My phone is a Motorola MOTO G (first generation). Due to some troubles, I had recovered the factory settings of my phone. But I forget to backup some data of an app (Tricount). A this point my phone was not rooted.
My question is: is it possible to recover the data files of this application?
Currently, I just rooted my phone and I am currently making a RAW copy of the android system using command adb shell su -c "cat /dev/block/mmcblk0" | pv > mmcblk0.raw
. My idea is to used extundelete
command to recover the files after extracted the partitions using Testdisk
.
Do you recommend to search files in a specific partition? I am not really familiar with the android filesystem...
EDIT: One other method (I don't have tested yet). In terminal 1
adb forward tcp:5555 tcp:5555
adb shell
su
/system/bin/busybox nc -l -p 5555 -e /system/bin/busybox dd if=/dev/block/mmcblk0p12
In terminal 2
adb forward tcp:5555 tcp:5555
nc 127.0.0.1 5555 | pv -i 0.5 > mmcblk0p12.raw
NB: websites:
- http://www.df.lth.se/~jokke/androidfilerecovery/
- http://forum.xda-developers.com/galaxy-nexus/general/guide-internal-memory-data-recovery-yes-t1994705
EDIT: unfortunately, it seems that Android overwrites the files when you recover the factory settings (for security raesons) and so it is impossible to recover the files... :-(
ls -al /dev/block/platform/msm_sdcc.1/by-name/
. I obtain one line with :lrwxrwxrwx root root 1970-09-23 09:51 userdata -> /dev/block/mmcblk0p36
...dd
. About 1h for 16gb....