This is ridiculous !!
I went through a couple of hundred websited and forums, and nobody can answer a simple question !
How can I restore deleted phonebook contact or a text message from a Palm Treo Pro - running Windows Mobile 6
YOU CAN'T GET IT FROM
It's obvious that when u press "delete" the record is still somewhere in temporary Windows files on the device. NOBODY IS KEEN ON SHARING THIS KNOWLEDGE what files ! sans.org only tells to come to their semminar and they'll tell you where to look….
I'm so disappointed since WinMobile outdated it's almost gone from mobile market anyway, so nobody should care.. instead ppl try to make sure not to give any information to others, or nobody simply knows….
I'll buy a 6-pack of beer for person who helps me with that
I looked for it, but while I did find the Law that entitles you to ask that question I wasn't able to find the one that obliges all the rest of the internet to answer it. 😯
While I do understand your frustration in not being able to find a valid answer, it does not seem to me a good reason to come here venting about it.
I'll buy a 6-pack of beer for person who helps me with that
Ah well, that changes the matter, who can refuse such an offer? ?
I am sorry, though your offer lures me I have no idea how to accomplish that, and even if willing to, I cannot help you. cry
jaclaz
Ah, my bad I forgot to add in my topic one important information
People who don't have anything intelligent to say plz go spam somewhere else
thx !
You are not specifying which Palm Treo but XRY, Cellebrite and even Paraben will image the device without a problem.
There is also JTAG information available for several models.
Despite all this, if the data was overwritten, you are not going to recover it.
You are not specifying which Palm Treo
Palm Treo Pro (So it's a treo 850 - htc panther)
See.. the problem is that I don't have 30000$ to spend on Cellebrite or XRY
Data in cemail.vol & pim.vol has been overwritten but not other Windows folders/tmp files
There's got to be a way of recovering a lost contact on WM6 devices - SANS forums mention that traces are always kept in Windows folder. "Delete" option equals "hide" - not rly delete..
Anyway, when I dumped ROM and analyzed image I was able to find photos of previous owner showing some naked woman (I bought my device on eBay and previous owner reset it to factory defaults)
So I'm pretty confident that contact is still somewere there, I just don;t know where to look.
I'm just losing faith in these ppl who call themselves forensic experts. I mean this is some basic knowledge I suppose…
Just so I know how you have your setup, allow me to recap -
- You purchased a used "Palm Treo Pro 850" on eBay
- You "dumped [the] ROM" and you recovered adult photos from it
- You are also believe that the device was reset to "factory default"
- You believe that because the images were recovered, the "deleted" contacts should be available for recovery
Are the above correct?
Hi,
I understand your frustration and I have been in a similar situation like yours, at the same time you also should understand that in this field knowledge is money.
I have no experience with the said device. But since you said you were able to dump the and recovered some photos, I am guessing you have access to some forensic software. In that case have you tried searching for the file's header or footer? I believe a google search will be able to find you the header/footer.
If you are lucky some phone numbers might be stored as plain text, so you could try searching for a sequence of numbers for e.g. mobile numbers in the UK start with +4477, 077, 078 etc. you could try searching that and snoop around for more info.
Good luck.
on another note,
if you came here expecting to be soon fed, then you came to the wrong place.
This is a good place to get ideas and information on how to get started, people here can help you in that regard.
Just so I know how you have your setup, allow me to recap -
- You purchased a used "Palm Treo Pro 850" on eBay
- You "dumped [the] ROM" and you recovered adult photos from it
- You are also believe that the device was reset to "factory default"
- You believe that because the images were recovered, the "deleted" contacts should be available for recovery
Are the above correct?
Sorry for submitting too much information at a time. Not all of the above is correct
I purchased my Palm about 4 years ago, when I got it It was reset to factory defaults - fresh WM6 copy, internal memory containing only default files. Since then I was using it for these 4 years, and recently I deleted messages and a contact that I now need.
While digging into this phone using freeware software I was able to dump rom and recover files from its previous owner ! So this is when I understood that there's no way my contact (that I deleted 14 days ago) is gone since I'm able to recover data from 4 years ago !
And I agree that this knowledge is "money" but WM6 is not common at all, nobody will need that knownedge soon..
Just because you could recover pictures from 4 years ago does not mean contact deleted 14 days ago is still recoverable.