Recovery eml file

Log Out | Topics | Search Moderators | Edit Profile

Author Message   Carlo Username: locarbo Registered: 1-1997 Posted on Thursday, Oct 9, 2008 - 11:58:    I want to retrieve files "eml": I have to edit the file signature? Best regards Carlo   Alfons Kramer Username: admin3 Registered: 4-2004 Posted on Thursday, Oct 9, 2008 - 13:59:    Extend your volume snapshot: -Particularly thorough file system data structure search -File Header signature search -Verify file types -Extract email messages Apply a type filter for category E-mail. Recursive view. There is no need to edit the 'file type signatures" file, an entry for .eml is already included. Another strategy - especially for deleted emails - is a simultaneous search for "MIME-Version: 1.0" together with a GREP search pattern for email addresses.   Carlo Username: locarbo Registered: 1-1997 Posted on Friday, Oct 10, 2008 - 12:20:    Thanks for your answer, but I am not sure I understand what I do. I use WinHex - Specialist license. It is wrong to use the 'File recovery by type' ? Carlo   Stefan Fleischmann Username: admin Registered: 1-2001 Posted on Friday, Oct 10, 2008 - 14:43:    No, not wrong. If you can reliably identify the .eml files you are looking for with a certain signature, then you can use that signature in File Recovery by Type.