|
Service Forum support board, PC repair, unlocking solutions
|
View previous topic :: View next topic |
Author |
Message |
fricosu007 Nou Venit
Joined: 13 Nov 2009 Posts: 7
|
Posted: Fri Nov 13, 2009 10:13 am Post subject: |
|
|
Salut si bine v-am gasit ...
Am facut buba la un Tecra M4, bineinteles, despre parola initiala e vorba, cum ajuns in acest forum ? ca prostu, am platit prin paypal pe cineva .. de undeva de mi-a trimis o schema cum sa imi resetez parola cititnd eepromu ... 2 documente mi-a trimis iar pe una era schema interfetei de i2C pentru citire eeprom, autorul acelei scheme este Victor Voinea interesant nu ? am platit pe cineva care e pe undeva prin brazilia sau nu mai stiu exact ca sa imi trimita o schema, cu date furate de la un autor Roman ... bineinteles, nu sunt in stare sa gasesc nici un eeprom cu numele 24c08 ca sa il pot scoate si sa il citesc ... am aruncat aproape 40 $ (dat fiind ultima solutie) pe .. 2 scheme furate ...
PLsss help ! cum sa fac sa sterg parola de pe acest Tecra M4, ce sa scot, ce sa citesc, am inteles ca nu ar fi un eeprom dar .. ce |
|
Back to top |
|
|
victor S.F. Boss
Joined: 07 Mar 2004 Posts: 2581 Location: Staff
|
Posted: Fri Nov 13, 2009 8:18 pm Post subject: |
|
|
Serios? Eu nu am facut scheme pentru Toshiba. E drept ca interfetele publicate de mine se pot folosi pt a citi diferite eeprom-uri. Sunt curios sa vad ce ti-a vandut respectivul, foarte curios..
Din cate stiu Tecra M4 are 2 eeprom-uri 24C02 (sunt notate 402W) si daca imi amintesc bine, unul din ele are certificatele de securitate, iar celelalt setarile pt media cable.
Totusi, e un pic mai complicat in practica decat in teorie, se pare ca modificarea celui care contine parola da eroare. N-am avut un M4 pt teste, dar poate testam pe al tau.. _________________ Victor Voinea
ALLservice HQ, Romania. |
|
Back to top |
|
|
fricosu007 Nou Venit
Joined: 13 Nov 2009 Posts: 7
|
Posted: Sat Nov 14, 2009 10:40 am Post subject: Tecra M4 user password |
|
|
da din cate am citit pe forumuri timp de o zii si cred ca nu am citit in deajuns, intradevar sunt acele 2 eepromuri 402w pe care le-am localizat dar am mai citit cum ca cineva a incercat sa le si stearga si nu a obtinut nici un rezultat, tot cerea parola (cred ca tot aici am citit despre aceste eepromuri)... Cum am putea incerca pe tecra-ul meu ?
Aici link-ul cu ce am cumparat
[removed] |
|
Back to top |
|
|
Disabled Cont inchis
Joined: 23 Mar 2008 Posts: 103
|
Posted: Sun Nov 15, 2009 4:53 am Post subject: |
|
|
Sorry, I do not speak Romanian, but hope that my english is clear enough. I believe that the best solution for Toshiba laptops (Libretto, Tecra, Portege) would be to get a full dump of the firmware and EEPROM chips of a non-password protected laptop and then replace the contents of the protected laptop with these files. I had a Toshiba Libretto U105 for almost 3 months and I couldn't bypass that password, this model did not have an EEPROM chip just M50FW080 year, analyzed the firmware file and was able to identify the area where the password was stored, tried a few times to set everything to 00's and then to FF's and everytime after Powering the laptop the password prompt would appear. Then before trying something else I use to read the chip to see if there was any change, but the contents would reverse back to the previous unmodified state, so it surely has a checksum.
I found a Russian website that has a dump for a Tecra M2V or M2 (do not remember), but I do not have enough rights to download the file, according to the file description it has the firmware and EEPROM files.
The hard part would be to get the contents of the firmware chip, but there's no need to do this since there's a utility that runs under Linux that let's you get a reading of the firmware chip without DESOLDERING it. Then you can take a reading of the EEPROM that goes together with that chip. With this information then you can program your eeprom and firmware chip on you password protected laptop. After you're done and the password is removed, you can use the Toshiba DMI utility under MS-DOS to make the appropiate changes so that the information stored in the EEPROM/firmware chips matches your model and serial number of your equipment.
Have the equipment but I still have not been able to check if this procedure works, but I'm 100% sure it will. I had to pay for the Response Code (for a given Challenge Code) in order to be able to fix the Libretto U105, then I did some testing by setting different passwords/modifying the BIOS options and after each change I read the chip firmware just to check where the password was stored.
DRGN997 |
|
Back to top |
|
|
|
|
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
|