Please help | Bitcointalksearch.org

SM23031997

hero member

Activity: 1092

Merit: 582

Quote from: Kuw on October 09, 2017, 11:34:42 AM

Do i need to upload all private keys to see the balance !

Wait, a solution for you.
Remove all the private keys(keep a copy for yourself as backup) from their and send me all the BTC address, I can check them for balance with my bitcoin checking tool. Let's see how lucky or unlucky you are today. won't take more than 3-5 minutes.

Kuw

member

Activity: 70

Merit: 10

Quote from: SM23031997 on October 09, 2017, 10:16:41 AM

Quote from: Kuw on October 09, 2017, 09:25:31 AM

After i add all private key. What i do next !

Check if the electrum wallet shows any balance. If not, then the funds are stolen and you can't do anything about it, but if it shows balance then you can transfer them in a paper wallet or make an account online on web wallet like blockchain.info and transfer them there to keep them safe from hackers.

You can also tip me some BTC if I helped you - 1May3TVRzjg2cYut5Pn1uJzKFWk9MjyHNH Wink

Do i need to upload all private keys to see the balance !

SM23031997

hero member

Activity: 1092

Merit: 582

Quote from: Kuw on October 09, 2017, 09:25:31 AM

After i add all private key. What i do next !

Check if the electrum wallet shows any balance. If not, then the funds are stolen and you can't do anything about it, but if it shows balance then you can transfer them in a paper wallet or make an account online on web wallet like blockchain.info and transfer them there to keep them safe from hackers.

You can also tip me some BTC if I helped you - 1May3TVRzjg2cYut5Pn1uJzKFWk9MjyHNH Wink

Kuw

member

Activity: 70

Merit: 10

Quote from: mocacinno on October 09, 2017, 08:57:57 AM

Quote from: Kuw on October 09, 2017, 08:55:42 AM

lectrum frezz the stop

then not responding ?

How many private keys did you try to import at once?

Quote from: mocacinno on October 09, 2017, 08:42:18 AM

Just don't try to import more than 50 private keys into an electrum wallet at a time... From experience i know that importing +50 private keys at once might cause the import process to lag.

After i add all private key. What i do next !

Kuw

member

Activity: 70

Merit: 10

i try 50 also frez Cry

i will wait for bitcoin to syc and hope he did not have time to stole anyhing

mocacinno

legendary

Activity: 3584

Merit: 5243

https://merel.mobi => buy facemasks with BTC/LTC

Quote from: Kuw on October 09, 2017, 08:55:42 AM

lectrum frezz the stop

then not responding ?

How many private keys did you try to import at once?

Quote from: mocacinno on October 09, 2017, 08:42:18 AM

Just don't try to import more than 50 private keys into an electrum wallet at a time... From experience i know that importing +50 private keys at once might cause the import process to lag.

Kuw

member

Activity: 70

Merit: 10

lectrum frezz the stop

then not responding ?

SM23031997

hero member

Activity: 1092

Merit: 582

Quote from: Kuw on October 09, 2017, 08:31:37 AM

KzR4nP8Ybvr6PrkiSUxxxxxxxxxxxHxxxxxxxxxxx 2015-06-27T14:44:33Z change=1 # addr=1EB5xxxxxxxxxxxHxxxxxxxxxxx

date
2015 and i have also
2017 Cry

Import all the address into Electrum, to do that copy all private key and sweep them into electrum.
You can use notepad++ or other text editors to make the task easy using HTML tricks
Let me know if you need help in this regard.

mocacinno

legendary

Activity: 3584

Merit: 5243

https://merel.mobi => buy facemasks with BTC/LTC

Quote from: Kuw on October 09, 2017, 08:41:56 AM

do i need to copy all privte key ? or just one ?

all, you don't know which address was funded... So just import all private keys.
You can use notepad++ in column mode to clean up the dump file, or you can execute a macro to create a clean list of private keys.

Just don't try to import more than 50 private keys into an electrum wallet at a time... From experience i know that importing +50 private keys at once might cause the import process to lag.

Kuw

member

Activity: 70

Merit: 10

do i need to copy all privte key ? or just one ?

mocacinno

legendary

Activity: 3584

Merit: 5243

https://merel.mobi => buy facemasks with BTC/LTC

Quote from: Kuw on October 09, 2017, 08:31:37 AM

[REDACTED]xxxxxxxxxxxHxxxxxxxxxxx 2015-06-27T14:44:33Z change=1 # addr=1EB5xxxxxxxxxxxHxxxxxxxxxxx

date
2015 and i have also
2017 Cry

This command will only dump the private keys, timestamps and addresses managed by your wallet. The fact that there is a new private key added in 2017 *could* mean nothing (on the other hand, it *could* mean a change address was added, and your funds *might* have been stolen).
Just import the private keys into electrum and find out for sure...

Good luck!

BTW: i'd personally not even post part of the private key... For example, the last characters of the private key in WIF format are a checksum, so if you post the first letters, you make a hacker's life much easyer (he doesn't have to brute force those first letters, and he can just forget about the last characters to, so he only has to find the middle part of the private keys).

Kuw

member

Activity: 70

Merit: 10

KzR4nP8Ybvr6PrkiSUxxxxxxxxxxxHxxxxxxxxxxx 2015-06-27T14:44:33Z change=1 # addr=1EB5xxxxxxxxxxxHxxxxxxxxxxx

date
2015 and i have also
2017 Cry

SM23031997

hero member

Activity: 1092

Merit: 582

Quote from: Kuw on October 09, 2017, 08:20:56 AM

i did dump file
and get alot of data with address ?

Check when they are created - e.g xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx 2013-12-25T11:54:44Z reserve=1 # addr=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

mocacinno

legendary

Activity: 3584

Merit: 5243

https://merel.mobi => buy facemasks with BTC/LTC

Quote from: Kuw on October 09, 2017, 08:20:56 AM

i did dump file
and get alot of data with address ?

If it worked, the file c:\walletdump.txt should contain lines like this
[private_key] timestamp reserver=1 # addr=[address]

or for a HD wallet:
[private_key] timestamp reseve=1 addr=[address] hdkeypath=[derivation_path]

you can potentially just download electrum, create a new wallet (chose the option to create a wallet using private keys) then copy/paste the private keys into the wizard's textarea.

It doesn't matter if most of the private keys belong to a private key/public key/address that is unfunded.
PS: only do this on a clean machine
PS2: like i said before: if there are unspent outputs (if the balance > 0), make a new wallet and empty out the old one.

Kuw

member

Activity: 70

Merit: 10

i did dump file
and get alot of data with address ?

SM23031997

hero member

Activity: 1092

Merit: 582

Quote from: Kuw on October 09, 2017, 08:06:47 AM

Quote from: SM23031997 on October 09, 2017, 08:01:32 AM

Quote from: Kuw on October 09, 2017, 07:44:21 AM

Try this command, it will help you to convert wallet into human readable form only when the wallet has an address or addresses.

Code:

dumpwallet "c:\walletdump.txt"

that what say

16:06:00

dumpwallet "c:\walletdump.txt"

16:06:01

Error: Please enter the wallet passphrase with walletpassphrase first. (code -13)

You are doing something wrong it is working fine for me see

18:43:30

dumpwallet c:\walletdump.txt

18:43:31

{
"filename": "c:\\Program Files\\Bitcoin\\walletdump.txt"
}

Oh, no Please remove those quotes from there.

mocacinno

legendary

Activity: 3584

Merit: 5243

https://merel.mobi => buy facemasks with BTC/LTC

Quote from: Kuw on October 09, 2017, 08:06:47 AM

Quote from: SM23031997 on October 09, 2017, 08:01:32 AM

Quote from: Kuw on October 09, 2017, 07:44:21 AM

Try this command, it will help you to convert wallet into human readable form only when the wallet has an address or addresses.

Code:

dumpwallet "c:\walletdump.txt"

that what say

16:06:00

dumpwallet "c:\walletdump.txt"

16:06:01

Error: Please enter the wallet passphrase with walletpassphrase first. (code -13)

you encrypted your wallet... You need to unlock it before you can dump the private keys

Code:

walletpassphrase "your unlock phrase" 3600

replace "your unlock phrase" with the actual password, and 3600 by the number of seconds you want your wallet to be unlocked.
Btw, only dump your wallet on a clean, secure machine, and never ever share the content of the dumpfile, not even partially!

Kuw

member

Activity: 70

Merit: 10

Quote from: SM23031997 on October 09, 2017, 08:01:32 AM

Quote from: Kuw on October 09, 2017, 07:44:21 AM

Try this command, it will help you to convert wallet into human readable form only when the wallet has an address or addresses.

Code:

dumpwallet "c:\walletdump.txt"

that what say

16:06:00

dumpwallet "c:\walletdump.txt"

16:06:01

Error: Please enter the wallet passphrase with walletpassphrase first. (code -13)

SM23031997

hero member

Activity: 1092

Merit: 582

Quote from: Kuw on October 09, 2017, 07:44:21 AM

Try this command, it will help you to convert wallet into human readable form only when the wallet has an address or addresses.

Code:

dumpwallet "c:\walletdump.txt"

Kuw

member

Activity: 70

Merit: 10

mocacinno

legendary

Activity: 3584

Merit: 5243

https://merel.mobi => buy facemasks with BTC/LTC

Quote from: Kuw on October 09, 2017, 07:37:30 AM

can you please tell me how to but screenshot in this form Huh

??

Most people use some sort of image host like imgur or tinypic... Just create screenshots, make sure they don't display any sensitive data (like private keys, seed phrases, passwords, xprv's, passwords,...) then upload them to a free hotlink image host.
Those hotlink hosts usually even give you the BBcode you can copy/paste directly into bitcointalk.

Kuw

member

Activity: 70

Merit: 10

can you please tell me how to but screenshot in this form Huh

??

Text

hero member

Activity: 2464

Merit: 594

Quote from: SM23031997 on October 09, 2017, 07:24:59 AM

Quote from: Kuw on October 09, 2017, 07:23:27 AM

listaccounts

show nothing ?

Looks like you deleted the wrong wallet.dat file accidentally. Please share screenshots.

Right, you need to provide screenshots in order to see if you made it right or not and so they can help you to solve your problem better. You still need to wait the sync finish before appearing all the detailed transactions. Just follow they instruct you to do and let's see if you can recover your btc, hope so.

mocacinno

legendary

Activity: 3584

Merit: 5243

https://merel.mobi => buy facemasks with BTC/LTC

here are screenshots from my wallet, you should see something similar, especially if you see a balance of +12 BTC

http://www.mocacinno.com/screencaps/listaccounts.png

And the second command

http://www.mocacinno.com/screencaps/listaccounts2.png

SM23031997

hero member

Activity: 1092

Merit: 582

Quote from: Kuw on October 09, 2017, 07:23:27 AM

listaccounts

show nothing ?

Looks like you deleted the wrong wallet.dat file accidentally. Please share screenshots.

Kuw

member

Activity: 70

Merit: 10

listaccounts

show nothing ?

mocacinno

legendary

Activity: 3584

Merit: 5243

https://merel.mobi => buy facemasks with BTC/LTC

Quote from: Kuw on October 09, 2017, 07:09:35 AM

Quote from: mocacinno on October 09, 2017, 07:05:15 AM

Quote from: Kuw on October 09, 2017, 06:58:04 AM

It show in bitcoin core
Last transaction
+5.00000

+7.00000

Is that mean its still here !

If your wallet is not yet completely sync'ed, it's possible the spending transaction are not yet visible. In other words: unless your wallet is completely sync'ed, it's still possible those +12 BTC might still "disapear" when the syncing continues.

Did you read my previous question? You gave a command output, but didn't say which command you ran to get that output. Is is possible to show us which command you executed?

Both command show nothing !

So, we're talking about the commands:

Code:

listaccounts

and

Code:

getaddressesbyaccount ""

That's strange, you should see the following:

Code:

listaccounts
{
  "": x.xxxxxxxx
}

This should show you that account "" currently has a balance of x.xxxxxxxx BTC. This balance only includes unspent outputs that were found in the blocks that are currently synced. If your wallet is still syncing, the balance can be incorrect.

The second command should give you the following output;

Code:

getaddressesbyaccount ""
[
  "1xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx",
  "1yyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyy"
]

Kuw

member

Activity: 70

Merit: 10

Quote from: mocacinno on October 09, 2017, 06:54:02 AM

Quote from: Kuw on October 09, 2017, 06:51:21 AM

It show nothing. !
Just

{}

Which command did you try?

15:13:20

listaccounts

15:14:24

{
}

Kuw

member

Activity: 70

Merit: 10

Quote from: mocacinno on October 09, 2017, 07:05:15 AM

Quote from: Kuw on October 09, 2017, 06:58:04 AM

It show in bitcoin core
Last transaction
+5.00000

+7.00000

Is that mean its still here !

If your wallet is not yet completely sync'ed, it's possible the spending transaction are not yet visible. In other words: unless your wallet is completely sync'ed, it's still possible those +12 BTC might still "disapear" when the syncing continues.

Did you read my previous question? You gave a command output, but didn't say which command you ran to get that output. Is is possible to show us which command you executed?

Both command show nothing !

mocacinno

legendary

Activity: 3584

Merit: 5243

https://merel.mobi => buy facemasks with BTC/LTC

Quote from: Kuw on October 09, 2017, 06:58:04 AM

It show in bitcoin core
Last transaction
+5.00000

+7.00000

Is that mean its still here !

If your wallet is not yet completely sync'ed, it's possible the spending transaction are not yet visible. In other words: unless your wallet is completely sync'ed, it's still possible those +12 BTC might still "disapear" when the syncing continues.

Did you read my previous question? You gave a command output, but didn't say which command you ran to get that output. Is is possible to show us which command you executed?

Kuw

member

Activity: 70

Merit: 10

It show in bitcoin core
Last transaction
+5.00000

+7.00000

Is that mean its still here !

mocacinno

legendary

Activity: 3584

Merit: 5243

https://merel.mobi => buy facemasks with BTC/LTC

Quote from: Kuw on October 09, 2017, 06:51:21 AM

It show nothing. !
Just

{}

Which command did you try?

Kuw

member

Activity: 70

Merit: 10

It show nothing. !
Just

{}

mocacinno

legendary

Activity: 3584

Merit: 5243

https://merel.mobi => buy facemasks with BTC/LTC

Quote from: Kuw on October 09, 2017, 05:26:05 AM

Its rescanning when i replace the new wallet.dat with my old walled.dat
I will tell you when it’s finished.

Thanks everyone for the help.
And i delet the file wallet from Dropbox and from my laptop
And stored it in usb.

Like others have stated before me: if a hacker hacked your dropbox and downloaded your wallet.dat, it no longer matters if you delete your wallet, encrypt it, move it... If the hacker hasn't already spent your BTC, you NEED to create a new, clean, encrypted wallet using a verified wallet software like core or electrum, then you need to create a new address using this new wallet, and then you need to empty your old (possibly hacked) wallet, and never use it again...

Kuw

member

Activity: 70

Merit: 10

Its rescanning when i replace the new wallet.dat with my old walled.dat
I will tell you when it’s finished.

Thanks everyone for the help.
And i delet the file wallet from Dropbox and from my laptop
And stored it in usb.

mocacinno

legendary

Activity: 3584

Merit: 5243

https://merel.mobi => buy facemasks with BTC/LTC

Quote from: SM23031997 on October 09, 2017, 05:04:49 AM

I'm pretty sure that the wallet will not have any bitcoin in it if it has been compromised but for your satisfaction, you can try this method to check -

Open Bitcoin-Qt and click help - Debug - console and use code

Code:

listreceivedbyaddress 0 true

It will help you to get all your addresses.
Copy Easy address one by one and check on - blockchain.info/address/
If you are able to find bitcoins in any address then use this command in console -

Code:

dumpprivkey

Then Install Electrum from here https://electrum.org/ and import it to transfer bitcoins

IIRC, the "listreceivedbyaddress 0 true" command will only work AFTER the blockchain was sync'ed up to the point where the funding tx was confirmed. "getaddressesbyaccount """ will list all addresses belonging to the default account, the OP can then import these addresses as watch-only addresses in electrum, or he can look them up on an explorer.

You're right about the dumpprivkey tough... If he finds unspent outputs, it is solid advice to dump the private key, import it in electrum and spend the unspend outputs as soon as possible to fund an address generated by a new, secure wallet

SM23031997

hero member

Activity: 1092

Merit: 582

I'm pretty sure that the wallet will not have any bitcoin in it if it has been compromised but for your satisfaction, you can try this method to check -

Open Bitcoin-Qt and click help - Debug - console and use code

Code:

listreceivedbyaddress 0 true

It will help you to get all your addresses.
Copy Each address one by one and check on - blockchain.info/address/
If you are able to find bitcoins in any address then use this command in console -

Code:

dumpprivkey

Then Install Electrum from here https://electrum.org/ and import it to transfer bitcoins

mocacinno

legendary

Activity: 3584

Merit: 5243

https://merel.mobi => buy facemasks with BTC/LTC

you can list your addresses while your wallet is still syncing... Just open the debug window (or start from cli) and type

Code:

listaccounts

this should give you a list of accounts, then type

Code:

getaddressesbyaccount ""

then, you can look up these addresses on a block explorer like blockchain.info

Kuw

member

Activity: 70

Merit: 10

Its my mistake .

Where can i find the address !
All i want is to know if he stole it or not ! And if i have time
I will transfer the balance to other wallet

Thekool1s

legendary

Activity: 1512

Merit: 1218

Change is in your hands

Quote from: Kuw on October 09, 2017, 04:55:18 AM

Quote from: SM23031997 on October 09, 2017, 04:50:32 AM

If you encrypted it after a hack then I doubt it will have any btc in it. Encryption doesn't work like this. Sorry for that but most probably you lost all your bitcoins. wait, let me check if there is an easy way to do that. Until try to Upload your wallet file here although, I know they only support aes.json format - https://blockchain.info/wallet/import-wallet

The waleet.dat
Its not supported ?

Can i just open it with bitcoin abc or electrum !!!!

As far as i know the wallets don't work that way, each wallet software creates the wallet.dat file differently, you can't import a bitcoin core wallet to electrum and vice versa. So your only option is to check the address which had your 12 BTC's or just be calm and wait out the sync time.

aplistir

full member

Activity: 378

Merit: 197

Can't you import your wallet to electrum? Then you wouldn't have to wait for bitcoin core to sync.

And if you know your addresses, then you can check their balance in a block explorer, for example in blockchain.info

Kuw

member

Activity: 70

Merit: 10

Quote from: SM23031997 on October 09, 2017, 04:50:32 AM

If you encrypted it after a hack then I doubt it will have any btc in it. Encryption doesn't work like this. Sorry for that but most probably you lost all your bitcoins. wait, let me check if there is an easy way to do that. Until try to Upload your wallet file here although, I know they only support aes.json format - https://blockchain.info/wallet/import-wallet

The waleet.dat
Its not supported ?

Can i just open it with bitcoin abc or electrum !!!!

Thekool1s

legendary

Activity: 1512

Merit: 1218

Change is in your hands

I think your Bitcoins are lost, as you are saying that you encrypted your wallet after downloading it, The encryption won't magically apply on the hackers wallet file, Do you have the address on which you had 12 BTC? It's the only way to see if your bitcoins are there or not. If you don't have the address on which you received the BTCs then your only option is to wait out and let the sync complete. Also it is your fault for storing an un-encrypted version on dropbox. Never upload your wallet files online. SMDH!

SM23031997

hero member

Activity: 1092

Merit: 582

If you encrypted it after a hack then I doubt it will have any btc in it. Encryption doesn't work like this. Sorry for that but most probably you lost all your bitcoins. wait, let me check if there is an easy way to do that. Until try to Upload your wallet file here although, I know they only support aes.json format now- https://blockchain.info/wallet/import-wallet

Kuw

member

Activity: 70

Merit: 10

Quote from: SM23031997 on October 09, 2017, 04:36:47 AM

Means you have a wallet.dat file with you, If the encryption is enabled then it is quite impossible for him to crack the password of your file as it uses high sha256 iterations which makes it difficult for the hacker to crack it until the password is not too easy.

When i see that my Dropbox was hacked I download the wallet.dat
And then encrypte the wallet.dat in bitcoins core .
I open wallet.dat in bitcon core then i encrypted then store it in usb.
But know i want to know if he stole the bitcoin or not !
And how can i see my balance without waiting the syc.
Can I transfer my bitcoins to bitcoin abc or electrum without syc !
Its 2015 wallet.dat.

SM23031997

hero member

Activity: 1092

Merit: 582

Means you have a wallet.dat file with you, If the encryption is enabled then it is quite impossible for him to crack the password of your file as it uses high sha256 iterations which makes it difficult for the hacker to crack it until the password is not too easy.

Kuw

member

Activity: 70

Merit: 10

I have a wallet.dat from 2015 i wad investing and i know i hvae 12bitcoin .
I store it in Dropbox since 12/11/2015 . Some one hack my account in Dropbox
And i copy the wallet.dat to my usb and delet it from Dropbox.
Today I download bitcoin core and try to find is it been hacked and stole my bitcoin or not.
It say i need to wait more than 7 days to syc !!!!!
Now i cant wait and i want to know if he stole my bitcoins or not !
And i eant to know if i Encryption my wallet.dat can he still open it or its to late !!!
How can I transfer my bitcoins to any wallet and i said any wallet and just forgot it for 1 more year.

Any help will be Appreciated.

Topic: Please help (Read 883 times)