Bitcoin Forum
November 12, 2024, 05:52:03 PM *
News: Latest Bitcoin Core release: 28.0 [Torrent]
 
  Home Help Search Login Register More  
  Show Posts
Pages: [1]
1  Bitcoin / Development & Technical Discussion / Re: Pywallet 2.2: manage your wallet [Update required] on: May 19, 2021, 12:09:33 AM
recov_device should just be the drive letter (in windows) if you want to check an entire drive... you don't want to specify a "file"

Try:
Code:
python pywallet.py --recover --recov_device=E: --recov_size=1000Gio --recov_outputdir=.

Thank you this worked! I got a recovered wallet.dat file that was much bigger than my original (~1000KB) with a bunch of keys in it. I ran the code below and got a few hundred addresses. My Bitcoin Core is fully synced and I tried opening this wallet but get stuck on "Opening Wallet. Not sure what do next.

Code:
pywallet.py --dumpwallet  --wallet=wallet.dat > walletdump.txt

Code:
Example Output:
 "addr": "1GK46gd6C8nXXXXXXXXXXXX3HMgbqHF",
            "compressed": false,
            "encrypted_privkey": "5613a75d7ad6c19135a26eXXXXXXXXXXXXXXXX1908e61cb08cf49e21dXXXXXb1c65142912",
            "label": "recovered: 93bfXXXXXXXXXXXXXXXXXX710881d50XXXXX89585154c",
            "pubkey": "04ef1bc57033e7942233fb6d21f421XXXXXXXXXXXXXXXXXXXXXXXXXX6f74cf794ced69144dbb379c373d4b780fa4151bb50a3",
            "reserve": 0
        },
2  Bitcoin / Development & Technical Discussion / Re: Pywallet 2.2: manage your wallet [Update required] on: May 17, 2021, 10:42:47 PM
Did you run pywallet as administrator? Also I wouldn't count on recovery software to be the best option. I would run pywallet on the whole hard drive rather than on a file you recovered via recuva or whatever software. Make sure you include the passphrase when you run pywallet, if the wallet was encrypted. If It finds any private keys you can then use them with Electrum, I don't think you can just use a wallet recovered by pywallet straight into Bitcoin Core. Obviously it will be safer to try this on your cloned version of the hard drive. Good luck.

I will try running pywallet as admin on the entire hard drive. What command should i run for a 1TB HDD. Will the below command work? I appreciate the help!

Code:
python pywallet.py --recover --recov_device=E:  --recov_size=932Gio --recov_outputdir=.

EDIT: I figured out the code to run this and fixed it above.
3  Bitcoin / Development & Technical Discussion / Re: Pywallet 2.2: manage your wallet [Update required] on: May 17, 2021, 10:01:05 PM
I tried using 2 versions of Bitcoin Core (0.21.1 and 0.8.6) to read the wallet.dat and was given the warning "wallet.dat corrupt, salvage failed".

If you see error message when you open Bitcoin Core normally, you can external Bitcoin Core tools to salvage your wallet properly. Check this thread, Salvagewallet in latest Bitcoin core.

My next step is to recover the HDD using GetDataBack instead of Recuva, and then reattempt what I have done so far.

I strongly suggest you to make RAW copy of your HDD using tools such as http://www.hddguru.com/software/HDD-Raw-Copy-Tool/. After doing that, you can use the software to scan the RAW copy instead.
If you're searching text with a hex editor then you need to type key!. The exclamation mark is important, but is not used for the master key (mkey). You might not get a hit on the word name as that doesn't always appear in a wallet.dat. It is another term for address. If the wallet was encrypted by using a passphrase, then the private keys should be searched by the term ckey! if using a hex editor.


I searched for 'mkey', 'ckey', 'key!', and 'key' using a Hex Editor and I only got 1 match for 'key', nothing else. Can I do anything with this? I am in the process of making a raw copy of my HDD using HDD-Raw-Copy-Tool and searching that for a wallet.dat file. Will probably have to delay that until the weekend though.

4  Bitcoin / Development & Technical Discussion / Re: Pywallet 2.2: manage your wallet [Update required] on: May 16, 2021, 06:49:24 PM
Hello I used Recuva on an old HDD from 2013/2014 and found a wallet.dat file. Recuva said the wallet.dat file was in excellent condition. I tried using 2 versions of Bitcoin Core (0.21.1 and 0.8.6) to read the wallet.dat and was given the warning "wallet.dat corrupt, salvage failed". I installed Python 2.7.11, Pywallet, and all its dependencies and tried the following commands.


Pywallet DumpWallet Attempt:
Code:
python pywallet.py --dumpwallet --datadir=./ --wallet=wallet.dat

'ecdsa' package is not installed, pywallet won't be able to sign/verify messages
ERROR:root:Couldn't open wallet.dat/main. Try quitting Bitcoin and running this again. (Bitcore was not open)

Pywallet Recovery Attempt:
I reformatted a flash drive in FAT32 and put the wallet.dat file in it and attempted the following recovery code
Code:
python pywallet.py --recover --recov_device=E:\wallet.dat  --recov_size=14.5Gio --recov_outputdir=.

Found 0 possible wallets
Found 0 possible encrypted keys
Found 0 possible unencrypted keys
WindowsError: exception: access violation reading 0x000000005FF07E98

The wallet.dat file is 328KB. I inspected it using a HexEditor and Notepad++ and it doesn't look corrupted. When I search notepad++ for 'key', there is 1 match, but when I search for 'name' there are no matches. My next step is to recover the HDD using GetDataBack instead of Recuva, and then reattempt what I have done so far. I would appreciate any help!
Pages: [1]
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!