| Author | Message | ||
     Patricia Monica Delbono Username: pato Registered: N/A |
Hi: I was looking some information and I found it in a deleted e-mail whose name is in spanish "Elementos eliminados.dbx". How can I show this e-mail in order to apreciate the information I found? My Winhex is specialist licence. Patricia | ||
| Jimmy Weg Username: jw Registered: 7-2006 |
A dbx file is an email store associated with Outlook Express. What you have found is the Outlook Express Deleted items mailbox, if my Spanish isn't too rusty. It may contain many, individual email messages. XWF can extract the messages quite handily, but you need the forensic license. You could export the file and try to open it in Outlook Express. However, XWF may do a better job of recovering messages that were deleted from the Deleted mailbox, or "double-deleted." | ||
| Patricia Monica Delbono Username: pato Registered: N/A |
Would you explain me what is "double-deleted"? | ||
| Don Camillo Username: willybilly Registered: N/A |
The same as I already told you about "deleted" deleted. Means: The file is in the trash directory of Outlook Express (in the dbx file) - and then you finally delete it. You can no longer see it in Outlook Express. In REALITY it is still in the dbx file - but you will not see it if you open Outlook Express as Outlook Express marked it as deleted - and does not show it. Only if you compress the Outlook dbx file it falls out of the dbx. The result is that the user thinks he deleted the mail - but it still exists. Under Outlook (pst) XWF does NOT show these mails too as it uses Outlook for creating the single mails. |