About 6 months ago I had a customer call with a bit of a crisis. They had deleted some folders in Outlook without realizing the cleared out a few things they NEEDED to keep. Up until then I hadn’t had much opportunity to try to find out what was recoverable, but I discovered there is a pretty easy way to deal with this.
For starters, Microsoft Outlook keeps it’s data in .pst files. In fact everything is kept in one BIG pst file. Essentially the Outlook pst file is a big database. As messages are downloaded the file gets larger and when things are deleted they’re moved to the deleted items folder. Emptying the deleted items folder within Outlook just de-references them within the database it doesn’t REALLY get rid of them, nor does it really free up the space the PST file takes up.
Now, if you’ve compacted your pst file to take up less space you are likely out of luck. Similarly if you deleted a message 6 months ago and are just now trying to retrieve it, once again you’re likely out of luck.
If neither of the above apply though, there’s a chance. First make a backup of your pst file (you don’t want to loose the rest do you?) Next find a hex editor. winhex editor might suit the bill
Essentially what we’re going to do is corrupt the Microsoft Outlook pst file and then repair it. When the file is repaired our deleted messages will be recovered.
Open the Microsoft outlook pst file with the hex editor and find the 7th position. (You should see data entered in pairs in the large part of the screen and random looking text in the right hand side.) The data in pairs should be made to read 20 in each position from the 7th through the 13th position. (This is the same effect of clearing the text in the right hand side.) Now remember this is hexadecimal notation so that means positions 00007, 00008, 00009, 0000a, 0000b, 0000c, 0000d, 0000e, 0000f, 00010, 00011, 00012, 00013.
Next save the file. It’s now a corrupted pst file.
The next step is to scan it with the Microsoft tool scanpst.exe It might be at C:Program FilesCommon FilesSystemMapi1033NT or C:Program FilesCommon FilesSystemMapi1033 or C:Program FilesMicrosoft OfficeOfficescanpst.exe this will vary on Outlook version and Windows version. It may also be possible to download the tool.
Scanpst will make a backup of the file (this one will be corrupted though – the default is filename.bak) and it should fix the other problems. Once it’s done open up Outlook.
When Outlook opens look around to find your lost items. Some will be in the Deleted Items folder, still others I’ve seen given their correct folder name in the folder tree. It’s also possible that they will be in a “Lost & Found” directory.
That’s worked for me several times to recover lost and deleted messages and folders from Microsoft Outlook pst files. It beats paying $30 for a tool to do the same unless you’re terrified of the hex editors. It’s really not a bad operation as long as you back up the file first “just in case”.
Related PostsRelated Posts
- ANOTHER Microsoft patch problem This is getting to be like clockwork, but it sounds like this may be one of the nastiest problems so far. It appears that there is a problem with one of the recent patches from Microsoft MS06-49. It looks as though the problem is data corruption for small files (under......
- Disinfecting a PC... part 1 This is the first in a several part series documenting the cleaning of an infected PC. The only real noteworthy item is that it was a dial-up only connection and was rather infested for that. (On par with some of the broadband connected pc's I've seen. It's also an interesting......
- How to Remove Windows Enterprise Defender (Removal Guide) Windows Enterprise Defender is a rogue antivirus application that uses the name of Windows Defender and the similarities of their name to appear as an official product or add on to windows. Of course, the real Windows Defender is a legitimate application, but Windows Enterprise Defender is a rogue antivirus......
- Filing Tips for the Last Minute Filer [The following guest blog post was provided by Manuel Davis, a tax accountant at Back Taxes Help, who has helped thousdands of taxpayers file IRS back taxes and setup IRS Payment Plans.] In the remaining few days before the 2009 income tax deadline, millions of taxpayers will be rushing to......
- How to Relocate your Wordpress Blog to a New Domain Name Making the decision to move my blog from http://www.courseladder.com to http://www.golfballdriver.com was a big one, and a good one, and it taught me a lot about learning how to relocate your Wordpress blog to a new domain name under the same hosting provider. Course Ladder suited me for a while,......
- Open Office Would you like to have an office suite of software, similar to Microsoft Office and compatible with it's file formats, but without the price tag? OK, so that's a no-brainer; of course you would. Well, Open Office is exactly that. It's open source software that is 100% free to download......
- Outlook express pet peeve #375
- Sleuthkit – windows and linux file recovery
- “rm -f *” undelete
- Outlook archive error message
- Sharing contacts between Outlook and Outlook Express