Solved

Recovering Deleted Items from a .PST file.

Posted on 2009-04-06
2
237 Views
Last Modified: 2012-05-06
I am familiar with the process of recovering deleted files or folders from a .pst file by purposefully corrupting the PST file by deleting positions 7 - 13 with a hex editor,  and then running SCANPST.exe to repair the file.  During the SCANPST repair the PST recovery tool operates in an unbiased fashion returning all recognizable files whether deleted purposefully or as result of corruption.  My question is related to whether or not the process is affected by copying the file to a different drive prior to performing this process.   My limited understanding of the process is that the reason you can recover these files is that upon deletion what is really happening on the hard drive is that the space taken up by these files is flagged as available again to be overwritten.  Until however that specific memory space if overwritten the contents still exists.  I am working on a copy of a users PST file that has been copied and sent to me.  The process worked and recovered some of the data, but much is missing.  I am wondering if the process was run directly on the remote users PC if more data could be recovered.  I guess my real question is weather or not all data contained in the memory space that is now flagged on the hard drive as available again,  would be picked up by the copy process when teh PST was sent to me.  Since some data was recovered I would think the answer is yes, but much is missing and I really dont know exactly how that process works.  

Thanks in advance for any advice you can give.  I appreciate it.  Have a super day.  

Schupster
0
Comment
Question by:Schupster
2 Comments
 
LVL 28

Accepted Solution

by:
peakpeak earned 500 total points
ID: 24086235
The .pst file will not be "better" recovered if run on the original PC. That would require the .pst to have pointers to areas outside itself that are marked for reuse. Or the file system would have pointers from reusable areas into the .pst.
Such is not the case
0
 

Author Closing Comment

by:Schupster
ID: 31567171
Thank you for your input.  That is exactly what I was trying to ask.  Hope my explanation was not too confusing.  Hope you have a great day.  
0

Featured Post

Microsoft Certification Exam 74-409

Veeam® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Find out what you should include to make the best professional email signature for your organization.
Finding original email is quite difficult due to their duplicates. From this article, you will come to know why multiple duplicates of same emails appear and how to delete duplicate emails from Outlook securely and instantly while vital emails remai…
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit https://www.mail-signatures.com/articles/signature-templates/?sts=6651 If you want to manage em…

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question