HDD GURU FORUMS

Anyone had any luck getting deleted Whatsapp messages after a chip off? I have a cellphone (Android 4.4) where the data was deleted and the phone intentionally destroyed, but the eMMC chip looks intact. If it not possible I can save myself some work.

Tim, as far as I know the messages are encrypted ones you deleted them they are gone forever unless user did a backup, if they install whatapp in a new phone no deleted messages should be there.

Hmmm. Many of the 'off the shelf' data recovery programs can recover deleted Whatsapp messages such as Dr Fone etc. But obviously in this case we couldn't use one.

Contact me by PM - I think I can help you

The backup of whatsapp is encrypted.
The main db is NOT! It's relatively easy to recover if you have a carver template.
We have one (actually 3) for VNR SQLite carver.

I was about to download the new version of VNR today. Is the whatsapp file signature a standard signature in the carver, or will I need to write one?

ddrecovery wrote:Anyone had any luck getting deleted Whatsapp messages after a chip off? I have a cellphone (Android 4.4) where the data was deleted and the phone intentionally destroyed, but the eMMC chip looks intact. If it not possible I can save myself some work.

Agree with Sasha,
if you have the FULL mem DUMP >> its possible

main db and key and voilà