Recovering Lost/Deleted Data From An iPhone That Has Not Been Backed Up

[rikwen-5]

Windows 7
iPhone 3GS
Cygwin

It starts writing on my laptop but the phone reboots when ~767mb is written, i got three equal big *.img, same problem each time.
What could be wrong? I have set bs=1M, could that affect it? dont now what to try with...

/Rikard

[Free Lancer]

Trying to recover data off my Iphone 3GS to MAC VM and I tried using this guide, however, I um unable to run DD as I cannot get the filesystem to unmount or mount as read only and I keep getting 'Resourse Busy' error. Please see my logs here:

localhost:~ root# df -kh
Filesystem Size Used Avail Use% Mounted on
/dev/disk0s1 750M 497M 246M 67% /
devfs 28K 28K 0 100% /dev
/dev/disk0s2s1 15G 142M 15G 1% /private/var

localhost:~ root# dd if=/dev/disk0s2s1 bs=4096 | ssh [email protected] 'dd of=iphone_reclaim.img'
dd: opening `/dev/disk0s2s1': Resource busy

Password:
0+0 records in
0+0 records out
0 bytes transferred in 0.000035 secs (0 bytes/sec)


localhost:~ root# dd if=/dev/disk0s2s1 bs=1M | ssh [email protected] 'dd of=iphone_reclaim.img'
dd: opening `/dev/disk0s2s1': Resource busy


localhost:~ root# mount -o ro /private/var
mount_hfs: Resource busy

localhost:~ root# mount -o ro force /private/var
force on /private/var: Operation not supported by device
localhost:~ root#


I downloaded umount from somewhere and scp'd it to Iphone:

MacAdmin$ scp ~/Desktop/Iphone\ FW/umount [email protected]:/sbin/
[email protected]'s password:
umount 100% 15KB 14.6KB/s 00:00

localhost:~ root# umount -f /private/var
Killed
localhost:~ root# mount -o ro /private/var
mount_hfs: Resource busy


Might go bald pulling my hair......any help? How is the rest of world doing this?

[pmemac]

Sorry - wrong post

[digitalchemist]

I'm not sure why people claim the bs=1M option will fix your problem -- that has nothing to do with what you're experiencing.

The device is /dev/rdisk0, not /dev/disk0.

[redpenguin]

Any idea how to do this on Linux?

So far my img is being created just fine.

I don't have access to a Mac, but I have Ubuntu Linux access.

[jasonchb]

dd if=/dev/disk0 | ssh username@Computer’sIPaddress ‘dd of=iphone-dump.img’

dear all, hope you can assist me in entering above disk dump command on my pc running on windows 7 using software named putty

[saintx7]

i'm using iphone 4 os 4.1
i already tried anything
for transfering img file to

Code:
dd if=/dev/rdisk0s2 bs=4096 | ssh [email protected] 'dd of=iphone_rdisk0s2_4096.img'

and

dd if=/dev/rdisk0s2 bs=4096KB | ssh [email protected] 'dd of=iphone_rdisk0s2_4096KB.img'

and

dd if=/dev/rdisk0s2s1 bs=4096KB | ssh [email protected] 'dd of=iphone_rdisk0s2s1_4096KB.img'

and

dd if=/dev/disk0 | ssh <username>@<computer-ip> 'dd of=iphone-dump.img'

but when i input the password
always got "setgid : invalid argument"

anyone can help me please???
thanks

[Bunniesandsheep]

You know, this could all be a lot easier if someone got tct running on the iphone...

[erutan]

@atomic hooligan
First of all I'd like to point out that you rock! you're the man! your tutorial is the most professional tutorial on the web.
So, thank you very much!

@saintx7
'setgid : invalid argument' error means that you haven't configured your mkgroup on the ssh server side (unix? mac? win?). If the groups haven't been created on the server side, the client connection will fail after authenticating successfully, with the error message: setgid: Invalid argument.
Cygwin(Windows)/Unix ssh server - Run the command mkgroup -l > /etc/group
Then it should work.

@jasonchb
There are some topics found on the web, but I believe that in order to save time, just do it the other way around... from MobileTerminal on the iPhone ssh into your computer.

For All Windows Users
The following method worked for me like a charm!
I have a 3G iPhone with 3.1.3 installed, and I wanted to retrieve files from before I updated the iPhone.

I installed cygwin with openssh and ddrecover packages on my Windows XP:
- Download and install setup.exe from Cygwin Installation
- Select the openssh and ddrecover packages in the installation (you can use the search box to find them).
- Run cygwin and enter the following commands:

mkgroup -l > /etc/mkgroup
mkpasswd -l > /etc/passwd
ssh-host-config -y
net start sshd

- Keep cygwin open.
- After performing the steps to jailbreak the iPhone and install openssh and MobileTerminal enter the following command on the iPhone as root (use 'su' command to login as root):

dd if=/dev/disk0 | ssh <yourXPusername>@<yourXPIPaddress> 'dd of=iPhone-dump.img'

- You will not see any progress bar, but you can check the file size on the PC as it grows. It took me 9 hours to transfer my 16GB image file.
- The file will be located in cygwin's installation folder under home/<yourXPusername>/
- Mount the file with:
1. OSFmount - Free
2. MountImage - Trial
- Use PhotoRec or other software to recover files from the mounted image.
- For PhotoRec - choose Apple partition map as the partition table format. You can also choose the file types to search.

Good Luck! :-)

[anjszulc]

Hi All !

first:
Thx for this post
it's great tutorial !

second:
I make a myiphone.img but...

I open this on my windows by the OSFmount 1.4.1
and a can't open this two disk

primary partition 1 - 62,5 MB
primary partition 2 - 905 MB

where are a contacts? on which disk ? where i can find it ?

How I can copy this contacts on my iPhone ?

some on do this like me ?

please let me know )

Regards
Andrew

edit: i have a iPhone 2G 3.1.3

[ShiBBan]

I'm on a iPhone 4 with fw 4.01. I have done a dump from my iPhone but I don't know what to do next. I have tried to mount the img (dump from my iPhone) with Disk Utility from my Macbook but no luck. I only get the message

What can I do next? I really need to get some files back (most pictures and videos) from my iPhone!

[thomasscharrer]

I am a licensed private investigator and I can recover deleted text messages, call logs, photos, video and other deleted information off of an iphone. You can either send the phone to my lab or you can purchase a kit that allows you to do it at home. For a free consultation ask for Tom 8 6 6 6 4 0 1 0 1 0.

[ctiffanie0708]

Hi,since this has been said that this method would not work for Iphone 3G.....Would there be a possibility that this would work for Iphone 4?? Please help coz I lost all my photos when i first time sync my iphone into my PC. so i desperately needa get the photo back please could someone help me? xxxx

[Gauthier029]

Hi everyone
Any news for iphone4?
I need help for my photo and video

[HildeKnisely]

Recovery software has a big job to recover our important data that were been deleted unintentionally. Sometimes, we tend to forget to have back up for our important files. Recovery tool could help you for recovering your deleted files.

how to get deleted files back

[Mizja]

Hi your explaination for doing this with a PC is great, I had jailbroken my iphone 4 and everytime I try to run Cydia(or Safari) it opens quick and closes? Also when I installed on my PC (Windowas 7)cygwin and installed openssh and ddrecover, then try and run the commands it keeps telling me to go to the help, so I enter the code for the help menu and also has errors?

Please help.

Thanks,

Mizja

[ipodtouchheko]

Ok i read this but i'm still not sure. So i voice recorded this one funny thing my friends and I did. Well it was 16 minutes long. I wanted to trim it so i did like right where the funny part was. And like before i did the trim before so I knew it will divide them into 2 different voice memos but instead it got rid of the part that i wanted. SO i was soooo upset.

DO you know how i could get the other part of the memo back?? (the voice memo that i want not the one i don't want)
Please help... Thanks!