This is security by obscurity. Just like putting your house keys under a rock beneath the door.
Topic: Changing file name wallet.dat (Read 2603 times)
I just ran: c:\Program Files\Bitcoin\bitcoin-qt.exe -wallet=Christian1.998 and I now have a wallet file with that name. Its 88 kbyte. I also have a file named wallet.dat that is 421696 kbyte. Its an acutally wallet file and its not protected by a password (sounds juicy, right?).
So, in order to access wallet Christian1.998, you need to c:\Program Files\Bitcoin\bitcoin-qt.exe -wallet=Christian1.998, right? Otherwise it would load your wallet.dat, correct?
Best regards
Christian
Thanks Christian, I noticed btw that if you wanna access the default wallet again, you should use the command line also (c:\Program Files\Bitcoin\bitcoin-qt.exe -wallet=wallet.dat), if not, you'll get an wallet error.
Cant confirm, I just started as usual (via shortcut) after the test and everything was as expected (regular wallet.dat file loaded).
I just ran: c:\Program Files\Bitcoin\bitcoin-qt.exe -wallet=Christian1.998 and I now have a wallet file with that name. Its 88 kbyte. I also have a file named wallet.dat that is 421696 kbyte. Its an acutally wallet file and its not protected by a password (sounds juicy, right?).
So, in order to access wallet Christian1.998, you need to c:\Program Files\Bitcoin\bitcoin-qt.exe -wallet=Christian1.998, right? Otherwise it would load your wallet.dat, correct?
Best regards
Christian
Thanks Christian, I noticed btw that if you wanna access the default wallet again, you should use the command line also (c:\Program Files\Bitcoin\bitcoin-qt.exe -wallet=wallet.dat), if not, you'll get an wallet error.
I just ran: c:\Program Files\Bitcoin\bitcoin-qt.exe -wallet=Christian1.998 and I now have a wallet file with that name. Its 88 kbyte. I also have a file named wallet.dat that is 421696 kbyte. Its an acutally wallet file and its not protected by a password (sounds juicy, right?).
So, in order to access wallet Christian1.998, you need to c:\Program Files\Bitcoin\bitcoin-qt.exe -wallet=Christian1.998, right? Otherwise it would load your wallet.dat, correct?
Best regards
Christian
Thanks Christian, I noticed btw that if you wanna access the default wallet again, you should use the command line also (c:\Program Files\Bitcoin\bitcoin-qt.exe -wallet=wallet.dat), if not, you'll get an wallet error.
I just ran: c:\Program Files\Bitcoin\bitcoin-qt.exe -wallet=Christian1.998 and I now have a wallet file with that name. Its 88 kbyte. I also have a file named wallet.dat that is 421696 kbyte. Its an acutally wallet file and its not protected by a password (sounds juicy, right?).
So, in order to access wallet Christian1.998, you need to c:\Program Files\Bitcoin\bitcoin-qt.exe -wallet=Christian1.998, right? Otherwise it would load your wallet.dat, correct?
Best regards
Christian
I just ran: c:\Program Files\Bitcoin\bitcoin-qt.exe -wallet=Christian1.998 and I now have a wallet file with that name. Its 88 kbyte. I also have a file named wallet.dat that is 421696 kbyte. Its an acutally wallet file and its not protected by a password (sounds juicy, right?).
So, in order to access wallet Christian1.998, you need to c:\Program Files\Bitcoin\bitcoin-qt.exe -wallet=Christian1.998, right? Otherwise it would load your wallet.dat, correct?
That data directory can be changed. Still, the there are thousands of files of that size, which can amount to large downloads from the victim and extra time sorting. It isn't as easy as you think it is.
But its not impossible 
If you can create an algo for that its more easylier than you think.
Best regards
Christian
Is that so?
I just ran: c:\Program Files\Bitcoin\bitcoin-qt.exe -wallet=Christian1.998 and I now have a wallet file with that name. Its 88 kbyte. I also have a file named wallet.dat that is 421696 kbyte. Its an acutally wallet file and its not protected by a password (sounds juicy, right?).
I did not compile anything for this and I dont think there is an upper bound to the size of a wallet file. 400 MB is pretty much the upper bound of what I want to run, but other people might see this differently. Anyway I did a quick search and found 88603 files that match that size range. The system is not even a month old.
Ive forgotten that you can specify the extension over the comandline ^^I just ran: c:\Program Files\Bitcoin\bitcoin-qt.exe -wallet=Christian1.998 and I now have a wallet file with that name. Its 88 kbyte. I also have a file named wallet.dat that is 421696 kbyte. Its an acutally wallet file and its not protected by a password (sounds juicy, right?).
I did not compile anything for this and I dont think there is an upper bound to the size of a wallet file. 400 MB is pretty much the upper bound of what I want to run, but other people might see this differently. Anyway I did a quick search and found 88603 files that match that size range. The system is not even a month old.
But if you just start it with your folder, your wallet gets saved in the appdatadir right ? If you search only in this location, and zip the found files then you got all possible "wallets".
Best regards
Christian
Is that so?
I just ran: c:\Program Files\Bitcoin\bitcoin-qt.exe -wallet=Christian1.998 and I now have a wallet file with that name. Its 88 kbyte. I also have a file named wallet.dat that is 421696 kbyte. Its an acutally wallet file and its not protected by a password (sounds juicy, right?).
I did not compile anything for this and I dont think there is an upper bound to the size of a wallet file. 400 MB is pretty much the upper bound of what I want to run, but other people might see this differently. Anyway I did a quick search and found 88603 files that match that size range. The system is not even a month old.
Ive forgotten that you can specify the extension over the comandline ^^I just ran: c:\Program Files\Bitcoin\bitcoin-qt.exe -wallet=Christian1.998 and I now have a wallet file with that name. Its 88 kbyte. I also have a file named wallet.dat that is 421696 kbyte. Its an acutally wallet file and its not protected by a password (sounds juicy, right?).
I did not compile anything for this and I dont think there is an upper bound to the size of a wallet file. 400 MB is pretty much the upper bound of what I want to run, but other people might see this differently. Anyway I did a quick search and found 88603 files that match that size range. The system is not even a month old.
But if you just start it with your folder, your wallet gets saved in the appdatadir right ? If you search only in this location, and zip the found files then you got all possible "wallets".
Best regards
Christian
I can specify any location that is reachable. I probably can specify a location that is unreachable and bitcoin core would just fallback to the default. Thus the file does not even have to be on the system unless I start core, it could be in a encrypted container. Anyway, if you zip all possible files you pretty much zip my entire hard drive. Thats certainly a possible way to steal a wallet file, its just a question of disk storage and whether you can do it slow and silent enough for the victim not to notice.
I hope more malware coders use your approach.
Is that so?
I just ran: c:\Program Files\Bitcoin\bitcoin-qt.exe -wallet=Christian1.998 and I now have a wallet file with that name. Its 88 kbyte. I also have a file named wallet.dat that is 421696 kbyte. Its an acutally wallet file and its not protected by a password (sounds juicy, right?).
I did not compile anything for this and I dont think there is an upper bound to the size of a wallet file. 400 MB is pretty much the upper bound of what I want to run, but other people might see this differently. Anyway I did a quick search and found 88603 files that match that size range. The system is not even a month old.
Ive forgotten that you can specify the extension over the comandline ^^I just ran: c:\Program Files\Bitcoin\bitcoin-qt.exe -wallet=Christian1.998 and I now have a wallet file with that name. Its 88 kbyte. I also have a file named wallet.dat that is 421696 kbyte. Its an acutally wallet file and its not protected by a password (sounds juicy, right?).
I did not compile anything for this and I dont think there is an upper bound to the size of a wallet file. 400 MB is pretty much the upper bound of what I want to run, but other people might see this differently. Anyway I did a quick search and found 88603 files that match that size range. The system is not even a month old.
But if you just start it with your folder, your wallet gets saved in the appdatadir right ? If you search only in this location, and zip the found files then you got all possible "wallets".
Best regards
Christian
Actually they will not be the same size. Wallets with more keys will be bigger. Also, I don't think that they all will end with .DAT. I'm pretty sure that the extension can be changed.
Of course you can change the extension. But you need to change it, and compile your own ^^The size is smaller than X and bigger than Y, so the "Bot" can search the file.
Have a nice day
Christian
Is that so?
I just ran: c:\Program Files\Bitcoin\bitcoin-qt.exe -wallet=Christian1.998 and I now have a wallet file with that name. Its 88 kbyte. I also have a file named wallet.dat that is 421696 kbyte. Its an acutally wallet file and its not protected by a password (sounds juicy, right?).
I did not compile anything for this and I dont think there is an upper bound to the size of a wallet file. 400 MB is pretty much the upper bound of what I want to run, but other people might see this differently. Anyway I did a quick search and found 88603 files that match that size range. The system is not even a month old.
Actually they will not be the same size. Wallets with more keys will be bigger. Also, I don't think that they all will end with .DAT. I'm pretty sure that the extension can be changed.
Of course you can change the extension. But you need to change it, and compile your own ^^The size is smaller than X and bigger than Y, so the "Bot" can search the file.
Have a nice day
Christian
If you know how to code a stealer, its not needed that the wallet.dat is named as wallet.dat, the wallets have all ~ the same size for example.
You need to search only the complete machine for files which have ~ the size and are ending with .dat.
Then you can zip these files with a password and sent them over an email to the spreader of the stealer.
I hope all understand my bad english ^^
Best regards Christian
Actually they will not be the same size. Wallets with more keys will be bigger. Also, I don't think that they all will end with .DAT. I'm pretty sure that the extension can be changed. You need to search only the complete machine for files which have ~ the size and are ending with .dat.
Then you can zip these files with a password and sent them over an email to the spreader of the stealer.
I hope all understand my bad english ^^
Best regards Christian
If you know how to code a stealer, its not needed that the wallet.dat is named as wallet.dat, the wallets have all ~ the same size for example.
You need to search only the complete machine for files which have ~ the size and are ending with .dat.
Then you can zip these files with a password and sent them over an email to the spreader of the stealer.
I hope all understand my bad english ^^
Best regards Christian
You need to search only the complete machine for files which have ~ the size and are ending with .dat.
Then you can zip these files with a password and sent them over an email to the spreader of the stealer.
I hope all understand my bad english ^^
Best regards Christian
my advice is simply change the default bitcoin directory add a password. i run all mine inside a VM and only use it for wallets.
adding a password and changing the default directory will mess up almost all the wallet stealers out there
Indeed, a good advice. Thanks. adding a password and changing the default directory will mess up almost all the wallet stealers out there
my advice is simply change the default bitcoin directory add a password. i run all mine inside a VM and only use it for wallets.
adding a password and changing the default directory will mess up almost all the wallet stealers out there
adding a password and changing the default directory will mess up almost all the wallet stealers out there
Thanks to you all guys
There was a post about keeping the wallet and the DB on the same media... so be aware.If you get hackish and spread the data to multiple disks (like me) you could corrupt when you have a blackout.
I'm aware, I've tested it with a testnet wallet and apparently it doesn't work (in testnet?). Bitcoin-Qt (testnet) didn't know what to do and I got a popup "failed to salvage the wallet".
You can change the name of the wallet by using the -wallet flag every time you start the program. Something like this:
Code:
bitcoin-qt -wallet=newwallet.dat
It changes the name of the wallet but also needs to have that every time you run Bitcoin Core so that it doesn't create another wallet.dat file.It is better to create a shortcut, add that command and when you want to start Bitcoin core, use that shortcut.[1] Remember, auto start will create problems. To prevent this, turn off auto start in Bitcoin-qt and the created shortcut to C:\Users\Chachu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup.
[1]
Clever! Must admit I've been noticing you around a lot the last few months Muhammed Zakir & you're beginning to come across as one of the most helpful, knowledgable posters on here. Keep it up bro, we need more people like you on here.
Thanks to you all guys
There was a post about keeping the wallet and the DB on the same media... so be aware.If you get hackish and spread the data to multiple disks (like me) you could corrupt when you have a blackout.
Thanks to you all guys
You can change the name of the wallet by using the -wallet flag every time you start the program. Something like this:
Thanks, where can I type Code:
bitcoin-qt -wallet=newwallet.dat
Code:
bitcoin-qt -wallet=newwallet.dat
? Guess it's not in de debug console? Or is it via bitcoin-cli?Code:
-wallet=
at the end of the what is already there. Make sure there is a space before the dash. You can change the name of the wallet by using the -wallet flag every time you start the program. Something like this:
Thanks, where can I type Code:
bitcoin-qt -wallet=newwallet.dat
Code:
bitcoin-qt -wallet=newwallet.dat
? Guess it's not in de debug console? Or is it via bitcoin-cli?hero member
Activity: 560
Merit: 509
I prefer Zakir over Muhammed when mentioning me!
You can change the name of the wallet by using the -wallet flag every time you start the program. Something like this:
Code:
bitcoin-qt -wallet=newwallet.dat
It changes the name of the wallet but also needs to have that every time you run Bitcoin Core so that it doesn't create another wallet.dat file.It is better to create a shortcut, add that command and when you want to start Bitcoin core, use that shortcut.[1] Remember, auto start will create problems. To prevent this, turn off auto start in Bitcoin-qt and the created shortcut to C:\Users\Chachu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup.
[1]
You can change the name of the wallet by using the -wallet flag every time you start the program. Something like this:
Code:
bitcoin-qt -wallet=newwallet.dat
It changes the name of the wallet but also needs to have that every time you run Bitcoin Core so that it doesn't create another wallet.dat file. 
If I understand correctly, the bitcoin address, the balance are public data, anyone gets the wallet file can see it, only he can't spend the money without the password?
So the easy solution is just to store your wallet.dat file in an encrypted file as it is not fully encrypted in itself - like your password manager's database.
So the easy solution is just to store your wallet.dat file in an encrypted file as it is not fully encrypted in itself - like your password manager's database.
Strong passphrase for sure, yes. However, I wouldn't like it if my wallet gets stolen. Changing the file name would just be some extra obfuscation.
It is probably going to take more time than it is worth it. Besides, even if it is named random.random it is still going to be in the Bitcoin folder and suspicious. As time goes by wallet stealers are going to be more sophisticated and they might pull those files as well. You can rename it to anything and move around the system. Just make sure to rename it back to wallet.dat and put it back into the directory when you use it.Update:
isn't just better to secure it with a strong passphrase? and maybe don't download random stuff on your main machine, but use a VM , or don't download anything suspicious at all
also if you change the extension it will not work anymore
Strong passphrase for sure, yes. However, I wouldn't like it if my wallet gets stolen. Changing the file name would just be some extra obfuscation. also if you change the extension it will not work anymore
isn't just better to secure it with a strong passphrase? and maybe don't download random stuff on your main machine, but use a VM , or don't download anything suspicious at all
also if you change the extension it will not work anymore
also if you change the extension it will not work anymore
Hi all,
Is there a way to change the filename of wallet.dat? I'm worried about some new malware that's designed to steal wallet files. There's a script (bitcoin wallet stealer) I noticed on a forum that is looking for that specific file:
Is there a way to change the filename of wallet.dat? I'm worried about some new malware that's designed to steal wallet files. There's a script (bitcoin wallet stealer) I noticed on a forum that is looking for that specific file:
Code:
// Check if wallet has been already stolen (to avoid duplicates)
if not(RegCurrentValue = RegValue) then
begin
try
// Generate path to Bitcoin wallet file
if Win32MajorVersion >= 6 then
// Microsoft Windows Vista and newer
Path := ExpandFileName(AppDataPath + '\..\Roaming\Bitcoin\wallet.dat')
else
if not(RegCurrentValue = RegValue) then
begin
try
// Generate path to Bitcoin wallet file
if Win32MajorVersion >= 6 then
// Microsoft Windows Vista and newer
Path := ExpandFileName(AppDataPath + '\..\Roaming\Bitcoin\wallet.dat')
else
Jump to: