My parents went on a once-in-a-lifetime trip to Ireland last spring. They took most of the photos with my dad's Galaxy S5. They were stored on internal storage, and not an SD card. The photos were being backed up into Google, synced with his Gmail / Google Photos account.
Late last summer, unfortunately (and you know the rest of the story), as he was clearing photos off of his phone, he accidentally deleted the photos, and wound up wiping them from Google Drive as well.
He passed away this past winter.
A couple weeks ago, I did my first successful data recovery job on a microSD card (with photorec) for a client who had lost photos when his S6 was reset (I've done several data recovery jobs for various clients using photorec and other Linux utilities, but this was the first time I attempted a job on a microSD card that came from a phone).
That got me thinking: Could I, conceivably, attempt to recover my dad's photos from his internal storage?
I have the same phone (also a Galaxy S5), and live 5 hours away from my mom, so I'm doing some testing on my phone now.
Unlike my dad's phone, my phone is encrypted. Other than that, there shouldn't be any difference.
After some research, I've enabled Developer Options on my phone, turned on USB Logging, installed ADB onto my Ubuntu machine, and have given permission to the phone that my computer can connect to it over adb.
I then cd'd into where I want the backup to be saved on my computer, ran
adb backup full-backup.adb -apk -all, and hoped for the best. Because my phone is encrypted, I was forced to enter in a password for the backup itself to be encrypted.
The backup "completed" almost immediately (the phone said "backup finished"), indicating to me that no backup was taken at all. The file name I see on the computer is "backup.ad" and NOT "backup.adb".
- Why did my phone indicate that the backup finished when it clearly did not? How can I continue to troubleshoot this?
- If I am able to eventually get the backup, how can I then go about extracting the data from the adb backup in such a way that photorec can read the data? I am hoping that there's a way to mount the image (since photorec requires an actual "device" (or image) and won't run on individual folders).
- Any better ideas as to how I might be able to recover these photos? I do understand that, since so much time has passed, these photos may not be recoverable. But it's worth a shot! I exhausted, a long time ago, all other possibilities (I scrutinized my dad's phone and his account in Google many times over).