Service Forum

TPFan007 · Nou Venit Joined: 30 Sep 2009 Posts: 1

Thinkpad 770z - there are 2 ATMEL Chips onboard - 24C01 & 24RF08

Yesterday i managed to succesfully read the contents of the 24RF08. But i had to disassemble the Thinkpad 770z completely - the onboard 24C01 (beneath the SIMM cover) does not hold the supervisor information so i had to read the content of the 24RF08 located near an INTEL Flash Chip. There are many small switches to check if the 770z is disassembled so if you want to read the contents you have to solder the 3 cables and reassemble the 770z - then the notebook will start up and you can get the information out of the 24RF08.

Good luck to all forum users, and thanks for this great tool !
Gerhard

Frum · Nou Venit Joined: 19 Jun 2009 Posts: 2

Hi,

I built and succesfully decoded a T40 passworded laptop with your help and the other guys help mentioned. I built the driven interface with no prior knowledge of electronics. If it was not for you guys the amount of Thinkpad laptops I have sitting here would just be ground for scrap.
Just to mention I work in the reclamation buisness and they would all be thrown in to a WEEE machine.

Big big thankyou, you guys are the best especially you Victor Very Happy

Here are the pics
http://img225.imageshack.us/img225/4439/driveninterfacecloseup.jpg

http://img207.imageshack.us/img207/6006/driveninterface.jpg

Thanks worked first time and I actually enjoyed making it!!

victor · S.F. Boss Joined: 07 Mar 2004 Posts: 2581 Location: Staff

Hi TPfan007 and Frum,

You're welcome.

Frum, could you please post the pictures in the <Practice> section too?
http://www.allservice.ro/forum/viewtopic.php?p=3736#3736

Well done.
_________________
Victor Voinea
ALLservice HQ, Romania.

latingrimreaper · Nou Venit Joined: 22 Oct 2009 Posts: 1 Location: Newark,de

I can run the patch fine but Im not sure what to do with the r24rf08 program and I am using it with the Simple aka classic or SIprog im not sure what to do after opening the program for ex: r24rf08.exe <filename> do I put it the exact way its shown or do I type it r24rf08.exe C:\users\Brenda\Desktop with the space in it or all together ?please I need help

victor · S.F. Boss Joined: 07 Mar 2004 Posts: 2581 Location: Staff

Hello,

I think we explained a million times Smile

. This is one example:
http://www.allservice.ro/forum/viewtopic.php?p=4454

BTW, if you have any problem, anything that needs our support then create a new topic. We can provide better support and the topic or solution will be easier to be found later by other people.
_________________
Victor Voinea
ALLservice HQ, Romania.

Van GORRE · Nou Venit Joined: 31 Oct 2009 Posts: 2

Hi Victor!
I have my T61 thinkpad with missed password ,i did all the nessesery steps and i have my bin file.
There is my eeperom

The problem is when i open my bin file in ibmpass2.1Lite in the line 0x330/0x340 i have:
"ON AA"

"OFF AA"

i tried "6"," and combination with "space" and it not worked Sad

i tryed all the combinations but doesnt work, what is wrong?
Used
r24rf08 (or pony/ the same results in reading epprom) and IbmPass2.1 Lite

There is my dump file
[link removed]
any sugestion or any help about?

victor · S.F. Boss Joined: 07 Mar 2004 Posts: 2581 Location: Staff

Hello,

We explained already in forum, here we go once again. This T61 has passphrase enabled and requires our TCPA unlock service along with the eeprom writer W24RF08, in order to reset the lock.

1. W24RF08 license............................$30
2. TCG/TCPA unlock...........................$25

To proceed further:
1. Download and install W24RF08 from www.allservice.ro/store/utils/ (on same PC used with reader)
2. Fill out the registration form (register.doc) with payment details and hardware ID generated by the program and email it to us. PayPal or Moneybookers account is listed in the form.
3. We will email you the activation keys along with the patched binary and the laptop will be unlocked in minutes.
If necessary, the HDD is also unlockable under certain conditions. The TCPA unlock service includes that too.

For any inquiry regarding the software and services, email us at support at allservice.ro
_________________
Victor Voinea
ALLservice HQ, Romania.

Van GORRE · Nou Venit Joined: 31 Oct 2009 Posts: 2

Your post I understood as:
For 30$ i will have license for W24ER08 + ONE TCPA/TCG unlock (for One T61).
I alredy have W24RF08 licenced (registred).
For next TCPA/TCG unlock i must pay 25$?
Have I understood this correctly?

I alredy have dump file, readed by R24RF08.
What i must do now, and how much will be cost?
How to pay and where to sent my dump file?

victor · S.F. Boss Joined: 07 Mar 2004 Posts: 2581 Location: Staff

Hello,

If you're a registered user then you should know that we offer support via email for our customers and also that W24RF08 includes one CRC repair, not a TCPA unlock.

ungshunjin · Nou Venit Joined: 09 Dec 2009 Posts: 1

How do i register? Where can i get the register.doc?
Please advise. I can't find the link.

victor · S.F. Boss Joined: 07 Mar 2004 Posts: 2581 Location: Staff

Download the eeprom writer and install, register.doc will be in the same directory wiith the program.
www.allservice.ro/store/utils/
www.allservice.ro/forum/dl/register.doc
_________________
Victor Voinea
ALLservice HQ, Romania.

yourmate · Interesat Joined: 13 Dec 2009 Posts: 14

Hi,

to be honest I did not read the whole topic so this maybe covered already, but to help those who wants to run a Thinkpad as a service pc: do NOT try to use an IBM port replicator it just won't work...

Victor, thanks once more for this wonderful piece of engineering Smile

Take care

enCrypt · Nou Venit Joined: 23 Dec 2009 Posts: 2

Hi all (especially Victor!)

I've just tried decoding a supervisor password from a T22 thinkpad.
I followed the instructions here...
http://nickpaton.fireflyinternet.co.uk/downloads/readbios.pdf
Using Victor's ready made interface.

However when trying to read the EEPROM Im only getting ERROR: Circuit not found or bus error!

Ive tried connecting the interface directly to the PC and with another serial cable.
Tried different batteries in the batt holder.
Done and redone the micrograbber connections and the GND connection.
(At one point the laptop wouldnt boot at all with the wires connected but I had the GND on a different screw)

So, couple of questions...

Does it matter if the micrograbber ends are both touching?
Does it matter if they are touching other legs of the ATMEL chip at the same time as 8 and 10?

I cant seem to get them to grab AROUND the legs and close properly...does that matter?

The machine has a HDP also (Which I know) This prompt comes up first, do I have to put this in BEFORE I run the capture prog?

Also. my test PC is Windows 2000, does it need to be XP?

Thanks in advance

Mark...

bob · Posted: Wed Dec 23, 2009 4:03 am Post subject:

Did you buy the interface from us?

Ok, then add /x /d /i as parameters
r24rf08 dump.bin /x /d /i - with spaces

Connect the interface directly to COM1 without any additional cable, those are often null-modem and not working here.
Connect SDA/SCL wires to the eeprom only after laptop is on and in idle state, not before or while booting!

[Edit] Win 2000 is just fine, In Device Manager set the serial port at the highest baud/bit rate possible, 8 data bit, no parity, 1 bit stop. (8,N,1)

enCrypt · Nou Venit Joined: 23 Dec 2009 Posts: 2

Thanks Bob,

Yes the interface is from you.

Ok I tried connecting the SCL and SDA AFTER the laptop had booted, (after putting in the HDP and with it sat at the Supervisor prompt), then put in the batteries, then ran the prog, still getting the same result...

Am I still doing something wrong?

I'm still connecting with another serial cable but I use this to control and program shortwave radios with no problems...?

Oh and I still need to know is it ok if the SCL and SDA wires are touching together, or touching other legs on the chip?

Thanks
Mark...