±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 36775
New Yesterday: 3 Visitors: 151

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

Viewing backed up SMS messages easily on PC

Discussion of forensic issues related to all types of mobile phones and underlying technologies (GSM, GPRS, UMTS/3G, HSDPA, LTE, Bluetooth etc.)
Subforums: Mobile Telephone Case Law
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
Page 1, 2  Next 
  

Jango
Member
 

Viewing backed up SMS messages easily on PC

Post Posted: Aug 07, 09 11:19

Hi there,
I've been given a DVD containing recovered SMS messages. Each file does not have a file extension. I can open them in notepad but this is a pain.

Is there anyway to open these within a free/shareware program so that I can easily scroll and review each message and review number sent to also etc?

Alternatively, how can these be copied to a microSD card and reviewed on another phone?

Any urgent help would be greatly appreciated
Thanks  
 
  

trewmte
Senior Member
 

Re: Viewing backed up SMS messages easily on PC

Post Posted: Aug 07, 09 12:03

Jango

Is this real evidence, as in live case examination, or a project for Uni?

I was intially thinking hex reader and SMS file headers?

But that led me to thinking how is he going to deal with:

- How to link concatenated message "offset" outside of the phone's file table
- Smart messaging
- UCS character set
etc

And of course you want to point a program at the file to see if it will read the file.

You could create a working copy and see if they will import as a file to one of the handset manufacturer programs like Samsung PC Studio, Myphone Explorer or Nokia Suite etc etc to see if they recognise the files on DVD or maybe alter the .extension to the .ext used by a viewing program. There are emulators too on the market, such as Blackberry etc.

You mentioned about recording to a microSD card, why not try your mobile and see how your mobile records an SMS text to the microSD and see what .extention it uses.
_________________
Institute for Digital Forensics (IDF) - www.linkedin.com/groups/2436720
Mobile Telephone Examination Board (MTEB) - www.linkedin.com/groups/141739
Universal Network Investigations - www.linkedin.com/groups/13536130
Mobile Telephone Evidence & Forensics trewmte.blogspot.com 
 
  

AlexC
Senior Member
 

Re: Viewing backed up SMS messages easily on PC

Post Posted: Aug 07, 09 12:50

What do these files actually look like?

Is it all text? I presume the textual part of the message is ASCII (maybe unicode) but what about the dates and times? Recipient/sender/SMSC numbers? Other data?

Could you post an example of what the file looks like?  
 
  

Jango
Member
 

Re: Viewing backed up SMS messages easily on PC

Post Posted: Aug 08, 09 16:15

Hi there
Thanks for your replies. I greatly appreciate it
It's not an evidence type thing, just something I'm reviewing at work.

I have managed to view the messages using Quickview Plus. I have a Blackberry but cannot convert the file extensions to blackberry format (.IPD).

Quickview Plus does the job very primitively, but I cannot see any times/dates of the SMS messages. Ideally I'd love to be able to extract to Excel easily;. Any ideas guys?  
 
  

Oxygen_Software
Senior Member
 

Re: Viewing backed up SMS messages easily on PC

Post Posted: Aug 10, 09 15:45

- Jango
Hi there
Thanks for your replies. I greatly appreciate it
It's not an evidence type thing, just something I'm reviewing at work.

I have managed to view the messages using Quickview Plus. I have a Blackberry but cannot convert the file extensions to blackberry format (.IPD).

Quickview Plus does the job very primitively, but I cannot see any times/dates of the SMS messages. Ideally I'd love to be able to extract to Excel easily;. Any ideas guys?

Could you send the sample files to me ([email protected])? Maybe we'll be able to help you with that.  
 
  

solal
Member
 

Re: Viewing backed up SMS messages easily on PC

Post Posted: Sep 23, 09 21:11

Hi,

You can try to decode it using DFF (http://www.digital-forensic.org).
You could use the gui and try on one message first, go to file adddump (or click the green cross on top left of the screen). You're message file will appear on the files view on the left. Then right click on the file and choose parser/smsdecode. You can see the results by clicking on info on the left corner then go to taskmanager on double-click on smsdecode it will show you the results.
Our smsdecode modules was on only tested on certain phone model so I didn't know if it will work for your sms. If it work just tell me and I will explain you how you can use the console or made script to automatically decode all your sms and review them more easily. For any questions don't hesitate to mail me or to join our channel #digital-forensic on freenode irc server .  
 
  

paul206
Senior Member
 

Re: Viewing backed up SMS messages easily on PC

Post Posted: Sep 25, 09 19:13

You can do it in DOS with the COPY command. It is called concatenation.
Here's how:

copy f1.txt + f2.txt + f3.txt new.txt

this adds f2 and then f3 to f1 and make a new file called new.txt  
 

Page 1 of 2
Page 1, 2  Next