Data Recovery Case File · Servers, Email & Power Users · The One File

"That is the only file I would like to retrieve — would it still be possible?": the local-mailbox illusion decoded kindly, the restore's leavings searched properly, and years of folders reattached to her account

Her enquiry described a trap that catches careful people precisely because they are careful. A laptop malfunction; a self-administered restore — "I tried to restore it myself. I thought I had everything I needed backed up." And then the discovery, made from the worst vantage point: "upon logging into my Outlook account on another PC, I noticed that part of my folders have disappeared." Her own diagnosis, arrived at after the fact, was exactly right: "the PST file had been saved to the local hard drive on my old PC — I was not aware of it, otherwise I'd have kept a backup of it." One target, one question: "That is the only file I would like to retrieve. Based on your expertise, would it still be possible?" The answer arrives in two parts below: the decode she deserved to have been given years earlier — why mail visible in Outlook is not always mail the account carries — and the hunt itself, which had more places to look than a restore's clean surface suggests.

The decode: the illusion, the leavings, and why this particular file hunts well

The local-mailbox illusion, named: Outlook shows one seamless list of folders, and nothing in that list says where each folder actually lives. Account-hosted folders follow you to any machine; Personal Folders — the PST — live in a single file on one specific drive, and appear in the seamless list only on the machine that holds them. Sign in elsewhere and they are simply absent, which is how she discovered the architecture: not from documentation, but from the gap. Her "I was not aware of it" is the norm, not the exception — this file's whole design is to be invisible until it's missing.

Where restores leave the old world: "I tried to restore it myself" covers a family of operations, and most of them are less total than they feel. Windows restores routinely preserve the previous installation's remains — an old-system carryover folder holding the prior user profiles wholesale, exactly where a PST habitually lives — and even where no tidy carryover exists, a restore's fresh writes claim only part of the drive, leaving the rest as recoverable territory. And her target is the kindest kind to hunt: a PST is large, distinctively structured, and stored in well-known paths — a file that announces itself to signature-led search even when the filesystem no longer lists it, and one whose internal format tolerates repair when an edge has been clipped.

Her one-file scoping, honoured: a defined target lets triage aim — the known mail locations first, the carryover remnants second, the signature sweep third — with the whole image searched but the prize pursued in priority order, exactly as this archive has done for a client's mail file before.

The recovery: found where restores forget to look

The drive was imaged write-blocked, and the hunt ran the priority order above. The old installation's carryover remnants proved to be holding the previous profile — and within it, the Personal Folders file, intact but for minor structural wear at its tail, repaired on the copy. The mailbox opened cleanly at the bench: the missing folders present, their contents readable, years of correspondence exactly where the seamless list once implied it would always be. Delivered with plain instructions for reattaching the file to Outlook on her new machine — and a strong recommendation to move its contents somewhere that follows her.

On the bench

The drive was imaged on an Atola TaskForce 2 with hashes calculated in-line, and the hunt then ran against the image, never the original. OSForensics indexed the full volume — live folders, the Windows.old carry-over, and unallocated clusters alike — and its email-aware search surfaced the mailbox file by both signature and content. The PST opened cleanly in the suite's own viewer for verification before extraction: messages present, folder tree intact, the "one file" confirmed to be the one file before it ever left the bench.

The outcome

One file, retrieved and verified — her folders restored to the account view they'd silently been missing from — with the answer to "would it still be possible?" given in the archive's favourite tense: it was. Free assessment, one fixed written figure including VAT, no recovery, no fee. And the decode went with the delivery, so the trap can't reset: from now on, any folder that matters lives where signing in can reach it, and any PST that remains gets a backup with its name on it.

Our case files are drawn from genuine enquiries received by our laboratory over the past ten years, anonymised to protect client confidentiality. Each one describes the diagnostic and recovery procedure our engineers apply to that fault, using the equipment listed.