Bitcoin Forum
April 25, 2024, 12:18:02 PM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: « 1 2 3 [4]  All
  Print  
Author Topic: Bitcoin-QT Core Problem - Keypool 100 transactions limi - Reward for help: 2 BTC  (Read 5185 times)
HI-TEC99
Legendary
*
Offline Offline

Activity: 2772
Merit: 2846



View Profile
January 27, 2017, 02:02:05 AM
Last edit: March 31, 2017, 04:14:39 PM by HI-TEC99
 #61

If I didn't find the public address using this method, no other way I could get it?



You could try using a hex editor to do a sector-by-sector search of your hard drive for these bytes

01 03 6B 65 79 41 04

For each occurrence of those bytes you can find there is probably a Bitcoin private key nearby.

This is a hex editor with a suitable search function for a Mac. Its sourceforge files also include Windows and Linux versions.

https://sourceforge.net/projects/wxhexeditor/files/wxHexEditor/v0.23%20Beta/wxHexEditor-v0.23-MacIntel.dmg/download

This quote gives more detailed instructions, and the thread it's from might be worth reading.

I have been doing some tinkering around, thinking about other people's wallet disasters, and believe I have come to the following conclusion...

If you have lost your wallet.dat for whatever reason (deleted it, formatted your drive, file corruption, etc.) it's possible that it may still be lurking on your computer.  If so, recovery is no longer purely theoretical.  With a little knowledge of what to search for, you can use a hex editor to potentially find usable remnants of your wallet.dat file and get back your bitcoins, even if the original file isn't fully recoverable.

So here goes...

If you can use a hex-editor to do a sector-by-sector search/edit on your entire hard drive, then search your entire hard drive for occurrences of the following byte sequence:

01 03 6B 65 79 41 04...........

the middle four of these bytes represent the string "keyA" in ASCII.

Each time this byte sequence occurs, a Bitcoin private key is probably stored nearby, about 180 bytes later.  The 32-byte private key is the only thing you need to recover your bitcoins!... as long as you find the right one(s).

Approximately 180 bytes after this sequence, you may find the byte sequence 04 20 (hex).  These two bytes seem to precede every private key (the 0x20 suggests a length of 32 bytes).  If you find this sequence, the thirty-two bytes that come after 04 20 are the private key representing a Bitcoin address and might be the private key that recovers some of your lost bitcoins!  Your wallet will have numerous private keys (at least one hundred, due to the pre-allocation of keys)... get as many as you can find.  Carefully search the sectors adjacent to any sector containing the "keyA" sequence above.  Then yell for help!  (But don't share the private keys in public, unless you want to give away your wallet.)

An example of a hex editor that can scan an entire disk volume for specific byte sequences for Windows is WinHex.  In WinHex, use Tools, Open Disk (F9), and choose the disk you want to scan.  Scanning a full disk can take hours.  WinHex must "run as administrator" to be able to scan a physical disk.  Someone please recommend a good way to do this in Linux, preferably with a known Live CD, if possible.  Also, any time you are scanning a disk for potentially lost data, you should NEVER boot the disk you're searching - always boot from another disk and install the target disk as secondary.
1714047482
Hero Member
*
Offline Offline

Posts: 1714047482

View Profile Personal Message (Offline)

Ignore
1714047482
Reply with quote  #2

1714047482
Report to moderator
1714047482
Hero Member
*
Offline Offline

Posts: 1714047482

View Profile Personal Message (Offline)

Ignore
1714047482
Reply with quote  #2

1714047482
Report to moderator
You can see the statistics of your reports to moderators on the "Report to moderator" pages.
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
1714047482
Hero Member
*
Offline Offline

Posts: 1714047482

View Profile Personal Message (Offline)

Ignore
1714047482
Reply with quote  #2

1714047482
Report to moderator
1714047482
Hero Member
*
Offline Offline

Posts: 1714047482

View Profile Personal Message (Offline)

Ignore
1714047482
Reply with quote  #2

1714047482
Report to moderator
jackjack
Legendary
*
Offline Offline

Activity: 1176
Merit: 1233


May Bitcoin be touched by his Noodly Appendage


View Profile
January 27, 2017, 08:22:49 AM
Last edit: January 27, 2017, 08:46:55 AM by jackjack
 #62

Yes 5862 is the total number of addresses found in the HDD
I think you won't be able to find anything more than these 5862 keys because pywallet uses a loose criterium to find keys
It drops to 965 ("Importing key 965/965") because there are duplicates, maybe you made copies of your wallets
The 13 remaining keys are either from a wallet with a different passphrase (only 13 keys is really odd though), corrupted keys because of rewriting, or not keys at all (false positives)

If you are 100% sure your address isn't in the recovered wallet I think there's not much left to try :-(
You can try the software above but pywallet does the same thing
One last question, does the recovered wallet contains the paying address, 1NJm35r6oFU3ttoUoZnqZ1nnwCH3DEbdVz?


Own address: 19QkqAza7BHFTuoz9N8UQkryP4E9jHo4N3 - Pywallet support: 1AQDfx22pKGgXnUZFL1e4UKos3QqvRzNh5 - Bitcointalk++ script support: 1Pxeccscj1ygseTdSV1qUqQCanp2B2NMM2
Pywallet: instructions. Encrypted wallet support, export/import keys/addresses, backup wallets, export/import CSV data from/into wallet, merge wallets, delete/import addresses and transactions, recover altcoins sent to bitcoin addresses, sign/verify messages and files with Bitcoin addresses, recover deleted wallets, etc.
gloriabtc
Newbie
*
Offline Offline

Activity: 3
Merit: 0


View Profile
January 27, 2017, 01:22:52 PM
 #63

I knew on the Windows version it prints the keys.  Hoping that BitcoinNewsBR can recover something!!
Pages: « 1 2 3 [4]  All
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!