• Introducing XDA Computing: Discussion zones for Hardware, Software, and more!    Check it out!

recover data from factory reset android and Dr Fone eraser

Search This thread

xavier-le

New member
Oct 16, 2021
4
0
my android device was quite maltreated by someone

i think that phone was not ecrypted

  • it was first factory reset
  • then Dr fone was able to recover some data
  • so Dr Fone eraser was applied
  • and as a finish screen was broken

screen replacement is usually easy

what about the possibility to recover some data from that phone ?
using recuva
minitool
autopsy ?
 
Last edited:

blackhawk

Senior Member
Jun 23, 2020
6,373
2,059
It's gone, gone, gone.
Even if you do recover anything the folder structure was destroyed. An ocean of juxtaposed files. Jpegs with no exif data.
A complete mess like a 747 slamming into a mountain side... that would be easier to reconstruct.

Plus Drfone encrypts the data; you got all you're going to get. Never use this app if you really need the data, take it to a data recovery $pecialist.
 
  • Like
Reactions: jwoegerbauer

xavier-le

New member
Oct 16, 2021
4
0
thank you for your answer

I did not do anything on that phone. Someone did with quite some succes

the folder structure is something that can be rebuilt with time


what would be interesting to recover even partially is :
  • call history
  • contacts
  • text messages
  • whatsapp messages
  • gps locations history

pictures could be nice

i you recommend a data recovery specialist.
what sort of tool they will be using ? autopsy ?


I also asked an offer from data recovery specialist
 

jwoegerbauer

Senior Member
Jul 11, 2009
7,464
25
1,736
European Union
Android's internal folder structure ( read: layout ) always is left intact, a wipe operation - as a Factory Reset does - only marks any wiped content as re-useable by Android, hence it can get overwritten at any time.

If your phone's Android got rooted, you can establish an ADB connection with phone, then you can achieve a bitwise copy of the "unreadable" wiped data ( storage space ) by means of Android's dd command and later on try to read this copy by forensic tools.
 
Last edited:

xavier-le

New member
Oct 16, 2021
4
0
thank you for information

I understood that factory reset only mark existing files as free space and that several tools can recover the files.
even Dr Fone could do at first.


but what does an eraser tool like Dr fone eraser ?

is the data really destroyed after this ? or still some tool could be used ?
autopsy maybe ? other suggestion ?
 

jwoegerbauer

Senior Member
Jul 11, 2009
7,464
25
1,736
European Union
I think I clearly expressed what is to do. :)

FYI:
Wiped data isn't destroyed ( nulled out or similar ), it physically still exists.
File data is only really deleted when this storage space is needed by something else.

BTW:
Don't know anything about Dr.fone eraser app. But I think it overwrites data stored in Android's user-space with zeros or blanks.
 
Last edited:
  • Like
Reactions: blackhawk

blackhawk

Senior Member
Jun 23, 2020
6,373
2,059
I think I clearly expressed what is to do. :)

FYI:
Wiped data isn't destroyed ( nulled out or similar ), it physically still exists.
File data is only really deleted when this storage space is needed by something else.

BTW:
Don't know anything about Dr.fone eraser app. But I think it overwrites data stored in Android's user-space with zeros or blanks.

True. What can be recovered and how it's indexed is another story. I have severe doubts the folders are still intact and it's probably worse than just that.

I use Drfone over a decade ago, it encrypted the found data but showed pieces of it. You had to pay for the encryption key.
You're right about it zero filling too I think. After running that app all that was left was Drfone's encrypted partition, folder, whatever and nothing else. It takes forever.
 
  • Like
Reactions: jwoegerbauer

Top Liked Posts

  • There are no posts matching your filters.
  • 1
    It's gone, gone, gone.
    Even if you do recover anything the folder structure was destroyed. An ocean of juxtaposed files. Jpegs with no exif data.
    A complete mess like a 747 slamming into a mountain side... that would be easier to reconstruct.

    Plus Drfone encrypts the data; you got all you're going to get. Never use this app if you really need the data, take it to a data recovery $pecialist.
    1
    I think I clearly expressed what is to do. :)

    FYI:
    Wiped data isn't destroyed ( nulled out or similar ), it physically still exists.
    File data is only really deleted when this storage space is needed by something else.

    BTW:
    Don't know anything about Dr.fone eraser app. But I think it overwrites data stored in Android's user-space with zeros or blanks.
    1
    I think I clearly expressed what is to do. :)

    FYI:
    Wiped data isn't destroyed ( nulled out or similar ), it physically still exists.
    File data is only really deleted when this storage space is needed by something else.

    BTW:
    Don't know anything about Dr.fone eraser app. But I think it overwrites data stored in Android's user-space with zeros or blanks.

    True. What can be recovered and how it's indexed is another story. I have severe doubts the folders are still intact and it's probably worse than just that.

    I use Drfone over a decade ago, it encrypted the found data but showed pieces of it. You had to pay for the encryption key.
    You're right about it zero filling too I think. After running that app all that was left was Drfone's encrypted partition, folder, whatever and nothing else. It takes forever.