Bitcoin Forum

Hello,

I have used Atomic Wallet on my laptop, unfortunately I did not saved my 12-word recovery phrase. (Yes I am dumb). My laptop crashed suddenly and I had to do a reinstall of windows. I have not used this wallet for a while until one person sent me a lot of money, even I had new wallet..

1) I used laptop 3-4 weeks after reinstallation so recover data is probably poor chance, plus I use SSD, not HDD, so I probably overwritten the data already.

2) As I researched I believe the only chance is Check mnemonics to get 12 phrase recovery?:

There are 2048 words https://github.com/bitcoin/bips/blob/master/bip-0039/english.txt

I need to recover my 12 phrase recovery, I know my wallet address, but I can not remember any word that was in my 12 phrase recovery.

You look up the word's index in the dictionary I linked above to convert it to a binary number, then you run the BIP39 algorithm, which converts a number to a private key, then you use that private key to generate the address (https://www.freecodecamp.org/news/how-to-create-a-bitcoin-wallet-address-from-a-private-key-eca3ddd9c05f/) and compare that to the known address.

Practically: you just have to run the specialized software. Either Hashcat (hashcat.net), or this https://github.com/johncantrell97/bip39-solver-gpu

The hashcat command will probably look like this:
hashcat -a 3 -m 11300 wallet.dat

I need that a company or someone that knows who has super computer like google has it, to recover my 12 phrase recovery..

Let me know your thoughts, possibilities or any other ideas, I know the password of my wallet btw.. Transactions.. Wallet Address..

Who can help me, I will honor 2k$ ..


Thank you.

I'm sorry for your lost bro, that's all I can say

One more example of how important is to keep your keys

Edit:
After windows crashed, you could run a linux distribution live (cd/usb) or even connect the ssd to a PC running on linux and get all your wallet data out
If you had a clean installation, I'm afraid you've lost all data, but you can still try to do that above and take a deep scan of your appdata files, maybe there is some

good luck

It's impossible to recover your 12 words seed if you don't know most of its words.

Your only chance would be to try and recover the wallet file and decrypt it.

You mean recover the wallet folder I had before reinstalling windows?

So you have absolutely nothing from the old wallet, no seed, no backup, nothing?
What wallet.dat you actually want to "crack" if you don't have the old one?
Do you understand that if finding the private key (or seed if you want) for a random address would work, no address would be safe and Bitcoin would have been long dead?

I hope that I've misunderstood something. And sorry for your loss...

Yes, the appData folder should contain the wallet file. I believe this is the file (icudtl.dat) that contains the private keys for your wallet:

https://i.imgur.com/7ZNcMCX.png

I suggest you first reach out to Atomic wallet support, and confirm whether the file I mentioned is the correct one or not and then you can try to recover it, you probably won't need to recover the whole folder.

hey:

https://medium.com/@johncantrell97/how-i-checked-over-1-trillion-mnemonics-in-30-hours-to-win-a-bitcoin-635fe051a752

dovjann, if you don't have at least part of the seed, a public BTC address won't help you - because if it was so easy to hack a private key, Bitcoin would have been a thing of the past long time ago. Your best chance is to find a wallet file from Atomic Wallet, and since you've probably compromised old data by using your computer for 3-4 weeks, the only thing I can recommend is to try to find a Windows.old folder that should contain that file.

I've done some more tests to try and locate the wallet file, and I'm almost certain that this is it: (ignore the previous post I made)


(Same location as in Jaxx wallet)

If you ever manage to recover it, reinstall Atomic wallet and place it on leveldb folder.

Super computer time is cost more than 2k as i know

Brute forcing mnemonics is not going to work simply because then everybody could do it.
In fact, brute forcing mnemonics is the slowest way to get to your coins.
It's way faster to target the address directly, but even then you don't stand a chance and have to rely on pure luck.
The only thing left will depend on how you reinstalled the new operating system and what you did with it afterwards.
If you did a slow format everything will be gone, but if you did a fast format everything that was not overwritten will still be there.

Then how this guy did it then if it's impossible?

https://medium.com/@johncantrell97/how-i-checked-over-1-trillion-mnemonics-in-30-hours-to-win-a-bitcoin-635fe051a752

If you read from start you'll see that 8 of the 12 words were known. So he only searched for 4 words.
For each missing word it's exponentially more difficult and you are missing all 12 words.

But it's a log tracker? How do you know thi is the file? how did u tested?

1. Created a new wallet
2. Closed atomic
3. Deleted the file (00003.txt)
4. Reopened Atomic wallet and it's now asking me to create a new one (as if the other one no longer exists).

I don't think I would've got these results if it was a log tracker.

Maybe you should read the article this was not about 12 unknown words.

If ever that you would try to brute force it by looking up on the wordlists for possible combinations then turn each and every possible combinations to a binary then use BIP39 algorithm to get the private key (which you can still have now or not), you would simply get 2^132 which is 5.4445179e+39


If ever that you can remember even just the mnemonics, you can simply use https://iancoleman.io/bip39/? .

---

I might try doing this tomorrow just if ever I could crack it. I'll just send you a PM once I'm ready.

hope dies last lol

Unfortunately there is no way for you to get your coins back.
The system would be broken if it would be possible to simply bruteforce a seed storing BTC.

Since you already used your SSD and the chances of recovery are indeed extremely low, you are unfortunately out of luck.
Data recovery would be the only option if you are sure that you don't have a backup of your mnemonic code somwhere.

Actually, when you reinstalled Windows, it may have moved your old data to C:\Windows.old or a similar name. I once did a clean reinstall of Windows and the previous operating system C:\Windows, Users, and Program Files were moved to that folder. Check if you have such a folder. You need to find it fast because Windows is going to delete the whole folder automatically after about a month, and I'm assuming you reinstalled Windows today.

First, reinstall Atomic Wallet, it's going to be a clean state with no wallets imported but it will generate the C:\Users\<user>\AppData\Roaming\atomic. If Atomic Wallet is running then close it. Rename the folder to something else (like atomic2 or atomic3). You can delete this after you copy the folder below and you verify your old wallet is back.

Now navigate inside C:\Windows.old, and go to the path OmegaStarScream wrote:


Copy the entire folder to C:\Users\<user>\AppData\Roaming\ and your old wallet should be there.

---

Atomic wallet may have also stored stuff in the registry, so if you want to import the registry settings it's using, you can do this:

Copy C:\Windows.old\Users\<user>\NTUSER.DAT and put it in some folder you remember like your Documents folder. This file has all of your registry settings for the current user. If I can find what the registry keys for Atomic wallet are, then you can mount this file on Registry Editor and export the keys to another file, and import them to your current registry at HKEY_CURRENT_USER key.

I don't think this is necessary because I doubt the wallet file is stored in the registry, it should be on the disk.

---

@OmegaStarScream, do you know if Atomic Wallet makes a folder in AppData\Local too? He might need to copy that along with Roaming.

Well first off i would not install anything because that is the best way to overwrite the old data.
In stead boot from a dvd or usb into a live system and mount the drive in read only so that every remaining bit will be protected.
Then you make a RAW copy of the entire drive to another disk to duplicate the original.
After this you can start examining the copy to see what is left of the previous installation.

NotATether, did you read all the posts before you wrote your post? I have already given the same advice to OP, but he is obviously not interested in trying to save the thing that way - and if more than 30 days have passed then the windows.old folder has already been deleted.

Guys I really appreciate your help, trust me this is the first method I tried, to recover the data.. Windowls.old file is only when you install windows above your windows, but when you format the disk, it won't be there.. I tried to recover the data with easeus tool, however most likely I overwritten the data already when I tried to do that, so in other woords - I am doomed.

However I really appreciate for all your help and I am happy that no one made any joke comments about how dumb I am, because I am lol!


Thank you again!

Ok so with this additional info we can continue.

Did you do a hard format or did you do a soft format when you reinstalled windows ?

Also in easeus you have to specify a partition it is most likely that you selected the current and so there is a slight chance that you did not examine the previous one.
There is still hope, but only if you did a soft format so that is the main question at this moment in time.

I believe I did a quick format, which means soft format..

I actually missed the part where he said that. Embarrassing indeed. Aside from the windows.old folder there isn't another practical way I can think of to retrieve his old files.

Windows.old file is when you install windows above, but I did format in this case..

Even if you did a quick format on an SSD and you used it for 3-4 weeks after installation there is still a lot of residual data left unless you was doing extreme activities like filling the drive up to 90% by downloading large files over bittorent or some other data hungry activity that would definitely overwrite the data.
If that is not the case its wise to check for this residual data and analyze whatever is left of it.
Not by means of recovery software but by reading the drive bit by bit.

I tried to use 3 different recovery softwares, none helped, found few files that were before reinstalling, but atomic folder unfortunately not..

What do you mean by saying reading the drive bit by bit?

SSD has 117 GB, 45GB is free only now. :(

It can happen to anyone, it's nothing to worry about too much - although we've both given similar advice, it doesn't seem to help the OP because that option doesn't really exist in his case.

---

dovjann, your only option is to try a professional data rescue service, and they will tell you how likely the data recovery is in a particular case. Of course, it all depends on how much value is in your crypto wallet - and how much the possible rescue service would cost.

Lucius thanks for your advice, but none of the companies will help me in my case, they will use the same tools/softwares I used, it's SSD, you can't do much with it, if it would be HDD then yes, there are laboratories for it.. I overwrite the data already by using laptop 3-4 weeks unfortunately. Well you learn from your mistakes, it is as it is, I tried everything and I appreciate for your help too! :)

You can open that drive in RAW binary mode 'rb' and then examine it on the deeper level to look for traces of the lost data.

https://i.ibb.co/V9TsvWX/rawpy.png (https://ibb.co/SyBzKXq)

But it's going to take you a lot of time to go though all of it.
You could also try to search for keywords that relate to the wallet or to bitcoin.
If you want to try let me know.  :)

i dmed u bro

Don't be stupid, you havr choosen one of nost risky way to contact. I really hope that BASE16 has no bad intention and you are not a stupid enough to hand over everything. Be aware.

In order to do the method he proposed you need my laptop, otherwise you can not do nothing, as I would check the raw data manually on my end.. Thanks!