Viewing backed up S...
 
Notifications
Clear all

Viewing backed up SMS messages easily on PC

8 Posts
7 Users
0 Likes
389 Views
(@jango)
Posts: 26
Eminent Member
Topic starter
 

Hi there,
I've been given a DVD containing recovered SMS messages. Each file does not have a file extension. I can open them in notepad but this is a pain.

Is there anyway to open these within a free/shareware program so that I can easily scroll and review each message and review number sent to also etc?

Alternatively, how can these be copied to a microSD card and reviewed on another phone?

Any urgent help would be greatly appreciated
Thanks

 
Posted : 07/08/2009 11:19 am
(@trewmte)
Posts: 1877
Noble Member
 

Jango

Is this real evidence, as in live case examination, or a project for Uni?

I was intially thinking hex reader and SMS file headers?

But that led me to thinking how is he going to deal with

- How to link concatenated message "offset" outside of the phone's file table
- Smart messaging
- UCS character set
etc

And of course you want to point a program at the file to see if it will read the file.

You could create a working copy and see if they will import as a file to one of the handset manufacturer programs like Samsung PC Studio, Myphone Explorer or Nokia Suite etc etc to see if they recognise the files on DVD or maybe alter the .extension to the .ext used by a viewing program. There are emulators too on the market, such as Blackberry etc.

You mentioned about recording to a microSD card, why not try your mobile and see how your mobile records an SMS text to the microSD and see what .extention it uses.

 
Posted : 07/08/2009 12:03 pm
(@alexc)
Posts: 301
Reputable Member
 

What do these files actually look like?

Is it all text? I presume the textual part of the message is ASCII (maybe unicode) but what about the dates and times? Recipient/sender/SMSC numbers? Other data?

Could you post an example of what the file looks like?

 
Posted : 07/08/2009 12:50 pm
(@jango)
Posts: 26
Eminent Member
Topic starter
 

Hi there
Thanks for your replies. I greatly appreciate it
It's not an evidence type thing, just something I'm reviewing at work.

I have managed to view the messages using Quickview Plus. I have a Blackberry but cannot convert the file extensions to blackberry format (.IPD).

Quickview Plus does the job very primitively, but I cannot see any times/dates of the SMS messages. Ideally I'd love to be able to extract to Excel easily;. Any ideas guys?

 
Posted : 08/08/2009 4:15 pm
(@oxygen_software)
Posts: 53
Trusted Member
 

Hi there
Thanks for your replies. I greatly appreciate it
It's not an evidence type thing, just something I'm reviewing at work.

I have managed to view the messages using Quickview Plus. I have a Blackberry but cannot convert the file extensions to blackberry format (.IPD).

Quickview Plus does the job very primitively, but I cannot see any times/dates of the SMS messages. Ideally I'd love to be able to extract to Excel easily;. Any ideas guys?

Could you send the sample files to me (adm@oxygensoftware.com)? Maybe we'll be able to help you with that.

 
Posted : 10/08/2009 3:45 pm
(@solal)
Posts: 10
Active Member
 

Hi,

You can try to decode it using DFF (http//www.digital-forensic.org).
You could use the gui and try on one message first, go to file adddump (or click the green cross on top left of the screen). You're message file will appear on the files view on the left. Then right click on the file and choose parser/smsdecode. You can see the results by clicking on info on the left corner then go to taskmanager on double-click on smsdecode it will show you the results.
Our smsdecode modules was on only tested on certain phone model so I didn't know if it will work for your sms. If it work just tell me and I will explain you how you can use the console or made script to automatically decode all your sms and review them more easily. For any questions don't hesitate to mail me or to join our channel #digital-forensic on freenode irc server .

 
Posted : 23/09/2009 9:11 pm
(@paul206)
Posts: 70
Trusted Member
 

You can do it in DOS with the COPY command. It is called concatenation.
Here's how

copy f1.txt + f2.txt + f3.txt new.txt

this adds f2 and then f3 to f1 and make a new file called new.txt

 
Posted : 25/09/2009 7:13 pm
iruiper
(@iruiper)
Posts: 145
Estimable Member
 

Type command wil also do.

Besides you can rename your whole bunch of files with a free tool called Bulk Rename Utility.

 
Posted : 26/09/2009 12:33 am
Share: