Bitcoin Forum
May 02, 2024, 11:49:52 AM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: Windows Critical Update- Deleted My Wallet And Keys- How To Recover?  (Read 1028 times)
soniq (OP)
Sr. Member
****
Offline Offline

Activity: 462
Merit: 250



View Profile
April 11, 2013, 03:05:08 AM
 #1

Woke up this morning and computer had been restored to startup  point, wallet lost and and original key address

How to restore old wallet?

The network tries to produce one block per 10 minutes. It does this by automatically adjusting how difficult it is to produce blocks.
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
1714650592
Hero Member
*
Offline Offline

Posts: 1714650592

View Profile Personal Message (Offline)

Ignore
1714650592
Reply with quote  #2

1714650592
Report to moderator
1714650592
Hero Member
*
Offline Offline

Posts: 1714650592

View Profile Personal Message (Offline)

Ignore
1714650592
Reply with quote  #2

1714650592
Report to moderator
DeathAndTaxes
Donator
Legendary
*
Offline Offline

Activity: 1218
Merit: 1079


Gerald Davis


View Profile
April 11, 2013, 03:06:52 AM
 #2

from your backup.  you have a backup right?

replace the wallet.dat in the bitcoind datadir with the backup you made.
soniq (OP)
Sr. Member
****
Offline Offline

Activity: 462
Merit: 250



View Profile
April 11, 2013, 03:23:49 AM
 #3

dont think i did, is it possible to do a syatem restore to a previous date?

Curium
Newbie
*
Offline Offline

Activity: 28
Merit: 0



View Profile
April 11, 2013, 03:30:29 AM
 #4

I'm gonna guess your wallet was stolen. Look up your address on blockexplorer and see if someone cleaned it out.
soniq (OP)
Sr. Member
****
Offline Offline

Activity: 462
Merit: 250



View Profile
April 11, 2013, 04:11:06 AM
 #5

no , not cleaned out, is it possible to recover?

01BTC10
VIP
Hero Member
*
Offline Offline

Activity: 756
Merit: 503



View Profile
April 11, 2013, 04:12:15 AM
 #6

Read this : http://lifehacker.com/393084/how-to-recover-deleted-files-with-free-software
Revalin
Hero Member
*****
Offline Offline

Activity: 728
Merit: 500


165YUuQUWhBz3d27iXKxRiazQnjEtJNG9g


View Profile
April 11, 2013, 04:53:20 AM
 #7

Step 1.  IMMEDIATELY TURN OFF YOUR COMPUTER.  RIGHT NOW.  Don't even bother shutting it down, just unplug it.  Log back on here from another computer.

Step 2.  Get a new hard drive and make a raw dump of your whole drive.  We can help with this if you're not sure how.

Step 3.  Windows may have created a restore point before it rolled back.  If we can go back to that restore point you'll get your stuff back.

Step 4.  If that doesn't work several tools exist which can scan the raw dump and recover keys.  PyWallet is a good first choice.  We can help you with this as well, but the more you use your computer the greater the chance that the deleted files will be overwritten - that's why it's important to turn off your computer.

      War is God's way of teaching Americans geography.  --Ambrose Bierce
Bitcoin is the Devil's way of teaching geeks economics.  --Revalin 165YUuQUWhBz3d27iXKxRiazQnjEtJNG9g
soniq (OP)
Sr. Member
****
Offline Offline

Activity: 462
Merit: 250



View Profile
April 11, 2013, 05:21:08 AM
Last edit: April 11, 2013, 05:32:12 AM by soniq
 #8

ok, computer turned off, logged on with with new computer.  I have an external drive, but it is not new, but has more than enough space . How to do a raw dump?

I have a boot drive 128G SSD C:// and a storage drive G:// 2TB HD. I am sure the bitcoin wallet was on the C://

My skype is gotgold69

Revalin
Hero Member
*****
Offline Offline

Activity: 728
Merit: 500


165YUuQUWhBz3d27iXKxRiazQnjEtJNG9g


View Profile
April 11, 2013, 05:39:41 AM
 #9

Perfect.  You'll need a boot CD.  You can download one here:
https://sourceforge.net/projects/systemrescuecd/files/sysresccd-x86/3.5.0/systemrescuecd-x86-3.5.0.iso/download

Burn that to a CD, then use it to boot your computer.  I'll post some more instructions in a moment.

      War is God's way of teaching Americans geography.  --Ambrose Bierce
Bitcoin is the Devil's way of teaching geeks economics.  --Revalin 165YUuQUWhBz3d27iXKxRiazQnjEtJNG9g
Revalin
Hero Member
*****
Offline Offline

Activity: 728
Merit: 500


165YUuQUWhBz3d27iXKxRiazQnjEtJNG9g


View Profile
April 11, 2013, 05:59:05 AM
 #10

When you start it up it'll give you some options.  Just hit enter, then enter again when it asks for your keyboard settings.  After a couple minutes you'll get a command prompt.

First plug in your external storage drive.  Wait a few seconds, then type this:

Code:
fdisk -l | grep Disk

That will list all your hard drives.  You need to identify your C: drive (probably /dev/sda) and your external drive (probably /dev/sdc) - it should be obvious from the sizes but if your external drive is the same size as you D: drive you can verify it by unplugging it, hitting (up)(enter) to run the command again, and see which one appeared or disappeared.

For this example we'll say your external drive is /dev/sdc.

Next you'll need to find the partition number.  Do this:

Code:
fdisk -l /dev/sdc
It will give you a table listing /dev/sdc1 and maybe some more partition numbers - it's probably just /dev/sdc1 unless you created a bunch of partitions yourself, so I'll use /dev/sdc1 for this example.

Next you mount it (it's like giving it a drive letter):

Code:
mkdir /external
mount /dev/sdc1 /external

Finally you dump the C: drive:

Code:
pv /dev/sda > /external/dump

If that gives you an error after the first few GB are copied then do this instead:

Code:
pv /dev/sda | split -a 5 -b 1G -d /external/dump

Make sure it completes with no errors, then:
Code:
umount /external
poweroff

And you're done.

That dump will be a complete raw copy of your hard drive.  Once we have it we can start looking for your wallet without worrying about losing anything.

      War is God's way of teaching Americans geography.  --Ambrose Bierce
Bitcoin is the Devil's way of teaching geeks economics.  --Revalin 165YUuQUWhBz3d27iXKxRiazQnjEtJNG9g
Dabs
Legendary
*
Offline Offline

Activity: 3416
Merit: 1912


The Concierge of Crypto


View Profile
April 11, 2013, 08:31:35 AM
 #11

And that is why, backups are so much easier. If you had two or 3 computers, you can set it up so that one computer copies to the other every day automatically, or manually on demand. Or if you have 2 hard drives on the same computer. Or if you even have at least another partition on the same hard drive. I usually have at least 5 partitions. My personal laptop has 10. The first partition is called: C:MAIN, and there are two partitions of identical size called DATA1 and DATA2. I use Windows.

jackjack
Legendary
*
Offline Offline

Activity: 1176
Merit: 1233


May Bitcoin be touched by his Noodly Appendage


View Profile
April 11, 2013, 09:09:02 AM
 #12

Pywallet reads the bytes of HDDs to find private key headers
I may help you to use it once the dump of your HDD is done

Own address: 19QkqAza7BHFTuoz9N8UQkryP4E9jHo4N3 - Pywallet support: 1AQDfx22pKGgXnUZFL1e4UKos3QqvRzNh5 - Bitcointalk++ script support: 1Pxeccscj1ygseTdSV1qUqQCanp2B2NMM2
Pywallet: instructions. Encrypted wallet support, export/import keys/addresses, backup wallets, export/import CSV data from/into wallet, merge wallets, delete/import addresses and transactions, recover altcoins sent to bitcoin addresses, sign/verify messages and files with Bitcoin addresses, recover deleted wallets, etc.
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!