Service Forum

bob · Posted: Sun Sep 28, 2008 6:49 pm Post subject:

#1: "As long as they are 5.1V zeners, why not?" Is quite clear, any 5.1V zeners are good.

#2: SDA and SCL are TTL signals (logic). high state or "1" is when the signal is to Vdd or Vcc, while low state or "0" is when the signal is Vss or grounded.
Or to make it simple, if you connect a voltmeter with the negative probe to ground and the positive probe to the SCL or SDA wires, "1" or high state should give you 5V and "0" should give you 0V.
The simple programmer is a bit different, it will give -0.7V in low state.

VE4CRG · Nou Venit Joined: 28 Sep 2008 Posts: 4

OK awsome. Thank you so much for the quick reply Very Happy

nblueman · Nou Venit Joined: 15 Feb 2007 Posts: 4

Hi victor ,i have my T61 thinkpad with missed password ,i did all the nessesery steps and i have my bin file,The problem is when i open my bin file in ibmpass2.1Lite in the line 0x330 i have 89 4 fC and in 0x340 i have 89 4 fC f f in alternate scancode ,in clasic scanmode 0x330 i have Y 9 and in 0x340 i have
Y 9 2 1 ,i tryed all the combinations but doesnt work Sad

any sugestion or any help about?

victor · S.F. Boss Joined: 07 Mar 2004 Posts: 2581 Location: Staff

Hello,

I would need to see it to be 100% sure but I guess it is TCPA encryption.
Send it to our support@ inbox, please.

For TCPA unlock, W24RF08 license and TCPA reset service are required.
_________________
Victor Voinea
ALLservice HQ, Romania.

olex126 · Posted: Tue Oct 14, 2008 12:13 am Post subject: Thinkpad T23 Success!

Hi Victor.

Just a short Thank-You from Canada. My eBay T23 was in pristine condition with the exception of the BIOS SVP password, which, of course, the seller neglected to mention.

I built the SIPROG COM reader, attached it to the EEPROM, (see below) and ran the programs. I must have done something right, because my first bin file was saved in about 10 seconds and was perfect. (How cool it was to see this program and my home-built apparatus working.. it sure put a big smile on my face! When I ran the IBMpass program, lo and behold, the password was revealed: ID10T (clever!).

I found I was having problems soldering to the EEPROM chip legs, so I dug out my meter and after a few minutes of tracing, came across the pin-outs on the board. I carefully scraped away any resin around the holes and inserted 2 medium-sized sewing machine needles into the holes until they were a tight fit. The only soldering required was to solder the connecting wires from my SIPROG to the top of each needle. I used a hot-glue gun to seal the top one-third of the needles into position and to try and keep from moving. I then hot-glued the wires to the bottom of the case in a few spots, to further keep them in place. (I DID NOT hot-glue the needles to the board, since a) they were a tight enough fit as inserted, and b) I wasn't sure what a blob of hot glue on the motherboard could damage.)

The ground wire was connected to the WI-FI cover screw.

Links to my pics of the location of the EEPROM board connections:

NOTE: SCL connection on the left, SDA connection on the right

http://i186.photobucket.com/albums/x295/olex126/DSCN1580.jpg
http://i186.photobucket.com/albums/x295/olex126/DSCN1583.jpg
http://i186.photobucket.com/albums/x295/olex126/DSCN1584.jpg
http://i186.photobucket.com/albums/x295/olex126/DSCN1585.jpg

Again, many thanks for the programs. They are a God-send!

Let me know if my EEPROM dump is of any use to you and I'll send it along.

Regards

Dave

VE4CRG · Nou Venit Joined: 28 Sep 2008 Posts: 4

i dont get this. am i doing it right?

-Turn on laptop
-wait till all activity stops
-connect in order gnd, sca, scl
-open 24rf08
-type "r24rf08 mytp.bin" just as it say in the readme file
-hit enter

-if this is correct is there anything else i could try? after i hit the enter key should it show some activitivity like a status bar?? when i hit enter 24rf08 immedietly closes and no bin file is created. Mad

The in/out values are all matching 1's and 0's. I have also tried running 24rf08 on 2 separate master or host computers both of which are desktops and have spent over 20 hours trying to get this damn thing working.

victor · S.F. Boss Joined: 07 Mar 2004 Posts: 2581 Location: Staff

Start Menu> Run...

And type this:

VE4CRG · Nou Venit Joined: 28 Sep 2008 Posts: 4

HAHAHAHAHAHAHAHA Thank you thank you so much!!!!!! I now have my laptop back. The password was LANSYS. Never and I mean never do i wanna see that word again. Those 6 letters gave me over 20 hours of pure hell.
I guess my mistake was trying to run it right from the exe instead of the start -> run menu.
I also did this with the crudest setup ever. bobby pins soldered to the wires and scotch tape holding 2 of the pins to the board and for the scl i just held the bobby pin and touched it to the board and did typing with my left hand haha. (kind of like a few posts ago but i dont remember any scotch tape hahaha)
I took pictures of my setup but cant find where to upload them Rolling Eyes

Anyways Victor and Bob... Thanks again a million times over Very Happy

clooks · Nou Venit Joined: 30 Dec 2008 Posts: 1

Hello from poland.

I need some help...
I got the .bin file with simple-i2cprog interface, and with IBMpass i can read somethink like this below.

http://img238.imageshack.us/img238/6143/binfajelow8.jpg

Please tell me, what is the pass here ? Maybe im just an idiot...

neamtu · Nou Venit Joined: 09 Jan 2009 Posts: 3

fl_williams · Nou Venit Joined: 06 Jan 2009 Posts: 5 Location: Florida

Will this method work on the thinkpad T400? I am assuming the T400 and T500 use the same motherboard with the T500 being the 15" screen will the T400 being the 14" screen. Is my assumption correct?

victor · S.F. Boss Joined: 07 Mar 2004 Posts: 2581 Location: Staff

This method and the software work fine for T500. I am 99% sure for T400 too.
_________________
Victor Voinea
ALLservice HQ, Romania.

moribondo · Nou Venit Joined: 06 Feb 2009 Posts: 1

I carried out the dump of the 24rf08,I opened it with IBMpass v2.1 lite and I found the password,but when I put it in, it doesn't get recognized. On the screen besides yhe symbol of the lock there is the icon of a monitor,what password is it?

thanks..

bob · Posted: Sat Feb 07, 2009 2:01 am Post subject:

Should be SVP or POP. SVP overides POP anytime.

We need to check out the dump. The email is support@

bucksnort101 · Nou Venit Joined: 20 Feb 2009 Posts: 3

Have a T40 Thinkpad that has a Administator Password that I have to reset. I have built the simple circuit (Built it twice and triple checked my work). When I run the R24RF08 dump.bin command I get the "eeprom not found" error.
Have tried two different systems to attach the cirduit to and get the same message. Wondering if there is anything else I may be missing here. I have taken a multimeter and checked continuity on all of my connections and they are fine.
The T40 does have the additional Security Chip on the bottom of the system board as well, will this make a difference.
I did use 1N4733A Zener Diodes in the circuit, they appear to be compatible.
I appreciate any input.