Bitcoin Forum
July 16, 2024, 06:36:58 PM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
  Home Help Search Login Register More  
  Show Posts
Pages: [1]
1  Bitcoin / Bitcoin Technical Support / Re: 2009 Bitcoin Wallet Help & Possible Find on: November 03, 2023, 08:58:24 PM
https://github.com/jackjack-jj/pywallet also have ability to scan for wallet.dat file directly on disk partition. Although i've no idea whether it perform better than FindBTC or not.

--snip--
I've installed and looked over Pywallet and it doesn't seem that is can scan for a wallet file. Do you know the command from Pywallet off hand?

If you want to scan the HDD or raw copy of the HDD directly, use following command

Code:
python3 pywallet.py --recover --recov_device INSERT_PATH_HERE --recov_size xxxMo --recov_outputdir INSERT_PATH_HERE

Here's an example (i've tried on my linux device),

Code:
sudo python3 pywallet.py --recover --recov_device /dev/vda1 --recov_size 28024Mo --recov_outputdir ./pywallet_output

Few things to note,
  • Make sure folder on parameter --recov_outputdir already created.
  • You'll need admin/root permission if you want to scan the drive directly.
  • You must specify size of the drive or file manually.


Great command, though, there isn't a recover command in Jack Jack pywallet. Is there another pywallet you're referring to?
2  Bitcoin / Bitcoin Technical Support / Re: 2009 Bitcoin Wallet Help & Possible Find on: November 02, 2023, 04:45:42 PM
https://github.com/jackjack-jj/pywallet also have ability to scan for wallet.dat file directly on disk partition. Although i've no idea whether it perform better than FindBTC or not.

4. Any programs to recover a deleted Users file from Windows 7.
5. Any programs exist to recover deleted wallet.dat file.

Personally i'd suggest https://github.com/cgsecurity/testdisk if you're willing to use cmd/terminal or you can ask your programmer friend to do that for you. But first of all, make sure you already make raw copy of the HDD.

Seems pretty messed up situation. From my experience, relying on your 14 year old disk to not have written on top of your private keys, usually doesn't go well.

Actually the disk is at least 19 years old, while the data is on it at least for 14 years old.

I've installed and looked over Pywallet and it doesn't seem that is can scan for a wallet file. Do you know the command from Pywallet off hand?
3  Bitcoin / Bitcoin Technical Support / Re: 2009 Bitcoin Wallet Help & Possible Find on: November 02, 2023, 04:37:21 PM
Update:

Tried DMDE recovery tool. I find this to be a really powerful tool to search for .dat files.

My programmer friend wants to trace the path to the Bitcoin folder in Linux. He gave me a series of commands to run.

We first want to search the word Bitcoin. This hard drive was also stopped being used in early 2010.

Sure enough I got a number of hits for the word Bitcoin, which, correlates to what we discovered earlier with one of the possible wallet files hex code read out showing the pathway for Bitcoin with wallet.dat.

Tracing the word using Grep command and than finding BlockOffset than running debugfs. Though icheck and inode don't work in NTFS on Linux.

We're trying to find the sector block where the Bitcoin folder/wallet file starts.  Any ideas much appreciated!

https://share.icloud.com/photos/01cQfRfdd9Evfni_X7oKR-oRQd


4  Bitcoin / Bitcoin Technical Support / Re: 2009 Bitcoin Wallet Help & Possible Find on: November 02, 2023, 04:26:27 PM
Seems pretty messed up situation. From my experience, relying on your 14 year old disk to not have written on top of your private keys, usually doesn't go well.

I have never helped someone recover deleted files, so I am not the best to help you in this, but I'd absolutely attempt to recover anything in there. I mean, we're talking about at least 50 BTC; that is a shitload amount of money. The first thing I'd do is use software which allows you to make quick searches on the drive, and I'd look for "wallet.dat". If that does not work, then chances aren't with your side. You should then start searching for uncompressed public keys I guess?

I stopped using the hard drive in early 2010. Other than extracting information from it and deleting files.
5  Bitcoin / Bitcoin Technical Support / 2009 Bitcoin Wallet Help & Possible Find on: November 01, 2023, 11:24:44 AM
Hello,

Back in the summer of 2009, I downloaded Bitcoin and mined very briefly. At the time I had a cutting edge gaming rig and I came across Bitcoin in a new article.  I remember mining Bitcoin and it brought my gaming rig to a crawl. After brief period of time and with Bitcoin being worthless, I uninstalled Bitcoin. A decade later, Bitcoin explodes and it made me think if I had any Bitcoin.

I was really skeptical. I tried many many times over the years to find the wallet.dat file and no luck. Maybe my memory was bad.

I very recently found the JakeWins, FindBTC, Github program to search hard drives that have seen better days. I get my computer programmer friend involved and we run FindBTC on Debian Linux. In 2009, I was using a WD 36GB Raptor drive made in 2004. At 73% of the way into the scan it hits a possible wallet.dat file trace.

The possible wallet.dat file is seperated into four parts. FindBTC gives byte offset numbers where the file exists. We use sector editor to open each wallet file in linux. In wallet file 3, if gives the install location C:/Users/.../start menu/bitcoin/wallet.dat. Appearing to confirm that Bitcoin was installed.

The problem is many years ago, I deleted the Users file on this hard drive.

Questions/Help:
1. What type of wording or language is contained in wallet.dat file from 2009?
2. Using sector editor to read the file, can I locate the address within the file?
3. How large should wallet.dat file be typically from 2009?
4. Any programs to recover a deleted Users file from Windows 7.
5. Any programs exist to recover deleted wallet.dat file.

Please see attached images.

Pages: [1]
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!