

    00000740  b8 ea ec 4f 67 91 5c 0a  d5 73 b8 15 71 19 e8 41  |...Og.\..s..q..A|

    00000750  83 a3 65 78 40 30 64 c7  24 c3 dd 6f 03 4e fe 4b  |..ex@0d.$..o.N.K|

    00000760  b1 85 3d 77 76 8d c9 0c  f4 fa 7c 1b 3f 71 3c 47  |..=wv.....|.?q<G|

    00000770  bb cd 61 37 42 5f ae af  aa a5 e4 19 62 56 c5 4f  |..a7B_......bV.O|

    00000780  a0 c0 17 58 02 8e 10 57  00 00 00 00 00 00 00 00  |...X...W........|

    00000790  69 00 6d 00 61 00 67 00  65 00 52 00 65 00 73 00  |i.m.a.g.e.R.e.s.|

    000007a0  6f 00 75 00 72 00 63 00  65 00 50 00 61 00 72 00  |o.u.r.c.e.P.a.r.|

    000007b0  74 00 4e 00 61 00 6d 00  65 00 20 00 70 00 61 00  |t.N.a.m.e. .p.a.|

    000007c0  72 00 61 00 6d 00 65 00  74 00 65 00 72 00 20 00  |r.a.m.e.t.e.r. .|

    000007d0  69 00 73 00 20 00 4e 00  55 00 4c 00 4c 00 00 00  |i.s. .N.U.L.L...|

    000007e0  70 00 61 00 67 00 65 00  20 00 70 00 61 00 72 00  |p.a.g.e. .p.a.r.|

    000007f0  61 00 6d 00 65 00 74 00  65 00 72 00 20 00 69 00  |a.m.e.t.e.r. .i.|

    00000800  73 00 20 00 4e 00 55 00  4c 00 4c 00 00 00 00 00  |s. .N.U.L.L.....|

    00000810  53 00 74 00 72 00 69 00  64 00 65 00 20 00 76 00  |S.t.r.i.d.e. .v.|

    00000820  61 00 6c 00 75 00 65 00  20 00 69 00 6e 00 63 00  |a.l.u.e. .i.n.c.|

    00000830  6f 00 6e 00 73 00 69 00  73 00 74 00 65 00 6e 00  |o.n.s.i.s.t.e.n.|

    00000840  74 00 20 00 77 00 69 00  74 00 68 00 20 00 62 00  |t. .w.i.t.h. .b.|

    00000850  75 00 66 00 66 00 65 00  72 00 20 00 73 00 69 00  |u.f.f.e.r. .s.i.|

    00000860  7a 00 65 00 20 00 6f 00  72 00 20 00 77 00 69 00  |z.e. .o.r. .w.i.|

    00000870  64 00 74 00 68 00 00 00  00 00 00 00 00 00 00 00  |d.t.h...........|

    00000880  74 00 68 00 75 00 6d 00  62 00 6e 00 61 00 69 00  |t.h.u.m.b.n.a.i.|

    00000890  6c 00 53 00 69 00 7a 00  65 00 20 00 70 00 61 00  |l.S.i.z.e. .p.a.|

    000008a0  72 00 61 00 6d 00 65 00  74 00 65 00 72 00 20 00  |r.a.m.e.t.e.r. .|

    000008b0  69 00 6e 00 76 00 61 00  6c 00 69 00 64 00 00 00  |i.n.v.a.l.i.d...|

    000008c0  74 00 68 00 75 00 6d 00  62 00 6e 00 61 00 69 00  |t.h.u.m.b.n.a.i.|

    000008d0  6c 00 54 00 79 00 70 00  65 00 20 00 6d 00 75 00  |l.T.y.p.e. .m.u.|

    000008e0  73 00 74 00 20 00 62 00  65 00 20 00 50 00 4e 00  |s.t. .b.e. .P.N.|

    000008f0  47 00 20 00 6f 00 72 00  20 00 4a 00 50 00 45 00  |G. .o.r. .J.P.E.|

    00000900  47 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |G...............|

    00000910  69 00 6d 00 61 00 67 00  65 00 52 00 65 00 73 00  |i.m.a.g.e.R.e.s.|

    00000920  6f 00 75 00 72 00 63 00  65 00 20 00 70 00 61 00  |o.u.r.c.e. .p.a.|

    00000930  72 00 61 00 6d 00 65 00  74 00 65 00 72 00 20 00  |r.a.m.e.t.e.r. .|

    00000940  69 00 73 00 20 00 4e 00  55 00 4c 00 4c 00 00 00  |i.s. .N.U.L.L...|

    00000950  00 00 00 00 20 00 00 00  40 00 00 00 64 00 00 00  |.... ...@...d...|

    00000960  2c 01 00 00 00 00 00 00  a9 c8 5e ec 95 c3 14 43  |,.........^....C|

    00000970  9c 77 54 d7 a9 35 ff 70  8a 80 94 e0 c6 24 2b 48  |.wT..5.p.....$+H|

    00000980  a3 a7 c2 1a c9 b5 5f 17  00 00 00 00 00 00 00 00  |......_.........|

    00000990  e1 ab 78 f0 d2 45 32 48  91 ea 44 66 ce 2f 25 c9  |..x..E2H..Df./%.|

    000009a0  0e 6a d9 88 92 f1 d4 11  a6 5f 00 40 96 32 51 e5  |.j......._.@.2Q.|

    000009b0  cc 27 0d f1 c0 3e 5c 41  8e d8 77 ab 1c 5e 72 62  |.'...>\A..w..^rb|

    000009c0  d0 6e f9 a4 29 f8 6e 47  81 c0 cd c7 bd 2a 08 02  |.n..).nG.....*..|

    000009d0  0c 6a d9 88 92 f1 d4 11  a6 5f 00 40 96 32 51 e5  |.j......._.@.2Q.|

    000009e0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|

    000009f0  00 00 00 00 00 00 00 00  c0 00 00 00 00 00 00 46  |...............F|

    00000a00

  • by Loner T,

    Loner T Loner T Apr 30, 2016 5:31 AM in response to ozeegers
    Level 7 (24,202 points)
    Safari
    Apr 30, 2016 5:31 AM in response to ozeegers

    In this post from you, there is FAT header at this location, which is no longer visible.

     

    There is a 1440 sector gap between Recovery HD and the BC partition. It should be checked for any NTFS information. The dd command on rdisk0s3 skips Recovery HD and looks at the first block in the gap. If there is nothing there, can you dump the 1440 sectors to a file locally and check if there is any NTFS information in these blocks?

  • by ozeegers,

    ozeegers ozeegers Apr 30, 2016 6:07 AM in response to Loner T
    Level 1 (5 points)
    Windows Software
    Apr 30, 2016 6:07 AM in response to Loner T

    Can you describe me how to do this ? I just copied the dd command from your post.... it really is chinese to me !

    How do I recognise NTFS information ?

     

    thanx

     

    Olivier

  • by Loner T,

    Loner T Loner T Apr 30, 2016 7:38 PM in response to ozeegers
    Level 7 (24,202 points)
    Safari
    Apr 30, 2016 7:38 PM in response to ozeegers

    You ar e looking for the dd command to show you output similar to the following. The example is from a working Bootcamp partition with a proper NTFS header.

     

    sudo dd if=/dev/rdisk0s4 count=1 2>/dev/null | hexdump -C

    00000000  eb 52 90 4e 54 46 53 20  20 20 20 00 02 08 00 00  |.R.NTFS    .....|

    00000010  00 00 00 00 00 f8 00 00  3f 00 ff 00 00 50 06 0f  |........?....P..|

    00000020  00 00 00 00 80 00 80 00  ff df c8 0e 00 00 00 00  |................|

    00000030  00 00 0c 00 00 00 00 00  02 00 00 00 00 00 00 00  |................|

    00000040  f6 00 00 00 01 00 00 00  e1 b7 f7 ec f4 f7 ec 2a  |...............*|

    00000050  00 00 00 00 fa 33 c0 8e  d0 bc 00 7c fb 68 c0 07  |.....3.....|.h..|

    00000060  1f 1e 68 66 00 cb 88 16  0e 00 66 81 3e 03 00 4e  |..hf......f.>..N|

    00000070  54 46 53 75 15 b4 41 bb  aa 55 cd 13 72 0c 81 fb  |TFSu..A..U..r...|

    00000080  55 aa 75 06 f7 c1 01 00  75 03 e9 dd 00 1e 83 ec  |U.u.....u.......|

    00000090  18 68 1a 00 b4 48 8a 16  0e 00 8b f4 16 1f cd 13  |.h...H..........|

    000000a0  9f 83 c4 18 9e 58 1f 72  e1 3b 06 0b 00 75 db a3  |.....X.r.;...u..|

    000000b0  0f 00 c1 2e 0f 00 04 1e  5a 33 db b9 00 20 2b c8  |........Z3... +.|

    000000c0  66 ff 06 11 00 03 16 0f  00 8e c2 ff 06 16 00 e8  |f...............|

    000000d0  4b 00 2b c8 77 ef b8 00  bb cd 1a 66 23 c0 75 2d  |K.+.w......f#.u-|

    000000e0  66 81 fb 54 43 50 41 75  24 81 f9 02 01 72 1e 16  |f..TCPAu$....r..|

    000000f0  68 07 bb 16 68 52 11 16  68 09 00 66 53 66 53 66  |h...hR..h..fSfSf|

    00000100  55 16 16 16 68 b8 01 66  61 0e 07 cd 1a 33 c0 bf  |U...h..fa....3..|

    00000110  0a 13 b9 f6 0c fc f3 aa  e9 fe 01 90 90 66 60 1e  |.............f`.|

    00000120  06 66 a1 11 00 66 03 06  1c 00 1e 66 68 00 00 00  |.f...f.....fh...|

    00000130  00 66 50 06 53 68 01 00  68 10 00 b4 42 8a 16 0e  |.fP.Sh..h...B...|

    00000140  00 16 1f 8b f4 cd 13 66  59 5b 5a 66 59 66 59 1f  |.......fY[ZfYfY.|

    00000150  0f 82 16 00 66 ff 06 11  00 03 16 0f 00 8e c2 ff  |....f...........|

    00000160  0e 16 00 75 bc 07 1f 66  61 c3 a1 f6 01 e8 09 00  |...u...fa.......|

    00000170  a1 fa 01 e8 03 00 f4 eb  fd 8b f0 ac 3c 00 74 09  |............<.t.|

    00000180  b4 0e bb 07 00 cd 10 eb  f2 c3 0d 0a 41 20 64 69  |............A di|

    00000190  73 6b 20 72 65 61 64 20  65 72 72 6f 72 20 6f 63  |sk read error oc|

    000001a0  63 75 72 72 65 64 00 0d  0a 42 4f 4f 54 4d 47 52  |curred...BOOTMGR|

    000001b0  20 69 73 20 63 6f 6d 70  72 65 73 73 65 64 00 0d  | is compressed..|

    000001c0  0a 50 72 65 73 73 20 43  74 72 6c 2b 41 6c 74 2b  |.Press Ctrl+Alt+|

    000001d0  44 65 6c 20 74 6f 20 72  65 73 74 61 72 74 0d 0a  |Del to restart..|

    000001e0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|

    000001f0  00 00 00 00 00 00 8a 01  a7 01 bf 01 00 00 55 aa  |..............U.|

    00000200

  • by ozeegers,

    ozeegers ozeegers May 1, 2016 12:04 AM in response to Loner T
    Level 1 (5 points)
    Windows Software
    May 1, 2016 12:04 AM in response to Loner T

    sofar I understand that the dd command just reads the disk block per block and that you can give an output file with of option...

     

    So I could do the following:

     

    ozeegers$ sudo dd if=/dev/rdisk0s4 bs=512 count=1 of=mbr.bin

     

    to output the results to mbr.bin and then search with what tool ? in this file ?

    But how do I specify the 1440 sectors to look for ?

     

    Can you give me more information please ? I can even give you teamviewer access on monday if you have time because I really would like my files back !

    Hope your trip is safe.

first Previous Page 16 of 20 last Next