从“已删除邮件(Deleted Items)”文件夹中删除电子邮件应始终小心谨慎。但是意外发生了，有时我们会错误地删除电子邮件。幸运的是，有一种方法可以在Microsoft Outlook(Microsoft Outlook)中恢复已删除的项目。
首先要做的事：您必须在删除项目后立即关闭 Outlook(you must close Outlook immediately
after you’ve deleted the items)。同样重要的是，在进程结束之前不要重新启动程序(not restart the program until the very end
of the process)。打开的时间越长，结果就越难以预测。
什么是 Outlook PST 文件？
您删除的文件存储为PST文件。Outlook的直觉是在检测到更改（例如删除内容）后覆盖PST文件。(PST)我们的工作是在Outlook(Outlook)有机会更改PST之前恢复文件。
下面讨论的方法将要求我们直接更改PST文件。我们使用一种叫做Hex Editor的东西来做到这一点。在尝试电子邮件恢复之前，您需要下载并安装一个。
网上有许多免费的十六进制(Hex)编辑器。也有不需要安装的版本。
Outlook中的目录是什么？
计划是让Outlook误以为它已损坏。更具体地说，我们的目标是目录或TOC。这是Outlook在将电子邮件放入适当的文件夹之前对它们进行分类的方法。
通常，TOC
会删除已删除的项目。但是，如果我们足够快地损坏和修复（稍后会详细介绍），我们可以欺骗Outlook以为(Outlook)PST文件没有更改。此行为将恢复所有已删除的电子邮件。它会继续下去，就好像什么都没发生一样。
查找 PST 文件
以下是查找存储在计算机中的PST文件的方法。(PST)
转到文件(File)>数据管理(Data Management)。浏览PST(PST)文件列表并选择您需要的文件。
单击打开文件位置(Open File Location)以访问 PST 文件。
复制PST文件并将其粘贴到硬盘驱动器中的安全位置。
注意：我们将编辑副本而不是原始文件。(Note: We will be editing the copy instead of the original
file.)
损坏 PST 文件
使用十六进制编辑器(Hex Editor)打开您复制的PST文件。你会被数字和字母的行和列打招呼。这些被称为十六进制字符。我们将对这些值进行更改以达到预期的结果。
找到(Locate)十六进制位置 7 到 13。
使用空格键删除位置 7 到 13 下的值。这有时会将原始值替换为“20”。
完成更改后，保存PST文件并退出Hex Editor。
如果您的 Hex Editor 支持它，您还可以使用Fill Selection更新(Fill Selection)PST文件。
- 找到(Locate)并突出显示位置 7 到 13。
- 转到编辑(Edit)>填充选区(Fill Selection)。
- 在十六进制值下输入“00”。
- 点击确定(OK)。
- 保存并退出程序。
恢复 PST 文件
现在我们能够成功破坏PST，我们现在将继续恢复文件。为此，我们将使用一个名为 scanpst.exe 的工具。
当修复工具扫描并修复损坏的PST和TOC时，它会看到永久删除的消息并认为它们只是放错了位置。这将导致邮件被移回其正确的文件夹。
打开scanpst.exe （Office 365用户可以在这里找到它：C:Program Files\Microsoft Office\root\office16\）
单击浏览(Browse)并打开编辑后的 PST 文件。
单击开始(Start)。修复完成后，在Outlook中打开(Outlook)PST文件。
如果恢复按计划进行，则已删除的电子邮件现在应该回到“已删除(Deleted)
邮件(Items)”文件夹或它们最初所在的文件夹中。
虽然这种方法有效，但它没有 100% 的成功率。你应该管理你的期望。如果这不起作用，您可以查看第三方恢复工具。
How to Recover Deleted Files from a PST File in Outlook
Removing emails
frоm the Deleted Items folder should always be done with caution. But acсidents
happen and sometimes we delеte emаils by mistake. Luckily, there’s a way to
recover deleted items іn Microsoft Outlook.
First things
first: you must close Outlook immediately
after you’ve deleted the items. It’s also important that you not restart the program until the very end
of the process. The longer you keep it open, the more unpredictable the
results will become.
What
is an Outlook PST file?
Your deleted files
are stored as a PST file. Outlook’s instinct is to overwrite a PST file once
changes are detected such as removing content. Our job is to restore the files
before Outlook gets a chance to make changes to the PST.
The method
discussed below will require us to make direct changes to the PST file. We do
this using something called a Hex Editor.
You will need to download and install one before you attempt email recovery.
There are many Hex Editors available online for free. There are also versions that do not require installation.
What
is Table of Contents in Outlook?
The plan is to
fool Outlook into thinking that it’s corrupted. To be more specific, we’re
targeting the Table of Contents or TOC. This is what Outlook uses to categorize
emails before placing them in the appropriate folder.
Normally, the TOC
removes deleted items. But if we corrupt and repair (more on that later) fast
enough, we can trick Outlook into thinking there was no change to the PST file.
This act will restore all the deleted emails. It will carry on as if nothing
happened.
Finding
PST files
Here’s how you
locate the PST files stored in your computer.
Go to File > Data Management. Go through the list of PST files and select the files you need.
Click Open File Location to access the PST files.
Copy the PST files and paste it in a safe location in your hard drive.
Note: We will be editing the copy instead of the original
file.
Corrupting
the PST files
Open the PST file
you copied using a Hex Editor. You’ll be greeted by rows and columns of numbers
and letters. These are called hexadecimal characters. We will be making changes
to these values to achieve the desired results.
Locate hexadecimal positions 7 to 13.
Using the space bar, delete the values under position 7 to 13. This would sometimes replace the original value with “20”.
Once done with your changes, save the PST file and exit the Hex Editor.
If your Hex
Editor supports it, you can also update the PST file using Fill Selection.
- Locate and highlight positions 7 to 13.
- Go to Edit > Fill Selection.
- Enter “00” under Hex Values.
- Hit OK.
- Save and exit the program.
Recovering
the PST files
Now that we were able to successfully corrupt the PST, we will now proceed with recovering the file. To do that, we will be using a tool called scanpst.exe.
As the repair tool scans and fixes the corrupt PST and TOC, it will see the permanently deleted messages and think they’ve only been misplaced. This will result in the messages being moved back to their proper folders.
Open scanpst.exe (Office 365 users will find it here: C:\Program Files\Microsoft Office\root\office16\)
Click Browse and open the edited PST file.
Click Start. After the repair is complete, open the PST file in Outlook.
If the recovery
went according to plan, the deleted emails should now be back in the Deleted
Items folder or in the folder they were originally located.
While this method works, it does not have a 100% success rate. You should manage your expectations. If this does not work, there are third-party recovery tools you can look into.
