Service Forum

[stefanX40]

Hi Allservice members and guests,

For all X40 users like me, I want to give details to svp recovery of this notebook. If you search the web for tips to this IBM TP model you are very lonely. Luckily we found that nice homepage with all tips and applications you need for this procedure.

We decided to take the driven architecture and built the i2c-inteface with a MAX232 (we used MAX232N).

After building the interface we pulled the mainboard out of his chassis. This is necessary because the Atmel chip else is not reacheble.
The Atmel chip was hidden under a black sticker (so you must search for it more detailed) and the chiptype (24RF08) is printed on it.
We used a additional powersupply of 3 1,5V Mignon cells by connecting them to ground and vcc. Without those powersupply we can't read the eeprom. Errormessage: No circuit found...

After doing all things like in victors tutorial and using the additional powersupply we could read the eeprom and used ibmpass1 to crack password. (ibmpass2 didn't work, I think we had a false schema)

So we will give a special thank to victor, who gave us direct and fast answer to a problem and made it possible with his tools to save this Thinkpad. ; )

I will post some pictures tomorrow.

Stefan[/img]

[victor]

Thanks Stefan,

In IBMpass 2.0 just activate the scancode to see the pwd at 0x338 (A-A button).

Well done.