PEZHI

Q: Recovery Request!!!

In windows 7 which was on my BOOTCAMP, I used disk management to shrink Drive "C:\" and then creating one more partition. It caused the startup failure of both MAC OS and WINDOWS!

unfortunately even when I used Internet recovery and then Disk utility, I couldn't access to my partitiona and backup.

Disk Utility indicates partitions Unmounted and "windows_DLM" format type!!!

I'm Certain that when I used to shrink my BootCamp partition, I did nothing with MAC Partition.

Is there any scenario to recover data on my partitions?

and if the answer is yes, what are the scenarios?

please tell me How can I do to not loosing my data?

I read some articles about TestDisk program which is a recovery software but now I have no OS to Start from!!!

and an article describing using "dd" command in Terminal to create image, But actually I don't realize what can I do and what's the solution for such a problem occured!

iMac, iOS 10

Posted on Sep 25, 2016 8:43 PM

Close

Q: Recovery Request!!!

  • All replies
  • Helpful answers

first Previous Page 3 of 5 last Next
  • by Loner T,

    Loner T Loner T Oct 10, 2016 6:27 PM in response to PEZHI
    Level 7 (24,770 points)
    Safari
    Oct 10, 2016 6:27 PM in response to PEZHI

    Please post the output of the 'p' command. The exact sequence is (do not type the text which is enclosed like this sentence is)

     

    sudo gdisk /dev/disk0

    r (Recovery Menu)

    b (use backup GPT header (rebuilding main) )

    p (print)

     

    Stay at this command, if we need to enter more commands. Copy the output and post it as a reply.

  • by PEZHI,

    PEZHI PEZHI Oct 11, 2016 3:44 PM in response to Loner T
    Level 1 (8 points)
    Mac OS X
    Oct 11, 2016 3:44 PM in response to Loner T

    Again Thanks a lot Loner for your exact Help

    I did what you said but It seems that b (use backup GPT header (rebuilding main) ) command didn't took effect or maybe I don't know

    Here is the output:

     

    Last login: Tue Oct 11 18:58:19 on ttys000

    PEZHMANs-iMac:~ pezhman$ sudo gdisk /dev/disk0

    sudo: timestamp too far in the future: Oct 11 19:05:20 2016

     

    WARNING: Improper use of the sudo command could lead to data loss

    or the deletion of important system files. Please double-check your

    typing when using sudo. Type "man sudo" for more information.

     

    To proceed, enter your password, or type Ctrl-C to abort.

     

    Password:

    GPT fdisk (gdisk) version 1.0.1

     

    Partition table scan:

      MBR: MBR only

      BSD: not present

      APM: not present

      GPT: not present

     

     

    ***************************************************************

    Found invalid GPT and valid MBR; converting MBR to GPT format

    in memory. THIS OPERATION IS POTENTIALLY DESTRUCTIVE! Exit by

    typing 'q' if you don't want to convert your MBR partitions

    to GPT format!

    ***************************************************************

     

    Warning! Main partition table overlaps the first partition by 33 blocks!

    You will need to delete this partition or resize it in another utility.

     

    Command (? for help): r

     

    Recovery/transformation command (? for help): b

     

    Recovery/transformation command (? for help): b (again I run b command because I thought nothing happened)

     

    Recovery/transformation command (? for help): p

    Disk /dev/disk0: 1953525168 sectors, 931.5 GiB

    Logical sector size: 512 bytes

    Disk identifier (GUID): B096A6E5-79EE-47B0-A1AC-787E3CAE175C

    Partition table holds up to 128 entries

    First usable sector is 34, last usable sector is 1953525134

    Partitions will be aligned on 8-sector boundaries

    Total free space is 2015 sectors (1007.5 KiB)

     

    Number  Start (sector)    End (sector)  Size       Code  Name

       1               1      1562900479   745.2 GiB   4200  Windows LDM data

       2      1562900480      1933043711   176.5 GiB   4200  Windows LDM data

       3      1933043712      1953523119   9.8 GiB     4200  Windows LDM data

     

    Recovery/transformation command (? for help):

  • by Loner T,

    Loner T Loner T Oct 11, 2016 4:25 PM in response to PEZHI
    Level 7 (24,770 points)
    Safari
    Oct 11, 2016 4:25 PM in response to PEZHI

    Try the 'c' command (load backup partition table from disk (rebuilding main)) instead of the 'b' command. Please post the output of 'p' command after you use the 'c' command.

  • by PEZHI,

    PEZHI PEZHI Oct 11, 2016 4:32 PM in response to Loner T
    Level 1 (8 points)
    Mac OS X
    Oct 11, 2016 4:32 PM in response to Loner T

    Last login: Tue Oct 11 19:58:25 on console

    PEZHMANs-iMac:~ pezhman$ sudo gdisk /dev/disk0

    Password:

    GPT fdisk (gdisk) version 1.0.1

     

    Partition table scan:

      MBR: MBR only

      BSD: not present

      APM: not present

      GPT: not present

     

     

    ***************************************************************

    Found invalid GPT and valid MBR; converting MBR to GPT format

    in memory. THIS OPERATION IS POTENTIALLY DESTRUCTIVE! Exit by

    typing 'q' if you don't want to convert your MBR partitions

    to GPT format!

    ***************************************************************

     

    Warning! Main partition table overlaps the first partition by 33 blocks!

    You will need to delete this partition or resize it in another utility.

     

    Command (? for help): r

     

    Recovery/transformation command (? for help): c

    Warning! This will probably do weird things if you've converted an MBR to

    GPT form and haven't yet saved the GPT! Proceed? (Y/N):

     

    do I enter Y or N?

  • by Loner T,

    Loner T Loner T Oct 11, 2016 4:52 PM in response to PEZHI
    Level 7 (24,770 points)
    Safari
    Oct 11, 2016 4:52 PM in response to PEZHI

    Please enter 'Y'.

  • by PEZHI,

    PEZHI PEZHI Oct 11, 2016 5:18 PM in response to Loner T
    Level 1 (8 points)
    Mac OS X
    Oct 11, 2016 5:18 PM in response to Loner T

    Command (? for help): r

     

    Recovery/transformation command (? for help): c

    Warning! This will probably do weird things if you've converted an MBR to

    GPT form and haven't yet saved the GPT! Proceed? (Y/N): y

    Caution! After loading partitions, the CRC doesn't check out!

     

    Recovery/transformation command (? for help): p

    Disk /dev/disk0: 1953525168 sectors, 931.5 GiB

    Logical sector size: 512 bytes

    Disk identifier (GUID): 345B6726-4B25-4D10-BE99-9034C9121216

    Partition table holds up to 128 entries

    First usable sector is 34, last usable sector is 1953525134

    Partitions will be aligned on 8-sector boundaries

    Total free space is 1953525101 sectors (931.5 GiB)

     

    Number  Start (sector)    End (sector)  Size       Code  Name

    121  7380959310299267072           26473   2.2 EiB     FFFF 

     

    Recovery/transformation command (? for help):

  • by Loner T,

    Loner T Loner T Oct 11, 2016 6:09 PM in response to PEZHI
    Level 7 (24,770 points)
    Safari
    Oct 11, 2016 6:09 PM in response to PEZHI

    Neither of your Primary or Secondary GPTs are viable.

     

    1. We are not creating GPT3 because we do not know the start/end of Recovery HD and the alignment gap between GPT3 and GPT4.

    2. Our current GPT2 is OSX+RecoveryHD+Alignment gap as a best guess.

    3. GPT4 is being started and ended at the same sector as the LDM entry shows.

     

    The following steps create a new GPT and overwrite the current MBR. GPT Fdisk (Gdisk) uses single character commands. The text in parentheses is for explanation purposes.

     

    sudo gdisk /dev/disk0

    o (Create a blank GPT)

    x (Experts Menu)

    l (Character 'L' - set sector alignment)

    1 (digit 1 - set alignment to 1 sector)

    m (Main Menu)

    n (New)

    1 (Partition 1)

    40 (Start)

    409600 (End)

    EF00 (EFI)

    n (New)

    2 (Partition 2)

    409640 (Start)

    1562900479 (End)

    AF00 (HFS+ - OSX Partition)

    n (New)

    4 (Partition 4)

    1562900480 (Start)

    1933043711 ( End)

    0700 (Bootcamp)

    p (Print)

    w (Write)

    y (Confirm write)

    q (Quit Gdisk)

     

    Since you are booted from a different disk, post the output of

     

    diskutil list

     

    after you quit GPT Fdisk.

  • by PEZHI,

    PEZHI PEZHI Oct 11, 2016 6:36 PM in response to Loner T
    Level 1 (8 points)
    Mac OS X
    Oct 11, 2016 6:36 PM in response to Loner T

    So exciting process!

    Thanks, I do the process you posted.

    Now I have a windows 7 on my HDD (which I described before). Does this process hurt or destroy the windows 7?

    If the answer is Yes I do my Unfinished works on windows 7 and then run Gdisk commands you posted.

  • by Loner T,

    Loner T Loner T Oct 11, 2016 6:45 PM in response to PEZHI
    Level 7 (24,770 points)
    Safari
    Oct 11, 2016 6:45 PM in response to PEZHI

    It will temporarily disable W7 from booting, but GPT4 is exactly the same as the W7 partition. The only difference is that it will not boot, till the corresponding MBR entry is created.

     

    I highly recommend creating an external disk backup of Windows before you make any GPT changes.

  • by PEZHI,

    PEZHI PEZHI Oct 13, 2016 7:08 PM in response to Loner T
    Level 1 (8 points)
    Mac OS X
    Oct 13, 2016 7:08 PM in response to Loner T

    Hi Dear Loner T

    I'm creating backup to prepare to make GPT changes you posted me.

    I wait impatiently to start that GPT process.

    Thank you very much

  • by PEZHI,

    PEZHI PEZHI Oct 15, 2016 3:41 PM in response to Loner T
    Level 1 (8 points)
    Mac OS X
    Oct 15, 2016 3:41 PM in response to Loner T

    Hi Dear Loner T

    Here is the output of the process:

     

    Last login: Sat Oct 15 08:23:54 on console

    PEZHMANs-iMac:~ pezhman$ diskutil list

    /dev/disk0 (internal, physical):

       #:                       TYPE NAME                    SIZE       IDENTIFIER

       0:      GUID_partition_scheme                        *1.0 TB     disk0

       1:                        EFI                         209.7 MB   disk0s1

       2:                  Apple_HFS Macintosh HD            800.0 GB   disk0s2

       3:       Microsoft Basic Data BOOTCAMP                189.5 GB   disk0s4

    /dev/disk1 (internal, physical):

       #:                       TYPE NAME                    SIZE       IDENTIFIER

       0:      GUID_partition_scheme                        *16.0 GB    disk1

       1:                        EFI EFI                     209.7 MB   disk1s1

       2:                  Apple_HFS SAMSUNG                 15.2 GB    disk1s2

       3:                 Apple_Boot Recovery HD             650.0 MB   disk1s3

  • by Loner T,

    Loner T Loner T Oct 15, 2016 4:08 PM in response to PEZHI
    Level 7 (24,770 points)
    Safari
    Oct 15, 2016 4:08 PM in response to PEZHI

    Please post the output of

     

    sudo gpt -vv -r show /dev/disk0

    sudo dd if=/dev/rdisk0s4 count=1 2>/dev/null | hexdump -C

    sudo fdisk /dev/disk0

  • by PEZHI,

    PEZHI PEZHI Oct 15, 2016 4:30 PM in response to Loner T
    Level 1 (8 points)
    Mac OS X
    Oct 15, 2016 4:30 PM in response to Loner T

    Last login: Sat Oct 15 19:06:11 on console

    PEZHMANs-iMac:~ pezhman$ sudo gpt -vv -r show /dev/disk0

    Password:

    gpt show: /dev/disk0: mediasize=1000204886016; sectorsize=512; blocks=1953525168

    gpt show: /dev/disk0: PMBR at sector 0

    gpt show: /dev/disk0: Pri GPT at sector 1

    gpt show: /dev/disk0: Sec GPT at sector 1953525167

           start        size  index  contents

               0           1         PMBR

               1           1         Pri GPT header

               2          32         Pri GPT table

              34           6        

              40      409561      1  GPT part - C12A7328-F81F-11D2-BA4B-00A0C93EC93B

          409601          39        

          409640  1562490840      2  GPT part - 48465300-0000-11AA-AA11-00306543ECAC

      1562900480   370143232      4  GPT part - EBD0A0A2-B9E5-4433-87C0-68B6B72699C7

      1933043712    20481423        

      1953525135          32         Sec GPT table

      1953525167           1         Sec GPT header

  • by PEZHI,

    PEZHI PEZHI Oct 15, 2016 4:31 PM in response to Loner T
    Level 1 (8 points)
    Mac OS X
    Oct 15, 2016 4:31 PM in response to Loner T

    PEZHMANs-iMac:~ pezhman$ sudo dd if=/dev/rdisk0s4 count=1 2>/dev/null | hexdump -C

    00000000  eb 52 90 4e 54 46 53 20  20 20 20 00 02 08 00 00  |.R.NTFS    .....|

    00000010  00 00 00 00 00 f8 00 00  3f 00 ff 00 00 f8 27 5d  |........?.....']|

    00000020  00 00 00 00 80 00 80 00  ff ef 0f 16 00 00 00 00  |................|

    00000030  00 00 0c 00 00 00 00 00  02 00 00 00 00 00 00 00  |................|

    00000040  f6 00 00 00 01 00 00 00  8e 83 17 b4 bc 17 b4 30  |...............0|

    00000050  00 00 00 00 fa 33 c0 8e  d0 bc 00 7c fb 68 c0 07  |.....3.....|.h..|

    00000060  1f 1e 68 66 00 cb 88 16  0e 00 66 81 3e 03 00 4e  |..hf......f.>..N|

    00000070  54 46 53 75 15 b4 41 bb  aa 55 cd 13 72 0c 81 fb  |TFSu..A..U..r...|

    00000080  55 aa 75 06 f7 c1 01 00  75 03 e9 dd 00 1e 83 ec  |U.u.....u.......|

    00000090  18 68 1a 00 b4 48 8a 16  0e 00 8b f4 16 1f cd 13  |.h...H..........|

    000000a0  9f 83 c4 18 9e 58 1f 72  e1 3b 06 0b 00 75 db a3  |.....X.r.;...u..|

    000000b0  0f 00 c1 2e 0f 00 04 1e  5a 33 db b9 00 20 2b c8  |........Z3... +.|

    000000c0  66 ff 06 11 00 03 16 0f  00 8e c2 ff 06 16 00 e8  |f...............|

    000000d0  4b 00 2b c8 77 ef b8 00  bb cd 1a 66 23 c0 75 2d  |K.+.w......f#.u-|

    000000e0  66 81 fb 54 43 50 41 75  24 81 f9 02 01 72 1e 16  |f..TCPAu$....r..|

    000000f0  68 07 bb 16 68 70 0e 16  68 09 00 66 53 66 53 66  |h...hp..h..fSfSf|

    00000100  55 16 16 16 68 b8 01 66  61 0e 07 cd 1a 33 c0 bf  |U...h..fa....3..|

    00000110  28 10 b9 d8 0f fc f3 aa  e9 5f 01 90 90 66 60 1e  |(........_...f`.|

    00000120  06 66 a1 11 00 66 03 06  1c 00 1e 66 68 00 00 00  |.f...f.....fh...|

    00000130  00 66 50 06 53 68 01 00  68 10 00 b4 42 8a 16 0e  |.fP.Sh..h...B...|

    00000140  00 16 1f 8b f4 cd 13 66  59 5b 5a 66 59 66 59 1f  |.......fY[ZfYfY.|

    00000150  0f 82 16 00 66 ff 06 11  00 03 16 0f 00 8e c2 ff  |....f...........|

    00000160  0e 16 00 75 bc 07 1f 66  61 c3 a0 f8 01 e8 09 00  |...u...fa.......|

    00000170  a0 fb 01 e8 03 00 f4 eb  fd b4 01 8b f0 ac 3c 00  |..............<.|

    00000180  74 09 b4 0e bb 07 00 cd  10 eb f2 c3 0d 0a 41 20  |t.............A |

    00000190  64 69 73 6b 20 72 65 61  64 20 65 72 72 6f 72 20  |disk read error |

    000001a0  6f 63 63 75 72 72 65 64  00 0d 0a 49 4e 41 59 54  |occurred...INAYT|

    000001b0  20 20 20 69 73 20 6d 69  73 73 69 6e 67 00 0d 0a  |   is missing...|

    000001c0  49 4e 41 59 54 20 20 20  69 73 20 63 6f 6d 70 72  |INAYT   is compr|

    000001d0  65 73 73 65 64 00 0d 0a  50 72 65 73 73 20 43 74  |essed...Press Ct|

    000001e0  72 6c 2b 41 6c 74 2b 44  65 6c 20 74 6f 20 72 65  |rl+Alt+Del to re|

    000001f0  73 74 61 72 74 0d 0a 00  8c a9 be d6 00 00 55 aa  |start.........U.|

    00000200

  • by PEZHI,

    PEZHI PEZHI Oct 15, 2016 4:33 PM in response to Loner T
    Level 1 (8 points)
    Mac OS X
    Oct 15, 2016 4:33 PM in response to Loner T

    PEZHMANs-iMac:~ pezhman$ sudo fdisk /dev/disk0

    Disk: /dev/disk0 geometry: 121601/255/63 [1953525168 sectors]

    Signature: 0xAA55

             Starting       Ending

    #: id  cyl  hd sec -  cyl  hd sec [     start -       size]

    ------------------------------------------------------------------------

    1: EE    0   0   2 - 1023 255  63 [         1 - 1953525167] <Unknown ID>

    2: 00    0   0   0 -    0   0   0 [         0 -          0] unused     

    3: 00    0   0   0 -    0   0   0 [         0 -          0] unused     

    4: 00    0   0   0 -    0   0   0 [         0 -          0] unused     

    PEZHMANs-iMac:~ pezhman$

first Previous Page 3 of 5 last Next