ALLservice Service Forum
support board, PC repair, unlocking solutions
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 

Allservice Software - What's new, what we do lately.
Goto page 1, 2  Next
 
Post new topic   This topic is locked: you cannot edit posts or make replies.    Service Forum Forum Index -> Noutati/News (RO, EN)
View previous topic :: View next topic  
Author Message
victor
S.F. Boss


Joined: 07 Mar 2004
Posts: 2546
Location: Staff

PostPosted: Sat Feb 19, 2005 8:09 pm    Post subject: Allservice Software - What's new, what we do lately. Reply with quote

- R24RF08 2.0b + Add-Ons (Freeware) - reader for ATMEL 24rf08 eeproms used in IBM ThinkPad.
The kit includes now the R24C01 (24C01 reader) and ITester (interface testing utility).
- W24RF08 2.1a (30 US$) - writer for ATMEL 24RF08 (CRC recovery assistance. TCG/TCPA chip reset)
- PC8394T programming tools ($110) - Software for flashing TPM/secure storage chips in new TP models.
Suitable for R52, R60, T43, T60, X60, Z60 series, Z61 series.
- IBMpass 2.1 Lite (Freeware) - Scancode editor/decoder for eeprom dumps. Can be used for IBM, Dell, Sony Vaio, etc.
- SPEG -Universal Serial Flash Programmer ($89) - Software for programming Serial Flash BIOS chips used in modern PCs. Suitable to unlock Lenovo SL300/400/500 series, HP laptops, and more. SPEG is also the recommended tool for BIOS repair and we offer support for Thinkpad BIOS recovery (4 beeps error, 0192 error, etc) for SPEG licensees.


A tutorial can be found HERE!

IBMpass 1.1c screenshot.


W24RF08 "in action".



The programs have been tested by many users since 2004 and have been presented for the first time on security-forums.com


Last edited by victor on Sun Nov 05, 2017 12:52 pm; edited 22 times in total
Back to top
View user's profile Send private message
victor
S.F. Boss


Joined: 07 Mar 2004
Posts: 2546
Location: Staff

PostPosted: Mon Jun 06, 2005 10:16 pm    Post subject: IBMpass 2.0 Reply with quote

We can announce a new release - IBMpass 2.0

IBMpass 2.0 Professional is a complete tool for editing eeprom dumps. The free version IBMpass 2.0 Lite is available to download.
Many thanks also to all friends who tested the beta version.

Updated feb.2006
Now includes support for ACER and SONY VAIO password encoding. This option is available only in IBMpass Professional for the moment.

IBMpass 2.0 beta preview
.


Last edited by victor on Sat Feb 04, 2017 2:35 pm; edited 4 times in total
Back to top
View user's profile Send private message
victor
S.F. Boss


Joined: 07 Mar 2004
Posts: 2546
Location: Staff

PostPosted: Thu Jul 07, 2005 6:30 pm    Post subject: New versions Reply with quote

We are pleased to introduce you the version 2.0 of the well known 24RF08 tools, by now. The main changes for R24RF08 and W24RF08 are:

-Improved support for other serial interfaces with the possibility to adjust the logical level for SDA and SCL signals.
-Some issues with the timer that have been solved.
-A new improved eeprom reset procedure.

Many thanks to my colleagues and also to the testers.
Back to top
View user's profile Send private message
victor
S.F. Boss


Joined: 07 Mar 2004
Posts: 2546
Location: Staff

PostPosted: Wed Jun 14, 2006 4:37 pm    Post subject: Thinkpad T43 and R52 Unlocking software Reply with quote

We are glad to announce other two releases:

RPC8394 and WPC8394 are the first versions of two software designed for reading and respecively writing
the PC8394T-VJG super IO & TPM chip. That is used in T43 and R52 Thinkpads to store the supervisor password.

The software is available now!

Back to top
View user's profile Send private message
victor
S.F. Boss


Joined: 07 Mar 2004
Posts: 2546
Location: Staff

PostPosted: Sun Aug 06, 2006 1:06 am    Post subject: Thinpad T60/T60p unlock Reply with quote

Our last tests confirmed that PC8394 Tools are suitable to unlock the new Lenovo T series like Thinkpad T60.

Now PC8394 Tools kit includes documentation to unlock T60.

Z60 support will be added soon.
Back to top
View user's profile Send private message
victor
S.F. Boss


Joined: 07 Mar 2004
Posts: 2546
Location: Staff

PostPosted: Sat Sep 30, 2006 3:57 pm    Post subject: Reply with quote

It was confirmed that PC8394 Tools are suitable to read/write the security chips in Z60t/Z60m. The following Thinkpad models can be unlocked using RPC8394/WPC8394:

-T43/p
-R52
-T60/p
-Z60t/m

IBMpass can reveal the password from the chips binary. However, a new version, IBMpass 2.1 is to be launched soon and will be presented in two versions, freeware and commercial.
Back to top
View user's profile Send private message
victor
S.F. Boss


Joined: 07 Mar 2004
Posts: 2546
Location: Staff

PostPosted: Tue Dec 12, 2006 2:05 pm    Post subject: Reply with quote

R60 and X60 are the new models added in the PC8394 Tools list:

I have to thank personally to Jonas Barna (Dex Lab) for the latest test on ThinkPad X60.

PC8394 Tools compatilbility list:

-T43/p
-R52
-T60/p
-Z60 series
-Z61 series
-R60
-X60
_________________
Victor Voinea
ALLservice HQ, Romania.


Last edited by victor on Sat Mar 24, 2007 3:12 pm; edited 2 times in total
Back to top
View user's profile Send private message
victor
S.F. Boss


Joined: 07 Mar 2004
Posts: 2546
Location: Staff

PostPosted: Mon Jan 08, 2007 1:54 pm    Post subject: Reply with quote

IBMpass 2.1 Lite available. It has support for SONY VAIO SHR1 encoding.

IBMpass 2.1 Editor (commercial) coming soon.
_________________
Victor Voinea
ALLservice HQ, Romania.
Back to top
View user's profile Send private message
victor
S.F. Boss


Joined: 07 Mar 2004
Posts: 2546
Location: Staff

PostPosted: Fri Mar 07, 2008 8:00 pm    Post subject: Unlocking new models R61, T61, X61, X300 (1), T400, t500... Reply with quote

Updated: November 2019
Latest pics will not always be added at the end of this post, so pay attention!


-All new Thinkpads starting with T440, T450, T460, T540, T550, T560, W540, W541, W550s, X1 Yoga, X240, X250, X260, P40, P50, P50s, P70, Thinkpad Yoga 12 and Yoga 15, Helix gen2 and up, etc http://www.allservice.ro/forum/viewtopic.php?t=3044

We have the confirmation for newer R61, T61 and X61. They don't use a TPM system like T43/R60/X60/T60, they dropped back to P24S08 (24RF08 clone).
Pictures added (as we unlocked them) for: L412, L512, L420, L520, L530, L430, L540, SL410, SL510, R400, R500, T400, T410, T420, T500, T510, T520, T530, X1, X100e, X121e, X201, X300(X200), X220, X230, X301, W500, W510, W520, W530, W701, Edge 13-14-15, Edge E120, Edge E220s, Edge E320, Edge E430, Edge 530, Edge 531, Edge E440, Edge E540, Helix 1st gen.

For eeprom 24RF08/P24S08 and variations like PS08 and L08 you must use R24RF08 - the free 24RF08 eeprom reader - and IBMpass 2.1 lite.

Note: If IBMpass Lite cannot reveal the passoword, then is 100% TCPA locked, in which case W24RF08 (eeprom writer) and our TCPA reset service is required. TCPA algo is changed, is not the same used in the previous models.

If you like us to assist you or to verify the TCPA lock status in order to confim the need of W24RF08 and the TCPA service, simply send the eeprom binary dumps to support@allservice.ro


R61:

P24S08 (8pin) is usually located on the frontside of the mainboard, under the keyboard. Is quite easy to get access there.
For 14' widescreen models, the eeprom is on the backside (second picture). 15' 4/3 models have the eeprom under PCcard cage on the frontside.

R61 eeprom here:
http://www.allservice.ro/forum/images/R61.jpg
http://www.allservice.ro/forum/images/r61_14_wide.jpg [14' widescreen]
http://www.allservice.ro/forum/images/r61_15_normal.jpg [15' 4/3]
http://www.allservice.ro/forum/images/r61_15_nvidia.jpg [15' Nvidia]

Courtesy JD Choi - Korea for the 1st photo and Mario Dahn - Germany for 15' ones.

T61:

P24S08 (8 pin) eeprom is on the back of the board, you may need to consult the T61 Hardware Maintenance Manual if you want to dismantle it.


HMM here:
Code:
http://www-307.ibm.com/pc/support/site.wss/document.do?sitestyle=lenovo&lndocid=MIGR-39298


T61 eeprom here:

http://www.allservice.ro/forum/images/T61-1.jpg
http://www.allservice.ro/forum/images/T61-2.jpg
http://www.allservice.ro/forum/images/T61-3.jpg (T61p-wide. New layout)
http://www.allservice.ro/forum/images/t61-alt.jpg (Alternate layout)

Courtesy R. Katz - USA, for the new T61p images and for all support.

X61:

This is using a small factor PS08 eeprom (24RF08 clone), its position is below the "M" key. It requires the keyboard, front bezel and the modem sub-board to be taken apart.

X61 eeprom here:
http://www.allservice.ro/forum/images/X61.jpg

I wish to express our gratitude to S. Helie (UK) who helped us with the first X61 works, and last but not least, to S. Cyiako (Sweden) who mailed us a perfect X61 mainboard for the tests.

[Updated]

X300, X301, X200 and X201, X220, X230, X100e, X120e, X121e, X1...done. They use the same 24RF08 clone like the other 61's (appart from Z61 series that still use TPMs). For X300, the eeprom has alternate connection points located underneath, near the memory socket. X100e has the PS08 mini eeprom like the X61 and X121e features the L08 (same eeprom).

X300 testpoints here:
http://www.allservice.ro/forum/images/x300.jpg

X301 eeprom here:
http://www.allservice.ro/forum/images/x301.jpg
Many thanks to B. Nguyen (USA) for all support.

X200 added (courtesy JD Choi - Korea):
http://www.allservice.ro/forum/images/x200.jpg

X220 added (same location for X230):
http://www.allservice.ro/forum/images/x220.jpg


X201 (thanks to npkub for the first eeprom images):
http://www.allservice.ro/forum/images/x201.jpg

X100e:
http://www.allservice.ro/forum/images/x100e.jpg
And another one (thanks to R. Katz): http://www.allservice.ro/forum/images/x100e-1.jpg


X121e:
http://www.allservice.ro/forum/images/x121e.jpg

X1 (courtesy J. STRNAD - Czech Rep.):
http://www.allservice.ro/forum/images/x1.jpg

X1 Carbon gen1 (generation 2 and 3 use MEC1633L):
http://www.allservice.ro/forum/images/x1-carbon.jpg

T400 & T500 added here, the same story, same eeprom located on the back of the mainboard as in T61.

T400 and T400s eeprom:
http://www.allservice.ro/forum/images/t400.jpg
http://www.allservice.ro/forum/images/t400s.jpg

T500 eeprom:
http://www.allservice.ro/forum/images/t500.jpg

We've tested on 2 mainboards and TCPA algo is again different.

Great thanks to V. Rikalovic (Serbia) and M. Yang (USA) for the nice shots.

R400, R500, W500 and W700 - R400 and W500 have the eeprom underneath. For R500 is the same 24RF08 clone located on the upper side of the motherboard, under the PCcard/ExpressCard cage. The board must be removed form the Mg frame and you have to peel the black sticker that covers the area

R400 eeprom:
http://www.allservice.ro/forum/images/R400.jpg

R500 eeprom:
http://www.allservice.ro/forum/images/R500.jpg

W500 eeprom:
http://www.allservice.ro/forum/images/w500.jpg

W700 eeprom:
http://www.allservice.ro/forum/images/w700.jpg

SL410 & SL510 - Looks like the new SL series switched from AMI to Phoenix FirstBIOS so our old friend (24RF08 - PS08) is back in business once again. R24RF08/W24RF08 is the right software, as usual.
*The older SL400/SL500 still need SPEG programmer to be unlocked.

SL410 eeprom:
http://www.allservice.ro/forum/images/SL410.jpg

SL510 eeprom:
http://www.allservice.ro/forum/images/SL510.jpg

The pictures are courtesy of J.D. Choi - Korea.

T410, T410s and T510
T410 and T510 eeprom here:
http://www.allservice.ro/forum/images/t410.jpg
http://www.allservice.ro/forum/images/t410s.jpg
http://www.allservice.ro/forum/images/t510.jpg (Added)

Thanks to Osman (Netherlands) for earlier T510 pictures.

Edge 13', 14' and 15'
This is an Edge 13 and 15, the rest are pretty similar:
http://www.allservice.ro/forum/images/edge15.jpg
http://www.allservice.ro/forum/images/edge13.jpg

Lenovo L412 / L512
L512 looks similar to Edge15, supposely L412 is also the same design. We'll update the forum shortly:
http://www.allservice.ro/forum/images/l512.jpg

Big thanks go to G. Williams in UK for sending us one of these.

W510/W520/W530/W701
Same eeprom location area for W510, W520 and W530
http://www.allservice.ro/forum/images/w510.jpg
http://www.allservice.ro/forum/images/w520-w510.jpg


T420, T420s, T520, T530
All of them use the tiny L08 eeprom. These models have passprase always active, and they require TCPA unlock service and W24RF08. T530 has the eeprom covered by the black stickers

http://www.allservice.ro/forum/images/t420.jpg
http://www.allservice.ro/forum/images/t420s.jpg
http://www.allservice.ro/forum/images/t420s_1.jpg Alternate location for T420.
http://www.allservice.ro/forum/images/t520.jpg and the alternate layout http://www.allservice.ro/forum/images/t520-2.jpg
http://www.allservice.ro/forum/images/t530.jpg

Thinkpad Edge E120, E320
L08 eeprom again:
http://www.allservice.ro/forum/images/e120.jpg

Thinkpad Edge E220s, E531
P24S08 eeprom:
http://www.allservice.ro/forum/images/e220s.jpg
http://www.allservice.ro/forum/images/e531.jpg

Lenovo E420, E520
These ones use SP08 eeprom (same as 24RF08).
http://www.allservice.ro/forum/images/e420.jpg

Lenovo E530, E540
Same 24RF08 clone.
http://www.allservice.ro/forum/images/e530.jpg
http://www.allservice.ro/forum/images/e540.jpg

Thinkpad Helix
L08 eeprom again:
http://www.allservice.ro/forum/images/helix.jpg
Helix new generations are using MEC1633L
http://www.allservice.ro/forum/viewtopic.php?t=3044

Thinkpad T430 and T430s
http://www.allservice.ro/forum/images/t430.jpg
http://www.allservice.ro/forum/images/t430s.jpg


Thinkpad T431 (s)
http://www.allservice.ro/forum/images/t431s.jpg

Lenovo L420 / L520
Same location for both
www.allservice.ro/forum/images/l420.jpg

Lenovo L430 / L530
Same location for both
www.allservice.ro/forum/images/L430.jpg
www.allservice.ro/forum/images/L530.jpg

Lenovo L540
L08 (24RF08)
www.allservice.ro/forum/images/L540.jpg

Note:
All images are property of allservice.ro or their authors passed the publishing rights to allservice.ro. You are allowed to use or publish them but not to edit them or to remove their original watermarks

_________________
Victor Voinea
ALLservice HQ, Romania.


Last edited by victor on Sun Nov 10, 2019 2:36 pm; edited 70 times in total
Back to top
View user's profile Send private message
victor
S.F. Boss


Joined: 07 Mar 2004
Posts: 2546
Location: Staff

PostPosted: Sat Jul 25, 2009 5:24 pm    Post subject: SPEG - Universal serial flash programmer Reply with quote

We are proud to announce our new release for programming Serial Flash BIOS ROMs.

[Edit]
SPEG is available now!
Special thanks to R. Katz (USA) for his impressive work on testing the package with Lenovo T and R series BIOS and B. Nguyen (USA) for all support and ideas. Many thanks to the support team as well.
[/Edit]

The program is SPEG - Universal serial flash programmer and is able to process almost all new serial flashes used nowadays for BIOS in almost everything, even in iphone 3G.
We've paid a special attention to SST chips, they are a bit different from the rest.

Note: SPEG is the right solution to unlock Lenovo SL300, SL400, SL500 and G550. These models keep the password in BIOS serial flash that must be read, cleaned up and reflashed. We offer a free cleaning service/ BIOS repair service with every SPEG purchase .

For the moment this is the current device list:
http://www.allservice.ro/forum/dl/SPEG_device_list.txt

And the list may continue...
_________________
Victor Voinea
ALLservice HQ, Romania.


Last edited by victor on Thu Jun 06, 2013 1:05 pm; edited 2 times in total
Back to top
View user's profile Send private message
victor
S.F. Boss


Joined: 07 Mar 2004
Posts: 2546
Location: Staff

PostPosted: Sat Jun 12, 2010 12:07 pm    Post subject: Reply with quote

Surely, you've heard of Intel Anti-Theft system. This new technology used in latest Thinkpads is very similar to Computrace and despite they claim that has no relation with the AMT, this is not exactly true. Here is an example of one disabled machine we received from a customer (It's a T400 model wired up on an external monitor)

Well, now we can recover the Thinkpads from this thing. The laptop needs a serious BIOS code rework (and also the eeprom 24RF08/P24S08 must be modified, in some cases) and it will be like new. The service is available for SPEG users now.
_________________
Victor Voinea
ALLservice HQ, Romania.
Back to top
View user's profile Send private message
victor
S.F. Boss


Joined: 07 Mar 2004
Posts: 2546
Location: Staff

PostPosted: Thu Jan 31, 2013 3:27 pm    Post subject: Reply with quote

We can announce now that all HP models, based on serial flash BIOS can be unlocked by our team and that is final. The required software is SPEG programmer in order to read the BIOS and email us the binary to be fixed.

We also worked on various models coming from Fujitsu. We mean those that couldn't be unlocked via codes such as the new models with 6x4 digits hash. All of them could be unlocked after we patched the BIOS.

Some other news is that we could unlock some Macbook Pro in the same manner.

Tests will be carried out so if you have any questions contacts us.
_________________
Victor Voinea
ALLservice HQ, Romania.


Last edited by victor on Thu May 16, 2013 1:22 pm; edited 1 time in total
Back to top
View user's profile Send private message
victor
S.F. Boss


Joined: 07 Mar 2004
Posts: 2546
Location: Staff

PostPosted: Tue Apr 09, 2013 1:16 pm    Post subject: Macbook Pro and Air unlocked. Reply with quote

We finished the tests on unlocking MAcbook Pro and Air, models 2008-2013 (that includes late 2013 retina models) succesfully. We can reset the firmware lock (firmware password and pin lock) without altering the orignal BIOS code or credentials.

See the updates here:
http://www.allservice.ro/forum/viewtopic.php?t=2724
_________________
Victor Voinea
ALLservice HQ, Romania.


Last edited by victor on Thu Jun 13, 2013 8:03 am; edited 1 time in total
Back to top
View user's profile Send private message
victor
S.F. Boss


Joined: 07 Mar 2004
Posts: 2546
Location: Staff

PostPosted: Fri Apr 12, 2013 2:42 pm    Post subject: IBMpass updated Reply with quote

IBMpass Editor and Lite has been upped to 2.2.

Some issue fixed with the fonts in Win Vista/7 and up, where special characters were not displayed correctly in unicode.
_________________
Victor Voinea
ALLservice HQ, Romania.
Back to top
View user's profile Send private message
victor
S.F. Boss


Joined: 07 Mar 2004
Posts: 2546
Location: Staff

PostPosted: Sat Jan 18, 2014 2:02 pm    Post subject: Reply with quote

SPEG updated to version 1.2
http://www.allservice.ro/forum/viewtopic.php?t=1311

Macbook and iMac BIOS chip locations more pictures added
http://www.allservice.ro/forum/viewtopic.php?p=10545#10545
_________________
Victor Voinea
ALLservice HQ, Romania.
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic   This topic is locked: you cannot edit posts or make replies.    Service Forum Forum Index -> Noutati/News (RO, EN) All times are GMT + 2 Hours
Goto page 1, 2  Next
Page 1 of 2

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum



Powered by phpBB © 2001, 2005 phpBB Group