HDD GURU FORUMS
http://forum.hddguru.com/

Cellphone Chip-Off
http://forum.hddguru.com/viewtopic.php?f=10&t=35165
Page 1 of 1

Author:  ddrecovery [ March 20th, 2017, 13:26 ]
Post subject:  Cellphone Chip-Off

Anyone had any luck getting deleted Whatsapp messages after a chip off? I have a cellphone (Android 4.4) where the data was deleted and the phone intentionally destroyed, but the eMMC chip looks intact. If it not possible I can save myself some work.

Author:  hdd_sand [ March 20th, 2017, 13:35 ]
Post subject:  Re: Cellphone Chip-Off

Tim, as far as I know the messages are encrypted ones you deleted them they are gone forever unless user did a backup, if they install whatapp in a new phone no deleted messages should be there.

Author:  ddrecovery [ March 20th, 2017, 13:50 ]
Post subject:  Re: Cellphone Chip-Off

Hmmm. Many of the 'off the shelf' data recovery programs can recover deleted Whatsapp messages such as Dr Fone etc. But obviously in this case we couldn't use one.

Author:  Bolo [ March 20th, 2017, 14:07 ]
Post subject:  Re: Cellphone Chip-Off

Contact me by PM - I think I can help you

Author:  Sasha Sheremetov [ March 24th, 2017, 6:14 ]
Post subject:  Re: Cellphone Chip-Off

The backup of whatsapp is encrypted.
The main db is NOT! It's relatively easy to recover if you have a carver template.
We have one (actually 3) for VNR SQLite carver.

Author:  ddrecovery [ March 24th, 2017, 8:13 ]
Post subject:  Re: Cellphone Chip-Off

I was about to download the new version of VNR today. Is the whatsapp file signature a standard signature in the carver, or will I need to write one?

Author:  einstein9 [ March 25th, 2017, 3:40 ]
Post subject:  Re: Cellphone Chip-Off

ddrecovery wrote:
Anyone had any luck getting deleted Whatsapp messages after a chip off? I have a cellphone (Android 4.4) where the data was deleted and the phone intentionally destroyed, but the eMMC chip looks intact. If it not possible I can save myself some work.


Agree with Sasha,
if you have the FULL mem DUMP >> its possible

Page 1 of 1 All times are UTC - 5 hours [ DST ]
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group
http://www.phpbb.com/