All times are UTC - 5 hours [ DST ]




Post new topic Reply to topic  [ 8 posts ] 
Author Message
 Post subject: Cellphone Chip-Off
PostPosted: March 20th, 2017, 13:26 
Offline

Joined: June 11th, 2013, 17:01
Posts: 672
Location: USA
Anyone had any luck getting deleted Whatsapp messages after a chip off? I have a cellphone (Android 4.4) where the data was deleted and the phone intentionally destroyed, but the eMMC chip looks intact. If it not possible I can save myself some work.

_________________
Hard Drive and RAID Data Recovery


Top
 Profile  
 
 Post subject: Re: Cellphone Chip-Off
PostPosted: March 20th, 2017, 13:35 
Offline
User avatar

Joined: January 29th, 2009, 11:23
Posts: 179
Location: SXSW
Tim, as far as I know the messages are encrypted ones you deleted them they are gone forever unless user did a backup, if they install whatapp in a new phone no deleted messages should be there.


Top
 Profile  
 
 Post subject: Re: Cellphone Chip-Off
PostPosted: March 20th, 2017, 13:50 
Offline

Joined: June 11th, 2013, 17:01
Posts: 672
Location: USA
Hmmm. Many of the 'off the shelf' data recovery programs can recover deleted Whatsapp messages such as Dr Fone etc. But obviously in this case we couldn't use one.

_________________
Hard Drive and RAID Data Recovery


Top
 Profile  
 
 Post subject: Re: Cellphone Chip-Off
PostPosted: March 20th, 2017, 14:07 
Offline
User avatar

Joined: December 29th, 2016, 18:13
Posts: 15
Location: Poland
Contact me by PM - I think I can help you

_________________
Best regards,
Boguslaw Rzepka


Top
 Profile  
 
 Post subject: Re: Cellphone Chip-Off
PostPosted: March 24th, 2017, 6:14 
Offline

Joined: July 2nd, 2014, 8:05
Posts: 134
The backup of whatsapp is encrypted.
The main db is NOT! It's relatively easy to recover if you have a carver template.
We have one (actually 3) for VNR SQLite carver.

_________________
Visual Nand Reconstructor. A small revolution in chip-off data recovery


Top
 Profile  
 
 Post subject: Re: Cellphone Chip-Off
PostPosted: March 24th, 2017, 8:13 
Offline

Joined: June 11th, 2013, 17:01
Posts: 672
Location: USA
I was about to download the new version of VNR today. Is the whatsapp file signature a standard signature in the carver, or will I need to write one?

_________________
Hard Drive and RAID Data Recovery


Top
 Profile  
 
 Post subject: Re: Cellphone Chip-Off
PostPosted: March 25th, 2017, 3:40 
Offline
User avatar

Joined: May 13th, 2010, 11:17
Posts: 2176
Location: Kuwait
ddrecovery wrote:
Anyone had any luck getting deleted Whatsapp messages after a chip off? I have a cellphone (Android 4.4) where the data was deleted and the phone intentionally destroyed, but the eMMC chip looks intact. If it not possible I can save myself some work.


Agree with Sasha,
if you have the FULL mem DUMP >> its possible

_________________
Kuwait Data Recovery - UNIX GTC
The only reason for time is so that everything doesn't happen at once. By: Albert Einstein


Top
 Profile  
 
 Post subject: Re: Cellphone Chip-Off
PostPosted: May 26th, 2017, 16:29 
Offline

Joined: January 2nd, 2017, 18:25
Posts: 3
Location: Poland/Mielec
main db and key and voilĂ  :)


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 8 posts ] 

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: No registered users and 1 guest


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group