<p>You are on a wild goose chase.</p>
<p>Don't use notepad to investigate files, use a hexdump tool and/or something like the 'strings' command in Linux or in the installable <a href="https://docs.microsoft.com/en-us/windows/wsl/install-win10" rel="nofollow noreferrer">Windows Linux subsystem that Microsoft provide in Windows 10</a>.</p>
<p>Don't work on the actual discs, make a low level duplicate, not a file copy, but a copy that includes the contents of unused space. If you are working on the original disks you are liable to trample over valuable data in unallocated space. Mounting the disks read only might reduce the risks but working on s low level copy is best. Use file recovery tools on the copy to retrieve deleted files and fragments. Search contents for typical wallet contents. Don't rely on filenames.</p>
<p>Check old email for messages from online exchanges or wallet providers.</p>
<p>Familiarise yourself with the appearance of private keys and look through scraps of paper in places you friend kept important paper documents.</p>
<p>Even if you find a wallet, there is a good chance you won't have any clue to the password that might be needed.</p>

CC BY-SA 4.0
2020-12-30T10:17:43.877Z
2020-12-30T14:09:34.283Z
2020-12-30T14:09:34.283Z
RedGrittyBrick
<p>Alright, I’m new to Bitcoin/Crypto, and this might be a long story but worth it.</p>
<p>My life long friend had a $50 Visa gift card back in 2009-2011. His friends were over the house one day and mentioned this new thing called Bitcoin. My friend (we’ll call him John), said cool I’ll buy some (mind you, we were early teens). He didn’t have cash or any kind of credit card so he used the entire gift card, on Bitcoin... in 2009-2011. He made the purchase, and they continued on with their day. Fast forward to about 2014-2015, my friend John is diagnosed with serious epilepsy and had to have a portion of his brain tissue removed, as a result, his memory of anything prior to the surgery is shot. Fast forward, 2017... BTC ROCKETS in value. John, remembering that he had purchased BTC back in 09’-11’ went on a search for the computer they purchased it on, and here lies the issue. There are 3 computers it was potentially purchased on, his, his brothers, his friends. The only remaining one is his which we recently found in the closet... I have the hard drives, I have the hardware to access 2 of them. There are no &quot;wallet&quot; or &quot;wallet.dat&quot; files on the two drives I've searched BUT there are a few files on there (forgive me if I am <strong>totally</strong> lost) one being CryptoCME.dll and a few others in a &quot;Crypto&quot; folder with a bunch of text. All of which have text that resembles this text when I open it on Notepad:</p>
<p>©Ô„ Õ}UðÛ oˆ‘ ÞùêÊÓìÚ ËŽÌY; its a LOT of that kind of text and a lot of the files have &quot;CryptoAPI Private Key&quot; in plain text written in them.</p>
<p>I'm unsure what this encryption/cryptography is or if I'm looking at a bunch of stuff that has literally nothing to do with Bitcoin. Anything would help. Anyone that helps me gain access, will be compensated. And yes, I am well aware of the scammers out there, I understand that this acts as cash and can be taken immediately if I give any specifics out so don't try it, and no need to remind me. Please excuse my complete ignorance and thanks for the help.</p>

CC BY-SA 4.0
2020-12-29T21:29:13.690Z
`CryptoCME.dll` is unrelated to cryptocurrency, as is `CryptoAPI Private Key`.
Claris
CC BY-SA 4.0
2020-12-30T10:11:52.950Z
You say you're aware of scammers but you are no doubt being contacted by many right now.
RedGrittyBrick
<wallet-recovery><cryptography><encryption><terminology><accessibility>
BTC Treasure hunt
whoiszo
# BTC Treasure hunt

(Asked by: username_0 on 2020-12-29)

Alright, I’m new to Bitcoin/Crypto, and this might be a long story but worth it.

My life long friend had a $50 Visa gift card back in 2009-2011. His friends were over the house one day and mentioned this new thing called Bitcoin. My friend (we’ll call him John), said cool I’ll buy some (mind you, we were early teens). He didn’t have cash or any kind of credit card so he used the entire gift card, on Bitcoin... in 2009-2011. He made the purchase, and they continued on with their day. Fast forward to about 2014-2015, my friend John is diagnosed with serious epilepsy and had to have a portion of his brain tissue removed, as a result, his memory of anything prior to the surgery is shot. Fast forward, 2017... BTC ROCKETS in value. John, remembering that he had purchased BTC back in 09’-11’ went on a search for the computer they purchased it on, and here lies the issue. There are 3 computers it was potentially purchased on, his, his brothers, his friends. The only remaining one is his which we recently found in the closet... I have the hard drives, I have the hardware to access 2 of them. There are no "wallet" or "wallet.dat" files on the two drives I've searched BUT there are a few files on there (forgive me if I am **totally** lost) one being CryptoCME.dll and a few others in a "Crypto" folder with a bunch of text. All of which have text that resembles this text when I open it on Notepad:

©Ô„ Õ}UðÛ oˆ‘ ÞùêÊÓìÚ ËŽÌY; its a LOT of that kind of text and a lot of the files have "CryptoAPI Private Key" in plain text written in them.

I'm unsure what this encryption/cryptography is or if I'm looking at a bunch of stuff that has literally nothing to do with Bitcoin. Anything would help. Anyone that helps me gain access, will be compensated. And yes, I am well aware of the scammers out there, I understand that this acts as cash and can be taken immediately if I give any specifics out so don't try it, and no need to remind me. Please excuse my complete ignorance and thanks for the help.

**Tags:** wallet-recovery, cryptography, encryption, terminology, accessibility

> **Comments:**
> **username_1**: `CryptoCME.dll` is unrelated to cryptocurrency, as is `CryptoAPI Private Key`.  
> **username_2**: You say you're aware of scammers but you are no doubt being contacted by many right now.  

---

## 1 answers

### Answer by username_2 on 2020-12-30. Score: 1

You are on a wild goose chase.

Don't use notepad to investigate files, use a hexdump tool and/or something like the 'strings' command in Linux or in the installable [Windows Linux subsystem that Microsoft provide in Windows 10](https://docs.microsoft.com/en-us/windows/wsl/install-win10).

Don't work on the actual discs, make a low level duplicate, not a file copy, but a copy that includes the contents of unused space. If you are working on the original disks you are liable to trample over valuable data in unallocated space. Mounting the disks read only might reduce the risks but working on s low level copy is best. Use file recovery tools on the copy to retrieve deleted files and fragments. Search contents for typical wallet contents. Don't rely on filenames.

Check old email for messages from online exchanges or wallet providers.

Familiarise yourself with the appearance of private keys and look through scraps of paper in places you friend kept important paper documents.

Even if you find a wallet, there is a good chance you won't have any clue to the password that might be needed.


---

