**REWARD** Help me restore my wallet!!

[LoyceV]

Let's say I got that "seed phrase", what can I do with that?

Install Electrum > create a New wallet > Standard wallet > I already have a seed > Enter your seed > Next > wallet restored.

[1714678866]

1714678866

[1714678866]

1714678866

[1714678866]

1714678866

[1714678866]

1714678866

[1714678866]

1714678866

[TheBeardedBaby]

The seed is in human-readable format and all the addresses and private keys are generated from it. If you have the seed - those 12 words written, then you have what is needed to access the wallet and all those addresses with your coins.
Try to remember where did you save it. Then you don't need to look for wallet files on the old hard drive.

What LoyceV said is the way.. here it is with pictures :
https://bitcoinelectrum.com/restoring-your-standard-wallet-from-seed/

[sweetviolence]

Unafortunately I didnt remember doing such thing when I first created that wallet

And, unafortunately, there is nothing like wal, _wal, let... inside Electrum folder and anywhere else

Nothing can be done with the files I,ve been able to restore?

Thanks guys for all your help

[PawGo]

Do you have structure or only flat files? Do you have original filenames or only temporary names assigned by recovery program?
Show us the screenshot, it would be easier to tell

[sweetviolence]

Hi guys, here are some scheenshots of what I´ve been able to retrieve. These repeated Electrum folders are the same

https://i.postimg.cc/HssL9p9W/unnamed-1.png
https://i.postimg.cc/FR4rdmK4/unnamed-2.png
https://i.postimg.cc/W1gxDZqd/unnamed.png


It is possible to do something with this? REWARD pending! xD

Thanks guys

[PawGo]

Not what we are looking for...

[LoyceV]

Hi guys, here are some scheenshots of what I´ve been able to retrieve.

You're looking for the wrong file names. Try this:

looking for something like *wal* could also be a good chance to find something like, wal~ or _wal or ~wal_ I've seen a lot of variations.
Some examples to try.
*wal*
*let*

[sweetviolence]

Hi guys, here are some scheenshots of what I´ve been able to retrieve.

You're looking for the wrong file names. Try this:

looking for something like *wal* could also be a good chance to find something like, wal~ or _wal or ~wal_ I've seen a lot of variations.
Some examples to try.
*wal*
*let*

Hi, I already tried that, but didnt get any good results. What software do you recommend to search for this? I have used EaseUS and Wondershre Recoverit

Thanks again!

[HCP]

Electrum stores wallet files in a folder called "wallets" that should be in the same location as the "blockchain_headers", "config" and "recent_servers" files and the "certs" folder as shown in your screenshot here:



If your recovery software does not show the "wallets" folder, then you're likely out of luck

Does your recovery software only allow searching for file names etc? Or does it show a full list of all recoverable files/folders on the drive?

[TheBeardedBaby]

Let me give you another idea. Maybe you will find some unknown files with no name or some gibberish for name which can also be a wallet files.
What you need to do is to sort out all the files and open each on of them to check their source code.
It's simple, you drag the file directly in Notepad and if the source of the file begins with those charachters >

Code:

QklFMQN

then you might be lucky. All the Electrum wallet files start with QklFMQN (I tested this on a differnt wallet files).
This will be your only clue to find out if you still have the wallet file or not.

Check all the .txt files and pictures for the seed. It's a 12 word seed.

Good luck in recovering those coins.

[HCP]

All the Electrum wallet files start with QklFMQN (I tested this on a differnt wallet files).

NOTE: Only fully encrypted wallet files start like this... wallet file with no password and wallet files that are "password-protected" but do not use the "Encrypt Wallet File" option just look like standard, plaintext JSON files.

A "password protected" wallet file is created if this box is not checked during the setting of the wallet file password:



Also, wallet encryption was only added in version 2.8.0 - March 2017

# Release 2.8.0 (March 9, 2017)
  * Wallet file encryption using ECIES: A keypair is derived from the
    wallet password. Once the wallet is decrypted, only the public key
    is retained in memory, in order to save the encrypted file.

NOTE: The password-protected, but not fully encrypted files, still have the private keys and seeds etc stored as encrypted text withiin the plaintext wallet file.

[TheBeardedBaby]

All the Electrum wallet files start with QklFMQN (I tested this on a differnt wallet files).

NOTE: Only fully encrypted wallet files start like this... wallet file with no password and wallet files that are "password-protected" but do not use the "Encrypt Wallet File" option just look like standard, plaintext JSON files.

A "password protected" wallet file is created if this box is not checked during the setting of the wallet file password:



Also, wallet encryption was only added in version 2.8.0 - March 2017

# Release 2.8.0 (March 9, 2017)
  * Wallet file encryption using ECIES: A keypair is derived from the
    wallet password. Once the wallet is decrypted, only the public key
    is retained in memory, in order to save the encrypted file.

NOTE: The password-protected, but not fully encrypted files, still have the private keys and seeds etc stored as encrypted text withiin the plaintext wallet file.

That's a good point, I actually never created unencrypted wallet, and it should be a common sense te encrypt and protect your funds with a password.
So my previouse suggestion is not an option here if the encryption of the wallet was introduced in 2017 no point to search for it.

[sweetviolence]

Hi guys! Thanks again for all the help

I just realized I've got PLENTY of *.dat and *.txt files!

Any suggestion of what filenames I should look for? (Instead of _wal or something like that wich I've already tried)
Also, the seed phrase could be a picture as someone has suggested?

Wich filename should have? It should be stored as well inside Electrum folder?

Feeling like there is something I could do!

Thanks guys!

[BlackHatCoiner]

I just realized I've got PLENTY of *.dat and *.txt files!

Do you mean the files from Electrum\wallets? Because if you do:
Copy all of these on your main computer where they can be opened and read. This is how a wallet file will look like on a notepad:



The seed phrase will be on the bottom. Although, these files don't have an extension. From what folder did you find those?

[Btcspot]

 Hi try searching for wallet.dat and passwords in .txt or things like .jpg file inside of them. Some may have 12 word phrase. Hope it helps and i could get reward. When you use the restore it program you should for all types of data.
 Thanks

[fwman]

Did you find the wallet file OP? If not try the following:

1- Download and execute “HDD raw copy tool” for copying your entire HDD to a raw image file to your another HDD.
2- Download scalpel2 for Windows.
3- Set the config file for scalpel as following(you should change the scalpel.conf for this purpose):
NONE     y       400       "seed": "
4- Run scalpel the_image_file_path -o output_file_path

If you didn’t encrypt the seed by password and didn’t corrupt, you can most probably find the seed.

[TheBeardedBaby]

Hi guys! Thanks again for all the help

I just realized I've got PLENTY of *.dat and *.txt files!

Any suggestion of what filenames I should look for? (Instead of _wal or something like that wich I've already tried)
Also, the seed phrase could be a picture as someone has suggested?

Wich filename should have? It should be stored as well inside Electrum folder?

Feeling like there is something I could do!

Thanks guys!

In the process of creating a new wallet, there is a very important step. When you decide what type of wallet you want to create, the next step is to backup your seed. This step is required by Electrum to be able to proceed further with the creation of the wallet.

You need to note somewhere the 12 words seed displayed below in the correct order and then repeat them to confirm that you have backed them up.



That's why I told you that you may be saved the seed in a text file or took a picture. This, of course, is a bad securty practice.

[sweetviolence]

Hi guys, thanks again for helping me out

I thought that the seed phrase could be stored in the HDD somewhere as well

Almost sure that if the version of electrum I used required the seed phrase, I did something like Next/Next/Next/Accept  (yeh, I didnt care much back then)

Surely I didnt write it down or took a screenshot or summin.

Unafortunately I wasnt able to restore any wallet file/folder...

I'll try to run scalpel and I let you know the result guys.

Thanks a lot

[TheBeardedBaby]

Hi guys, thanks again for helping me out

I thought that the seed phrase could be stored in the HDD somewhere as well

Almost sure that if the version of electrum I used required the seed phrase, I did something like Next/Next/Next/Accept  (yeh, I didnt care much back then)

Surely I didnt write it down or took a screenshot or summin.

Unafortunately I wasnt able to restore any wallet file/folder...

I'll try to run scalpel and I let you know the result guys.

Thanks a lot

You cannot copy/paste the seed, you literally have to type it in but probably you didn't save the file.
Go make a new installation of electrum, if you haven't done it already, and see if it will ring any bell

Another idea, copy all your recovered files in one folder and use some of these tools to find a specific phrase.  
You can search for "addresses" for example and see what results you gonna get.

https://helpdeskgeek.com/how-to/search-inside-multiple-text-files-at-once/

[sweetviolence]

Hey man, thanks again for replying

Yep, I did install again electrum, and what happens is that it suggest you a default (I suppose randomly generated) seed phrase

That why I said I likely did Next/Next/Accept?Yes to all shit xD

Will try your new suggestion as well, and this scalpel stuff. (requires time copying stuff)

Thanks again!

PS: What pisses me off is that I have Electrum folder with stuff inside, but not wallet folder. Why? Because that specified memory were deleted in the format but not adjacent files/folders?  Did I move this folder somewhere else? Dont think so. The electrum version I was using did work the same way like the current one? No clue. Anyway, we keep going!