| Author | Message | ||
     George Njoroge Username: gikuyu Registered: N/A |
Hi all, i have a drive that was reformatted and windows xp reinstalled on it and all data on the drive was lost. I need to extract a pst file from the old partition, am not sure of the exact size of the pst, but the user estimates it to be btwn 1.5gb to 6gb. i have been using winhex 13 to try and recovery by type, winhex is able to recover some pst's (over 20 files) but i am not able to import them to microsoft outlook. what could i be missing? i have used most of the other known tools and i am able to get all the old data that was there but am not able to get any pst or whats the best approach shoul i take to try and get this pst out. your kind assistance is appreciated. | ||
| Stefan Fleischmann Username: admin Registered: 1-2001 |
You can tell the exact size of a .pst file from the integer value at offset 168 (Outlook 97-2002) or 184 (Unicode format of Outlook 2003). So if you have the beginning of a file, you know its size. If the size is correct yet Outlook is unable open the file, I can think of the following possible solutions: * File Recovery by Name (or in the forensic edition: Refine Volume Snapshot) with [x] Particularly thorough search, as this might be able to get the .pst files right even if they are fragmented. * Microsoft's scanpst tool. | ||
| Jimmy Weg Username: jw Registered: 7-2006 |
If you you recover the file and have difficulty viewing its contents, even after running scan.pst as Stefan suggested, you can try this: "corrupt" the values at 0x07 through 0x13 of the file with any byte values and re-run scanpst. Sometimes, scanpst will produce better results after the above technique. | ||
| Steve P Username: studlee2 Registered: N/A |
I'm trying to recover data in a similar situation, except that when I use "Recover File By Type" it recovers pst's that are the exact length of the size I gave it. It doesn't discriminate on the sizes? Any ideas about why? Studlee | ||
| Stefan Fleischmann Username: admin Registered: 1-2001 |
That's completely normal for that type of file recovery. Described in the both the program help and the manual. | ||
| GIKUYU Username: gikuyu Registered: N/A |
hi thanks for your assitance yes i have got alot of pst files after curving them out as per this reply by jimmy weg if you you recover the file and have difficulty viewing its contents, even after running scan.pst as Stefan suggested, you can try this: "corrupt" the values at 0x07 through 0x13 of the file with any byte values and re-run scanpst. Sometimes, scanpst will produce better results after the above technique. its true i cant extract the files even after running scanpst kinldy explanin the above procedure, how do i do it ("corrupt" the values at 0x07 through 0x13 of the file with any byte) regards | ||
| Stefan Fleischmann Username: admin Registered: 1-2001 |
> how do i do it ("corrupt" the values at 0x07 through 0x13 of the file with any byte) E.g. with the mouse, click the byte in the first line below the 7, the hold the mouse button and select a block from there to offset 0x13, until the status bar reads "Block: 7 - 13". Then use Edit | Fill Block with any hex values. Finally save. | ||
| GIKUYU Username: gikuyu Registered: N/A |
i think i have been able to do it, i curved out the files using winhex and got the many pst files then i got this application; Recovery For Outlook http://www.officerecovery.com/outlook/index.htm Which i have used to recover the emails then import recovered pst files to Microsoft outlook i am still doing it as at now but i am very hopefully i will get good results. My main worry is that i am getting very old mails like year 2004 and 2005 but none for 2006, i dont know if the pst's files i curved out are not part of the recent emails send but i am hoping i will get them. Also none of the pst recovered has no contacts. best wishes thanks |