Hacking IBM Thinkpad Bios Password
Loading ...
Loading ...
Lost your IBM ThinkPad Supervisor password? No problem, on this page i will show you how to recover your old password.
Although IBM claims their TP BIOS passwords are impossible to break, there is a easy and cheap way to fix this.
The stuff you need cost about 5 $ at your closest radio shack type of store. Also you need a spare PC with a serial port.
This article is based on a IBM ThinkPad T42. There are no guarantees and you might end up destroying your TP. So continue at your own risk. Other models this ought to work with are:
- 240, 240x
- 390E, 390x
- 570, 570E
- 600e, 600X
- 770Z
- A20m, A21e, A21m, a22m, A30p, A31, A31p
- G40, G41
- R30, R31, R32, R40, R50, R51
- Transnote, T20, T21, T22, T30, T40, T40p, T41, T42, T42p
- X20, X21, X22, X23, X24, X30, X31, X40, X41
The supervisor (SVP) password is stored in a chip called ATMEL 24RF08.It can not be reset by disconnecting the BIOS battery or shorting any jumper. It has to be read in order to deciffer the password. For this we need some kind of hardware so read on…
Soldering the ATMEL 24RF08 Chip reader
To read this chip we need to interface with it using a secondary computer and some simple electronics. You will need to purchase this:
- 2 x 2200 Ohm Resistors
- 2 x C5V1 Zener diodes (For example BZX55/C5V1 )
- Serial Port 9 pin Female
The serial port can be salvaged from any old PS2 type mouse. The zeners and resistors can be found in scrap electronics, but they are rather cheap so i would not bother. Solder them according to the image below. Leave the wires leading to SDA , SCL and GND. These will be connected to the TP later.
Here is a simplified schematic for those unfamilliar with the above symbols:
Locating the ATMEL chip
Usually the ATMEL chip is located somewhere below the touchpad. Start off by remving the keyboard and mousepad. This is done by unscrewing a couple of screws located under the TP. It is quite clearly illustrated on the bottom side of your ThinkPad.
Pull the TP keyboard up and let it rest against the screen. Pry off the touchpad part and fold it over where the keyboard used to be. Remove the WiFi card.
Under it all you should find a chip with something like this printed:
ATMEL
24RFC8
0446
Heres a closeup of the Atmel chip. Click to enlarge.
You can see the Atmel right under were the Wifi card used to sit:
Soldering the ThinkPad
Now this is the tricky part. You will have to solder 3 wires to the motherboard of your TP. Two wires to the ATMEL chip and one to ground. The ground is a piece of cake, just solder it anywhere you can find ground. The mounting screw holes on the motherboard is a good place. Solder 3 wires according to the image below:
As you can see, the SCL and SDA are located right next to eachother. It can be difficult to hold them in place while soldering. I have used some tape to hold them in place. The tape can be left there to minimze the risk of pulling off the soldered wires during the next steps.
Leave these wires unconnected and make them ready by peeling off the insulation. These will be connected to the reader ciruit later on. Make sure they can not reach ground or short circuit in any way.
Preparing the spare PC
You have made the hardware to read the chip, so now you need to supply the software. There is this great sofware made by http://www.allservice.ro/ that can be found here:
http://home.ripway.com/2005-7/365678/index.htm - Select R24RF08 v2.0b - Reader for ATMEL 24RF08 (Freeware)
While you are at it, download the Supervisor Password decoder IBM Pass 2.0 Lite found here:
http://home.ripway.com/2005-7/365678/index.htm
Also great software made available by http://www.allservice.ro/ .
Note:
Softpedix wrote that the download mirror has limited bandwidth. If you can’t download with the above, try these:
http://www.allservice.ro/forum/viewtopic.php?t=61 – Programmer
http://www.allservice.ro/forum/viewtopic.php?t=56 – IBMpass Lite
Install the software.
Connect the ATMEL chip reader to the spare PC.
Fire up a command promt(Start->run type cmd) and navigate to the folder where you installed R24RF08 v2.0b. Type in (don’t hit Enter):
r24rf08 dump.bin
Dumping the password
- Turn on your ThinkPad with all the wiring you just soldered.
- Press F1 during the startup to enter the BIOS.
- Wait untill all activity stops, blinking HDD leds and such.
- Connect the ATMEL Chip reader. GND first then the SDA and SCL.
- Now go to your spare PC and Hit enter on the command prompt.
Now there should be a file created in the same folder with the name dump.bin. Disconnect all the wiring off your TP and assemble it back together.
Decoding the Supervisor Password
On your Spare PC start the program IBM Pass 2.0 Lite. Load the file you just created (dump.bin). Navigate with the scroll list to the memory address of 0×330. Tada! It should look something like this:
Tuesday, October 10th 2006 at 6:44 pm
Very well written. I would only mention that the download mirror has limited bandwith. The following links are from the http://www.allservice.ro:
http://www.allservice.ro/forum/viewtopic.php?t=61 –programmer
http://www.allservice.ro/forum/viewtopic.php?t=56 –IBMpass Lite
Tuesday, October 10th 2006 at 9:15 pm
Hacking IBM Thinkpad Bios Password…
This dude solderes some wires to the laptop to retrieve a password stored in a chip….
Tuesday, October 10th 2006 at 9:55 pm
Wish there were a way for the T60p
Wednesday, October 11th 2006 at 12:34 am
“Wish there were a way for the T60p ”
Have you checked what kind of chips there are on the motherboard?
Friday, October 13th 2006 at 6:32 am
There is a solution for T60! Didn’t you see the download page?
It points to this:
http://www.serviceforum.lx.ro/viewtopic.php?p=1061#1061
Monday, October 16th 2006 at 6:55 pm
I was really happy when I found your page about hacking ibm-bios password. But when I start doing this, I found hard to recognize this ATMEL, 24RFC8, 0446!! Is atmel on the top of the cpu? Cause there is writen TPC8002, 2C as on many other chips!! and not 24RFC8!! but it has 8 leads! Please help me! Have a nice day, Jernej
Tuesday, October 17th 2006 at 12:34 am
Jernej, you need to find a chip has written Atmel , 24RFC8 written on it. Check above, ive added a couple more images with closeups.
The atmel is located under the CPU looking chip.
Wednesday, October 18th 2006 at 12:28 am
I am doing this for my R40, i found that the amtel chip is actually underneath the motherbaord, between the hard drive and the bottom of the motherboard. i had to completely dissasemble my TP as far as i could go to get at it.
ill let you know how it goes.
Wednesday, October 18th 2006 at 1:21 pm
Tim, maybe you could post a pic of the location of the chip? Then i could include it in the post so others can find it.
Friday, October 20th 2006 at 1:59 pm
Digg this story at digg:
http://digg.com/security/Hacking_ibm_thinkpad_bios_password
Saturday, October 28th 2006 at 4:53 pm
Hi there is realy good what you did, i start doing but get to a stage were i found the the eprom is difrent the only atmel the board got is 16contacts not 8. and the numbers on it are ATMEL / 24RF08CT / 9952. Do you know in what contacts shoud i weld the wires, do the software work the same way??????
Thanks
Nuno
Monday, October 30th 2006 at 12:43 am
Hi Nuno!
Are you sure your 24RF08 has got 16 pins? There is one with 14 pins. however, allservice has got this schematic for the wiring.
Also, what model is your TP?
Thursday, November 2nd 2006 at 8:50 am
I searched for the Atmel chip on the MB of a TP A21m. Found a 14 pin chip underneath the MB near the memory slots. Again, had to disassemble the whole thing to get at it so I guess I’ll have to run the wires out of the case to get it running again. I hope this is the one I need. It is marked ATMEL F 24RF08CT 0042. I will try using the diagram from allservice and hope that I get the right pins connected. I did take a couple of photos showing the chip and it’s location but I’m not sure how to post them.
Saturday, November 4th 2006 at 1:05 pm
hey.
is there any way that I can read the bios password, while im in windows??
i want to update my bios but it requires password, and I dont remeber it?
By the way, its a ibm r51 i’m talking about.
Sunday, November 5th 2006 at 1:48 pm
Hi, i have an old tp570, but not the supervisor password.
i have found the chips Atmel (8 pins like the T42) near the bottom-left corner.
I was done all step by step, and now i have my 1024kb dump.
But the password don’t appear at the address 0×0330. Only Null bytes.
Any help, please ?
PS great this page, thanks.
Sunday, November 5th 2006 at 4:47 pm
According to allservice.ro, The SVP is not set. You have to reset only the power on password, by removing the RTC battery.
Sunday, November 5th 2006 at 10:02 pm
>> Hi, i have an old tp570, but not the supervisor password.
>> I have found the chips Atmel (8 pins like the T42) near the bottom-left corner.
>> I was done all step by step, and now i have my 1024 bytes dump.
>> But the password don’t appear at the address 0×0330. Only Null bytes.
Using IBMpass’s DOS version, the password appear ! Thanks !
Note the password is store with Qwerty english keyboard character set.
Great thanks !
Monday, November 6th 2006 at 11:40 am
Thankyou very much for all of this.
I have an A22M with CRC ERROR (lovly message) because I loose all the information in the eeprom
so it will be great if you find for me the .bin file for the 24rf08 from any ather A22M laptop
even with wrong information .
sorry for my bad English
GREAT THANKS .
Monday, November 6th 2006 at 4:41 pm
I haven’t seen another post in reference to the T21 model, so I guess I’m the first in to try finding the elusive chip. I’m thinking mine must be bottom side like the R40, since I have a complete view of the top with no luck finding it yet.
Anyone else with a T21 done this yet?
Joe
Tuesday, November 7th 2006 at 3:31 am
To everyone following this post!
If you manage to find the ATMEL chip on your TP please email me with pictures of the location so i can put them here for others!
Mail me with your TP Model and a picture with the chip circled in.
Also i would like one original pic(without the chip circled in)!
Mail me at pekka ( atsign ) brevk (dot) org .
Thank you!
Tuesday, November 7th 2006 at 7:23 pm
Way too easy on a T21.
So much for “security”…
Wednesday, November 8th 2006 at 3:28 am
can someone please send me a picture of the actual wiring of the diodes and resistors and how they are grounded (i am not very good in this kind of stuff.. especially reading a schemetics)
thank you
Thursday, November 9th 2006 at 1:21 am
hello there.i built the system. i fould out that the simbol on my screen is a little computer and the command prompt says “Eeprom not available”
can somebody tell me how to get this thing going.
Thursday, November 9th 2006 at 4:36 am
hi all.. can some one tell me if the sketch of the 9 pin female is the back or the front that we see. and also where do you solder the ground.
thank you
Thursday, November 9th 2006 at 8:54 am
The wiring is(DB9 / Technican PC side):
5 - GND
The ground on the ThinkPad side can usually be just about anywhere. For example one of the mounting screw holes.
Thursday, November 9th 2006 at 5:09 pm
Hi, I have a Thinkpad Tp42p and my son put in a password which I forgot. I did all the procedures, and yes I managed to download the dump file, but, on line 330 does not reaveal my password. Please help
Thursday, November 9th 2006 at 6:48 pm
Hello.
I have read this over and over and i still can’t find where you have to ground the Zener diodes and serial port.
The one in the portable is clear.
The ground of the serial port is going on ground of the extra pc ore also to the portabel ?
Thursday, November 9th 2006 at 7:02 pm
Ground is common on the Thinkpad AND the technican PC
Just wire all grounds together:
Ground on the Technican PC DB9 is pin 5.
Ground on the ThinkPad can be any of the mounting screw holes (or pin 4 on 24rf08 with 8 leads / pin 6 on 24rf08 with 14 leads)
Ground on the diodes should be wired to Ground on the DB9 and Thinkpad ground.
DO NOT ATTACH IF NOT GROUNDED PROPERLY!
Thursday, November 9th 2006 at 10:08 pm
Fiezel:
I’m at work and using the T21 I unlocked, so I don’t havce access to the IBMPass program.
I had the same thing happen to me, but I fould that there was a button on the left just above the data from the .bin file that said “somethinorother” OFF. Clicking it got rid of the heiroglyphics and the rows of periods after the memory dump lines. It also magically made the password “Q21WSD” appear following line 0×330.
I hope this helps.
Joe
Thursday, November 9th 2006 at 10:45 pm
Is there any way you could provide more pictures of how the wiring setup is done? I’ve been through electronics classes but it’s been a while, and i just want to make sure i get this right. If you could provide any more information on this i would greatly appreciate it. Thanks.
Friday, November 10th 2006 at 12:03 am
hi all.. Can someone PLEASE help me.. I have taken my TP T21 apart and CANNOT find the Atmel chip can someone tell me where it coul be?
Thank you
Friday, November 10th 2006 at 2:45 pm
Frank:
Put your T21 back together. Turn it over. Remove the RAM access door. Viola! a 14 pin AMTEL chip conveniently hidden under RAM slot 1(closest to the outer edge of the laptop).
ADMIN:
What are the possibilities of setting up different “folders” for specific models? I’m willing to help if I can.
Joe
Friday, November 10th 2006 at 4:06 pm
Joe, i have mailed you.
Sunday, November 12th 2006 at 4:45 am
Here goes some addition information on how to do this! or even buy the reader from this person. Here goes the website: http://www.passwordmethod.com
Sunday, November 12th 2006 at 1:02 pm
Thank you verry verry much.
Thinkpad is up and running again.
Monday, November 13th 2006 at 6:26 am
hello admin.
this is the great thing you guys are doing and i really appreciate it. As my request for bios password for my Ibm TP 40 is been knocked back by IBM saying that it is impossible to recover the passwor and the only option i am left with is either buy another m/b from them that itself is the cost of laptop or dump it in the rubbish bin. but i refused to both the offers. so while surfing i accidently found your site through google. its pretty explanatory on how to do the wiring and other stuff.
anyway my question is regarding the ATMEL chip thats found under the WiFi card. i have done it all dissemble the laptop as i have gone thro this procedure before few times. i did find the chip as shown in the diagram with all the circuits and numbers whatever shown in the photo in the website. but only problem is that its number is different than written above. its written as ATMEL 24RF08 and some other numbers instead of ATMEL 24RFC8 0446. Still got the 8 pins as shown in the diagram and curcuits. looks exactly the same except above numbers. just wanna make sure it works even the numbers are different.
I have IBM TP 40 [(2373PM1) is the model no.] with 1.3 Ghz and 32 MB Video and 768 RAM with 14.1″ screen. any help will be appreciated. and once again keep up the good work.
Regards
funkyboyoz
Monday, November 13th 2006 at 2:44 pm
funkyboyoz , those last numbers are probably just the batch number of the chip.
You´ ve found the right one. As long as it says Atmel 24RF08.
Wednesday, November 15th 2006 at 6:05 pm
Hi,
I have a TP R30. Looking for the atmel chip. all i have found is a atmel 93c46
Is this it? it is also a 8 pin. if not please let me know were to find this little sucker
Friday, November 17th 2006 at 12:10 am
i have a thinkpad R60 and its dssassembled the only amtel chip i can find has this number
Amtel at97sc3203 1.2.8.05 ***** ***** and its a 28 pin chip.
and its located under the pci xpress expansion slot. any help would be greatly appreciated.
can post pics if needed please someone help me!!!
Mike
Friday, November 17th 2006 at 12:42 am
i found a diagram of the 28 lead chip if that helps located here >>>>>> http://www.atmel.com/dyn/resources/prod_documents/doc5010.pdf
hope that helps.
Friday, November 17th 2006 at 4:23 pm
Admin- Will this work or is it needed with the older 760xl series?
Thanks!
Saturday, November 18th 2006 at 9:02 pm
I have a ThinkPad 600X. I opened the laptop but did not find any of the chips you mentioned. Instead I find TPC8002(8 legs).
Please tell me what should I do.
Monday, November 20th 2006 at 6:03 am
Hello:
I was following your instruction on navigating the folder where I installed the R24RF08 v2.0b and IBMpass lite to the hard drive (c drive). Then I type in r24rf08 dump.bin and setting up the wiring and connecting the ATMEL chip reader. When I go to my spare PC and hit enter on the command prompt. It will exit the r24rf08 program as stated in the instruction and the password won’t dump on the dump bin that I created. Can you tell me what do I do wrong? Looking forward for your reply.
Regards,
John
Monday, November 20th 2006 at 8:03 am
Hello:
I have 2 errors message when I press on F1 during the startup to enter the BIOS.
Error 0271 - check date and time setting
Error 0176 - System sercurity. The system has been tempered with.
Is it a problem?
Tuesday, November 21st 2006 at 9:17 am
Hi,
I have found the ATMEL chip on the motherboard and been able to find the supervisor password following your instructions. Thank you very much for the information you provided here.
Santonu
Wednesday, November 22nd 2006 at 3:52 am
Hello, thanks for these guide. I have an R50e notebook and Ive managed to find a atmel chip that seems the one on you are talking about, but im not shure if these procedures will work couse the numbrer is slightly diferent. The one Ive found is an
Atmel
24rf08 CN
0536
Do you think these guide will work for my chip?(it has 8pins and is located just there). finally another question, what if the password is also on the HD? couse i have read that there are 3 types of password SVC, POP, and HD password. It seems that my notebook has HD password and POP or SVC password couse even if I remove the HD there still is a password on boot (before booting) so I cant acess windows or any OS
well if anyone could give me a had my mail is ramironospam&argentina.com
(remove nospam to e-mail me, that is done to prevent automated bots finding my real mail)
Wednesday, November 22nd 2006 at 7:17 pm
i have an T30 and i dont seem to find the atmel chip it may be named othervise any ideas where i can find it?
Thursday, November 23rd 2006 at 5:49 pm
ibm thinkpad T42
i have read the bin file but whene i open it with pass tool password is encoded how to decode it ?
Friday, November 24th 2006 at 12:30 am
I was able to find the password using the dump bin but as soon as I entered onto the laptop, there was a OK signal but eventually denial it ? Why is it that way? What do I do wrong? Looking forward for suggestion.
Thanks,
John
Saturday, November 25th 2006 at 4:22 am
Hi there i am also looking for a picture on how you connect the diodes to the seriel port and how you ground the 2 zener diodes too i have over 10 laptops with the bios password,so i will post back if i have any differeiculties with them.if some1 can email me on be great
Many Thanks
Angel
Saturday, November 25th 2006 at 7:37 pm
Hi i have got a tp 390x but unabell to find the the ATMEL 24RFC8 CHIP . Can anbody please help
Saturday, November 25th 2006 at 7:43 pm
Hi i have got a tp 390x but unable to find the Atmel chip. Can anbody please help
Monday, November 27th 2006 at 1:06 pm
Hi,
The way your explained here, is the only way I found until now. I could buy a new Atmel chip, too. would you prefer this??
Because, I don’t think, that I will find the atmel chip on my T30 2366. hmm I even can’t remove the case
hehe
Can u tell me the place of the atmel chip and scl and sda on a T30 / 2366 ?????
I can see under the mousepad a big chip with intel, but there is one more little board under the mainboard next to the RAMs. I hope u understand it, because my english is not so well. Or do you know any germany websites, where the same thing is explained??
the most important thing for me noow is the place of that ATMEL CHIP and SCL and SDA on a T 30 ??
If there are any pictures, this would be very very nice.
Aaron E.A.
Wednesday, November 29th 2006 at 9:01 am
Hi Victor and others from ALLservice, I admire your devotion to help the community suffering from (or enjoying) TP security and patience needed to answer all the questions, often pretty stupid :-). Among many others, you have saved myself being locked out from my TP T42 after 3 tries to guess the SVP. Worked as charm with the simple interface, I only had to try 2 technician computers (my good old TP 560X could not find the eeprom, DELL C610 could). There is one problem left in my case: How do I get rid of the of the ERROR 0199: System Security – IBM Security password retry count exceeded? It is still there although I turned SVP off… It must be possible to reset this somewhere, isn’t it?
To help the community a little: I also looked at the driven interface and I have 2 ideas to possibly make life even easier.
1. What about using MAX233 (or 233A) instead of MAX232 (A)? MAX233 includes built-in capacitors and you would only need one more (designated C3 in the driven-i2cprog.pdf) which would simplify the circuit design (if I understand it well).
2. For obtaining any of the chips, consider visiting http://www.maxim-ic.com. You can get a really good price there. One possibility is to buy them and the minimum batch will suffice to anybody till his/her last day. What I’d recommend is to order a free sample. Just choose from the many variants a chip package that you can use (a while ago I ordered a sample of other stuff in legless form – not very suitable for soldering by hand). If you do not insist that you get it ASAP, 2 specimens come by regular post completely gratis packed neatly in a little box right to your home (otherwise you pay the express delivery). Know any cheaper source?
I wish you all the best and good luck. JL
Thursday, November 30th 2006 at 1:15 am
So its not possible to get the password this way on a R60 ?????? i’ll just have to frk ove he cash for a new laptop. :S:S:S
Thursday, November 30th 2006 at 2:37 pm
Has anybody already tried this on an X40 resp. can tell me where the Atmel Chip is placed on the board? I searched for it but didn’t find it.
Another question. Im not quite fit about this whole Resistor-stuff. There are many different types of 2,2kOhm resistors. Which ones do I have to buy?
Thanks
Uli
Friday, December 1st 2006 at 12:25 am
@Mike:
You can get rid of the password on a R60 by using the PC8394 Tools from allservice. I saw they just added this model, and I understand that almost all new models can be unlocked with the new software.
Friday, December 1st 2006 at 8:48 pm
Hi
I’m having a similar problem but its the boot password that I cannot get rid of. Is there a way to do this on the TP R40? I’ve disconnected the batteries (both the cmos battery and the laptop battery).
Any help would be appreciated!
Monday, December 4th 2006 at 1:08 am
Please send me the exact diagram with the two resistors and two diodes and the socket 9
9 pin socket I
Monday, December 4th 2006 at 12:56 pm
We Tried and it works well
thanks
Rajesh
Monday, December 4th 2006 at 8:10 pm
Thank you all. Took me less than 30 min to assemble the kit and get my password recovered of a T21. Just fixed another TP X40. Worked like a charm. By the way the chip is located beside the CMOS Battery, You just have to take the keyboard out peel off plastic covering on the chips. Its a 14 pin chip just like a T21. Have FUN guys and good luck.
Take care,
Imran
Tuesday, December 5th 2006 at 7:02 am
any comments on the G40
Tuesday, December 5th 2006 at 8:04 am
@Imran
Sure, that the X40-Atmel is nearby the CMOS-battery? What Type do you have? I just disassembled my keyboard again and found nothing there (Type 2371-79G). But I also read, that on the X41 it is placed on the bottom of the board nearby thy PCMCIA-slot. Maybe its also there on my X40 … I hope so.
Cheers
Uli
Tuesday, December 5th 2006 at 12:58 pm
HI
Does anybody have some experience with Thinkpad A31 model? Forgotten power -on password, should be usually removed by disconnecting backup and power batteries, but in this model it doesn’t work. What is the type of Atmel chip here, and where it is located? Advices will be appreciated. Thanks.
Tuesday, December 5th 2006 at 3:01 pm
To Brian:
Here is a topiuc on G40
http://www.allservice.ro/forum/viewtopic.php?t=380&highlight=g40
Tuesday, December 5th 2006 at 3:36 pm
Aqui tampoco trabaja el metedo de desactivar la baterias ( batery off ) para desactivar el POOWER ON PASSWORD.
AGRADECERIA INFORMACION.
incursion1@gmail.com
Tuesday, December 5th 2006 at 3:42 pm
Necesito desactivar la POWER ON PASSWORD DEL TP A20m de IBM ( NoteBook)
SI alguien sabe como, favor escribir
incursion1@gmail.com
Wednesday, December 6th 2006 at 2:17 am
Hi, I just built a simple programmer, and run r24rf08, I get a file ,mynb.bin in my computer,
but whe I run IBMPASS, I found the all data are Zreo in the file. Could you tell me how to solve this problem?
Wednesday, December 6th 2006 at 11:32 pm
Hi.
My ibm X40 has ath ATMEL Chip number AT97SC3201 with 28 pins. Anybody knows how to attaach the I2C cirruit with this chip? Any help will be greatly appreciated.
Thanx
Mana
Thursday, December 7th 2006 at 8:39 am
@Mana
This is not the right one. The chip you found is the security chip. The password-Chip is the same one all others have (24RF08). You have to keep on searching. Im still not sure, where the chip is placed on the X40. Some say, under the keyboard, nearby the CPU, others say it’s on the bottom of the board near the PCMCIA-slot. When you found it, please tell it here.
Thx
Uli
Thursday, December 7th 2006 at 9:49 am
@Mana
@Uli
Please mail me pictures to the mail above =)
Thursday, December 7th 2006 at 10:03 am
@admin
Of course I do. I’ll get the X40 sometime in the next week and will start with disassembling directly (the circuit is already bulit). Where should I send the pictures to (mailaddress)?
Cheers
Uli
Thursday, December 7th 2006 at 10:05 am
OK, reading helps
pekka ( atsign ) brevk (dot) org
Thursday, December 7th 2006 at 2:05 pm
dear friends who succeded,
could anyone be so kind to post a photo about these wires-resistors-zeners setup?
for dummies in electronics like myself…
i have all the “ingerdients” but i don’t even have idea where the gnd (ground?) wires go
grazie mille,
-chaos
chaos at financier dot com
Thursday, December 7th 2006 at 2:07 pm
@uli
i would appreciate the pics of the circuit and the chip also
thanks and sunny regards,
-chaos
chaos at financier dot com
Thursday, December 7th 2006 at 2:42 pm
@chaos
In this thread there’s a picture of a finished (simple) circuit.
http://www.allservice.ro/forum/viewtopic.php?t=380&highlight=g40
It’s much easier to built, when you have such a breadboard, because you can change the setup quite fast. I also bought a small one here in Germany for 6,95 Euro, so it’s not that expensive.
Regarding the ground wire. On the one side, you solder it to the DB9-connecter to pin5, then you go further and connect it to the Zener-diodes and then to the notebook ground (e.g. to the screw of the VGA-port or somewherer else).
Cheers
Uli
Thursday, December 7th 2006 at 6:14 pm
danke sehr Uli
Friday, December 8th 2006 at 12:04 am
Thank you everyone who have mailed me pictures.
I will try to get them online as soon as i get the time.
Those of you requesting a picture of the actual reader, i have paintbrushed a simplified schematic. I know you wanted a picture but i find it hard to get a shot that is easy to understand.
The simplified picture above in the post is the first draft, so bear in mind that it might have errors, as its late at night were i live, and i make mistakes while tired. Please let me know if you find something that is incorrect!
Also, check out @uli´s link a coulpe post up. There’s some good shots of the reader.
I would also like to mention that anyone with information on other models are free to create their own post here at sodoityourself.com and post instructions.
Friday, December 8th 2006 at 7:25 am
@admin
Your schematic looks bloody good and is definitely easier to understand. Thanks for this.
@the rest
But mayby some more remarks to kill some confusion.
1. Resistors
The 2.2KOhm resistors I bought e.g. have 3 red stripes and not red-red-orange. I also read in the allrevice.ro-Forum that there are different kinds of color-codes for resistors with the same resistance around the world. Just to confuse the people a little more …
I also read that it’s recommended to buy resistors with as less Watt as possible. The smallest ones I got, had 0,1 Watt (1/10). 0,25 and more Watt might be too much (as I read). So try to buy resistors with 0.1W at 2.2kOhm.
2. Zener diodes
Regarding the Zener Diodes. I don’t have to be excactly BZX79. The only important thing is, that they have 5.1 Volt. There are many different types of Zeners, so if you need to buy some, just check that they have 5.1 Volt, the rest does not matter. When you built the circle later then, please remember that diodes have a polarization. This means, that they just work in one direction and when you connect them in the wrong direction, nothing will work. Normally a ring around the diode shows you which way it works. You can also see it in the schematic Admin paintbrushed.
Enough electrics for today …
Cheers
Uli
Saturday, December 9th 2006 at 1:33 pm
CARL:
Did u find the correct chip? I also have a R30. Only ATMEL chip I could find is the 93c46 one. Is this the correct one?
Thanks
Chris
Monday, December 11th 2006 at 11:31 am
ok never mind
found it..
on the R30 it’s located on the underside of the board below pcmcia bay.
Monday, December 11th 2006 at 3:18 pm
also, i used the ibmpass 1.1 command line tool with /a switch to get password from bin dump.
PEACE
Monday, December 11th 2006 at 5:43 pm
Great info, however I’m having problems reading the atmel. I keep getting an error message saying can’t find eeprom. Can anyone help.
Monday, December 11th 2006 at 6:08 pm
@Paul
Check your connections, also what TP do you have?
Monday, December 11th 2006 at 6:52 pm
Hello Admin
Thankyou for all your support. Just located the ATMEL chip on my TP X40 Type 2371. It is located under the motherboard close to the USB port and RAM slot. Its an eight pin chip with this Number on it. ATMEL 93C46. I will try to read the dump today. will let everybody know how it goes.
Regards,
Mana
Monday, December 11th 2006 at 6:56 pm
Hello
It me again. Please ignore my last comment. the actual chip is under the mothrboard directly beneath the PCMCIA slot. It is ATMEL eight pin with this number on it. ATMEL 24RF08CM. Again its a TP X40.
Regards,
Mana
Monday, December 11th 2006 at 11:42 pm
Hello All,
trying to work on my X40. Keeps getting error “Circuit not found or bus error”. I know my circuit is working fine becuae when I pluged the same with another T21 just for a try, it game me the dump file right away and I could read the dump file and the password. I dont know what I am doing wrong in this case (S40). Any suggestions??
Mana
Tuesday, December 12th 2006 at 3:38 am
Hi Mike, the TP is a 390X. I’ll check connections and let you know if there is any difference. Also, for Ian, posted above for 390X, the atmel chip is next to the usb port at the back end, near the power plug.
Tuesday, December 12th 2006 at 4:20 pm
Hi Mike, it was a connection problem. Works fine now. Thanks. If you need pics let me know and I’ll gladly send them in. Again many thanks.
Tuesday, December 12th 2006 at 4:55 pm
There are mistakes in your paintbrushed schematic.
1. You mistaken the SCL and SDA, the red must be SDA and the green is SCL.
2. The color code is wrong, 2.2K=2200=red, red ,red.
Good luck!
Wednesday, December 13th 2006 at 4:31 am
@Softpedix
Thank you, you are so right. I have corrected the pic.
Its no good to read schematics while tired
Wednesday, December 13th 2006 at 11:38 pm
Hi.
I have T30.
Found ATMEL - under the RAM chip.
Soldered fine - have enough of this experience.
Conected. Started DOS prompt.
Had a respond: can not create the file (data .bin file).
What’s wrong?
Could anybody help me? I’m going nuts for the last few days.
Thursday, December 14th 2006 at 12:27 am
Hello… Let me start by saying that I have been playing with, and searching for ways to reset the bios password forever. I have a Thinkpad R40 that used to be a goverment laptop. I have this thing tore apart to do a few little upgrades, with the motherboard totally out of the shell. I found the ATMEL chip under the harddrive caddy. Question is does anyone have a picture out of a R40 that is wired or can instruct me on what needs to be wired and where? Building these things is no problem, but I am kind of leary trying to rewire something so small but what do i have to lose? A laptop that i cant use, lol… I think it is worth it. I kind of understood the instructions, and then i amde the mistake of reading everyones comments, and now im not totally sure. Any help or advise would be great, Thanks!!!
Will
Thursday, December 14th 2006 at 12:54 am
Helo Admin i have find in my Thinkpad 600E the chip Atmel 24RF08CT but with 14pin. please can you write me, which pins are the SCL and SDA?
many thanks,
tonic
Thursday, December 14th 2006 at 1:04 am
To tonic: open this: http://www.allservice.ro/forum/dl/simple-i2cprog.pdf
and you will find all information. Just read forum carefully.
Thursday, December 14th 2006 at 7:07 am
i cant afford 199 to fix my stuff its my laptop for school :S is there no wireing for the r60??? like all the other models shown here ????? can i bypass it manually?
Thursday, December 14th 2006 at 9:05 pm
I have a IBM Thinkpad R30 and it will not hold the date/time everytime I shut down it looses it. I went to Radio shack and bought a new cmos battery, installed it and it still will not hold system time. Any ideas out there?
Thanks,
Julie
Thursday, December 14th 2006 at 9:15 pm
I am having the same problem as listed in every other post about the r40. I wanna know how to bypass my power on password that I never even set or even know how it got there. Ibm wants me to send it in but wont tell me how to do it. My question is…
Is there an easier way to bypass? Do I have to mess with the eee thing? As you can see I have not a clue on what I am doing. Please help. Also I have another question are the passwords all the same a co-worker has the same laptop as I do and is there a way she can get into her programs some how and give me her password. Or if anyone else already reseted theirs and have a password that I may be able try.
Please help I am going Insame and am ready to strangle my teenage daughter!
Thursday, December 14th 2006 at 9:28 pm
Another quick question while surfing the web I noticed some forums talk about Jumpers. Do the ibm R40 have any? I have a power on password problem that I need to clear.
Friday, December 15th 2006 at 2:38 am
I have an IBM ThinkPad 600E with ATMEL 24RF08BT chip on it. There are 14 legs on the chip. I used simple-i2cprog.pdf to connect wires to the chip but with no success.
Can You help me please!
Friday, December 15th 2006 at 8:22 am
Hi Mike,
Started to build the dongle. Cut an old serial cable in half and used the femaile 9 pin. The parts were a total of $2.50 tax included at RadoShack.
The breadboard was a piece thin carton where I punched the holes for the 2 resistors and 2 Zehner diodes. The whole looked terrible but no shorts .
Anyway tried to look for the Atmel Eeprom but could not find it until I noticed that on your list above of TP models the TP23 was not listed. Was this a real omission in your list? So I’am out of luck?
Pls help.
Friday, December 15th 2006 at 8:52 am
Never mind Mike,
I went to the Allservice site and found this:
Locate the eeprom first according to your model (E.g. T20-23 and T30 have the eeprom underneath and can be accessed by removing the RAM modules cover, no need to dismantle the laptop.)
Darn, wished I found it earlier, my whole tp23 is all apart.
Friday, December 15th 2006 at 7:02 pm
This is the next step to revive the T23 my neighbor gave since he could not do anything. The Atmel Eeprom is the larger one . This means too that the contact are closer together and looking at my solder iron I realized that the width is 3 factors wider than the trace. You don’t wan’t to drop solder between the traces or burn a trace because its too hot and start ordering a new motherboard.
So I filed my solder tip conically into a very small tip. Beats buying a new fine tip soldering iron.
I’ll keep you abreast of my project next.
Friday, December 15th 2006 at 7:12 pm
@walter
Don´t you think the taking apart part is the fun part? Now you know what it looks like inside
Good luck to you, and i would really like pictures if you got the time: pekka (atsign) brevk (dot) org .
Friday, December 15th 2006 at 8:12 pm
I located the eeprom on my r40 Ibm. It is on the motherboard under the hard drive. It is a two colored green and black chip. I wanna go ahead and do the whole wire thing but I dont have any idea where to begin or on what side is the SDL /SDA. Someone any one please i am begg’n now.
Thank you.
Also my coworker has the same computer as I do hers is not locked at all nor did she ever set a pass word. Is there a way we can get into her eeprom and see her code and use it to unlock mine?
Friday, December 15th 2006 at 9:29 pm
Hi Jodim
I would not do it the hardware way as decribed here. Too risky. If you short out something or burn a trace you ‘ve got 2 TP’s out of service.
The soldering is very delicate if you don’t do it every day especially with the 14 pin chip. I suggest practicing it first and have definitely a sharp tip. It works great with my old solder iron. Will send a pic also from the chip location. Oh ya check with an Ohmmeter if the wires are not shorted to the next pin before you turn things on.
So just worked on your locked TP. Good luck.
BTW I still have not finished mine yet. Came upon software related problems.+
Friday, December 15th 2006 at 10:21 pm
Thank you Walter for the responce to my cry. I still have no idea where to solder the wires. My chip has 8 pins. How do I find out where to solder the wires on that chip. The manual list nothing about that. I was so excited to find this forum and it’s terrific that we have you men/women to help us dummies out but I am still lost. I see one other person unlocked their IBM R40 too bad he didn’t list the password!!!….
Saturday, December 16th 2006 at 12:19 am
OK Guys,
all the hardware prep went smooth. Followed all the instructions but at the cmd prompt it would not do anything.
had to use dos commands cd\ to get to rootdirectory and then cd\Allservice\dir
and then again cd\Allservice\24RF08
then \dir
then r24rf08.exe /p
it saves the file in c drive under P
went into windows and selected IBMPass20 Lite
opened th p file in C
click on the A to A conversion top left which gave me the above printout and look at line 330
BUT the pass word brought me to OK and after that went into LOCK again.
Help ! what do I do now.
Saturday, December 16th 2006 at 4:46 am
Can Mike or somebody explain how to read the line on 330. Mine read….you wouldn’t guess it …..IBM….twice like on the sample above ……..and all that work I did to get it…duuuuh.
Anyway how do I get through the other stages.
What is the second name on line 340 representing and what can I do with the numbers who are the same like the sample above.
I’m determined to get this lockup problem solved. Right now the score its IBM two - Walter one
thanks for all the help you can give me.
Saturday, December 16th 2006 at 7:32 am
Will you please disregard my instruction on how to use the dos commands.
Victor of Allservice has a better instruction on the Allservice forum. He is the one who wrote the program. Go read the forum if you need the instruction.
Sunday, December 17th 2006 at 2:18 pm
hi
i have a IBM laptop.model no is X21.and its pentium 3.i have a problem with it .i had a bios code in it..so i cannot ON the laptop now ..i want to break it ..so plsss u help me..because i visit ur site..and i think u can help me ..i will be waiting for ur reply…
Monday, December 18th 2006 at 11:55 am
@zohaib
Just read the instructions on the top of the page and follow it. You have to built a little electric circuit and solder some cables to a chip on your notebook. But this is all described on the top of the page. Please read.
Cheers
Uli
Monday, December 18th 2006 at 3:46 pm
hi,
Ive had a readout frome my a20m, but the paswoord is not compleet? What’s with thate?
Mi readout 0*0330 -ob bo-
0*0340 bo—ob
Since you can’t put in (-)? tried the ovious combinations, but nothing.
PS: every readout is exaxtly the saim.
Greets,
Stef
Monday, December 18th 2006 at 9:43 pm
@stef
Make sure you have clicked the button in the upper left corner in ibmpass ( with a little aA label).
Tuesday, December 19th 2006 at 1:58 am
OK guys,
Guess what, I’m writing this on a thinkpad T23 with a locked password my neighbor could not unlock and give the TP to me. Thanks to this forum and Victor of Alservice and $2.50 on radioshack parts an HD from a Compaq which had heatup problems my son gave me I’m now now the proud owner of a pretty good working laptop.
I changed the easy password now. Good luck guys and don’t give up.
Tuesday, December 19th 2006 at 3:26 am
I have a problem. I just followed all instructions on how to do this from this forum and allservice, Well I have the dump file but it is all zero’s. where should I go from here?
Tuesday, December 19th 2006 at 9:57 am
Thanks for youre reply mike. Don that and this was the resolt. So decrypter on but still no clear password.
Greets,
Stef
Tuesday, December 19th 2006 at 11:12 pm
need location of t he chip on TP A31 any help would be great
regards
Scott
Wednesday, December 20th 2006 at 10:10 am
Dear all,
I finally received my X40 yesterday and was so happy, that I can start soldering. So I first took it out of the box, switched it on and saw …. a power-on-password. So I disassembled the keyboard, disconnected the BIOS-battery, waited 10sec, connected it again, switched it on and: I directly work
I’m so disappointed that I’m not allowed to solder something now
Nevertheless, many thanks for this very valueable information.
Cheers
Uli
Friday, December 22nd 2006 at 6:50 am
CAn someone tell me the location of the chip I need to solder? I have an A21m Thinkpad
Friday, December 22nd 2006 at 6:28 pm
Hi,
I am going to try this. Hopefully it will help me as it did for most ppl here. I have found the ATMEL chip on the T22, but I’m a dimwit when it comes to electronics. Can someone please let me know if I’m doing the right thing. I am looking at the schematic and this is what I see visually :
1. Registers are soldered to pin 4 & pin 7 on the Serial Port.
2. Other kind of wires are soldered to pin 5 (GND) & pin 8 (what kind of wires are these ?)
3. The first diode wire is soldered to three (3) wires: the register wire from pin 4; the other wire from pin 8; and the wire coming from pin 5 (GND).
4. The second diode is soldered to two (2) wires: the register wire coming from pin 7; and the wire from pin 5 (GND).
The pic of what to buy doesn’t show that the wires in pin 5 & pin 8 are needed nor what kind of wire they can be. What kind of wires to use ?
For soldering wires to the motherboard, it shows to solder two to the ATMEL chip. Ground is easy but can the two to be soldered to the ATMEL chip be soldered anywhere on the chip or is there specific location on the chip ? And finally, connecting these wires to the circuit, means connecting these wires to the wires from pin 4 & 7 and the ground one to the wire from pin 5 ?
PLEASE HELP … email diagrams or complete instructions & what is needed to majortroubles@hotmail.com
THANKS THANKS THANKS in advance !!
Saturday, December 23rd 2006 at 8:25 am
i have IBM 240X. Ifound the ATMEL chip @ the other side of the motherboard….
following all the instructions… Why is it that there was no file created??? i typed r24rf08 dump.bin hit enter after i have connected the wires to the chip… what seems to be wrong??? I tried to use the patcher.exe it produces error “eeprom not available”…. but i checked out the atmel and it is well connected.. please help me
Monday, December 25th 2006 at 2:02 pm
i have IBM 390X japan model i can’t find the ATMEL chip can you plsss. help me what is the exact chip number of this model…
Monday, December 25th 2006 at 2:46 pm
I tried the above precedure with labtop ibm x40 actualy when i run the program
i received the message ( error eprom not available)
but after i tried several times i was able to enter the setup and I changed the password and the problem solved iam so gratful for the person who put me on the road so for further information fel free to abroach me
Tuesday, December 26th 2006 at 2:26 pm
Hi all and especially owner and writer of Sodoityourself.com.
After having been given a free IBM R61 and using the guide on this site to solve the supervisor issues, i just wanna post a big thanks for the guide and a job well done by the writer. Merry Christmas to everybody, and again thanks. H.Herold Denmark
Wednesday, December 27th 2006 at 7:13 am
I’m writing this on my revived T23. I would like to tell the people who started the project but encountered the several problems described above, please recheck your work. the instructions are correct and clear enough. If you found the eeprom and you have problems understanding the schematics go to http://www.allservice.ro and look for the picture where somebody soldered the resistors (not registers Rob) direct to the 9 pin female connector. Just copy what he did and you don’t have to understand the schematic. Be sure to solder the Zehner diodes with polarity on the right place (black band)
On the soldering I can’t emphasized enough to be careful with soldering. The darn thing is so small and if you don’t have a fine solderpoint vile the point to a conical sharp tip. Use the smallest solder wire you can get at Radio Shack. Do not use electrical or automotive solder wire. Use a magnifier to do the soldering and even hold your breath while touching the solderpoint. before turning the tp check for shorts caused by solder bridges between traces or chip legs and check continuity with an ohmmeter.
The 000 reading or other faulty readings is because you haven’t downloaded any data due to bad connections or shorts.
Good luck.
Wednesday, December 27th 2006 at 4:24 pm
Hello!
I have an IBM T60 laptop and have moved my BIOS password!
Can one help me?
Friday, December 29th 2006 at 5:08 am
Hello Reichel,
help yourself first by reading this forum from the beginning and the one at http://www.Allservice.ro about this subject.
If you have problems understanding any of them then maybe we can help.
Also explain what you mean with ‘moved’ password. Do you just simply forgot?
Walter.
Friday, December 29th 2006 at 6:48 am
Thanks. This worked perfectly on a T41. IBM said we had to replace the MB after a supervisor password was changed by an employee, but this procedure sorted it perfectly. Better than replacing a 1 yo machine!
Friday, December 29th 2006 at 3:28 pm
I have a IbmT42 Laptop, The Password has been given to the HDD I belive, If I Insert the HDD I will not be able to choose the Boot Sequence it will ask for password, If I remove HDD i will be able to enter into CMOS Setup and Can Change Boot Priority. But When i insert the HDD it will again ask for Password. I tried with many Utility Boot Cd But it is of No use. Can you help me to break open the HDD
Saturday, December 30th 2006 at 1:20 pm
Hallo!
Ich komme aus Deutschland, daher kann ich nicht so gut Englisch!
Ich habe auch ein Problem mit Bios-Passwort bei IBM T60, kann mir da einer weiterhelfen?
Geht diese Methode auch bei einem IBM T60, wie oben beschrieben?
HILFE, HILFE :-)))
Thanks.
Saturday, December 30th 2006 at 9:13 pm
Besten Reichel,
Ihre T60 is nicht in die Liste oben fuer diesen Methoden. Aber diese Artikeln ist von
http://www.allservice.ro/forum/viewtopic.php?p=1061#1061
Newer T43/T43p and R52 don’t use 24RF08 but PC8394T-VJG TPM chip.
PC8394 Tools are needed to read this chip .
T60/T60p, R60 and Z60 support is included in PC8394 Tools now.
Dieses is ein kompletes Methode und Sie brauchen nichts zu bilden.
Es kost ungefaehr 100 Euro .
Toi toi toi
Gruesse von Land zu Land
Walter.
Saturday, December 30th 2006 at 9:26 pm
Hi Jon,
I had a locked bios supervisor password and a HDD lock password.
I have been able to unlock the bios password using the description on this thread but need another method to unlock the HD. This method is advertised in http://www. Allservice .ro but cost you over $100. Luckily I had a spare HD from another not working TP.
If you can find an used HD for less than $100 I would go that direction.
Walter.
Sunday, December 31st 2006 at 4:34 am
Hi!
I successfully removed the password from my T30 using the description provided above.
I found ATMEL chip in the area where system memory [SO-DIMM] is installed.
No need to disassemble the laptop.
Excellent experience. Thank you very much!!!!
Dmitriy
Sunday, December 31st 2006 at 7:00 pm
Julie wrote:
I have a IBM Thinkpad R30 and it will not hold the date/time everytime I shut down it looses it. I went to Radio shack and bought a new cmos battery, installed it and it still will not hold system time. Any ideas out there?
Hi Julie,
I know you wrote this 1/2 month ago. My unlocked TP suddenly showed the same problem, possibly caused by putting the TP together not correctly after looking for the eeprom. The problem seemed not the backup battery underneath the main battery but two ‘watch batteries’ somewhere close to the rams. It had loose contacts which I fixed. Its OK now.
Sunday, December 31st 2006 at 7:15 pm
I like to add to this that I did not suspect the backup battery because it had a fixed connector and the watch batteries had spring clip connectors and my problem occurred when I was moving the TP quite a bit. I bend the clips some more for better contact pressure and cleaned it with alcohol.
Walter.
Tuesday, January 2nd 2007 at 1:56 am
i recently bouhgt a used ibm 600e laptop the cmos battery was dead and when i went yo replace it the holder that it plugs into came off the motherboard and i cannot find out where it goes so i can resolder it back on. i did not mention that the cmos battery has two wires on it and plugs into a holder on the board the holder on the board is the one that has came off i have checked all the web sights trying to find out where it refastens but have found none. on the holder it looks loke it has only one solder connection as if the positive and negative side are looped together if so how could a battery work in this manner any and all help would be appreciated on this as i want to give it to my granddaughter after i get it fixed thanks a million in advance Sonny
Tuesday, January 2nd 2007 at 5:17 am
YOU GUYS ROCK. I AM NOT VERY GOOD AT READING ELECTRONIC SCHMATICS. AND I AM NO GOOD AT SODERING. BUT I FOLLOWED THE DIRECTIONS ABOVE AND NOT ONLY UNLOCKED MY IBM THINKPAD T42.. BUT I ALSO ULOCKED MY FRIENDS… EASY TO FOLLOW.. THANK VERY MUCH FOR THIS WEBPAGE LIKE I SAID YOU GUYS ROCK.. MIKE M KWIQ69@MSN.COM
Tuesday, January 2nd 2007 at 7:05 am
Hi Sonny,
Download from the IBM site a free manual for your model where you can find where the battery connector goes to.
If you keep the cmos battery at its place and use the wires as a guide you will find where they came off from. It should look like a upside down plastic U housing with a slot in the middle to prevent the connector from connecting with the wrong polarities. If this plastic U is broken you will still find the two pins usually bent under 90 % from the motherboard.
Use a ohmmeter to determine the polarity. The -side should read zero ohm to any ground of the motherboard or chassis.
The pins looked looped together because when the housing broke it got bent. Or somebody tried to unlock the cmos by shorting the batteries.
Separate them and determine the polarity as described above and if you can not fix the connector housing just solder the batterie wires to it. Recheck your soldering. Good luck.
Walter.
Tuesday, January 2nd 2007 at 1:11 pm
Hi,
I have an X60 that asks for an unknown supervisor password. Before buying the RPC8394 tools, I’d like to make sure that I can access the PC8394 chip. Does anyone know where this is located?
Thanks,
Paul.
Tuesday, January 2nd 2007 at 2:13 pm
I don’t know if X60 has PC8394, but as I spoke with Victor of allservice.ro, the software is compatible with all new IBM models, maybe you can ask him.
Thursday, January 4th 2007 at 4:46 pm
Great work. It reminds me that no good deed goes unpunished! Thanks for the effort and for publishing it.
Friday, January 5th 2007 at 10:10 am
Error C0175 on thinkpad t21. Need clean EEPROm file
Friday, January 5th 2007 at 10:13 am
please mail me on digitalguymx@hotmail.com
Saturday, January 6th 2007 at 4:54 am
Unbelievable!!! Works FLAWLESSLY! I bought a T40 for a mere $200.00 1.6GHz/80GB/512MB/CDRW-DVD/32MB Vid/14.1″ XGA had a bios pw could not axcess notebook at all
But thanks to this wonderful very helpful guide I was using T40 in appx. 45 minutes (took my time soldering onto mainboard) of buying parts from rat shack for less then $5.00 bucks 
I want to thank the author(s) of this guide, and keep up the excellent work!!
FYI: Atmel chip was underneath WiFi Card next to another 8 pin chip, the atmel chip had “Atmel G
24RF08CN
0334″ written on it. Good luck people.
Saturday, January 6th 2007 at 11:07 pm
Hello, I could´t find any Atmel chip in IBM 600X. (2645-4EG)
Can someone help where it is, or is there any? Or is there some other type of chip?
Saturday, January 6th 2007 at 11:08 pm
Then you have to thank to Victor Voinea from http://www.allservice.ro. The credit is all his.
Sunday, January 7th 2007 at 9:30 pm
I have T20 and when I tried to do it. The command give a “ERROR: EEPROM not available.” I have double triple check my wiring. Please help.
Sunday, January 7th 2007 at 10:17 pm
I have one thinkpad R30 with forgotten bios password set and i’m not intrested in hacking it. If someone wants to buy it, please mail ronikantis [AT] gmail.com
Monday, January 8th 2007 at 1:31 am
It works fine
IBM T42 unlocked with no problems. Thanks for this great tutorial 
Monday, January 8th 2007 at 6:28 pm
circuit not found or bus error
Monday, January 8th 2007 at 6:30 pm
can some one give some idea of what I am doing wrong I follow all the info but still can’t get it to work. I still have the message circuit not found or bus error.
Monday, January 8th 2007 at 6:34 pm
I have one thinkpad R32 with forgotten bios password I found the Atmel ship with 4 pin in each side total 8 pin. I make all the circuit but still not circuit found or bus error. can some one give and idea.
Tuesday, January 9th 2007 at 11:47 pm
I have a problem with my T30.
I make dump.bin, but when I use IBM pass lite 2.1, I get password,
but this is not good, and don’t work. I try with AA on, but the same, not work.
What can I do?
Wednesday, January 10th 2007 at 10:38 am
I HAVE 390X JAPAN MODEL, CAN ANY ONE HELP ME PLSS.. WHAT IS THE EXACT ATMEL CHIP.
Wednesday, January 10th 2007 at 10:07 pm
Hi; I sent you the pic about the 600X Atmel chip location yesterday. I’m having some problems though. The cable is done and correct to specs. I have downloaded the software and installed it. My problem is that I open the command prompt window and navigate to the folder, but what do I type in? I have tried the r24rf08dump.bin, also r24rf08 dump.bin , I am confused… When I navigate to the folder it has the address already typed in, if I hit enter on the address, it pops up a DOS screen, if I type in anything at the command prompt it doesn’t do anything.
Also, on the chip it has a small circle in the corner, that is pin ONE correct? Any help would be appreciated
This is the folder address… C:\ALLservice\24RF08\r24rf08.exe
Do I just type C:\ALLservice\24RF08\r24rf08.exe\r24rf08dump.bin? that gives me an error…
Thanks,
Mike
Wednesday, January 10th 2007 at 11:48 pm
C:\ALLservice\24RF08\r24rf08 dump.bin Thats what I needed to type in! stupid me! That made it work right, I guess you just need to vent a lil steam once in a while to let new thoughts get in LOL
Great site! keep up the good work!
Mike
Thursday, January 11th 2007 at 3:41 pm
hi, disarm an IBM TP X41, to look for the chip Atmel but only find one with the number 24c04, your you believe that I can do the procedure in this chip. Pardon but I am the great inexpert one.
When I ignite the Tp only asks for the password me of windows, I need to do this procedure to find the key or you believe that with algun programmes I can extract the pass of windows.
Thank you
Thursday, January 11th 2007 at 11:23 pm
Hello, I have an Thinkpad R40 bought it at a pawn shop but I am locked out like most of you guys. I believe that I have found the bios chip but i don’t know which of the eight pin I need to connect to. Is there some way to “Read” the chips by counting from a certain point? Thanks.
SamBrown99[at]aol[.] com
(p.s. i am fixing it for my girlfriend)
Saturday, January 13th 2007 at 1:54 pm
Thanks for your devotion to help people we have a great friend on you. PLEASE help whit the thinkpad t43 what is about the chip
Saturday, January 13th 2007 at 2:29 pm
I managed to assemble a reader. I dumped the contents of the atmel (TP41) in a 1024-byte file and contents looks good; i can see the machine-model as well as the serial number but on address 0×338 there is nothing but hexadecimal crap. So i took another unprotected T41 and read the chip; on 0×338 you see all x’00′. If i change the password to ‘A’ (1 character), on 0×338 the value becomes Ô÷ú›=Ê( in hex : d4 f7 fa 9b 3d ca 17 28 ) So , there seems to be some kind of encryption. Passlite does not provide the answer.. ANY suggestions ????????
max.dekkers@cherrytronix.com
Saturday, January 13th 2007 at 3:39 pm
MAX, your laptop is using TCPA encryption. I’ve seen that allservice provide a fix for this, you need the writer W24RF08 and to pay a TCPA reset or maybe is free, just talk with them.
Sunday, January 14th 2007 at 10:43 am
Hm, this guy Li is just one that wants money for free allservice software. Is a scammer.
If you want to use the software always download from the source and support the authors not chinese suckers that will try to sell you a free software. Be aware, mike
Monday, January 15th 2007 at 11:55 am
hi. my thinkpad is A22m and ATMEL on it have 14 pin ! which pins must be scl,sda ????????????????
Monday, January 15th 2007 at 11:57 am
hi. my thinkpad is A22m and ATMEL on it have 14 pin ! which pins must be scl,sda ????????????????
writed on ic :
ATMEL F
24RF08CT
0042
Tuesday, January 16th 2007 at 7:56 am
I have some R40 pictures
Can you tell me how should i send them to you?
Wednesday, January 17th 2007 at 3:19 pm
hi. my thinkpad is A22m and ATMEL on it have 14 pin ! which pins must be scl,sda ?
writed on ic :
ATMEL F
24RF08CT
0042
what am i do ??????????????????????
Thursday, January 18th 2007 at 6:08 am
Confused as to what line password is on. Although line 330 is mentioned, only a “D” apears on that line which is not the password. Tried several dumps, all have had the same result. Any ideas?
Thursday, January 18th 2007 at 1:19 pm
i have a prblem on my ibm thinkpad t20 with error 188: invalid RFID derializtaion information area or bad crc2. can any one help me with clean t20 dump or tell me how to solve this.
my email add is mallmusa@yahoo.com .
Thursday, January 18th 2007 at 1:22 pm
if u got problem with ur t21 thinkpad mail me and i’ll tell u how to fix them or if u need a clean dump for t21, t22 i can help u.
Saturday, January 20th 2007 at 7:52 pm
can u repair crc errors?….how i can recognize de bad area data in a dump?…and after i must delete this data???
Sunday, January 21st 2007 at 4:10 am
hello… i built the simple-12cprog interface and used the info for my t40. it worked like a charm. thank you for your easy layout of the interface devive and the instructions on how to do it…. also i have a picture of the interface that i made if anyone wants to see it….. just let me know or leave a response….
Monday, January 22nd 2007 at 1:14 am
Hey guys, thanks for all your posts. i was able to unlock my think pad T41. Now i had trouble at first because i made two mistakes, i just want to let yall know that they were with the hop it will help you ll.
1 i misplaced the wires on my female 9 pin serial outlet, suggestion is to double check your connections in case of a problem. i kept getting ( EEPROM NOT AVAILABLE) when i ran the script.
2 i unplugged the small battery and forgaot to place it back. this made me get a message that said (circuit not found or bus error.) just plug the small yellow battery and that will probably solve it.
The following are just tips that helped me out
*make sure that your welds on the board dont over lap with other componets to prevent a short or false contact.
* check your connections with the diagram to make sure it correct
*If you have problems trying to turn on the computer dont panic relax; this is what i did and it worked for me the problem was it only turned on for a few secons and just didnt stay on. first i unplugged the computers battery , then i also unplugged the smal yellow battery and left it alone for about 5 min , came back plugged every thing back and worked just fine.
*i you are new to pc and have no clue how to use commander prompt this is what you can do; save all the files on the file: C: documents and settings\owner (the owner may change depending on how you labled this file it might have Administrator our your name) this is the defualt directory on the command promot, you can also just run command prompt and see what goes in place of owner.
after you saved al your files in this archive just type:DIR and hit enter you should see all the the directories including the ones you recently installed in your pc
Type the command given r24rf08 dump.bin and do what is instructed.
I used a 2 2.2k resistors 1/4 watts 5% and 5.1 V diodes
And Finally dont give up and kep trying, Good Luck and Thanks To who every started this.
Monday, January 22nd 2007 at 6:40 am
I Have TP IBM T30 . found the Ship under the RAM cover.
I solder the wire (so dificult , to small ! maybe I’ve done it wrong) Run the DOS program , and the message was : ERROR: EPROM Not Available .
It might be the soldering . Does the Ship is burned ? or still working . Now I want just to sleep , anyway feel free to call me 1718 790 7950 .
DOes the person upwaer
Monday, January 22nd 2007 at 9:11 am
Hi Everyone,
I did this for a friends T40 and was able to read the eeprom perfectly.
I get the file and go to the memory address 330 - and its Blank no password is shown.
All the other information including hte serial number model number etc is visible, but no password. Has anyone else experienced this and know how to fix it?
Thanks
Tuesday, January 23rd 2007 at 2:10 am
I am working on a t42 and am having a problem similar to danielk’s. On mine only a D apears on 330, which is not the password. I would appreciate help and i will let you know if i figure it out.
Tuesday, January 23rd 2007 at 2:30 am
Hi, anyone know about the thinkpad Z61t series? I have pulled it right out and the only atmel chip I can see is located beside the docking port and has 28 pins (14 per side) on it. Any help would be appreciated.
Tuesday, January 23rd 2007 at 7:54 am
Thanks for this guide, it worked on a thinkpad T20 with the 14 pin chip!
Tuesday, January 23rd 2007 at 8:23 am
Hy guys…
i have Thinkpad T60..
i have the same problem…
if i use this method, do i use exactly the same method or there are some changes
i am not that familiar with chip dan IC..
can you gut\ys help me please
Tuesday, January 23rd 2007 at 9:50 pm
Hi All,
Finally I found the T41’s pass, great site! Thank’s guys!
During my way I figured out that the picture of the circuit above (just below the text: Here is a simplified schematic for those unfamilliar with the above symbols:) shows BACK SIDE of the plug.
That’s why I got the following message:
ERROR: EEPROM not available
Tuesday, January 23rd 2007 at 9:50 pm
Hi All,
Finally I found the T41’s pass, great site! Thank’s guys!
During my way I figured out that the picture of the circuit above (just below the text: Here is a simplified schematic for those unfamilliar with the above symbols:) shows BACK SIDE of the plug.
That’s why I got the following message:
ERROR: EEPROM not available
Wednesday, January 24th 2007 at 3:55 am
I have now found two atmel chips on the motherboard, one is so badly written that I have to have large breaks after trying to read it (where is that magnifying glass) the other is a SC3203 which is apparently a security chip and not valid, though there are some reports on here that suggest this has the right number of pins but I can’t be sure. The chip that is hard to read is smaller and square in shape, has 10 pins on each side and 8356908 is written on the top. Can anyone confirm that these chips are either not applicable or are applicable?
Thanks,
Q
Wednesday, January 24th 2007 at 9:35 am
enyone have don this on a Thinkpad T60??
Wednesday, January 24th 2007 at 7:39 pm
I would like to mail you a copy of my bin file. I followed the instructions listed above, and read the chip. I entered the work in but still will not unlock. Not sure what to do from this point. there are a couple characters after the word, but they are showing up blank in the text part of the editor. I’ll mail it to you and see what you think. My think pad if a T42.
Thursday, January 25th 2007 at 4:37 am
Where is the amtel chip on a T60? I can’t find it next to the numerical co processor.
plz help
Friday, January 26th 2007 at 7:36 pm
I just done the job on a 600e. I used a white plus green LED instead in series of a zeener diode. These do the same job as the zeener and give a visual indication. The white LED has an Fv of 3v. The Green has a Fv of 2.1v.
Mine has a 14 pin chip. SDA is pin 8. SCL is pin 10. Vcc is 12.
Retrieving password from the 600 didn’t work following the above instructions. With machine on and powered, the result was no EEPROM. However, I did succeed as follows:
Get a 5v supply with limited current (limited to around 200ma) (a current limited desktop power supply, or perhaps 3 AA cells plus 200ma fuse). The current needs to be limited as it is easy to short circuit and fry something. With machine off, connected the circuit. Had a probe with +5V. Touched the probe on Vcc then quickly ran patch.exe then the program to gather the data.
The above procedure could fry something which is why I suggest limiting current, and only apply the voltage to VCC for the minimum time possible.
Saturday, January 27th 2007 at 9:42 am
I have a problem with a password.
My thinkpad is r32 and i will to reset my BIOS because i foget the SVP. Remove the the CMOS Battery and there it must to write a password.
What is this password?
What is wrong?
Regards.
Marius
Sunday, January 28th 2007 at 2:25 am
I have make all handling and the password only in 0×338 and not 0×340. You are to say itself why?
Sunday, January 28th 2007 at 2:56 am
Any clues on the location of the chip on an x41 tablet? I’ve searched all over, but can’t see it anywhere!
Monday, January 29th 2007 at 9:14 am
Hello,
we are more than five user of old ibm tp570 - look—-http://www.notebookforum.at/showthread.php?p=93052#post93052—–
and have the problem, that on each booting we must fill in the date and time again.
the Bios batterie is proved :ok. The Bios ist updatet IMET 62. But the problem goes on.
what is to do?
Bernd Muser Germany Stuttgart
Monday, January 29th 2007 at 7:53 pm
hello, I have IBM t30, have taken apart the motehrboard and have found the chip atmel, I am mounted on one small card that is taken apart, I am a chip to 28pin!!! the acronym on the chip is: atmel at97sc3201 the acronym on the card is: p/n 26p8193, please you help me!!! how I can cancel the pasword? the guide serves for the chip to 8pin not for those to 28pin!! my email is: andrea.gt3@libero.it if you have a solution please you send it to me
Monday, January 29th 2007 at 8:51 pm
Hello,
I have a Lenovo ThinkPad T60. I forgot the BIOS supervisor password and need to unlock it. I have already purchased the parts to build the interface to connect to the security chip. Can someone please send me a picture or tell me where the security chip is located in the T60 and what leads to connect? My email address is: edwin108@msn.com
Thanks,
Edwin Suarez
Tuesday, January 30th 2007 at 12:58 am
FYI for those of you posting, Doesn’t look like anyone’s bothering to reply to these any more, either that or they’re all too hard. I’m giving up on getting ours going because (this site at least) is not longer helping.
Tuesday, January 30th 2007 at 12:19 pm
I guess you can goto http://www.allservice.ro/forum, it’s simple. They made the software, they will help you better.
This site is helping you already.
Wednesday, January 31st 2007 at 6:51 pm
Hi
I have IBM Thınk T22 dont bios pasword help me but turkish write please
Wednesday, January 31st 2007 at 10:32 pm
I just found my password using the instructions in the first 6 to seven pages of this sight. If you are getting data and it dosn’t look right make sure to turn on the button AA in left corner. I’ve been working on this several days and poof there it was there are a lot of little details that you have to pay attention too. Finding chip can be the hardest. Good luck don’t give up it can be done.
Friday, February 2nd 2007 at 12:05 pm
Please! Location for ATMEL on TP A31, anibody nows?
Sunday, February 4th 2007 at 1:56 am
One of my readers asked me the following question:
I linked him to your site.
Sunday, February 4th 2007 at 10:37 am
Hi!
Does anybody know if it works on ibm t22 ??? And does anybody know there exactly chip is placed??? And can you sent me some pictures of it ?
Thanks in advance!!!!
Monday, February 5th 2007 at 9:37 pm
zalupa
Monday, February 5th 2007 at 11:34 pm
I just successfully recovered an A20m laptop that was locked with the supervisor password.
It is not for the faint at heart, but you have little to lose as the laptop is useless
without the password. For the A20m, you have to completely strip down the laptop
following the directions in the IBM service manual (available on IBM web site).
The manual had slightly different screw arrangements than my laptop, but the sequence
of parts to remove was correct. The eeprom is located on the bottom of the motherboard
near the ram expansion connector but cannot be reached without taking the laptop apart.
It is a 14 pin device. You will need to solder a
couple of pieces of wire wrap wire onto the clk and data pins (about 2″ long) and
route them towards the memory expansion connector. Make sure you use different colored wire
for the clock and data signals and write down which is which.
Then put the whole laptop back together
by following the disassemble instructions in reverse. The 2 wires you added should
be hanging out of the memory access door. You will also need to pick up a ground
connection (I used a bare copper area near a mounting screw). Hopefully you dont have any parts
or screws left over when you are finished…. expect it to take about 2 hours to do this
process for the first time. I taped up the wires and left them on top of the memory
expansion as I really did not want to take the laptop apart again to remove them.
Tuesday, February 6th 2007 at 5:19 pm
could you please help me boot my ibm t42 using win xp sp2 without going throuh these procdure byu welding the atmp chip
Tuesday, February 6th 2007 at 10:23 pm
Thanks! I followed your procedure on a ThinkPad A31, Type 2652-J3G. It worked, and I now have my machine back. I have some experiences I want to share:
- I benefitted from using IBMs “Hardware Maintenance Manual” for my model. It is free for download from IBMs website. Without this I would surely have broken more parts, as I had to take apart almost the whole computer to find the chip.
- As a totally unexperienced solderer I realized very late that there is enough tin on the chip already to fasten the wire. Do not bother to add more tin, just heat the pin and stick the wire to it.
If anyone else are using ThinkPad A31 (it is probably valid also for A30, A30p, and A31p as the hardware manual is identical) - some specific tips:
- The atmel chip is below the “sub card for pc card slot”.
- I needed to remove the following parts in this order: battery pack, CD-player (”Ultrabay plus device”), modem daughter card, ethernet daughter card, backup battery, hard-disk drive, keyboard, keyboard cru insulator, keyboard bezel, ultrabay plus slot (note the procedure here, it is ease to break it) and finally “sub card for pc card slot”.
- The chip orientation is as on the pictures, with the two important ones down to the right. After only connecting the keybaord, the machine starts without problems in this unmounted state. All the names are taken from IBMs manual. Without this, I think you will not manage, at least without breaking most parts.
Thanks again! - and good luck to you others
Wednesday, February 7th 2007 at 10:05 am
Hallo every body,
at IBM 770z you only have to remove the dimm cover. you can find a 24c01 chip right next to the bios battery. It’s the only chip with 8 pins you can see there. the there is no need to open the notebook.
Wednesday, February 7th 2007 at 8:29 pm
i have a thinkpad R60 and its dssassembled the only amtel chip i can find has this number
Amtel at97sc3203 1.2.8.05 ***** ***** and its a 28 pin chip.
and its located under the pci xpress expansion slot. any help would be greatly appreciated.
can post pics if needed please someone help me!!!
i found a diagram of the 28 lead chip if that helps located here >>>>>> http://www.atmel.com/dyn/resources/prod_documents/doc5010.pdf
can someone please help me get this pass please
Friday, February 9th 2007 at 1:53 am
hello,
I have a same problem like some one above. My laptop is IBM thinkpad R40, I set POP, Supervisor and HD password. but after I installed asome software, my POP did not work, it was changed. So Iwonder cani recover my supervisor password through above method or not. I think some kind virus attacked the bios.
Saturday, February 10th 2007 at 2:14 am
Hi,
Thanks for the guide.
However, I always got “Circuit not found or bus error!” message. Just wonder whether I got the right components:
Resister 2.2k 1/4w (should I use 1w ones?)
T/R Zener 5.1v 20ma 400mw (Have to be BZX55/C5V1? difference?)
Thanks in advance.
Best,
ViX
Saturday, February 10th 2007 at 5:52 am
Hello there, I have an R40, very nice laptop. I did everything you said for under $5 bucks at All Electronics in Van Nuys, Ca. I got the bin file but there is different numbering than the example. There must be a million lines of code, give or take a few hundred thousand. It has no x330. I did find the button which allows me to switch from the jumbling code to simple letters. Can anyone help? Oh yeah if you cant seem to make your own gadget, I can sell you mine. for $20 shipped. I paid my buddy $15 to put it together. Thanks,
Mark
Sunday, February 11th 2007 at 1:08 pm
hi all
please i need help ( i have IBM R50e and i forget password and i test all steps put i cant’t write this password Ž{–i-:Jc
can u help me
Best Reg.
Wassem Shehata
Monday, February 12th 2007 at 4:56 am
Thanks a lot guys! TP 390x had to take the computer completely apart and I found that chip in the corner of the motherboard by where you plug in the power cable. I found a repair guide to take it apart so I knew where every screw went at ftp://ftp.software.ibm.com/pc/pccbbs/mobiles/09n8604.pdf. Thanks again!!
Monday, February 12th 2007 at 11:17 am
I have ibm tp r50e i found the atmel i solder it and i have my dumb.bin but in ox330 i see some weird characters for example : BOZI . fBi , i tryed all the combinations but nothing
Monday, February 12th 2007 at 11:19 am
i have exactly teh same problem as wassem shehata the pasword tha i got i cant write it is like BoZi . fBi but the o in word Bozi is not an o or a 0 is something weird
Wednesday, February 14th 2007 at 9:25 am
Not any solution for R60 model yet ?
Wednesday, February 14th 2007 at 4:10 pm
Hello:
Is there any one who did recover the supervisor password for IbM thinpad R40 using this mehod?
Wednesday, February 14th 2007 at 7:34 pm
Hello!
I´ve done all this like it´s told on your page. After doing this all the programm tells “Eeprom is not available”. What do i have to do? The File “Bump.bin is created, but its about 0KB. I´ve got an A20M. Is it necessary to put all the components together (it´s only the naked board without RAMS, Fan, etc.)?
Thanks for your help.
Steve
Thursday, February 15th 2007 at 2:51 pm
@nblueman
Turn on the AA button in IBMpass, if the password is not revealed then is a TCPA lock, ask allservice.ro for the service
@Hubert
This method works for all TPs using 24RF08 and 24C01
@Knude
For R60 you need PC8394 tools to read the TPM chip
Thursday, February 15th 2007 at 3:32 pm
@softpedix
Thank you for the reply.
I had turn the AA button on and back off again,i can read the password(if it is the password) but it doesnt work,and many of them could not type it in ibm for example
symbols like ; or #
What is TCPA lock and how i can ask the allservice?
Thursday, February 15th 2007 at 10:00 pm
@softpedix Thank you for you response. I will try it. My laptop is also using one kind of 24RF08, I have found it on the motherboard. Thinks
Saturday, February 17th 2007 at 3:42 am
Is there any way to remove the bios password from within windows on a thinkpad t60?
Saturday, February 17th 2007 at 8:07 pm
Worked on a T41 ok yesterday. Bit difficult to get the soldering right but got it in the end and recovers the p/w OK. Thanks
Sunday, February 18th 2007 at 7:26 pm
Found a real easy way to fix these. Buy an ISO loader made for reading smart cards ( about $29.99) then open it and go to the atmel. look for the dimple or PIN 1 on your atmel and replace. Anyone with soldering skills can do this in less that 5 minutes. The get the program XP Atmel 2.0 also found all over the net. Download the correct .bin for the Bios and solder it in on your ISO. Run XPAtmel and choose your file, it will show Atmel model and Vendor Family, ect ect. If your ISO loader has red dip switches, you use it woth pins 1 & 5, or 1 & 6 to flash your chip.
Good luck
Sunday, February 18th 2007 at 7:32 pm
sorry for poor spelling.
1. Get ISO
2. Open ISO
3. Remove Atmel chip from your IBM
4 Solder in your IBM Atmel
5 with seperate PC download from IBM the correct flash for your unit.
6 with seperate PC download the XPAtmel 2.0 program found all over net
7 open XpAtmel2.0
8 choose the file and click download
*note*
make sure your file is in the same folder as XP Atmel
if your ISO has dip switches you use either 1&5 on or 1&6 on to program.
9. Then re-solder in your Atmel into the Thinkpad
*you now also have most current flash file (BIOS) for that unit.
Enjoy.
Wednesday, February 21st 2007 at 1:34 pm
I have just bought an IBM T43 but the touchpad and finger print sensor are not connected to the mainboard. I want to disassamble the machine to fix the problem. Unfortunately, I do not have service manual of the IBM T43.
Should you have any information can help me, please tell me at auduyvuong@yahoo.com
Thank you
Thursday, February 22nd 2007 at 5:28 am
I could not get this thing running I’ve done all the wiring and soldering right and still could not detect the eeprom, or circuit not available. Is there anything I need to do, it’s a R51 thinkpad. Please help.
Thursday, February 22nd 2007 at 6:39 am
Hi,
I would like to buy someones assembeled stuff to unlock a t30… ready to use so Icould just solder to the chip, plug in the serial port and download the software. I would be more confortable knowing that you used it and worked. Please email me the price with shipping included to zip code 60077. livrom@yahoo.com
THANKS
P.S. I Need This ASAP
Friday, February 23rd 2007 at 4:34 am
Great job guys, I’m still looking for the location
of the eeprom (atmel 24rf08 or atmel 24c01a) on
the system board of my TP600 Pentum II type2645.
Could you or someone please post a picture of the same
system board and circule the location of the
chip for me, or does it have a different
number. many thanks. JAN.
Friday, February 23rd 2007 at 10:06 am
i have already succesfully acces my TP but when i did this what shows on the screen - Setup Warning!! PAP will overwrite to HDP-1. Does anyone know what options should i take. Help needed asap. and also which one of this options will totally remove the Supervisor Password? tyvm for any comments and suggestions.
Friday, February 23rd 2007 at 6:22 pm
Hello everybody,
Thanks, thanks, thanks!!!!
Two TP (T41 and X40) unlocked.
I just followed the instructions and everything worked perfect!
Thanks again,
Southern
Sunday, February 25th 2007 at 6:19 am
Can someone please help me, I have a T30, I conected everything, when I execute the patch it shows me that the clock it’s ok but when I execute the r24rf08 I don’t know how to make that bim file, I typed r24rf08 dump.bin with space and without the space and when I hit enter the black window it’s gone and there is no bim file created in the folder. I’m doing this over 5 hours and it’s just so frustrating I unsoldered everything put it back together and I get the the same results. What should I do? A fast reply would be much appreciated. Thanks
Sunday, February 25th 2007 at 9:49 am
I made it, Just unlocked the T30. This is the answer I was looking for(I found it in the forum).I might help someone:
A little DOS tutorial:
For example you installed the software in “c:\allservice\24rf08″ folder (or directory).
You have to launch it from a console window.
Start>Run, type “cmd” or “command” and press OK to open this console window.
You should see the system prompt:
C:\bla_bla…bla\>
Now to run the reader, type exaclty:
cd c:\allservice\24rf08 - with space between cd and the rest.
r24rf08 a.bin- a.bin passed as command line parameter -see?
Of course, do this at the right time exactly as in the procedure. means to strike the Enter key. In the example above the binary will be stored in a file named “a.bin” which will be in the same folder with the reader, c:\allservice\24rf08
Monday, February 26th 2007 at 7:24 pm
Czesc. mam laptopa t60 ale niemoge znalesc tam tego atmela, znalazlem za to blisko mostka jakis chip na ktorym pisze mx -150 albo 15g 25l1654m2c ale niemam zielonego pojecia czy to jest to zbudowalem juz ten czytnik. czy moze mi ktos powiedziec gdzie mam szukac atmela?? blagam o napisanie maila na konsolator@gmail.com!!
Wednesday, February 28th 2007 at 5:39 pm
Hello! I´ve got a problem with my TP 600 I bought it from an old man a month ago. He toold me it worked ok but..When i retrived it it´s looked with pw on power on.
I contacted him so i could get the pw but it was his sons old pc and it been without batterys for 2-3 years and he didn´t know the pw.
What can I do??????
Wednesday, February 28th 2007 at 9:29 pm
hello!
thank you guys! you saved my life! and a lot of money. i have a T42, and i bought it with a password already in. the seller told me, it is not stolen, but he also dont knew it.
i come out from less than 1$ in hungary, for the electronics. thank you!
kappelmi
Thursday, March 1st 2007 at 12:40 pm
Hello, i have an Thinkpad R60 with Bios Password, i can use this procedure for it?
Because this model on the guide isn’t mentioned.
If it’s possible, What is eeproom chip to operate?
thank you.
Bye.
Thursday, March 1st 2007 at 3:54 pm
So where do you get the C5V1 Zener diodes thats something you don’t get a radio shack.
Thanks
swacp645@yahoo.com
Saturday, March 3rd 2007 at 4:35 am
I have a my ibm 600x apart and would like to know where the bios chip is on this machine. Under the area around the mouse pad these are 3 chips that could all be this 8 legged fuse! I do see the tpc8002 is one of these chips, is this the beast?
Cheers, Pete
Great work-by the way!
Saturday, March 3rd 2007 at 5:38 pm
Hi
is there no any way o kracking this passord
like any superpassword which can unlok all passwords
Monday, March 5th 2007 at 1:25 am
hi there, i had power one password with supervisor password, i was trying this method for TP T21 but couldn’t sold the wires to eep rom, and i heated to sold enough on eep rom that one of sold was unsold, i thought i can’t do that, so i turn on the machine it says EATA reading error and it goes to BIOS without asking password, i disable all the password and i turned the machine off and i thought something wrong with EEP rom so i sold it again and then i trun it on and there was no EATA error but again asking for password i just hit enter and it says OK:D without even connecting or anything it’s done, i donno now how that’s happend:D
Monday, March 5th 2007 at 1:29 am
i have TP 23 with BAD CRC 1 Eror, any suggestion how to fix that?
Monday, March 5th 2007 at 6:07 am
My Thinkpad R30 is not locked, however I get the error ‘0189: Invalid RFID Configuration Information Area’. From some Google research it seems this could be due to a corrupt BIOS or CMOS. The laptop cannot be upgraded to later BIOS or booted, as you can only continue by pressing F1 or ESC. Both take you straight to the BIOS setup utility. I have tried every option in there but nothing allows me to flash the BIOS or continue booting. Is there anything here that can assist me to repair the laptop? IBM wanted 800 Euros to fix it, its only worth half that amount in good condition!
Tuesday, March 6th 2007 at 12:19 am
I just found this site and read about Sonny’s problem with the ibm 600e cmos battery connector breaking off.
I just had the same problem. I would like to replace the connector. Can a new connector be soldered on with out taking everything apart?
Where Can I get a new connector.
Roger
Tuesday, March 6th 2007 at 1:52 pm
Wow. What a fantastic page !
I have been playing with a few 390X’s with problems - and one with a locked password chip. I was uncertain as which chip it was, but your page has given me some welcome guidance !
I didn’t want to drop $25 on Ebay for a new chip when I have several other M/B’s here with other problems and clean chips! I just need to know which one is the culprit.
I see an Atmel and a PIC, so I assume one of those must be it.
Do you know which chip it is in the ThinkPad 390X?
Thanks !
John, from Newport, RI
Tuesday, March 6th 2007 at 2:12 pm
I think I found it !
The Atmel 8 pin 2408CN SMD next to the USB connector.
I’ll try replacing it.
All the best, my friend
Wednesday, March 7th 2007 at 2:45 am
“I just had the same problem. I would like to replace the connector. Can a new connector be soldered on with out taking everything apart?
Where Can I get a new connector. ”
Hi,
I get those kind of parts from DigiKey or Jameco.
http://www.digikey.com/
http://www.jameco.com/
Wednesday, March 7th 2007 at 3:00 am
Yup, I found mine next to the USB connector - 390X , and swapped it from another M/B and fixed it !
Lot’s of fun
#
Thanks a lot guys! TP 390x had to take the computer completely apart and I found that chip in the corner of the motherboard by where you plug in the power cable. I found a repair guide to take it apart so I knew where every screw went at ftp://ftp.software.ibm.com/pc/pccbbs/mobiles/09n8604.pdf. Thanks again!!
# Comment by nblueman:
Wednesday, March 7th 2007 at 3:11 am
The 390X Service Manual.
Lots of fun !
Enjoy, my friends
http://www-307.ibm.com/pc/support/site.wss/document.do?sitestyle=lenovo&lndocid=MIGR-4BYJF6
Thursday, March 8th 2007 at 2:51 am
I have an R40 TP. Downloaded from the TP the .bin file. When I I ran the IBM password program there was nothing but zeros in the entire memory address. Any idea what this could mean? Have done the downloading from the TP several times with the same result. Is it a dead r24rf08?
Thanks for any help or suggestions
Friday, March 9th 2007 at 1:29 pm
I tryed the procedure but id doesn’t work on my TP X41
Friday, March 9th 2007 at 1:49 pm
I tryed the procedure but it doesn’t work on my TP X41
Saturday, March 10th 2007 at 11:00 pm
Hi , i got a tp a31 , looking for the proper way to dismantle the backplane ! There is any document so i can follow step by step !!!That will help me not broking it , thank’s !!!
Mega !
Saturday, March 10th 2007 at 11:07 pm
@x41. It works, X41 has PCA 24S08. R24RF08 works perfect with this. try again
Sunday, March 11th 2007 at 4:52 am
password: hi guys, can someone tell me where i can get the software IBMPASS v1.1
the IBMPASS v2 does’nt seem to give me the decoding i want.
jan.
Sunday, March 11th 2007 at 7:33 am
In IBMpass click the AA button. The password is at 0×338-0×33E. If the password is not working then it is TCPA encryption.
Sunday, March 11th 2007 at 11:32 pm
Hi,
A friend tried to dump the bin file prior to giving it to me; except he used 22k resistors instead of the 2.2k. I redid the circuit and was able to dump the file. However I can see the factory data but at 0X330 and there is no pw. It’s all zero’s and beyond i’ve got hyroglphcs. Any assist will be greatly appreciated.
Monday, March 12th 2007 at 10:40 am
@Andy.
If there is zeroes, the SVP is blank. You have either a POP stored in CMOS or a HD password -remove the drive
Monday, March 12th 2007 at 8:08 pm
hi can any1 tell me where to find the amtel chip for x41 please,,,,,, thanks
Tuesday, March 13th 2007 at 2:52 pm
now i have the bin file but i can’t find the password HELP ME PLEASE
Tuesday, March 13th 2007 at 2:54 pm
hi jamie it’s just nar the pcmcia on the backside of the mb
Tuesday, March 13th 2007 at 5:15 pm
Hi Guys there is 10 people asking how to recover password from T60 but no one answers to them. is it impossible or very hard? and please stop writting the http://www.allservice because there is notting about a T60 is written. So anyone one that can help? what about you admin huh?
Tuesday, March 13th 2007 at 6:28 pm
T60 can be unlocked with PC8394 tools from allservice.ro only that the tools are not free. I know the guys there and they have this solution since last year avaialble.
http://www.allservice.ro/forum/viewtopic.php?t=484&highlight=t60
Or simply search the forum for T60 and you’ll have tons of answers. Are you blind?
Wednesday, March 14th 2007 at 3:31 pm
HELP FOR THE T42 BIOS SVP RESSET.
I know must people succeeded on removing the password from their TP T42 eeprom. I’m e-mail you because you may give me few tricks and help me fix what I’m doing wrong! I did set up everything but I’m not able to get the dump.bin file after I start the TP… F1 anf after it stop working, press enter.
I don’t know if it’s my cmd that’s wrong
C:/allservice/24fr08 dump.bin
It’s is this that they put in the “run” area? Please help me if you can
Also how will I know if the kit is working right?
I’m not able to have any dump.bin file at all… I must be doing somethig wrong but I don’t know what!
PLEASE HELP!
STEPHEYOUM@YAHOO.FR
Thursday, March 15th 2007 at 3:33 pm
Any comments?
Have a t42 where a bios update was done without battery. T42 now veggie, can’t even get into bios. Is it possible to get another 24rfc8 from another junk t42 (bad motherboard) and swap. Or is it possible to complete bios update.
Thx for any help, ideas, comments.
Thursday, March 15th 2007 at 6:01 pm
I can see that all the information is very clear and seems to work for many IBM Thinkpad Laptops. I just have one question, when I press F1 my laptop doesn’t go into de Setup it just show me the blank Screen whith the lock and asking for the password.
What I have to do?
Thanks
Thursday, March 15th 2007 at 6:28 pm
To enter the SVP, which apparently you don’t have.
Thursday, March 15th 2007 at 9:21 pm
Does anyone have a working T22 bios dump they would be willing to send me. I have a 0175 error, and would like to know where the CRC check bits are so I can correct them. Friend of mine has a eeprom burner, so that should be fine to dump it back. Much appreciate it.
Friday, March 16th 2007 at 6:05 am
Success!!!
I built the interface today and it all worked fine!
Unfortunately, the first computer I screwed up - when desoldering the wire from the SDA on the 8 pin Atmel chip, I broke off the pin.
Duh !
So I will need a new chip for that one.
The second one I was much more careful with and everthing worked perfectly.
Get this ! the password for both the Power On AND the Hard Drive were both “1234″
How original !
ATM machines won’t even allow you to pick that number as a PIN.
What idiots !
Anyway, I am looking forward to finding more deals on Password Locked computers to fix and resell
Thanks again for a wonderful Web Site !
John, from Newport, RI.
Friday, March 16th 2007 at 6:08 am
Orlando, my 390X did the same thing - showed the lock when I tried to go into Setup.
But following the procedure everything worked fine anyway !
Friday, March 16th 2007 at 7:05 pm
now i have this error msg : “ERROR: Unable to open source file” does any body knows the solution ????????????????????????
Friday, March 16th 2007 at 8:47 pm
I tried the proceedure on an R50e. Everything worked fine, but the translation of the dumped .bin file does not provide a usable password. Could it be TCPA encryption? If so, what would I have to do to save this computer from the dumpster?
Saturday, March 17th 2007 at 4:00 am
Do you see a text word at 0×330 ?
Did you try hitting the button “AA On” at the top left of the screen ?
I am not familiar with the R50e, so it might be something more complex that they have cooked up to try and keep us in the dark a little longer !
Saturday, March 17th 2007 at 3:32 pm
@X41: My friend you use a non working cracked W24RF08. This is happen when you search for crack instead of paying the authors.
Sunday, March 18th 2007 at 4:53 am
Hello,
Thank you very much for your info. It’s work for my T30. I can be able to get in to bios and disable the T30 passwork.
Oh! one thing I want to mention here is after you have the DUMP. BIN file and loaded it to ibmpass . you have to press AA button on to top left of window from OFF to ON so you can view the password at line 0X330
Sunday, March 18th 2007 at 3:40 pm
Thank you very much for your info. It’s work for my T30. I can be able to get in to bios and disable the T30 passwork.
Oh! one thing I want to mention here is after you have the DUMP. BIN file and loaded it to ibmpass . you have to press AA button on to top left of window from OFF to ON so you can view the password at line 0X330
Monday, March 19th 2007 at 5:23 am
Hi,
Have tried the procedure on an 600x, but I got an error: EEPROM NOT AVAILABLE. Can you please help?
Tuesday, March 20th 2007 at 2:08 am
This is bullshit, didnt work at all.
Tuesday, March 20th 2007 at 2:17 am
I spent 3 hours and 30 bucks workin on this, and all it says is Error No Eeprom or Bad circuit, I have done this 100% as described, all my components match what was described in the instructions and have checked my work several times. Never worked. Just pissed me off.
Thanks a lot jerkoff.
Tuesday, March 20th 2007 at 2:20 am
now my laptop is dead, thats ok, IBM can fix it for me. Maybe now they will replace the mainboard and the damn password will be gone for good and I wont have to mess with idiotic shit like this.
Tuesday, March 20th 2007 at 7:25 am
can you please email me what the pasword is because i did it right and got teh circut to work but now i duno what the password is? please message me so i can send yu teh screen shot
Tuesday, March 20th 2007 at 10:39 pm
Hello:
I was following your instruction on navigating the folder where I installed the R24RF08 v2.0b and IBMpass lite to the hard drive (c drive). Then I type in r24rf08 dump.bin and setting up the wiring and connecting the ATMEL chip reader. When I go to my spare PC and hit enter on the command prompt. It will exit the r24rf08 program as stated in the instruction and the password won’t dump on the spare pc, what am I doing wrong? I also used the tester included with the r24rf08 software and all it does is alternate between 0 and 1 and says at the bottom of box Clock started…
Am I doing something wrong? I have been trying to get this to work for weeks now I am ready to throw the TP out the window!!!
Please help!!!
Glenn
Wednesday, March 21st 2007 at 4:19 am
Hi to those who successfully retreived their TP password using the procedure especially on 600X. Would you be kind enough to share the information on how you did it? You may email me directly at Bernard_david@hstx.com Appreciate your kind assistance on this..
Many Thanks
Wednesday, March 21st 2007 at 1:51 pm
I found out why I got “Circuit not found or bus error!” .
I actually didnot have password on my laptop x40 but on the recovery partition. Stupid me!
Best,
ViX
Thursday, March 22nd 2007 at 12:12 am
@Glenn
My friend you may need to read this. Quoted from allservice forum, they made the software and method after all:
“Pal, I understand your frustration, but is not my fault you missed the good old DOS times.
I think I said this so many times, here we go again:
A little DOS tutorial:
For example you installed the software in “c:\allservice\24rf08″ folder (or directory).
You have to launch it from a console window.
Start>Run, type “cmd” or “command” and press OK to open this console window.
You should see the system prompt:
C:\bla_bla…bla\>
Now to run the reader, type exaclty:
cd c:\allservice\24rf08 - with space between cd and the rest.
r24rf08 a.bin- a.bin passed as command line parameter -see?
Of course, do this at the right time exactly as in the procedure. means to strike the Enter key. In the example above the binary will be stored in a file named “a.bin” which will be in the same folder with the reader, c:\allservice\24rf08″
_________________
Thursday, March 22nd 2007 at 1:47 am
Worked like a charm on my R51. I ordered all my parts from mouser.com and got them within 2 days. Just a couple hints I would suggest, some might have been mentioned before…
1.) File down your soldering tip if you need to and tin the wire you’ll be using, it helps. 2.) If you are having trouble with step 3 of “Dumping the password”, like I was - you might want to check out using test clips, I think I’ve heard them called gator clips too. It makes it easier than trying to move those carefully soldered SDA / SCL / GND leads around with the laptop on…
3.) If you get the “EEPROM not found” error, check and re check (maybe resolder) your connections. I got this the first time, which could have been a soldering issue. Then tested continuity to make sure. I did however get the error again, switched out the Serial cable and got the EEPROM dump successfully.
Oh and my ATMEL chip was exactly as stated in the tutorial, right under the WiFi card. Just had to remove the keyboard and bezel (thanks to IBM Maintenance Manual)
Lastly, I know how frustrating this is, so if anyone needs pics of the reader, let me know (not pretty, but it works) bsmith55 at gmail dot com
Thursday, March 22nd 2007 at 6:51 am
Hello to all,
Dear all, plz send the dump bios for IBM Thinkpad A22m, coz I got the message, 0175 CRC Back post stop. I want to reprogram bIOS.
Regards
Samiullah
khawajikzai1@yahoo.com
Thursday, March 22nd 2007 at 5:49 pm
Hello !! Please help me : I have an old TP 380Z. Can’t find any atmel called 24RF08 !!!!!! fany.francis@neuf.fr
Thursday, March 22nd 2007 at 6:42 pm
Hi guys thanks for the great site!
I am following your instructions to the letter and so far so good.I have an IBM R30 and from your site I now know where the little blighter is hiding!
(underside of MB below PCMCIA card)….how do I get the back cover off the laptop to locate the chip without resorting to a hacksaw!
Many thanks ..Larry
Friday, March 23rd 2007 at 5:12 pm
I was wondering about the connecting serial cable. Is it a straight thru cable (pin 1 connects to pin 1, pin 2 to pin 2 and so forth), or is it a crossover cable(example: pin 1 to pin 4, pin 2 to pin 3 and so forth). If it is a crossover cable, what is there a schematic available.
Saturday, March 24th 2007 at 11:26 pm
For the 600X you must remove the system board. Its on the back. Its located between the hole for the screw right to the accu-port and a chip with a white sticker on it.
|—————–|
| | …anyway I hope, I hope this will help someone searching…
| | ….for the rest, see turtorial, have fun.
—- |
| |
| |
—- |
| x |
| |
——————–
Saturday, March 24th 2007 at 11:28 pm
hmmm…this should look like a fliped E…
Sunday, March 25th 2007 at 3:58 am
@ Larry
Hope you haven’t brought out the hacksaw yet - try this first!
http://www-307.ibm.com/pc/support/site.wss/document.do?sitestyle=lenovo&lndocid=MIGR-39797
Sunday, March 25th 2007 at 3:47 pm
i have a problem i have a ibm t 60 and xp professinaol but i want change the bios bur i know not the supervisor passwort
how can i reset it …
kann ich es nicht einfach übergehen indem ich es löten ,, überbrücken oder so ,,,,
Sunday, March 25th 2007 at 3:48 pm
with out software i want soldering
Monday, March 26th 2007 at 5:48 am
Hi, I have a Thinkpad T23 that is locked…and i’m not good at this soldering, anyone in San Diego mind unlocking it for me? willing to pay. let me know, thank.
Email: nyc2sd.max@gmail.com
Monday, March 26th 2007 at 4:11 pm
Well it works, got it done on a T23. The chip on the 23 is not shown in the origional instructions. Found a example of the chip in the document. It is the 14 pin chip on the T23. The serial cable needed is a straight pass thru cable. Pin 1 connects to Pin 1 and so forth.
Thanks for the fix. Got a free pc out of the deal.
Tuesday, March 27th 2007 at 9:12 am
Thanks for these valuable information.
I have an X23. This is a Pentium 3 866 MHZ subnotebook which I found yesterday from our company’s disposal bin for electroninc equipment. It took me several hours last night just to locate the chip. The chip is on the bottom of the PCB, I have to completely dismantle everything. I will post the result and probably some pictures next week.
Tuesday, March 27th 2007 at 6:44 pm
hi
I did everything you said with my T23, I found something in the eeprom but when i tried it, it didn’t work at all… waht might be the cause?
PLEASE HELP ME!!!!
Wednesday, March 28th 2007 at 2:50 am
Hi,
Have tested the continuity of my connection on the chip and its okay, but still I’m getting error: EEprom Not Available on my 600x. Any help on this?
Thanks
Wednesday, March 28th 2007 at 6:55 am
I finally read the passsword ! Everything worked fine. Here are some additional comments:
1. Make sure that the soldering iron is clean and the tip is small. I used a weller soldering station which I can control the tempetature. 300°C is too cold, above 380°C may ruin the pcb. I usd about 360°C. Use magnifying lens to very your connection as there maybe hairline shorts. This is the most critical part of the work.
2. I did not have 5.1 zener in my junkbox, I used 4.7 volts and it worked fine.
3. The password will not be visible on location 300 at first, you have to convert the code by pressing the icon on the left sie of the menu.
For anyone with x23 or similar notebook, I can send them the pictures on the location of the EEPROM and the serial interface that I made.
Thursday, March 29th 2007 at 9:45 pm
You should see this one. X20 series do not need to be dimantled, the eeprom SDA and SCL are available through the Docking port
http://www.allservice.ro/forum/viewtopic.php?t=93&highlight=x20
Friday, March 30th 2007 at 10:13 am
Hay. I’m useing IBM X30 and Ican’t find ATMEL 24… anywhere. Please Somebody Help me…………………….
Friday, March 30th 2007 at 4:38 pm
I am not sure about that. In the X23, the EEPROM is not near the docking port connector, it is near the memory expansion slot.
My machine now is running with a new 80 GB disk and WinXP
Thanks for the info anyway.
Saturday, March 31st 2007 at 5:04 pm
Hello,
I have a Thinkpad T43, this procedure working with my laptop?
Tanks
Saturday, March 31st 2007 at 9:58 pm
I have an IBM thinkpad R30, what is the worst thing that could happen tryin to remove the password?
Sunday, April 1st 2007 at 2:46 am
HI, I have read the comments And I can not find this chip on the thinkpad 600x ,actually I found quite a few chips with the 8 legs configuration non with the 24rf08 written on it if possible can some one post or send a picture my email
jesusa72@hotmail.com
Thanks Jose
Monday, April 2nd 2007 at 7:16 am
TP 600
Power on password ,IBM site shows 2 copper pads on Board ( near RAM )
Power off , short reset contacts ,power back ON
Didn’t work ( I ended up soldering a wire link ,to make sure)
will the Atmel method fix this? [Power on pword ,not Supervisor]
Tuesday, April 3rd 2007 at 5:51 pm
Hi I have a TP R30 TYPE 2656 and can only find the eeprom Atmel 93C46.I have followed all the usefull info on your great site regarding locations of the required chip 24RF08cm…..but to no avail.I have the TP stripped down compleately.I initially tried dumping from the Atmel 93C46 and it worked in that it read it and gave me all zeros.
I have looked in every location mentioned on the site but to no avail.
Can you help????
Wednesday, April 4th 2007 at 12:47 pm
Hi if anybody has the location of the 24rf08 eeprom on a TP R30 could they let me know as I have looked everywhere with the unit stripped down.I found an Atmel 93c46 but do not think this holds thepassword. I would very much appreciate it ,thanks.(I have checked out all the locations mentioned on this site)
My Email :grehanl@hotmail.com
Thursday, April 5th 2007 at 9:33 am
Hi Larry, i have an x23 and i found the eeprom under the board. Similarly on the early post there is a guy who also found the chip under the board, below is the message :
Comment by Chris:
Monday, December 11th 2006 at 11:31 am
ok never mind
found it..
on the R30 it’s located on the underside of the board below pcmcia bay.
Good luck
Thursday, April 5th 2007 at 5:32 pm
Hi Juandelacruz thanks for reply. I will look again but as I have already done this, I have little faith in finding it there. I was not able to remove the back cover compleately and it might just be hiding behind some metal or other!
One thing is for sure ..those guys in IBM sure know how to hide things.If I find it ..its off to the opticians for me!!
Thursday, April 5th 2007 at 7:29 pm
any one who live in manhattan, queens, bronx, brooklyn area
and still having problem after the laptop is open contact me
no shipping i will come to your place finish the job for you
Thursday, April 5th 2007 at 7:30 pm
any one who live in manhattan, queens, bronx, brooklyn area
and still having problem after the laptop is open contact me
no shipping i will come to your place finish the job for you
manediop@yahoo.fr
Friday, April 6th 2007 at 7:09 am
Did it on an X23, and it worked like charm! Half of the chip was exposed under the DIMM cover - and luckily it was the right half. Got the “EEPROM not found” for quite a while before I realized that some Microsoft SW was keeping my COM1 reserved - I just didn’t notice that before I tried to run a serial port scanner.
Thanks everyone - this is great stuff.. surefire way to earn a couple o guru points.. (c;
Friday, April 6th 2007 at 12:57 pm
Hay. I’m useing IBM X40 and Ican’t find ATMEL 24… anywhere. Please Somebody Help me………Please mail to me.
Friday, April 6th 2007 at 12:58 pm
Hay. I’m using IBM X40 and Ican’t find ATMEL 24…
anywhere?
Please mail to me.
Thanks
fountain
Friday, April 6th 2007 at 1:09 pm
microfountain@163.com
Saturday, April 7th 2007 at 2:42 am
Great Job Guys. Outstanding instructions. Password recovered on the first shut.
Again Many Thanks
Saturday, April 7th 2007 at 3:31 am
MERCI !!!!
Sunday, April 8th 2007 at 3:30 am
Hello, I Followed the instructions from allservice but I get a dump.bin file with 128 k and IBMpass shows all 0’s. Someone mentioned a dos verson of ibmpass can read it. Where can I download a dos version? Any help would be appreciated. I’m so close but so far…
Thursday, April 12th 2007 at 7:43 pm
DOE THIS WORK W/ THE R60 VERSION?
WE HAVE HAD GREAT SUCCESS W/ THE R51 VERSION!
AND WE CURRENTLY HAVE A FEW T22`S INCOMING TOO CLEAR.
Friday, April 13th 2007 at 9:10 am
Hi I have a X60 - does this work for my Thinkpad ? I already took it apart hoping to just short the bios, but I cant find it ! Can someone help me PLEASE !
Friday, April 13th 2007 at 10:01 am
R60, X60 works with PC8394 tools and IBMpass
Friday, April 13th 2007 at 9:06 pm
Thank you Lorenzo - I read some of the other posts, is there some where this software is avaliable for free ? Or something simmular ?
Saturday, April 14th 2007 at 2:53 am
Thanks!!! I’m just another happy Thinkpad T41 owner with bad (human) memory.
You’re method provided instantly result and gave me my supervisor password back. However, I didn’t solder wires to the atmel chip: I used 3 (old) tiny HP probes to clamp on the tiny leads. So so marks left!
Many Thanks!
Luke
Saturday, April 14th 2007 at 2:28 pm
Hello everybody !
Found the ATMEL on my TP 380Z and everything is soldered. But now when I power on the TP, I have error code 178 : EEPROM not functionnal.
Any ideas ???
Do I have to ground on the EEPROM ? I only ground on a mounting screw hole.
Thanx
Saturday, April 14th 2007 at 2:35 pm
Hello. I want to remove password from IBM TP 600. The instructions from start of this site will work? Sorry for my english, it’s not my national language.
Saturday, April 14th 2007 at 7:58 pm
HI, I want to remove supervisor password form my TP T42. I did the same wich u mention in the diagram. but when I run the command on spare PC its give me this error : “Circuit not found or bus error!” . In the begining when I Power ON my TP these two errors displayed:
Error 0271 - eheck date and time setting
Error 0176 - system security. The system has been tempered.
plz help and advice me what to do now.
Saturday, April 14th 2007 at 8:01 pm
HI, I want to remove supervisor password form my TP T42. I did the same which u mention in the diagram. but when I run the command on spare PC its give me this error : “Circuit not found or bus error!” . In the begining when I Power ON my TP these two errors displayed:
Error 0271 - eheck date and time setting
Error 0176 - system security. The system has been tempered.
plz help me and advice me what to do now.
Sunday, April 15th 2007 at 11:12 am
the chip in a tp600 is on the bottom of the board. lower right corner of the pci bus chip looking from the front… marked ATMEL846 24C01A SC27 B
Sunday, April 15th 2007 at 1:40 pm
Thanks Glade for location of chip. Now I don’t know is this instructions on top of this site will work on TP 600. Mayby somebody removed password from TP 600 and can tell that this instruction work. If you want my mail is katran@wp.pl. Thanks for help.
Monday, April 16th 2007 at 1:26 am
Does anyone have the diagram for the amtel chip inside thinkpad x60s
The chip says AT97SC3203
the chip has 28 pins
Monday, April 16th 2007 at 4:11 am
Wow, thanks for the clear instruction! Works at first trial without any trouble. Did take some time to get wires to the EEPROM, afterwards, piece of cake.
Thanks, it revives my T23!!!!
Monday, April 16th 2007 at 6:29 am
Thanx a lot for that tutorial!
Worked absolutely fine for me and my T40!
Monday, April 16th 2007 at 1:50 pm
I had the 0199 error on a X30 I was given for free. It drove me nuts!
I discovered that if you press then the button next to it in that order, the laptop will boot.
Hope this helps!
Munky
Monday, April 16th 2007 at 10:04 pm
I have tp A22e- I noticed its not listed in the models at top of page. Will this method work 4 my model? If so, where is this blasted atmel chip I’ve been reading about. A friend of the family gave me the computer and I’d like to get it running, but after getting it dismantled it’s not looking too good. Any help u can give would b greatly appreciated, but since the thing was free, I’m not going to get to upset if ur method is not possible on my model. I sure would look pretty cool if I can somehow get it unlocked and that’s what I’m all about. Thanks!
Friday, April 20th 2007 at 12:16 pm
ined help for unlock bios pasword
Friday, April 20th 2007 at 12:18 pm
for my hp pavilion ze 5400
Friday, April 20th 2007 at 8:41 pm
Thinkpad A31, worked beautifully! I screwed up the wiring (wired it backwards because I didn’t read the diagram right) but once I got it sorted out it was quite smooth.
My circuit looks like a gangly mess, but it did the job! Thanks a bunch!
Saturday, April 21st 2007 at 1:01 am
TP R40, I found the 24RF08 chip under the Harddrive
Saturday, April 21st 2007 at 7:43 pm
anyone willing to sell me their working circuit?
Sunday, April 22nd 2007 at 12:40 pm
Thinkpad X31
location of the Amtel is on the bottom side. Next to the intel chipset chip on the outer side of the pcb and mem slot. It’s U36. the other side of the pcb is the pcmcia slot.
Must disassemble whole thinkpad
Sunday, April 22nd 2007 at 8:32 pm
Worked like a charm on A21M.
If anybody needs any help with this model - contact me junglemike({[@]})gmail.com
Monday, April 23rd 2007 at 12:47 pm
Hello everybody, as i understood there is no possibility to get soft to to read PC8394 chip on IBM T60… Did anyone solve this problem? If yes can you share information where I could get this soft? I’m planing to use it only once for my laptop, and I don’t wanna pay 110$ cause for little more price i can get my laptop unlocked…
please help! my mail jevgenijo@gmail.com Thank you !!!
Tuesday, April 24th 2007 at 5:31 am
Hi,
If you think this is too much work for you, I can help you unlock your laptop I unlocked a lots o them. email for detailes I’m in Chicago area.
livrom@yahoo.com
Wednesday, April 25th 2007 at 6:43 am
dear
i have confusion, Install the software.
Connect the ATMEL chip reader to the spare PC
1- software we have to install on spare pc, right?
2- connect ATMEL Chip reader to spare pc? how?
do u mean by db9 connector? how to connect with spare pc
i am very confused kindly send mail at personal email
regards
Wednesday, April 25th 2007 at 11:23 am
Hello, I could´t find any Atmel chip in IBM 600X. (2645-4EG)
Can someone help where it is, or is there any? Or is there some other type of chip?
Wednesday, April 25th 2007 at 11:27 am
Hello, I could´t find any Atmel chip in IBM 600 (2645
Can someone help where it is, or is there any? Or is there some other type of chip?
Thursday, April 26th 2007 at 9:40 am
Hello
I have a TP T21 and have followed your instructions to unlock the supervisor password. on pressing return I get a prompt saying ‘Eeprom not avaliable’ do you have any ideas what I am doing wrong.
thanks stu.
Friday, April 27th 2007 at 6:39 am
hi everyone!
Im going to give it a try, thanks so much for the Post, by the way..
Where can i buy these “electronic componets?”
How im supposed to ask, in the store for these wires things..?
Have a Awesome DAY! = )
Saturday, April 28th 2007 at 9:20 am
Where is the PW chip located on the Lenovo T60 - if you know it plz paste a screenshot…?
Monday, April 30th 2007 at 7:21 am
Thanks for the help you provide but the biggest problem I have is all the serial female 9pin have pin number 7 not in use. Infact it was left without a hole inside. I soldered the interface on the PC direct on the male serial port but it never worked. It always showed an error that the “circuit is not found or bus error”. My atmel is on IBM T20 located under the RAM cover. its a 14 pin chip. Also I cant identify the SDA and SDL pins of the chip because they are not marked. Please help cos I am sure have followed all instructions.
Thanks
Tuesday, May 1st 2007 at 1:15 pm
Hi
In a previous post I asked for help when I received an error ‘Eeprom not avaliable’
I built the electronics in a small plastic box and connected to my slave PC with an RS232 cable. When I checked the cable I found that an RS232 cable dosn’t have pin 4 connected. I made a simple cable with just pins 4,5,7,8 connected and it worked first time. I hope this may help someone.
Cheers
Stu.
Tuesday, May 1st 2007 at 3:51 pm
Do I need a breadboard to build this circuit? I am a newbie at this stuff
Tuesday, May 1st 2007 at 3:54 pm
1) Do I have to solder the diodes to the resistors and then solder the resistor to the cable?
2) There is a blue line from pin 8, on the female connector connecting to one of the diodes? What does that blue line represent?
3) When I insert the resistors into the female connector, the resistor is loose, is this suppose to be okay?
Thursday, May 3rd 2007 at 1:28 am
Hi all,
I created the reader circuit, but can’t locate the Atmel Chip on my X20. I have looked above and below the motherboard in every nook and cranny, any suggestions? Is this model to old to have the Atmel or am I just crazy?
Any help would be appreciated.
Mike
Thursday, May 3rd 2007 at 2:57 pm
Hi guys,
I’m about perform the procedures on this site, but cannot understand the wire diagram. Could someone kindly send me the pictures of connecting from the Atmel chip to the serial port and instruction for the password recovery software…
many thanks,
Concunho
Thursday, May 3rd 2007 at 2:58 pm
btw, my email is HarryNguyen117(at)gmail.com
Thursday, May 3rd 2007 at 5:08 pm
goooooooooooood job; success to unlock my t40.
big thanks man!
Friday, May 4th 2007 at 7:46 am
First, I want to thank all the posties that helped me to reveal the PW from my TP 600.
I tried it first with the PONYPROG2000, dumped the file, but the password wasn´t visible. Then I tried R24C01 and it worked the first time. Enclosed the steps I exactely performed.
You have to completely disassemble the notebook and remove the MB to get access to the EEPROM. For the job you have to connect all required parts back to run the system, also BIOS battery, but you don´t need the HD.
I changed the COM port settings of my working PC (Device MGR>Ports category>COM Port1>Port settings) to Baud rate: 115200; Data Bits:8; Parity: none; Stop bits: 1; Flow control: none
For this type of EEPROM I learned that it is necessary to work with the driven-IC2cprog device. First trials with the simple one didn´t worked.
Thinkpad 600 – guide for reading the Supervisor Password with R24C01:
1. remove the mainboard (Hardware maintenance manual page 87)
2. locate EEPROM 24C01A at the bottom of the motherboard, right hand side, close to the upper left corner of the big PCIBus-IC when the connector row is facing to you
3. solder 3 wires to pin 4, 5 and 6 of 24C01A
4. build schematic: driven-i2cprog.pdf
5. connect driven-i2cprog to com port of working PC and check port settings
6. install ponyprog2000 2.05a Beta (freeware from www)
7. Select from menu “Device>I2C bus 8 bit eeprom>2401″.
8. setup > Interface Setup: serial, SI Prog API, select com port
9. In “Setup> Interface Setup” invert the D-in, D-out and SCLK.
10. change PONYPROG2000.INI: modify the line: I2CBaseAddress=0xA0 to I2CBaseAddress=0xAE
11. Save PONYPROG2000.INI
12. Setup > calibrate > OK….
13. connect AC adapter to the TP 600 mainboard (mainboard without any other boards but with BIOS battery attached)
14. connect GND wire of driven-i2cprog to pin 4 of 24C01A (GND also can be connected to any GND pad of the mainboard)
15. press power button of the TP 600 mainboard
16. connect SDA to pin 5 and SCL to pin 6 of 24C01A
17. read eeprom with ponyprog
18. disconnect SDA and SCL wires
19. switch off the mainboard
20. disconnect GND wire
21. store the bin-file
22. install ibmpass2
23. open stored bin file with ibmpass2
24. at ibmpass press button “AA” – on
25. View>Translation>Scancode
26. For 24C01 eeproms the password is located at 0×38, 0×40 – read password starting at 0×38 – ending at ????
27. note password, if password is not shown proceed with a.
a. Install R24RF01
b. press power button of the TP 600 mainboard
lc connect SDA to pin 5 and SCL to pin 6 of 24C01A
d. Run R24C01.exe
e. Use command: r24c01 your.bin /x /d /i
f. disconnect SDA and SCL wires
g. switch off the mainboard
h. disconnect GND wire
i. open your.bin file with ibmpass2 (as above 23 ff)
Hopefully this will help someone.
Greets
Stan
Friday, May 4th 2007 at 2:05 pm
got x60s , wana break its power on password, is there is any way to do it. asap
Friday, May 4th 2007 at 2:39 pm
hello everyone,
anyone knows the website with pictures of the soldering diagram from the Atmel chip to the serial port. I look at the above diagram but cannot understand it. I’m a newbie at this…any comments or suggestions is much appreciated…
if you have pictures or something, please email me at harrynguyen117@gmail.com
thanks a million.
Sunday, May 6th 2007 at 1:00 am
can the atmel chip be re programmed? I think I just killed mine by reversing the scl and sda leads. Now says error 178 and stops.
Sunday, May 6th 2007 at 5:40 pm
Hello everyone,
I have a thinkpad t30 - eprom actmel 24rf08 with 4 pins.
Now stops during boot with the message error 0175 bad crc1, I think that is because
the contents of the actmel eprom is scrambled or something like that,
so i have to replace it with a good one, so anyone that has the same model, please send me a dump of the eprom bin file.
thanks to everyone for sharing Knowleges and experiences.
Monday, May 7th 2007 at 12:59 pm
if anyone has any dump file of any laptop please send it to chanavs@yahoo.com Thanks a lot
Monday, May 7th 2007 at 2:51 pm
hello guys,
I have a Thinkpad T40 and need to retrieve the BIOS password. Can someone please send me pictures of the actual wiring of the diodes and resistors and how they are grounded. I am not very good in this kind of stuff.. especially reading a schemetics.
email: harrynguyen117@gmail.com
Thanks so much..
Monday, May 7th 2007 at 6:26 pm
Can anyone send me a clean EEPROM dump from IBM ThinkPad T22?
I have such a machine which hangs with “0175 CRC1 error” message.
Thanks in advance.
sv_sim@yahoo.com
Tuesday, May 8th 2007 at 11:47 am
Ok,I know this most likely sounds a little dumb.But it dosent hurt to ask. Is there any way some one could simplify the steps for me .i was given a IBM think pad t4 but its locked .
Thursday, May 10th 2007 at 5:09 pm
hello folks, great site. this is really helping me out on a t41 that I was givin. now I have a question for you all that have done this.
Q: is there anyway to do this without a breadboard? (kinda working on a budget here
)
I have all the correct parts I need 5.1v zener diode’s, 2.2k resistors and db-9 female.
if it is posible can someone please post the diagram for me on the site? my old tech classes are abit rusty so the scematic is abit hard to fully undestand.
thanks for the help.
Friday, May 11th 2007 at 4:18 pm
Hello People,
Thanks at all for support.
I’ve just tryed succesfully on a IBM G40 with IBMpass for Dos.
Ciaoooooooooooo
Sunday, May 13th 2007 at 3:13 pm
ok, fixed all up, now all I need is the dump from a t41 with the SVP cleared. could someone please send me one or two, that would be great.
PoeticRuins(at)gmail(dot)com
Monday, May 14th 2007 at 5:31 am
sir still we are in confusion with the procedure pls explain step by step procudure so that we can do it.
Thanking you sir
with best regards
P.K.PATNAIK(TRC IN CHARGE)
SILVERTOUCH TECHNOLOGIES LTD,
NO.210, SHREEJI CHAMBER, B/H- CARGO MOTORS
OFF- C.G ROAD
AHMEDABAD, GUJRAT.
Monday, May 14th 2007 at 8:55 pm
Hi dudes ,
I was so excited by seeing this site , I am having IBM X-21 model TP . I am unable to enter the TP as I dont have its supervisor Pass word and I have read all this article but unable to get in the software logic and using the other spare pc , Pl I would like to know +++++ details about the spare pc using and all about its easy ness .
If any one is having same model and encountered the same sought of situation pls do me help me out , would be highly indebted for ur kind help ,
Yours friendly
Mahesh raja
Monday, May 14th 2007 at 11:44 pm
Yahoo!. My T60’s alive again. I gotta say for all of you, the T60 needs the new tools RPC8394 and WPC8394 from allservice.ro, at first I was looking for the 24RF08 but this model doesn;t have such an eeprom.
Keep up the good work, allservice.ro!
Tuesday, May 15th 2007 at 12:29 am
Hi All, I have a T60 with BIOS password. I found the ATMEL chip on the bottom of m/b close under the CPU. It has label 25010AN SU27 with 8 pins.
Anybody experience in this model or could somebody can send me please a clean dump file? Also so you think by purchasing the PC8394 tools I will have a guaranteed success (by having some electronic experience of course :)?
Thanks for any help provided!
Lori
Tuesday, May 15th 2007 at 4:08 pm
Hi! Outstanding site mate, outstanding site! I’ve managed to unlock a T23 with your tutorial. With a friend (who has more experise in ironing less-than-millimeter pins) we’ve built the reader unit (the simple one), without a breadboard (using traditional switch, to control GND; and SCL, SDA separately). I wanted to make some photos of the process, but I forgot, but if you need, I can send a photo of the final reader unit (without the switches). The whole thing worked like a charm, found out the password, and the TB looks much better now, than in the trashbin. Keep up the good work!
Tuesday, May 15th 2007 at 9:33 pm
What is the best way to reset the password on an IBM Thinkpad X41 with an Atmel AT97SC3201 28-pin chipset ?
Your help in advance is greatly appreciated
Tuesday, May 15th 2007 at 9:33 pm
What is the best way to reset the password on an IBM Thinkpad X41 with an Atmel AT97SC3201 28-pin chipset ?
Your help in advance is greatly appreciated.
Thursday, May 17th 2007 at 3:48 am
First of all I like to thank you for providing this wonderful site.
The location for this ATMEL is for IBM (X40)
The ATMEL 24RF08CM is at the back of the motherboard and is directly under the PCMCIA slot. This chip is cover by a black tape,
1st go to Start>Run>cmd> and type in cd c:\ (This is for you to direct the folder to c drive).
Following command is all you need to type in.
C:\ALLservice\24RF08\r24rf08 dump.bin
Just for your info.
The first spare PC I connect didn’t work (Compaq Evo N610c). The 2nd spare PC (Toshiba 1860) work like a magic.
Many thanks, manag to get the password using your technique.
I have some picture taken showing the loaction of the ATEML on IBM X40, please tell me were can I email.
Sunday, May 20th 2007 at 7:02 pm
I have retreived a eeprom dump from a G40 motherboard using your info, but I am unable to decipher the password at 0×338 and 0×340 which is (17 14 32 - - - - 5D). Is this an encryption, or lack of suitable software? Thank you.
Sunday, May 20th 2007 at 9:00 pm
First of all, thank you for providing this wonderful site.
I have IBM TP R51-1830, i found the ATMEL 24RFC8 cn 0417 location and i did all but never received any dump.bin file in dir.
could Help me what’s the problem or if anyone that has the same model (IBM TP R51) please send me a dump of the eprom bin file.
Your help in advance is greatly appreciated
Monday, May 21st 2007 at 12:45 pm
Hello,
Thanks for the great solution that you have provided, i have followed all your instructions, how ever I have a dump.bin file that has memory address 0×330 encoded. Do you have a solution for this?
Your help is very appreciated.
Monday, May 21st 2007 at 2:08 pm
Hello,
I found out how to translate the “encoded” password to “scancode” yet i cant seem to get a proper password from it.
The password it dumps is “›Ûm ^Ì@”
translation ” D fI”
I have tried various combinations of this output but still have not had any luck.
Thanks for the help.
Monday, May 21st 2007 at 5:38 pm
i have sony vaio ar11m but with pass word the bios phoniex can you help me
Monday, May 21st 2007 at 10:29 pm
All service provided me with the password from my EEPROM dump, and a revised version of the software that works with Windows ME. Thanks.
Tuesday, May 22nd 2007 at 2:40 am
Hi, I am planning to try this process. My knowledge is limited with electronics, so does it matter what type of wires you use. Also do you need an Ohmmeter? Next, how do the resistors, diodes and ground connect to the Serial Port 9 pin Female connection? If anyone can send me a picture that would be great. golroch@hotmail.com
I found my R40 Amtel chip below the Harddisk, someone already posted it, should have done a search on the page, almost tore the whole laptop apart
Anyway if someone could reply to my question, that would be great.
Thanks.
Tuesday, May 22nd 2007 at 12:36 pm
First of all, thank you for providing this wonderful site.
I have IBM TP R51-1830, i found the ATMEL 24RFC8 cn 0417 location and i did all but never received any dump.bin file in dir.
could Help me what’s the problem or if anyone that has the same model (IBM TP R51) please send me a dump of the eprom bin file. nikiterani@usa.com
Your help in advance is greatly appreciated
Tuesday, May 22nd 2007 at 9:38 pm
Instead of soldering, I used a SOIC 8 pin device for the Atmel chip, as described in http://www.passwordmethod.com. Also, I bought a set of electronic wires and serial port from Radio Shack, when I was buying the other components.
One address for the SOIC clip is #TMS-SOIC8 at http://www.trianglemicro.com.
Wednesday, May 23rd 2007 at 12:05 am
i could really use a full view picture of the reader cable assembled for reference
Wednesday, May 23rd 2007 at 12:09 am
i also would like to help with joe orginize by model and step by step photo included
Wednesday, May 23rd 2007 at 1:23 am
Hi guys!
I have the IBM Thinkpad T43… How can i make this with the SVP??? I pay you!!!! please hep me… Give me an answer at my email accont….
Robbes84@yahoo.de
Please help me!!!!!!!!!!!!!!!!!
Wednesday, May 23rd 2007 at 7:23 am
@Bill Choy
photos for x40 chip location
send photos to yahmeen32@yahoo.com
Wednesday, May 23rd 2007 at 8:56 pm
Hi ppl…
I need some help, a very good help because I have a problem that aren’t in this posts so I requered ADIMS Help! I can read the Eprom and e see where is the passwrd place but the pass are spaces, or blanck spaces and I cant put pass on the TP! I trie lots of combinations but…nothing!
ADIMS SOME HELP PLZ…
sorry my bad Inglish…I’ll wait for a replay.
filipe_fiambre_essm@msn.com
Thursday, May 24th 2007 at 11:36 am
People, you are searching for answers in the wrong place. Goto the authors’s forum http://www.allservice.ro/forum/ and post your comments there
Thursday, May 24th 2007 at 10:13 pm
poderiam me ajudar por favor em um think pad x31? e o mesmo procedimento acima? ou o esquema do cabo muda alguma coisa? desde ja agradeco!!
Saturday, May 26th 2007 at 8:37 pm
Hallo everybody, i want to ask how can open bios pass for IBM Thinkpad T60?Thanks for help from now, im waiting pass bios IBM Thinkpad T60 mail me,thankz!!!
Saturday, May 26th 2007 at 8:39 pm
so mail me: avtomat75@mail.ru
Saturday, May 26th 2007 at 9:12 pm
Error 0271 - check date and time setting?????
and asked pass,,,?
Wednesday, May 30th 2007 at 1:51 pm
Hello,
I have a Lenovo ThinkPad T60. I forgot the BIOS supervisor password and need to unlock it. I have already purchased the parts to build the interface to connect to the security chip. Can someone please send me a picture or tell me where the security chip is located in the T60 and what leads to connect? My email address is: psyhead[at]gmail[.]com
Thanks, Re:x
Wednesday, May 30th 2007 at 5:29 pm
Hi Victor Voinea I try to Unlock an IBM Laptop R50 , But what I get as answere is not possible to read because the password is TCPA encrypted.
I want to buy the other program like RCPA reset service
W24RF08 license (eeprom writer)
Is there an other way to buy the programs accept with a Credit card or Visa Master card
Wednesday, May 30th 2007 at 6:22 pm
Hi, i have a thinkpad t22, and says crc1 error 0175, i know that this is the bios, but my question is… ¿does anybody have a bin working for that machine??, pleaseeeee, i really need that, if anybody has one, please contact me as ingersur.redes@gmail.com thanks already
Wednesday, May 30th 2007 at 7:44 pm
I come from germany
I have a T20 and i could read the eeprom, but the programm IBMpass2.1 doesn’t show me any supervisor password. What is wrong - I need help
Thank you.
Wednesday, May 30th 2007 at 7:45 pm
@benito
http://www.allservice.ro and the guys from there are not related with this website at all, maybe you need to email them or to contact them in their forum http://www.allservice.ro/forum
Wednesday, May 30th 2007 at 8:01 pm
Hi i try to Unlock an IBM Laptop R50 , But what I get as answere is not possible to read because the password is TCPA encrypted.
I want to buy the other program like RCPA reset service
W24RF08 license (eeprom writer)
Is there an other way to buy the programs accept with a Credit card or Visa Master card
Please contact me on me as bresida@yahoo.com
Thursday, May 31st 2007 at 3:57 am
anybody has the rom, or bin of the thinkpad t22???, pleaseee send to meeee ingersur.redes@gmail.com
Thursday, May 31st 2007 at 11:11 am
Thanks, is there ways like this for other brands.
Regards Dexter
Thursday, May 31st 2007 at 3:13 pm
@Benito
But the other program and the reset service is provided by allservice.ro, go and ask there, not here….
Thursday, May 31st 2007 at 9:10 pm
Hello ,
tray all your explanation but unfortunetly when start the software r24rf08 dump.bin I got the message eeprom does replay.
I am using T60 with his docking station ( where we have serial port)
at backup pc.( the T60 doesn’t have directly Serial port)
Do you think this configaration can make this error message?
Or do yo have one idea from where I maked e mistake ?
Thanks a lot for your help
steve
Friday, June 1st 2007 at 3:46 am
hi sh, do you have a bin for t22???, if you are please send to meee pleaseeeeeeeeeeeeeee, ingersur.redes@gmail.com
or if you know a page or something too, thankssssssssss
Friday, June 1st 2007 at 2:36 pm
DO it ITS 100% WORKING THANKSSSSSSSSSSS AAAAAAAAA LOOOOOOTTTTTTTTTTTT
Sunday, June 3rd 2007 at 1:01 am
I have a number of ibm/lenovo recovery disks if any one needs help with that.
mark
Sunday, June 3rd 2007 at 9:24 am
I have a TP t23 lock. Anyone in San Diego area or close to me willing to help me out? I’m willing to drive to your place as long as it’s not too far… Willing to compensate you for your time. Thanks please let me know.
vixayb@gmail.com
Tuesday, June 5th 2007 at 1:00 am
i have an T30 and i dont seem to find the atmel chip it may be named othervise any ideas where i can find it? and What’s up if a connect my computer and it can not create the file (data .bin file)?.
Tuesday, June 5th 2007 at 4:29 am
if anyone have the bin of a t22, t21, o t23, please send to meeeeeeeeeeee , ingersur.redes@gmail.com
Tuesday, June 5th 2007 at 4:00 pm
ineed 2 cleer bios bassword in ibm laptop mod no r 40 e thanx
Tuesday, June 5th 2007 at 6:10 pm
Hi guys, can somebody tell me where is ths GND on the TP??
I’m a newbies and i can’t locate the GND on the motherboard.
Thanks
Tuesday, June 5th 2007 at 7:59 pm
Hi, I need the pin for the t20, the dumb.bin does not include the password in line 0×330, there are some letters, but they aren’t accepted!!!!
Help me please!!!
Thursday, June 7th 2007 at 11:28 am
Hi,
I was able to dump the data from the R24 chip. However the data looks encrypted or just plain trash. Is there a way for me to re- write a password? Any help is greatly appreciated.
Thursday, June 7th 2007 at 3:11 pm
O.K I have X40 the 24RF08 chip is located on the underside of the motherboard below the PCMCIA slot. did not solder chip tried but could not get found something online to make easier (Pomona 5250) is a chip holder that give you more room less chance to damage chip but i used two sewing needles & a eraser head from pencil (to hold both needles at same time) everything else worked like a instructed had a blast. need help or photos e-mail
Thursday, June 7th 2007 at 3:18 pm
@ Andy click buttom just under tool bar it should say Aa off click to say on and click on view in toolbar goto translation click on alternate scancode R series
Thursday, June 7th 2007 at 3:19 pm
It worked! I (had) a locked R51 Thinkpad and this procedure worked perfectly. Only trick was converting the coding in the line where the password was to ascii (I think) and it was revealed! Luckily, I used the same password for both the BIOS and the HDD. Thanks!
Thursday, June 7th 2007 at 9:16 pm
Help!!! Pease, who, than will be able!!!… Has Lost the password on supervisor (SVP) IBM T60p. I well understand in computers and know that not all so simply. Here over and over again tried to raise this subjects, but as well as have not discussed. If, there is information send on mail admin@rd.com.ru Thanks!!!…
Friday, June 8th 2007 at 8:19 am
Help!!! Pease, who, than will be able!!!… Has Lost the password on supervisor (SVP) IBM T60p. I well understand in computers and know that not all so simply. Here over and over again tried to raise this subjects, but as well as have not discussed. If, there is information send on mail admin@rd.com.ru Thanks!!!…
Sunday, June 10th 2007 at 10:50 am
PLEASE GUYS, WHERE IS THE GNDDDDDDD
PLEASE
Sunday, June 10th 2007 at 2:36 pm
Need Help. OK so i have looked on many websites and have determined that there are not many answners about the T43. I cant seem to find the atmel chip on this unit. Does anyone know if the crack is possible with this unit. Or where i may find the chip. I have the main board out and have checked it top and bottom. I think that i am missing something> PLease help.. Thanks in advance.
Sunday, June 10th 2007 at 8:18 pm
There is a simple answer, RPC8394 and WPC8394 reader and writer for PC8394T-VJG used in T43.
Monday, June 11th 2007 at 8:48 pm
Ok got it. But do know where the chip is located on the mother board? I cant seem to find anything on the board that says Atmel. Any suggestions on the location of a picture of its location.
Thanks again
Monday, June 11th 2007 at 9:30 pm
Hi,
I used the same steps to unlock my T42P password but i am not able to see any password in dump.bin file.
Pls help me in this regard.
Thanks
Tuesday, June 12th 2007 at 1:50 pm
Jake,
What ATMEL? T43 has the Winbond PC8394!
Tuesday, June 12th 2007 at 6:16 pm
softpedix.
I now understand that. Thanks. Where is the Winbond PC8394 located at on the board. Thanks In advance
Tuesday, June 12th 2007 at 8:40 pm
a friend gi-me a old t21 but he fargot the bios pass.
here is the softwere to red the eprom , i cant find is it here
tanks
Wednesday, June 13th 2007 at 12:00 pm
Hi again!
Do you guys know, what kind of supervisor protection is in a TP 560Z? The same ATMEL chip, or other?
Thank you!
Thursday, June 14th 2007 at 2:15 pm
Hi Everyone,
I have read the instructions and the diagram. I want to try for my T21 but I am not sure how and where will I connect to the spare PC. Should I connect the soldered serial port(female) to the male port on the spare PC?
I would be so grateful for your reply.
Martin
Thursday, June 14th 2007 at 2:42 pm
That’s true … good luck!
Thursday, June 14th 2007 at 4:54 pm
NEED HELP
Hi guys, i’m trying to crack a password bios for a thinkpad t42, but i’m a newbie, can somedbody send me a photography with the place of the GND??
my mail : lilimamacece@caramail.com
Thanks
Friday, June 15th 2007 at 5:47 pm
Just did this on a T42 - everything works 100% !!
But remeber to press the A->a button (top left) in the “IBM Pass 2.0 Lite” app.
On a T42 the ATMEL is under the wifi card (under the mousepad).
To Moimeme: GND is everywhere!
I screwed the GND wire in under the shield for the DVD bay.
Wednesday, June 20th 2007 at 4:25 am
I have T22, I went to radio shack today.. but could not find 2200 Ohm Resistors, instead found 2.2 Ohm (indcated on the diagram but requirement list). Even there are two options in 2.2 Ohm ie. 1/2 watt and 1/4 watt. I just bought as set of 2.2k Ohm (1/2 watt) and 220k Ohm (1/2 watt).. which one will be the right one? Any suggestion?
Wednesday, June 20th 2007 at 9:15 pm
Is there any way that i can clear the supervisor password on my ibm thinkpad 600 without soldering. Ive heard that you can use an eight pin test clip, but i am not sure of the details.. Can someone help me??
Wednesday, June 20th 2007 at 11:02 pm
@Oblivious
See what Ray Kawakami experienced with the 600:
http://www.allservice.ro/forum/viewtopic.php?p=915#915
No need to remove the board, anymore
Wednesday, June 20th 2007 at 11:11 pm
thank you for this very good programmes and also good thanks for allservises website
Thursday, June 21st 2007 at 10:45 pm
hola si querian pregutar me da foto de disco rigido para ver manual
Sunday, June 24th 2007 at 11:18 am
Hallo.My friend bought Lap Top Lenovo T60.It is booting normally but when You want to enter bios it is asking for password.Wich kind of password is this,is it supervisor pass? I can work in Windows,I think even that I can reinstall it,because when I press F12 key it is offering me boot options.Only thing is that I canot acces bios.Is the procedure for removing that password the same that is offerd here or it is easer? Because I have had an Lap Top T30 wich hade this power on password.It was asking for password on power on.Can somebody help pls?
Monday, June 25th 2007 at 2:37 am
Can you put this instruccions in spanish?, Thank you.
Tuesday, June 26th 2007 at 5:31 am
Please help , I am Also stuck up with the BIOS Password
Wednesday, June 27th 2007 at 2:16 am
i am having t22 laptop i couldnot find the bios please help me with steps
thanks
Thursday, June 28th 2007 at 3:26 am
I succeeded in tapping the chip on my 390x, but the password is not revealed as in the tutorial. the characters on the line that is supposed to have the password are not discernable. any advice??
Thursday, June 28th 2007 at 7:15 pm
hi hope you can help i was given a tp 770 do you think this procedure will work on this model?it was free so nothing to worry about if it dos not work.
Friday, June 29th 2007 at 1:50 pm
I’ve found a 24C01 ic on the 560z located at the bottom side of the motherboard, between the Intel Flash and PLOW2 ics. I will post some photos, if wanted. So, i am going to break the little one in a couple of days, but, still have to solve some problems with it. Whish me luck
Tuesday, July 3rd 2007 at 10:33 am
i don’t know how to hack my SPV password.
please teach me how…
hopefull……………………………
Tuesday, July 3rd 2007 at 5:58 pm
I successfully retrieved my password using this technique, however, I now have EEPROM data errors.
0187: EAIA data access error.
and
0191: System Security - Invalid remote change requested.
I have been through the loop of pressing F1 to enter set-up.
I think the EEPROM may not be soldered in correctly or I have damaged it. Any ideas?
The thing I have noticed is that the SDA & SCL solder points on the circuit board do not seem to be connected to any circuit tracks. There are a couple of copper circles with holes through the board next to the SDA & SCL surface mount points. Should these be connected with solder. I tried that too but this time the laptop just bleeped at me, so I don’t think they should be.
I appreciate any help anyone can give me.
Many thanks!
Tuesday, July 3rd 2007 at 10:09 pm
How much does a R40 pentium 4m costs?
Tuesday, July 3rd 2007 at 10:53 pm
When i try to enter to the bios utility it show an error to me something like it has been tampered or something like that, then it asks for the password
Wednesday, July 4th 2007 at 4:17 am
Look on ebay there are people that can help you, just search for IBM Password Removal, I have unlocked mine on ebay with a guy that has laptops 4 less from IL or something like that, I payd him to do it and I had my laptop back in less than a week in perfect working condition. I believe he can remove the password from any IBM model. I tried to unlock myself and I spent more time and money than my T43 is worth it, so I touth to give you guys a clue if you’ll be in trouble like me. You’ll spend more money than you’ll pay for the parts but if you think how much time you’ll spend reading all this forums and how to do it than you would reather go with someone that does this every day. If I would have found this info before I would have been less frustrated.
Wednesday, July 4th 2007 at 4:09 pm
hi!
wer weiss welch E-prom hat T43, und wo ist.
Danke.
Wednesday, July 4th 2007 at 9:47 pm
@Nathen
All the guys that claim to unlock newer IBM laptops are just using allservice software. This is available for everyone, the software is PC8394 programming tools, so don;t be silly.
Thursday, July 5th 2007 at 2:57 am
I have problem with T23… can any1 help me.. it d same the bios password prblem.. with the lock ICon on side.. .is it applicable this procedure to my TP T23?.. Can any have any idea.. I Really need Help..
Thursday, July 5th 2007 at 9:30 am
plz i really need help :((
Thursday, July 5th 2007 at 11:13 am
Hi all!
My father died and now i own his r52 can i do this tutorial or do i need this full package for money? actually i got no money:(
Sunday, July 8th 2007 at 8:05 pm
To fix a nonworking T21 my son bought a t21 motherboard at a local internetshop, RenS computer. The guy said it should be working. Starting up, hurray. Oh no, pass word asked… Shop owner asked for help: claimed ou own fault, could not get him to refund or give any other help. My opinion, he stole €60,- from my son for a unusable board. Pass the word: R&S computer in Holland can’t be trusted.
Anyhow: your site did bring the solution. Build the electronics, resitors and zeners only, downloaded programs, soldered in and found the pasword. It realy works now.
Thanks a lot
Erik
Sunday, July 8th 2007 at 8:36 pm
IBM Thinkpad T40/p , T41/p , T42/p Password Security chip i cant find it on my r40 board can somone help me
Tuesday, July 10th 2007 at 6:06 am
I want to send you a picture of the IBM 600E where you can see the location of the ATMEL 24RF08CT chip on the motherboard.
Please send me your e-mail so I can send it to you.
Best regards
Mario
Tuesday, July 10th 2007 at 6:47 am
have problem with T23… can any1 help me.. it d same the bios password prblem.. with the lock ICon on side.. .is it applicable this procedure to my TP T23?.. Can any have any idea.. I Really need Help..
need help….
Tuesday, July 10th 2007 at 6:48 am
i have T23… with … a password luck too.. i need help..
need help….
Tuesday, July 10th 2007 at 5:06 pm
i have a t-21 look bios password , i pay a new eprom but were i can bay a new eprom in europe , or i sand the pc to unlook.
thanks y need help , beacause my dogther lok-me the PC t-21
Wednesday, July 11th 2007 at 5:47 am
Thanks Nathan you gave me the information I was looking for, I did not want to spend my time learning how to crack a password. I found the guy on ebay (ebay ID: less4laptops) and he unlocked my T30 for $25 + shipping, I’m glad I did not spend too much time searching for answers. I got my laptop back in 5 days. I’m really exited to have my laptop back :))
Wednesday, July 11th 2007 at 5:24 pm
I really appreciate if anyone can send me the bin of a t21.
Please send it to fdocino@hotmail.com
Thanks in advance
Friday, July 13th 2007 at 6:54 am
THANK YOU FOR EVERYTHING!
This worked like a charm!
I have two suggestions.
1. the ground I tried a screw hole a got nothing so i decided to try the cd case and MAGIC.
2. I was very hesitant to solder my Thinkpad R50e in anyway so i didn’t. I used an extra USB cable i had laying around. I removed the metal on the USB side and broke off the plastic that holds the leads. I used the 2 center leads to attach to the legs of the chip when the time came.
You can view pics here:
http://NYCiPodDoctor.com/AtmelReader
(warning it’s nothing fancy i just threw it together to see if this would really work!)
If anyone has any questions I’ll be happy to help just email me at iPodDoctor@gmail.com.
Lastly
THANK YOU BEN!
Friday, July 13th 2007 at 9:32 pm
any1 know where i can download a service manual for the t22 from the internet? thanks!
Saturday, July 14th 2007 at 5:48 pm
What really is the point in attempting to recover your own/lost password from an IBM thinkpad laptop computer ?
Are all you people really going to go out and purchase little things called diodes and resisters etc. and then attempt fine soldering of wires to the 24RF08 chip on a motherboard. After, ofcourse you have spent lord-knows how long stripping it down !!
I notice someone on this site has published a ‘photo showing you the 24RF08 chip. Small is’nt it ?!……….What he does not tell you is that this chip is also produced in the 14-pin package and is present in many models of thinkpad !!
You will need some very fine soldering skills indeed to attach wires to THAT particular chip !! The chances are quite high that unless you have previous training in this field, you will scrap your laptop !!
There really is no point in all this time and trouble when you can get it done properly for as little as £30 + postage now, on the Ebay.
Sunday, July 15th 2007 at 6:40 am
Hi. Wondering if you have a procedure on how to recover a thinkpad A31 supervisor password?
Sunday, July 15th 2007 at 10:50 am
The A31 model contains the 14-pin vesion of the RF08 chip. Forget any procedure unless you are a time-served engineer !!
Best bet is to go to ebay and search for user-pushkin1974, and then send your unit for a lousy £30 plus postage and get it done properly !!
Monday, July 16th 2007 at 1:26 pm
poe
Monday, July 16th 2007 at 2:10 pm
A31 is having the 8 pin chip! I guess you’re trying to advertise somebody who just takes money for an operations that it’s free basically. Mike, did you see this guy?
Monday, July 16th 2007 at 2:28 pm
A31 - chip location, in rest is exactly as for T40-t42
http://www.allservice.ro/forum/viewtopic.php?p=2747#2747
Tuesday, July 17th 2007 at 3:21 am
I am unable to find the eprom for the T43. Is it the 24c64rp? That is the only chip that I know is an eprom. I really need this, so who ever knows the location please email me. rsmith86@gmail.com
Thanks
Tuesday, July 17th 2007 at 6:06 pm
i conneted everything like the diagram, and when i press enter i cant find the dump bin file ,how do i find or tell if and where the bin file has gone,can anyone help!!!
Tuesday, July 17th 2007 at 8:25 pm
I have tried both systems Zenor and IC (max232c) and with 1st (Zenor) I get no action from the computer,with max232c it say no eprom found anybody can Help
Please..!!!!!Rodney.
Wednesday, July 18th 2007 at 3:20 pm
According to “softpedix”, this operation is ‘ basically free ‘, as he puts it !!
So far you’ve spent time and money on components and soldering and you’ve still not sorted it out !!
It should be mentioned here that a PROPER password removal is not performed by all this messing about with circuits, solder and bodged software, it’s done using the Antron test-head. This device is inserted into the cpu-socket and the cpu is then inserted into the head. The board is scanned and a complete schematic is drawn-up on a monitor in block-diagram form. Any firmware on ANY chip is then dumped to an editor for perusal by an engineer. That is why password removals are cheap nowadays as there is no soldering done during extraction. Only the 2-bit companies and tight-fisted cheapskates are fool-enough to risk their laptop(probably expensive) on dubious operations !!
Wednesday, July 18th 2007 at 6:23 pm
I have a IBM Thinkpad T42p and i forgot my power on password can i overwrite it somehow without using like disks to clean it out. I need help. I cant figure it out and when i got to my bios its locked also. Can anyone help me?
Wednesday, July 18th 2007 at 6:26 pm
i dont want to take it apart though so is there a way to bypass it?
Wednesday, July 18th 2007 at 7:13 pm
Can anyone give me advice? Please?
Thursday, July 19th 2007 at 10:21 pm
Stebra, my boy, you are just blowing hot air here :). Now for all people: do avoid spending money to some idiots that are just using the same software/methods that you could use as well. Also do avoid scam and frauds. Goto http://www.allservice.ro/forum and download the software and see the procedures.
Friday, July 20th 2007 at 3:02 pm
Wrong ’softpedix’. The only person who is blowing ‘hot-air’ as you call it, is YOU…..trying to get the chips off the the boards !!……my boy.
I have just over 21 years experience in electronics engineering and microprocessor based systems. I rather think that it’s YOU that holds the title of ‘boy’ !!
I know about the Antron test-head…………….Because it was ME who sold it to Pushkin for £7,500 smackers !!
That’s how i know what i’m talking about.
Most of the people on sites like this are dealing with stolen laptops anyhow. Let’s be honest……….What type of person forgets their password when they are typing it everyday in order to use their laptop ???
Oh yes, almost forgot…………Does anyone know if this pedix-boy works for allservice ?………..He keeps mentioning their name all the time !!
Friday, July 20th 2007 at 6:53 pm
Hi,
Anyone can direct me to locate ATMEL Chip on T22 board. I would be more grateful if you can show me with the picture. I checked the board carefully but couldn’t find any chip written ‘ATMEL’.
Reply me at my email: martinralte1@yahoo.com OR in this page.
Saturday, July 21st 2007 at 6:45 am
no, its not that i stole it. i really have the worst memory in the world. Please help
Saturday, July 21st 2007 at 9:17 am
any1 .. can just answer my question is this procedure.. also applicable to T23? i Really Need the answer thankz. again..
Saturday, July 21st 2007 at 10:18 pm
@Stebra:
If you read this forum “da capo”, I am sure you’ll notice that all the discutions here are about using allservice’s free software, so its normal for anyone to mention their contribution. I will repeat this word for you: “FREEWARE”, does this mean anything? Hello? So go anywhere else and sell your 7500 non-existent solution (very amusing after all, I laughed with tears, no offense, but was a good one..) and let us be.
Oh, did I mentioned some idiots trying to make money.. I didn’t mean you. Do you feel offended? I know it hurts, but I can do anything for you, is the nature. So, if you didn’t come here to provide a free solution, then don’t come to sell your Pushin or Gorbatchev friend, because we simply don’t buy it. Got that?
@Martin, Francis: T20-23 have a 14 pin eeprom, it’s near the memory SODIMM slots. Just remove the memory cover and you’ll find it in seconds.
Monday, July 23rd 2007 at 2:48 am
thankz MArtin.. its the simple chip right beside the memory right?
Monday, July 23rd 2007 at 2:58 am
i GOt.. but the problem now is where i should solder the 3wires …i mean the ground.. the 2 for the reader… am confuse.. itz for the 14pins atmel chpiz
Monday, July 23rd 2007 at 3:55 am
I did with T22. It has 14 pin..! It works very well. 8 and 14 circuit instuction is found in http://www.allservice.ro/forum/dl/simple-i2cprog.pdf.
If any one like need helps email me at martinralte1@yahoo.com
Thanks,
Martinralte
Friday, July 27th 2007 at 1:25 pm
God damit, soon 500 comments!
Saturday, July 28th 2007 at 12:46 am
Please… I have fujitsu siemens laptop, and locked bios too. Do anybody knows how can I do it on this way with FJS or to redirect me to some site? Thanks
Sunday, July 29th 2007 at 7:13 pm
Help,
where can I order the C5V1 Zener diodes. cant find it
thanks
Monday, July 30th 2007 at 11:16 pm
If you an 390e tp the chip is located in the the right hand corner right next to an compactior and surround by usb and power porte
Tuesday, July 31st 2007 at 8:15 am
hey, man i have also this supervice password thing.
So i hope you could help me….:D
I have a IBM Thinkpad R40e
how can i open it…??
hope u can help me…
Wednesday, August 1st 2007 at 12:07 pm
hi mike, how about Thinkpad T60. pasword supervisor please. thank’s for your attention.
Thursday, August 2nd 2007 at 9:46 am
HI IM TRYING TO CRACK A PASSWORD(BIOS) IN THIS WAY BUT ALL I GET IS A PROMPT THAT SAYS ..EEPROM UNAVALIBLE..
WHAT THE HELL DOID I DO WRONG?PS I HAVE A A31P..PLEASE HELP
Saturday, August 4th 2007 at 11:37 pm
I need soft w24rf08 ( cracked)
Monday, August 6th 2007 at 3:30 pm
I am trying to locate the Atmel 24R08 chip but cannot fint it on my Thinkpad R32. Only able to find the Atmel 93C46. Hope someone can help.
Tuesday, August 7th 2007 at 3:27 pm
I have a T30, I obtained to execute the circuit, only that I do not obtain to descodification of password administration..$!!Ì… Somebody can help me?
Tuesday, August 7th 2007 at 6:19 pm
I have doing all the plan, i runned Itester and all seem to be connected, but when i do the command to make the dump, it say eeprom not available.
Tuesday, August 7th 2007 at 6:33 pm
NEVERMIND IT WORKED, I WAS ON VISTA THAT WHY , I TRYED IT WITH WIN XP CMD AND IT WORKED !!!!!!!!!! WOOOOOOOOOTTTTTTTTT
Thursday, August 9th 2007 at 1:30 am
It’s half past three in the morning, and I got pass!!!
A friend of mine brought me a laptop (of questionable origin) to repair. Firstly, I soldered wires on wrong side and was afraid that the chip was burned. However, everything was ok, and I got password.
Incredible
Thursday, August 9th 2007 at 9:31 pm
i have t42p, i found the chip ,i solder the wires ,everything by the book ,i entered the command in the command prompt ,and it said that the circut not found or something like that , and than after few tries ,the notebook wont start ,what shoud i do ,is the motherboard gone dead, or just the eprom ,should ii must programed again
please help me ……. if there anything to do with it
thank u
Thursday, August 9th 2007 at 10:31 pm
i also ran a file in C:\ALLservice\24RF08 directory called itester.exe and than i cancel it in the middle ,than the tp went dead
maybe this is what cause me the problem
please somebody help me ,please
Friday, August 10th 2007 at 2:32 am
I have a ibm thinpad T22 mobo with FRU 12P3890.
I can’t find he ATMEL chip.
Any help ?
Friday, August 10th 2007 at 6:24 am
hi,
I have a laptop IBM T 21, but I have a trouble with the AC adapter,, it does not work so I need a schematic diagram of this ac adapter. Can you help me>
Thanks
Friday, August 10th 2007 at 4:01 pm
Can anyone send me a clean EEPROM dump from IBM ThinkPad T42p?
can i program it back, cause the tp doesn’t show any screen when i turn it on, what should i do ? is it worth it ?
please somebody hekp me
eagle1234@walla.co.il
Saturday, August 11th 2007 at 1:54 am
Thanks! instructions couldn’t be simpler, used it to recover my T42 TP so problems, worked on first try. very well written!
Monday, August 13th 2007 at 5:40 am
need help
Monday, August 13th 2007 at 6:21 am
QUESTION 1
Not IBM but second pc, when it asked me to fire up cmd on other pc-ok I did
Then at that point what I see is C:\documents and settings\Eddie Wilson
Where do I go from here? WHAT I DID WAS I tried to type cd\dir enter then cd\dirr24rf08 enter
I don’t know can you give me the steps to navigate TO WHERE I NEED TO BE PLEASE
Question 2
On IBM T42P on start up I hit F1 and then it’s says enter bios THEN I get ERROR 0271: CHECK DATE AND TIME error 0176: SYSTEM SECURITY-THE SYSTEM HAS BEEN TAMPERED WITH. THEN I SEE A PICTURE OF A LOCK (WHAT DO I DO)
LAST QUESTION
TELL ME WHAT IM DOING WRONG. Okay ON SECONED PC I TRIED TO NAVIGATE TO WHERE FOLDER SUPPOSE TO BE AT, WITCH I DONT KNOW
MY GUESS IS C:\ALLSERVICE\24RF08 - THEN I STOP AT THAT POINT. I THEN GO TO IBM AND TURN ON AND HIT F1 TO ENTER BIOS THEN I GET MY ERROR’S BUT I JUST WAIT TELL I SEE NOIGTHING BLINKING OR FLASHING PREETY MUCH I WAIT FOR A BLANK SCREEN THEN I CONNECT THE SERIAL PORT TO SECOND PC THEN I CONNECT SDA TOGETHER THEN I CONNECT THEN SCL, THEN I HIT ENTER ON IBM AND I GET NOITHING, CAN YOU HELP ME PLEASE
THANK YOU
Tuesday, August 14th 2007 at 5:03 am
No chip on IBM A21m
Thursday, August 16th 2007 at 12:49 pm
So Do It Yourself:
I was able to complete the task of unlocking my T30 by using your process however it went much easier
than I planned or you described. After building the ckt and purchasing a USB to serial converter from radio shack and installing per the procedure the loaded down BIOS let me into Bios setup without extracting or using the software tools. I did try the exe apps but came back with some error referencing was nort able to detect data.(Perhaps the ckt was a white noise antenna which confused the Bios. At any rate I was able to assign a new hard drive password and delete the sys pass from my T30.
Sincerely,
pvincentdaniels@msn.com
Sunday, August 19th 2007 at 8:21 am
Is here anyone nowing something about de IBM THINKPAD type 2673?
A can’t get into the bios in order to change the booting device from harddisk to cd-rom. Password needed.
Thanks, Edward.
Sunday, August 19th 2007 at 3:39 pm
Hi,
My T20 thinkpad has come up with a stop post error 0175.
I have read many articles some saying this is a password problem others say I have to replace the board, I am not sure which it is. I have made the reader but have not attempted to use it yet until I know if this is going to fix my problem.
Could I please have a little help,
It would be greatly appreciated.
Regards,
Sue
Sunday, August 19th 2007 at 4:47 pm
Successfully read the chip and opened file in ibmpass but there are rows of f’s around rows 300 - 350 and nothing decodes for these rows. Does this mean it cant be unlocked?
thanks for the great website.
cheers
Stu
Sunday, August 19th 2007 at 5:44 pm
Anyone had the same problem i have..
when dumping the chip all is ok ,i receive the 1024 bytes and when i open the file with ibmpass 2.1 lite i can see stuff like this at adress Ox227 :
ThinkPad T42
so i think that my read is ok,but at adress Ox330 the data i see is only dot and on the hex side i only see 00’s
but i still cant come into my laptop,it all happen when i deceided to remove the password,so that my kids could use it after buying my new one….
anyone can help??
Tuesday, August 21st 2007 at 3:36 am
IBM Thinkpad R40. I have pictures if you want them of where the chip is that this site is refering to. Tim mentioned it’s location in the discussion area. Mike, e-mail me if you want these. They are a few meg in size. Probably under 3. The location is indeed below the hard drive and about 1″ over from the right front edge of the USB connection.
Tuesday, August 21st 2007 at 6:16 am
Hi,
to admin: thanks for these good informations…
I have an IBM X30, and after I modified the PASSWORD (the ascii caracters was not readable…), at the 0×338adress and 0×340, the thinkpad tells me ERROR 0175: BAD CRC1.
Whre could I find the checksum bytes in order to change them, or can someone send me a file of its EEPROM, in order to download it.
Thanks
Nicolas - malinerie@free.fr
Tuesday, August 21st 2007 at 4:11 pm
After getting a row of ‘f’s I went back and tried another dump and this time I got the password revealed at 0×330 as promised. Many thanks to your website.
IBM T20 now back up and runnin’
Stu
Thursday, August 23rd 2007 at 7:05 am
How do I remove my password onder “leave a reply”?
Can someone remove it, because I can’t.
Friday, August 24th 2007 at 9:30 pm
Hello,
I was able to recover the supervisor password of a R50e laptop using this method.
Thanks!
Saturday, August 25th 2007 at 7:42 am
gfsgd
Saturday, August 25th 2007 at 1:58 pm
am tryin to do this on a t30 2366 and is not workin out all i get is a error code sayin circuit not found my chip looks backwards compared to the pics so which is the sda scl is there a way to tell like pin number need help soon before i pull out my hair
Saturday, August 25th 2007 at 11:32 pm
@ Captiant30 …….
I used the 1N4733A 1W Zener Diode (Catalog #: 276-565) from Radioshack, it worked for me.
Sunday, August 26th 2007 at 3:12 am
Hi,
I posted a message on the 19th and forgot to give my email.
Could someone please help me regarding T20.
Regards, Sue
the_pooks@hotmail.com
Sunday, August 26th 2007 at 5:20 pm
Worked great, (T40) thanks!
Wednesday, August 29th 2007 at 4:24 am
still waitin for a response to my last post
Wednesday, August 29th 2007 at 9:30 pm
Can I use an standard diode (ZD 5,1V) aswell?
Thursday, August 30th 2007 at 8:12 am
suppervisor and HD password problem, i have a Thinkpad X31
please help me, someone offer me this computer
Thursday, August 30th 2007 at 8:12 am
suppervisor and HD password problem, i have a Thinkpad X31
please help me, someone offer me this computer
nestorgba@hotmail.fr
Thursday, August 30th 2007 at 8:32 pm
well iam happy about the stuff you give foe free keep up the good work give knowledge and gain more iam also willing to help in any thing in your ordeal please mail me also i need schemetic diagrams of laptops p3 and p4 as new components are being manufactured adn put to use in laptops
Friday, August 31st 2007 at 9:11 am
Thanks for the info. It took a couple of hours to complete, but i was able to recover the password on my Thinkpad a22m. By the way, the factory supervisor password was “SUPPORT”.
Friday, August 31st 2007 at 5:10 pm
ibm type 2652.
salut.je arives pas trouves le eprom je ublies les codes je arives pas entre dans bios.merci
Saturday, September 1st 2007 at 3:29 pm
SOFTPEDIX I have a ibm thinkpad Z61t which boots straight to bios, can the above software/hardware crack work on this?
gratefull for any info recieved
Saturday, September 1st 2007 at 3:53 pm
ciao,io ho un ibm tinkpad t20 che non funziona,mi mandi un link dove posso trovare come procedere per individuare il guasto ?,grazie
Saturday, September 1st 2007 at 9:26 pm
Mrwillson,
No, the above software doesn’t work, you need PC8394 programming tools from allservice. The method is pretty much the same…
Sunday, September 2nd 2007 at 7:12 am
still no luck with my t30 2366 still says no curcuit found need help am goin nuts
qpid315@hotmail.com
aim lust8783
Sunday, September 2nd 2007 at 4:06 pm
what is the password set by ibm corporation (by default password)
Monday, September 3rd 2007 at 1:00 am
Great! Thank you so much for all the hard work to post a such great threat.
Monday, September 3rd 2007 at 9:52 pm
Hi
Has any one retreived the bios password on a T60 succesfully??
Tuesday, September 4th 2007 at 10:54 pm
Can any body help me with the T60, where is the chip located. Is it the same circuit used?
Wednesday, September 5th 2007 at 12:03 pm
I got the dump from my 390x but it did not reveal the password.. line 330 read all o’s and line 340 read 58 c4 fa 0b 44 b4 fa 02. Above and below were all f’s. the far right column showed y’s with the umlaut sign over them. Does this make sense to anyone? It sounds like Stu (8-27-07 comments) succeeded by running the process again. Is it a common to need more than one attempt to get a successful read? thanks, dan
Thursday, September 6th 2007 at 5:57 pm
HOW DO I FIND OUT WHAT KIND OF THINK PAD I HAVE AND COULD U TELL ME HOW DO DO IT AGAIN AND,IS IT ANOTHER WAY
Thursday, September 6th 2007 at 7:50 pm
i intend to use this method however i cannot locally find a pair of the Zener diodes.
C5V1…nothing local..any suggestions as to where to look? what kind of scrap equipment would i find the proper ones in?
i have a T22, original board croaked, bought one on ebay, locked BIOS…had it for a couple months sitting on the floor by my desk…would be helpful if you can help me!
would you be willing to assemble one for a reasonable price + shipping to me?
email’s best way to get me.
thanks for the good walkthrough though, gives me hope for this T22. [2648-4EU]
-bonestonne
Friday, September 7th 2007 at 10:28 pm
I have a A20m but I cant find the atmel chip anywhere. I took off the keyboard and almost all the components but I don’t see it. Is it on the back? The Maintenance manual doesn’t tell you how to get to the other side of the motherboard. Does anyone know exactly where it is or have any pics? Thanks.
Saturday, September 8th 2007 at 1:12 am
I have T41 it has Power on password. Is it possible reset power on password as well.
Please help me out. Thank you.
Saturday, September 8th 2007 at 8:32 am
hi, where do i find the amtel chip on my ibm r40 thinkpad , can anyone help me please.
Saturday, September 8th 2007 at 9:35 am
hi ,i found the amtel chip on my r40 but it has 24 pins , at97sc32012632510237 is the number on , is this the right chip , if so which is the scl and sda . thanks
Saturday, September 8th 2007 at 1:46 pm
On a TP A31 I found the chip under the pcmcia slots. That tip about the AA button being on helps too. When you do try turning it on, I found I had to put some of the stuffing back in to get the BIOS screen up. I literally took every module off to find that 8 pin chip, I’m glad its still working after all that.
Saturday, September 8th 2007 at 4:05 pm
Don’t forget to activate the transcode button. I was wondering why I could not recognize the correct data
But then everything works fine. Thanks!
Sunday, September 9th 2007 at 3:10 am
Hello everyone,
I have a thinkpad t30 - eprom actmel 24rf08 with 8 pins.
Now stops during boot with the message error 0175 bad crc1, I think that is because
the contents of the actmel eprom is scrambled or something like that,
so i have to replace it with a good one, so anyone that has the same model, please send me a dump of the eprom bin file.
My e’mail jose.jabr@gmail.com
Tuesday, September 11th 2007 at 7:15 am
what to do, when starting writing {System Security. Embedded Security hardware tamper detected. } code 0192
Tuesday, September 11th 2007 at 10:48 am
Please, how do I remove my e-mail address onder “leave a reply”.
Thanks, Edward.
Tuesday, September 11th 2007 at 11:28 am
hello my ıbm A31 loptop bios ım not bios clear pelase help me
Wednesday, September 12th 2007 at 12:49 am
Worked like a charm on an x30… only thing the walkthrough doesn’t list is that when reviewing the dump.bin in IBMpass, you need to click the A-A button to turn it to A-A On.
Monday, September 17th 2007 at 2:38 am
Procedure worked fine on a TP 240x. The ATMEL chip is on the bottom of the motherboard. IBM has service manuals you can download at http://www-307.ibm.com/pc/support/site.wss/MIGR-4KLKLP.html that helps disassemble the laptop. Thanks for posting this information!
Wednesday, September 19th 2007 at 12:36 am
I have a X60 with a 28 pin atmel,can this one be done?
Wednesday, September 19th 2007 at 2:48 pm
I have a X60 with a 28 pin atmel,can this one be done?
Friday, September 21st 2007 at 5:35 am
Well done to Victor who has saved lots of people money.
I seem to have done something to my A31.
Since i soldered the wires onto the amtel chip the screen will not work & no beeps. keyboard doesn’t work either.
I thought I’d try & recover the password anyway & bingo like one of the previos posts the password is SUPPORT! (so the Amtel chip is still working)
Any ideas on what I may have done?
I removed both the battery pack & the CR2022 battery backup overnight - could this have caused it?
Friday, September 21st 2007 at 6:14 pm
Good work, this article!! I’ve done one thinkpad of my friend, even don’t know model:D If you do it exactly step by step it have to work. Thanks a lot for this.
Monday, September 24th 2007 at 9:21 pm
Help Please!!
I built the simple circuit connected it to the Atmel 24rf08 chip on my Tnikpad T40. Ran everything just like it says and all I get is two different problems, at first got message that says eprom not available so I thought I soldered wrong on the eprom chip. Resoldeered then got error messages.
error 0187 EAIA Data Access Error
error 0191 Security System invalid remote change requested.
which is followed by
press to enter setup.
When I attempt to run the r24rf08.exe program I still get the message of eprom not available.
If someone could render assistance it would be greatly appreciated.
Please send info to: fredengland53@msn.com.
Thank you very much!
Tuesday, September 25th 2007 at 3:08 am
Hi
i can’t find the chip on my laptop i took it appart and i don’t see any where it says U53 i have U3 U33 and if you wanna see a pic of the inside of my laptop so you could tel me where is locate it let me know, send me yr e-mail to ledesma45@hotmail.com
Thanks
Tuesday, September 25th 2007 at 3:10 am
I forgot to mention that i have a IBM Thinkpad T60 and the start up password i don’t know it, have anybody had same problem that would like to share their password with me to see if it work for me.
Thanks
ledesma45@hotmail.com
Thursday, September 27th 2007 at 9:04 am
Help please …I don’t understand.What side of the db9 is in the schematics ? The back (where we should do the soldering) or the front one?
Friday, September 28th 2007 at 10:05 pm
hello there
for the one who was suffering from the null characters, from the bios, and also there was a guy told him that you dont have a psswork in your eeprom. okay the same happened with me and i got null character like rectangle %1,so at the same page i mean the ibmpass 2.1 lite at the upper left side you will fine two letter AA WITH AN arrow from above just push the bottin to on and it will change your null to real work i mean password. if it did not work go to view and you will see translation botton so put it on scancode and then pust the AA you will have the right answer, because first i got 1%1% and when i pust this thing it really work and i got DUNKIN as a password, and really i wana say thanks for the one who post this great information.
Saturday, September 29th 2007 at 8:21 pm
°celebration!°
another t42 was saved today:)
this was my uncles…
for those with “eeprom not available” ->like another one mentioned before, look that no other program blocks the com. also your reader needs good connection! poor soldering of the resistors and zs make it real hard to get a good signal. crocodile clips for connection to the reader work quite nice. and try it several times…
good luck
Sunday, September 30th 2007 at 3:25 am
I have an R40 and have just completed this. It does work though it is a bit tricky. To access the chip, remove the screen, keyboard and keyboard bezel. Take off the metal cover over the hard drive housing and also remove the hard drive. There is a thin sheet of black plastic that you need to wriggle under the hard drive housing to expose the chip. There are 2 8 pin chips and you need the one closer to the front of the laptop. The SDA connection is on the top right corner pin, the SCL on the pin to its immediate left and the ground to one of the large ground pads. The data is exactly where the instructions say it will be. In my case the password was EVHSBIO.
Thanks for posting this info on your website and for providing the software.
Sunday, September 30th 2007 at 8:35 pm
ok i’m stuck what is the reader circuit that is meantioned here? and do u have to solder it or is there another way around it? tks.
Monday, October 1st 2007 at 9:36 pm
my brother gave me his old ibm thinkpad labtop he lost recovery disk where in rhode island can i buy a recovery disk hope you can help me thank lillian
Wednesday, October 3rd 2007 at 1:52 am
Hi could anybody tell me where is the Eeprom on my thinkpad T60?
i took everything apart trying to read all the chips and nothing.
PLS helpppppppp!!!!!!!!!!!!!!!!!!!!!!!!!
Thanks
Wednesday, October 3rd 2007 at 12:00 pm
serial cod bios ibm thinpad seri 553846c/02/99
Thursday, October 4th 2007 at 8:26 am
tag, ist mir bissel zu schwer, muss bei ebaygekaufte T41 HDD PW löschen, jemand aus DE(Berlin) der mir evtl helfen kann??Bt melden taqi74@yahoo.com
Thursday, October 4th 2007 at 7:42 pm
hi, is the foto above on the top showing supervisor (SVP) password window or is this for Hard Disk password?? because on my t41 shows exactly the same symbol after starting the notebook, but if i remove HDD i can easy go into BIOS, and in there there isnt any supervisor (SVP) password been set, can any1 help me?? if i ll buy a new HDD the problem will remain there?? HELP ME HELP me SOS
Thursday, October 4th 2007 at 10:04 pm
Hi Guys!
I’ve been trying to recover the supervisor password on a TP R50e and all I get is a Password I can’t use.
Many of you are saying that this might be encrypted using TCPA. Have anyone found some way of decoding this?
The password that came up is Fýgæ“[x (ASCII) or 46 fd 67 e6 93 5b 78 a0 (HEX).
If someone knows how to decode this I’d appreciate very much indeed.
Thanks!
Saturday, October 6th 2007 at 8:02 pm
i am working on a dell inspiron 700m and am having difficulty finding the serial eeprom chip. i have found a 93c46w6 chip and a atmel tiny12 chip the bios chip itself is a pmc pm40fl004T-33VC.can anyone help me? thank you
Sunday, October 7th 2007 at 11:09 pm
hello admin and all helper here
i want first thank u all for sharing such usefull info
i have a problem with an old TP 390E type2626 in supervisor passwd
i see that am obliged to release a hardware for restore
so if u can mail me with some good picts of soldering and making this kind of rs
updater hw
tnx in adavance
sincerelly John
best wishes
Monday, October 8th 2007 at 2:21 pm
thanks sow much for your help
Wednesday, October 10th 2007 at 8:20 pm
does anyone have any pictures of what this whole unit actually looks like when built? I have seen reference to other home built units but they all have many more components than I see here. Would love to build and use this if I can see or understand it’s construction better.
Sunday, October 14th 2007 at 1:51 pm
i am getting error mesage eprom not found.
some time i am getting bus not found.
in my dump file also no data available
Sunday, October 14th 2007 at 2:37 pm
Hi there !
First excuse me cause my problem is not a password problem, but I think this forum is the good place just to find the infos I need : my EEPROM is just dead on a Think Pad T22 - 2848, I mean the bios itself is corrupted, so I cannot boot on anything nor acess the bios at all. The post freezes on this message : 0175 bad CRC1 Stop Post Task. And there is no way to return to default values (I tried to replace or / and remove bios battery).
My questions are : is it possible to remove the soldered eeprom, to re-program it elsewhere and then replace it on the mb ?? (friend of me have a machine to program eeproms) ? Or, if there’s is no jumpers to reset the cmos (is there not at all on this mb ?) would anybody knows another way to do that, for example in causing some short circuit ? The model of the eeprom is : ATMEL F 24F08CT 0119.
I really hope there is an alternate solution for such a dammage, otherwise the mb is over for good. Thanks in advance !!
Julien
Sunday, October 14th 2007 at 9:43 pm
I correct the infos : it’s an ATMEL F 24RF08CT (I had forgotten to type the R) well known as 24RF08, but this one has 7 pins on each size, wich are, critically, very smaller than the pictures in this tutorial. After new researches, I realy wonder if there is a way to REFLASH / replace / restore the bios with the hardware serial port method describer here.
Julien
Wednesday, October 17th 2007 at 8:52 am
well i have a t43 and i found the chip and all but and i saw the picture that was posted on your web site on what to do on my model but can you explane or send me a picture on how to hook up the spare computer to my chip
Wednesday, October 17th 2007 at 8:55 am
well i have a t43 and i found the chip and all but and i saw the picture that was posted on your web site on what to do on my model but can you explane or send me a picture on how to hook up the spare computer to my chip. o and i have a atmel
Wednesday, October 17th 2007 at 8:55 am
well i have a t43 and i found the chip and all but and i saw the picture that was posted on your web site on what to do on my model but can you explane or send me a picture on how to hook up the spare computer to my chip. o and i have a atmel..
Wednesday, October 17th 2007 at 9:07 am
well i have a t42 and i found the chip and all but and i saw the picture that was posted on your web site on what to do on my model but can you explane or send me a picture on how to hook up the spare computer to my chip. o and i have a atmelim thanks!
Wednesday, October 17th 2007 at 10:48 am
i have tp x41 which unfortunately has an atmel AT97SC23201 dhip, which has 28 pins, instead of just 8. here’s the pin diagram:
http://www.atmel.com/atmel/acrobat/2015s.pdf
as you can see, none of the pins are labeled “SDA” or “SCL”. so which pins would i solder to??
or will the above mentioned method for the 8 pin atmel chips not work with the 28 pin chip that i’ve got??
sixela918@hotmail.com
Thursday, October 18th 2007 at 7:26 pm
IBM Thinkpad password removal, fast service.
Service provided within Canada.
Starts from $50,
Tel: 416-518-6889.
Thursday, October 18th 2007 at 7:28 pm
Don’t screw up your Thinkpad if you are not a good technician or have good soldering skills.
We can do,
IBM Thinkpad password removal, fast service.
Service provided within Canada.
Starts from $50,
Tel: 416-518-6889
Andy.chen.oo@hotmail.com
Thursday, October 18th 2007 at 10:13 pm
Go and spam elsewhere you idiot.
Monday, October 22nd 2007 at 10:47 pm
HI! For all thoose with the funny CMOS batterie automatic draining syndrome.
Please do yourself a favor and go to HOMEDEPOT and buy some plastic safe contact cleaner , and also a can of compressed air. Di assemble the laptop ( L3 all way ) and spray (soak) the board in the contact cleaner. After that use the compressed air especially around the QSOPS ( quad small outline packages ) and spray them with air until completely dry. Also make sure any CHIP does not have any cleaner under it. 99 out of 100 laptops it will remove and batterie draining, or onboard graphics problem.
Frank
313-5811313
Friday, October 26th 2007 at 1:59 pm
brilliant! it’s working! my R40 is alive! thanx! it was an old password, but last letter was cutted off somehow! so i usually using 8-lenth, and after the “break” it was only SEVEN! anyway! that was very helpful! and working 100% with first atempt! CHEERS!
Friday, October 26th 2007 at 2:15 pm
by the way, on R40 the ATMEL chip is located right under the HDD drive, 8-pin.
good luck!
Friday, October 26th 2007 at 3:18 pm
Hello, i´m trying to make this circuit and the first problem that i have is when trying to read the memory says NO EEPROM available, it takes me a lot of time review the circuit and possible problems but i dont find it, if someone can help me thanks
Friday, October 26th 2007 at 8:19 pm
Works great.
T30 chip is under the ramstick no need to take it apart.
Usb to serial adapter is a no go
Saturday, October 27th 2007 at 1:27 am
Writing from my fixed T42. Soft and interface work great! Thanks!
Some comments:
At first I tried to run r24rf08 without connecting interface to the chip (wires SCL, SDA and GND not connected) and got error: “circuit is not found”. When I connected the wires to the chip got the same error. Checked the circuit - looked good. Next step I ran the reader program from another PC without connecting wires to the chip and got different error: “EEPROM is not available”. After connecting the interface to the chip I got the bin file with my password.
So from my experience, if you keep getting “Circuit is not found” - try another PC with COM port. Double check your SCL, SDA, and GND connection if EEPROM is not available.
Good luck!
Saturday, October 27th 2007 at 9:22 pm
Works!. Used on Thinkpad 240. Amtel chip is on the bottm of the motherboard. Requires removal of motherboard.
Saturday, October 27th 2007 at 10:35 pm
Will this work for a IBM thinkpad X41 Tablet series?? If the epprom chip is the same should this work?
Sunday, October 28th 2007 at 10:49 pm
Hey, does anyone have a photo, or a general discription of where the chip is on an X60 tablet? If someone could e mail me a discription or a pic, it would help a lot. Thanks
cr@ckthepla.net
Monday, October 29th 2007 at 9:53 pm
please help trying to find the ATMEL chip to recover T60 Password any pictures or info on where it is please.
Tuesday, October 30th 2007 at 11:52 am
Worked on my X31 like a charm. Wonderful!
Tuesday, October 30th 2007 at 3:11 pm
Hi all
I have a problem with my new Lenovo 3000 200N. I got a power-on-password. No idea why. I din’t put this password on the computer!!!! The Notebook is only 2 days old and I bought it new. Now I want to get something from IBM on guarantee …. no chance they told me it is necessary to replace the motherboard because that stupid power-on-password. I can’t believe that. Has someone an idea how I can remove the password? Often it is just necessary to remove the backup battery and not replacing the motherboard. Is there a easy way to delete the password? Unfortunaly the backup battery is located deep in the lenovo. I have to unscrew everything (including monitor and so on…).
Thanks for comments
Gerhard
Tuesday, October 30th 2007 at 5:54 pm
used to work on thinkpads and removed various models with forgotten POP’s
fit new atmel chip
used a special parallel port wrap plug to get past 175 bad crc errors, reflashed atmel inputting system board serial number eg(11S64f3402zj1226 37354p)22 digit serial number is on a barcode label on the motherboard, job done
Tuesday, October 30th 2007 at 6:13 pm
I need SDA (PIN Diagram) of Atmel Chip# 8356908 in IBM T60 Laptop
please someone help me
Wednesday, October 31st 2007 at 11:51 am
Hi all, i own a Lenovo T60 and the easiest way to remove the poweron password is to remove the cmos battery. Use the hardware manual on how to dissamble the laptop.
Unplug it, disconnect the main battery and then take off the cmos battery. Leave the machine for a while and power on!!! Enjoy…
Thursday, November 1st 2007 at 6:44 pm
Can anyone please show me the location on the system board where to find ATMEL on a Thinkpad 770ED…
Thanks in advance…
Thursday, November 1st 2007 at 6:47 pm
Can anyone please show me the location on the system board where to find ATMEL on a Thinkpad 770ED…
Thanks in advance… email add: b34n_tut@yahoo.com
Friday, November 2nd 2007 at 12:35 am
Mil gracias, funciono todo perfecto, pude desbloquear mi t30 siguiendo las instrucciones.
Santiago.
Chile
Friday, November 2nd 2007 at 11:35 am
I found ATMEL 24C01A (8 PIN) on my TP 770ED and referred to schematic on c:\ALLservice\24RF08\rs232-I2C.sch - Sheet1, soldered a wire to PIN # 5 (tagged SDA) and Pin # 6 (tagged SCL). followed dumping procedure but got this error while dumping at the command prompt “ERROR: circuit not found or buerror”. Anyone .. Please advise… TP 770ED - my email is b34n_tut@yahoo.com
Thanks in advance
Monday, November 5th 2007 at 2:41 am
I did this with my IBM ThinkPad A30. On this model the ATMEL 24RF08 chip is under the PCMCIA card slot. I found the chip but did not solder. These chips are microscopic and would be very hard to solder without professional tools. After putting on the magnifying glasses I took some very very thin wire and was able to wrap it around the pins on the chip. I then clear taped them tight to some plastic on the case so the would not pull loose or short out when I made my connections. Instructions worked fine and the R24RF08 v2.0b software pulled the dump file like it was supposed to. When I ran the IBM Pass 2.0 Lite software my dump file showed a lot of weird characters but no password on the line it should have been on. Then I found this post from earlier and it saved me. When using IBM Pass 2.0 Lite to see the correct characters the button AA in the upper left corner of IBM Pass 2.0 Lite must be on. When I did this the password appeared on memory address of 0×330. Hope this helps the ones that are afraid to put a soldering iron in their laptop.
AS STATED BY THIS PERSON : IBM 390E TP : EARLIER IN THE POST
I just found my password using the instructions in the first 6 to seven pages of this sight. If you are getting data and it dosn’t look right make sure to turn on the button AA in left corner. I’ve been working on this several days and poof there it was there are a lot of little details that you have to pay attention too. Finding chip can be the hardest. Good luck don’t give up it can be done.
Monday, November 5th 2007 at 4:35 am
i am trying to hack my ibm 600 Supervisor password i built the kit but can not get the 2 programs to read the chip and the ibm pass lite was wondering if anyone has them or were to get them tryed the links here will not let me download them
e-mail to occchopper44705@neo.rr.com
thanks
chris
Monday, November 5th 2007 at 6:12 am
Check your zener diodes. I think they are supposed to go 1 way only.
This repost might help too.
Comment by Stan:
Friday, May 4th 2007 at 7:46 am
First, I want to thank all the posties that helped me to reveal the PW from my TP 600.
I tried it first with the PONYPROG2000, dumped the file, but the password wasn´t visible. Then I tried R24C01 and it worked the first time. Enclosed the steps I exactely performed.
You have to completely disassemble the notebook and remove the MB to get access to the EEPROM. For the job you have to connect all required parts back to run the system, also BIOS battery, but you don´t need the HD.
I changed the COM port settings of my working PC (Device MGR>Ports category>COM Port1>Port settings) to Baud rate: 115200; Data Bits:8; Parity: none; Stop bits: 1; Flow control: none
For this type of EEPROM I learned that it is necessary to work with the driven-IC2cprog device. First trials with the simple one didn´t worked.
Thinkpad 600 – guide for reading the Supervisor Password with R24C01:
1. remove the mainboard (Hardware maintenance manual page 87)
2. locate EEPROM 24C01A at the bottom of the motherboard, right hand side, close to the upper left corner of the big PCIBus-IC when the connector row is facing to you
3. solder 3 wires to pin 4, 5 and 6 of 24C01A
4. build schematic: driven-i2cprog.pdf
5. connect driven-i2cprog to com port of working PC and check port settings
6. install ponyprog2000 2.05a Beta (freeware from www)
7. Select from menu “Device>I2C bus 8 bit eeprom>2401″.
8. setup > Interface Setup: serial, SI Prog API, select com port
9. In “Setup> Interface Setup” invert the D-in, D-out and SCLK.
10. change PONYPROG2000.INI: modify the line: I2CBaseAddress=0xA0 to I2CBaseAddress=0xAE
11. Save PONYPROG2000.INI
12. Setup > calibrate > OK….
13. connect AC adapter to the TP 600 mainboard (mainboard without any other boards but with BIOS battery attached)
14. connect GND wire of driven-i2cprog to pin 4 of 24C01A (GND also can be connected to any GND pad of the mainboard)
15. press power button of the TP 600 mainboard
16. connect SDA to pin 5 and SCL to pin 6 of 24C01A
17. read eeprom with ponyprog
18. disconnect SDA and SCL wires
19. switch off the mainboard
20. disconnect GND wire
21. store the bin-file
22. install ibmpass2
23. open stored bin file with ibmpass2
24. at ibmpass press button “AA” – on
25. View>Translation>Scancode
26. For 24C01 eeproms the password is located at 0×38, 0×40 – read password starting at 0×38 – ending at ????
27. note password, if password is not shown proceed with a.
a. Install R24RF01
b. press power button of the TP 600 mainboard
lc connect SDA to pin 5 and SCL to pin 6 of 24C01A
d. Run R24C01.exe
e. Use command: r24c01 your.bin /x /d /i
f. disconnect SDA and SCL wires
g. switch off the mainboard
h. disconnect GND wire
i. open your.bin file with ibmpass2 (as above 23 ff)
Hopefully this will help someone.
Greets
Stan
Monday, November 5th 2007 at 12:24 pm
[...] Thinkpad хакирање. Некои Thinkpad модели може да се кракираат лесно со примена на овој метод. Но Т60, каков што имам јас, не може. За неговото кракирање треба да се плати околу $200…јебеш га. За приказната да е поинтересна, мојот TP има Supervisor (SVP) лозинка. Тоа е лозинка која _владее_ на компјутерот. Ако треба да ја внесете, а не ја знаете, го ебавте ежот. Проблемот е што лозинката не ја имам наместено јас, туку идиотот кој си чепкал на лаптопот во Србија, пред да стигне до мене. Значи, во ситуација да ми побара SVP може гадно да се сјебам..да се блокира сѐ. За таа цел, решив, со помош на поискусен електроничар, да го хакираме Thinkpadот. Најпрво требаше да нарачаме хардверска (сериски интефрејс) компонента од Романија, но благодарение на врските на претходно наведениот, ја најдовме шемата и тој ја склопи електрониката. Остана проблем уште програмата за читање на чипот. Чип?? Да, Lenovo машините од поново време (не знам точно од кога), како мерка на безбедност SVP лозинката ја чува во чип. Ако ја извадите RTC (cmos) батеријата, чипот ќе ги задржи податоците и нема да ја избришете лозинката како што би било случај кај другите компјутери (во случај на вадење на CMOS батеријата, се отстранува САМО POP (PowerOn Password) лозинката). Програмата веројатно ќе ја купи тој ($50 е) затоа што ќе му користи понатаму него. [...]
Wednesday, November 7th 2007 at 8:04 pm
Hi, i need help if some one can !
i have an IBM thinkpad R52, it is locked, i need to find THE BIOS PASSWORD , i have to finish my memory that i start it, and it steel in the hard drive !
help me please , my e-mail is : adilelharaoui@hotmail.com
thank you in advance !
Friday, November 9th 2007 at 1:45 am
What do I do if my pissed off brother has set the biometric print to his own, and I cant do a thing on the computer, not even press a single button. It seems the whole computer is locked up, but still starts up in windows to the login screen?
Saturday, November 10th 2007 at 1:37 pm
In place of soldering the wires you can also wrap a single copper wire around the mentioned pins on the atmel. It did work for me all the times and it leaves de MB unharmed. Only make sure that you have very steady hands, no coffee allowed!
If you work very carefull you even maintaine the waranty!
Saturday, November 10th 2007 at 4:22 pm
found the password when i clicked on translate, but when i typed it after packing my t42 i still have the same message asking for the password. can i have a program to re-write the information on the atmel chip?
thanks
Nii Kpakpa
Sunday, November 11th 2007 at 3:29 am
Service within Canada and US,
We can do T20, T21, T22, T23, T30, T40, T41, T42, T43, T60
R30, R31, R40, R50, R51
Tel: 001-416-918-1889.
Sunday, November 11th 2007 at 3:30 am
Service within Canada and US,
We can do T20, T21, T22, T23, T30, T40, T41, T42, T43, T60
R30, R31, R40, R50, R51
Tel: 001-416-518-6889.
Sunday, November 11th 2007 at 3:31 am
Service within Canada and US. sorry no international service
We can do T20, T21, T22, T23, T30, T40, T41, T42, T43, T60
R30, R31, R40, R50, R51
Service price from $50
Tel: 001-416-518-6889.
Sunday, November 11th 2007 at 3:31 am
Service within Canada and US. sorry no international service
We can do T20, T21, T22, T23, T30, T40, T41, T42, T43, T60
R30, R31, R40, R50, R51
Service price from $50
Tel: Canada, Toronto 416-518-6889.
Tuesday, November 13th 2007 at 4:00 am
There is a much simpler way to fix the password without desoldering the chip or using decoder software !
connect two wires to a switch and connect to the sram chip at pin 4 (vss) and pin 5 (sda)
make sure the switch is open and turn on the pc
when the machine is booting press F1 for bios setup
after a short while the password prompt will appear
at this point close the switch and press ENTER
(the bios will try to read the password from the sram but receive only 0’s (blank password))
the bios setup will now appear
open the switch again
go to the password option and change to what ever you wish
BTW if you are concerned about taking the sda pin to ground dont be, the sda pin of the sram and the mother board support driving the sda are both sink only outputs (ie pulled to ground) which has a few K pullup resistor to positive, connecting this to ground is perfectly fine as this is exactly how the system functions when outputing a logic 0
Tuesday, November 13th 2007 at 6:07 am
Worked great on A22m. Chip is 14-pin on the underside of the board, very near the ram access cover. It can be seen from the access hole but don’t think you could attach to it without complete disassembly as i did. Here is a good diagram of the pinout for the chips http://www.passwordmethod.com/content/view/108/27/
Tuesday, November 13th 2007 at 3:30 pm
where’s ATMEL chip located on the a21m, please?
thanks.
Wednesday, November 14th 2007 at 8:43 am
This worked great on my T42, thanks! A tip for anyone getting the error “ERROR: EEPROM not available.”, try using another spare computer with a serial port as not all are supported.
Wednesday, November 14th 2007 at 8:29 pm
Tried on a TP R51 and it works great. Just make sure you push the “AA” button at the upper left of IBMPass 2.1 if you get weird symbols aftre dumping.
Friday, November 16th 2007 at 7:18 pm
hi i got thinkpad x60 the atmel is dirrent htne showing on picutre above
Friday, November 16th 2007 at 7:33 pm
I have a A20m thinkpad and want to reset the bios password. I saw your circuit and wondered if you had any for sale because I’m not too comfortable with setting the circuit up. Also when the bios password is reset can all the other passwords be reset thru the bios?
Friday, November 16th 2007 at 8:48 pm
can sum1 instruct mr how to find bois password for my thinkpad x60 i think its diffrent above picutre . also i has difreent atmel
Friday, November 16th 2007 at 11:35 pm
I used the basic circuit as described. works great for the t42. thanks
Sunday, November 18th 2007 at 12:25 am
Don’t screw up your Thinkpad if you are not a good technician or have good soldering skills.
We can do,
IBM Thinkpad password removal, fast service. for T20, T30, T40, T41, T42, T43, T60.
Service provided within Canada.
Starts from $50,
For T60, special price $199
Tel: 001-416-518-6889
Sunday, November 18th 2007 at 1:11 am
i give up… i spend the whole day and night with soldering this tiny wires - and i only get error-messages like:
[code]
24RF08 eeprom reader v2.0b - Win32 Console Version
Copyright (C) Victor Voinea, ALLservice 2004-2005, http://www.allservice.ro
—————————————————————-
Initializing timer…6088 OK!
ERROR: Eeprom not available!
—————————————————————-
Hit to exit…
[/code]
my tp is a t23 with 14pin atmel chip ‘24rf08ct’ version ‘0206′ using simple-ic.
did i burn the chip? but it looks normal -how can i proof this?
anyone here who had success with this chip?
best wishes & thanks
bluesmily (ät) gmx (dot) net
Sunday, November 18th 2007 at 1:26 am
part2
if i ‘block’ the correct working of this security-chip –>
error-message like:
187 eaia data access-error
by pressing f1
i could switch to bios…
Sunday, November 18th 2007 at 7:06 pm
ThinkPad model R32 has not one but two ATMEL chips. The easiest to find the wrong one a 93c46 near the keyboard connector and close to the ATI video processor. Although a serial PROM it is not the one holding the password!
The password PROM (24rf98c)is hidden under a clear plastic sheet underneath the hard drive holder frame on the top side of the main board. It is located just below the security chip socket and a little to the left. The printing on the chip is very difficult to see and finding the pin 1 dot is a very small dot. You have to remove the hard drive holder frame and the clear plastic sheet in order to view the 24rf08c chip.
I wish I could attach a photo of the location that I have but the words above will have to do. eMail me and I will send a note with the photo.
Sunday, November 18th 2007 at 8:53 pm
Thought it would be useful to share my experiance of carrying this out on a T42. firstly the interface it pretty easy to build, cost approx £3 for the parts including delivery. took about 30mins to make it and that including checking it twice to make sure I had everything perfect and i’ve not done any soldering for 15+years
For soldering the 2 wires to the chip, you will need a VERY steady hand, good light and a very fine tip to your soldering iron. Don’t try this if you don’t have all of these. I also found it useful to have a solder sucker for removal of the wires after to you have finished and in fact the first time I soldered the wires on, the two pins became soldered together (you really do need a fine tip to that iron). The solder sucker was a saver and for £5 it really makes a mistake like this easy to fix plus you can remove the wires and leave a pretty neat job (I can’t tell anything was ever soldered to the chip).
The software is easy to use and hey presto less than few seconds after obtaining the download from the Chip you can open the bin file with it and clear as anything the password is there as per the instructions. (Don’t forget to hit the button to convert the file once you have opened it)
Monday, November 19th 2007 at 1:24 am
This was awesome!!! Worked like a champ, once I connected all the wires correctly! (Had left the #8 wire off the db9 connector and it didn’t work, go figure)
Anyway, thanks for all the help and support.
Had a T42 that one of our disgruntled employees set a bios password for and I could not even re-format it.
This opened it right up!
Thanks again
Drucius
Tuesday, November 20th 2007 at 6:51 am
If you find it hard to do it yourself we will do it for you. We’re based in Chicago area. Email us at we servechicago@gmail.com. We unlock all Thinkpad models. You can drop it in or mail it in.
Tuesday, November 20th 2007 at 6:56 am
THe email did not post right. It’s weservechicago@gmail.com
Tuesday, November 20th 2007 at 7:03 am
Once again, all the credit for whatever we do goes to Victor from allservice.ro who wrote all the programs, designed the interface and helped us a lot along the way. So if you use our services or if you do it yourself please take couple minutes to send your thanks to the genius behind all this. Thanks Victor!
Wednesday, November 21st 2007 at 6:34 am
Unlocked my A30. Then tried a Thinkpad R40 and got “eprom not available” .
The problem was somewhere between the 1st laptop and 2nd I shorted out 1 of the zener diodes on my chip reader tool. Installed a new one and all is well. It must have touched something on the board by accident. I also used the super thin wire on this one so no soldering was needed.
Wednesday, November 21st 2007 at 7:18 am
may i juz ask, where exaclty at the pc part will connect the Atmel chip reader?
thanks
Friday, November 23rd 2007 at 11:44 pm
i have ibm r56 model of laptop . i had forget my power on pasword i am unable to open the laptop . computer asked power on pasword is any prosedure to crack the pasword ? somebodies say for replacing motherbord. so help me pleeeeeeeeeee i hope so.
Sunday, November 25th 2007 at 10:32 pm
Does anybody know where I could get the required Zener diodes in Montreal, Canada?
I went to two different The Source (ex Radio Shack) stores around where I live and the only thing I was able to find was the 2.2K ohm resistors. No 5.1 diodes, and no zener at all.
I also tried home-depot and rene-depot but no luck there as well.
Any help greatly appreciated, thank you.
Monday, November 26th 2007 at 10:47 am
how a can write eeprom for my t42
please any one can
help
me
Monday, November 26th 2007 at 8:53 pm
I kept getting the “Eeprom not found” message on a Think Pad R40 I was working on at least 50 times with no dump. I had rechecked the wires on my homemade chip reader a hundred times. Just for the fun of it I unplugged the CMOS battery and left it unplugged.
I then hooked up my reader again and low and behold I got my dump.bin. After getting the dump.bin and password I hooked the CMOS battery back up and reassembled the laptop. Hope this helps a few of you.
PS: All Radio Shacks usually carry the Zener Diodes. They only carry 2 kinds , a 5.1 and a 12 volt. They are in the steel drawers by the resistors.
Tuesday, November 27th 2007 at 1:38 am
I forgot BIOS password of my laptop - IBM Thinkpad T22.
And I hacked this BIOS password by using this shematic and program.
Thanks for usefull supports!
Thursday, November 29th 2007 at 7:44 am
I found the electronics store paradise.
Addison Electronics in Montreal. A supermarket of parts
So I got the stuff I needed, created the circuit but I get the Eeprom not found error.
Here’s a picture of my setup:
http://www.alaxa.net/24RF08.jpg
That black thing I use is a chip socket. I attached the 2 cables to the 2 pins i crooked a bit to match the Amtel. No luck
Tried removing the cmos as Reeper suggested, but same.
Anyone would know why it’s not working?
itester works. Both values change from 0/1
Thursday, November 29th 2007 at 4:12 pm
Worked on my T30 like a charm.
Atmel chip was under the #2 ram chip.
I took some shortcuts that worked without soldering. I used some 30 awg wire wrap wire and hooked it around the pin of the Atmel chip. Gently pull it tight for a good connection. Keep it in place using some electrical tape. Worked for me but be careful the wires have a good connection and do not short out on anything.
I could not find the diode listed above but the 1N4733A 5.1V Zener Diode (radio shack # 276-565) worked. The specs are close.
The password did not show up in the defaulted startup of IBMPASS 2.1 Lite. I pressed the AA button ( translation) just under file menu bar and the password was there.
Thanks to ADMIN and all the user comments for making this work the first time!
Thursday, November 29th 2007 at 6:50 pm
This works like a charm. Just follow the instruction to the letter and you cant go wrong! Thanks so much!
Friday, November 30th 2007 at 1:24 pm
I have 4 readers to buy if anybody is interested. Email me ross@challinor.fsbusiness.co.uk
Saturday, December 1st 2007 at 4:45 pm
Hi Guys,
I followed the instruction everything step went well except on Dos i received the error message “Eeprom is not available”. IBM Thinkpad R32 for same ATMEL 24RF08 as mentioned on instruction.
You can easily reach me at Yemking@gmail.com your help and coorespondance is highly appreciated.
Wednesday, December 5th 2007 at 8:19 am
Please send me the dump for Thinkpad A22m
or where can I download it?
Thanks..
Wednesday, December 5th 2007 at 8:22 am
My address: tobyinbox@gmail.com
Friday, December 7th 2007 at 5:03 am
Can anyone tell me where the ATMEL chip is located on the g40?
thanks
Friday, December 7th 2007 at 7:29 am
i am doing mcse 2003 certification
i want do download recent latest dumps from testking.com
so how to download using hack
please help me and
thank you
Saturday, December 8th 2007 at 10:48 pm
Thanks for the great guide worked fine on my TP R30.
Sunday, December 9th 2007 at 2:08 pm
i have ibm t60 passworf bio can helpe me plz
Monday, December 10th 2007 at 10:58 am
I am stuck with my T60 which has a problem with the security chip.
The computer freeze at the when windows tries to check the security chip and I cannot bypass the problem from BIOS because apparently there is a supervisor password set (which I don’t know because did not set!)
I guess IBM will charge me the substitution of the MB… so I followed your nice forum.
I am trying to understand why for T40 (and many other models) software and instructions are free, but for the T60 I should spend around $ 100 or more.
I understand the chip is different, but …
thank you!
Tuesday, December 11th 2007 at 12:57 am
Is there anyone on this thread that could sort this error 0175 out for me , i’m a welder and electronics are a bit beyond me , on reading this forum you sound like you all know what you are talking about , i would rather give some money to a sodoityourselfer as apposed to taking it to pcworld (spit) , i’m in Northumberland , UK
Tuesday, December 11th 2007 at 1:59 am
hey can you help me? tried this on a thinkpad t42 and iam obviously not understanding the proper way to operate the programs. i cannot find a file called “dumpbin” to load into the passcode program.
i tries start then run. found the proper program and hit ok. i then got the black cmd prompt screen. what do you do then?
when i hit enter it shuts off??
am i doing something wrong??
pls help anyone
Wednesday, December 12th 2007 at 6:13 am
sir i have a HP Compaq nc8430 Laptop. One day my friend come to my home and started using my laptop. During using he set a bios password in laptop. after some days when i check my laptop setup it ask setup password. My friend also forgot the password. I remove the comos battery but not reset the password. Please help me to solve this problum. i shall be very thankfull to you.
Sunday, December 16th 2007 at 5:22 pm
Thanks to all who have contributed to this site. I have a T40 that I got on eBay. The laptop works well, but the Supervisor pw was set. The seller did not know what it was. I wanted to load XP on it, but the boot order was set to HD first. Your site saved the day. Here are a few tips that helped me on the way.
1. The parts and pictures to build the reader were right on.
2. I don’t like to solder, so the comment about Micro Grabbers caught my eye.
I created my own Micro hooks from some fine wire and used them to carefully hook onto the legs of the eeprom. This worked for me, no soldering needed.
3. Once I connected everything up and followed the instructions to the letter, I got the EEPROM not Available issue. I read through more comments until I noted that someone indicated that not all computers will work as expected with the reader. I then tried another laptop as the reading PC and it worked first time.
4. I got the dump file and opened it as instructed. I went to the location in the file and there were a bunch of weird characters. Things I could not type into the password field. More reading of comments showed that there is a button in the password decoder that needs to be pushed. The button looks like a A=A at the top left of the interface screen. One click on that button and the password was reveiled.
5. I downloaded the reader and the password decoder. Look inside these zip files for more detailed info. This may help those with other models of IBM laptops identify the type of EEPROM that stores the Supervisor password.
Good luck to all. Thanks again to all who have generously contributed their time and talents.
Sunday, December 16th 2007 at 7:18 pm
Have tried in vain to solder with very fine tipped iron to the sda and sdl connections on my T23. The T23 has the 14 pin Atmel chip as you may know. Its damned difficult but will keep trying or have a go at the 30 swg idea wrapped round legs. Has anyone tried the switch and pin4 vss sram chip and pin 5 sda idea, sounds easier.
Anyone that could help me locate the sram chip pin 4? Bit of a novice at this i am afraid although have basic soldering skills etc.
Tuesday, December 18th 2007 at 9:02 pm
hey can you help me? ware is the Atmel chip on the IBM T60?
Wednesday, December 19th 2007 at 8:21 am
i need the file W24rf08 with the crack. Bcoz i hav no credit card to buy the licence to allservice. Its cheap enaugh, but hard for me to pay as i have no card.
So, i need help to u anybody who have the crack or serial key ???
Or where can i find it ?
Help me pls…
thx.
Friday, December 21st 2007 at 10:29 pm
Why don’t you ask allservice, you imbecil?
Saturday, December 22nd 2007 at 7:49 am
I Have an X60 IBM ,forgot my password,what can i do??
Saturday, December 22nd 2007 at 9:42 am
I did it! it is a tp 570E. The most difficult thing was disassembling the machine
The chip is really small! It has 14 pins, not 8; I found the right pins on ATMEL site, they are 8 (SDA) and 10 (SCL); soldering not easy, very very tiny, especially on 10 that is between two others. Then everything worked. While deciphering the file I had to click on the “translate” button in order to see letters and not hyerogliphics, but I had the password displayed clearly
thanks!
Sunday, December 23rd 2007 at 4:34 am
Worked like a charm. Now I need to get my hard disk password and reset that. Thanks to the original poster and solution.
Monday, December 24th 2007 at 8:11 am
I understand the soldering, But. the spare PC (my Desktop) downloaded the software, & install all ok. Were and how do I conect my T41P to my desktop, that is the part I dont understand. Where is the serial port 9 female connected to besides the SCL & SDA and gnd. Please advise
Monday, December 24th 2007 at 10:36 am
What about the T61 ?
Anybody have a solution to unlock the BIOS ?
Thks
Tuesday, December 25th 2007 at 10:43 am
first lots of thank to VICTOR and his team !!
and thanks to the nice ppl in this forum who share their problems, solutions and tips.
i have t20 which now works charmly. the 24rf chip has 14 pin, about 4.5 mm long, and is located just underneath the outer memory stik. i tried to solder the pins, but no luck, and got the 0187 error, which also means that the pins are not correctly soldered to the motherboard, i fixed this problem. And now the tip: i used 2 sewing needles, (soldered to the wires) and just hold them with my fingers atached to the SDA & SCA pins, GND wire was connected to one of the motherboard screws.
Thursday, December 27th 2007 at 1:19 pm
Thanks so much for this post. I did this yesterday on a T42P that I bought on Ebay and it worked like a champ.
Friday, December 28th 2007 at 10:48 am
I guess somehow I corupted my T30 eeprom and getting 0175 error. PLZ if someone have a dump file of any T30 email me, that helps me to rewrite a new one or reprogram it. if you think you can rescue my T30 with your eeprom dump file please email me at “jay_toudeshki@yahoo.com”
Thanks in advance. —Jay.
Sunday, December 30th 2007 at 12:37 pm
I have 3 readers left for sale, if any body is having a hard time gettin theirs working!
email ross@challinor.fsbusiness.co.uk
Sunday, December 30th 2007 at 3:45 pm
! have a t30 eeprom dump available on my website http://www.theshinyshop.com under items.
Monday, December 31st 2007 at 1:42 am
Hello,
I’m having problems with W24RF08 programmer. I have this error msg:
ERROR: Unable to open sorce file!
I was typing: w24rf08 guido.bin /e, w24rf08 guido.bin /i, w24rf08 /p /e. etc.
I was trying with diferent ways and I created before guido.bin in the same directory using r24rf08. I read this file before with ibmpass21 and my password is 00000006, but i only can type 7 spaces in my laptop ( IBM TP T22 ). Then I supouse that i have to program the IC AMTEL with diferent password or at list reset the existing one.
If any body know what i’m doing wrong, please let me know. Sorry, Cuban with only one year in US. guidoedt@yahoo.es
Monday, December 31st 2007 at 3:03 am
The program you refer here is a cracked good for nothing version of W24RF08. I suggest you to pay the author for all the hard work, instead of trying to steal, buddy. And you have guts to ask for help…
Wednesday, January 2nd 2008 at 12:21 am
Hi Guys, Thanks for the very informative site. I am in the process of dismantling my T60 to find the security chip but i have come to a dead end. I cant find the chip anywhere on the board and the only place that is left is on the back of the system board. But i really dont want to completely dismantle my laptop unless im sure it is there. Does anyone know where the secuirty chip is on a T60?
I forgot the supervisor password i set on the BIOS only. This was not a real bother because i could operate my laptop wit h no problems as the password only protected the BIOS section. Until one day i decided to put a password on the whole system so that people cant boot my computer. Then i realised that i cant do that because i dont have the BIOS password. A search on google revealed that a software called cmospwd can read or clear BIOS passwords. I tried to read it but it gave me something like !$12ABC which i was unable to enter in the password prompt. I then foolishly tried the clear password option which it said that the BIOS password has been successfuly cleared. When i restarted my computer, i typed F1 thinking that there shouldnt be anymore password, but it gave me a “checksum CRC error” and shortly later the password prompt came up. I restarted again wanting to go into windows and try the cmospwd program again but there with horror i found a password prompt requesting a password. So now i cant even enter the system!! The CRC error only happened once and now my computer is locked as if someone put a password on the system without my permission.
Would the above procedure work for me? I really need to access my computer. Any help would be greatly appreciated!
Sue
Wednesday, January 2nd 2008 at 5:49 am
I accomplished each step that the directions instructed.
when i type r24rf08 dump.bin into the cmd it says:
C:\Documents and Settings\Owner>r24rf08 dump.bin
‘r24rf08′ is not recognized as an internal or external command,
operable program or batch file.
C:\Documents and Settings\Owner>
I have no idea what to do from here can some one help me?
Wednesday, January 2nd 2008 at 7:31 pm
I finally figured out how to download the dump file, but there is nothing in the 0×330 line
how do i fix this?
Wednesday, January 2nd 2008 at 7:33 pm
@Sue
Your laptop can be repaired only with PC8394 programming tools from allservice.ro
Put it back, it doesn’t need to be opened. The goto http://www.allservice.ro/forum/viewtopic.php?p=1061#1061 and buyt the full kit, with the CRC repair included. You should receive the kit and instructions. Or..pay $200 bucks to repair it locally…they all use allservice software, anyway.
Thursday, January 3rd 2008 at 2:27 am
@ Sue,
I think the security chip for the T60 is on the back of the motherboard. I had to completely disassemble the sucker to find it. The tip-off is that it is marked “U53″ on the board, exactly the same as the T42.
JM
Thursday, January 3rd 2008 at 8:39 am
I succesfully got the dump from my TP r50e .
I got something in the 0×330 line and tried all translation but the password is not right .
I tried to get the dump from different operating systems .
Any Clues ??
Thanks in advance
Ro
Thursday, January 3rd 2008 at 10:49 am
Thanks a lot for this guide, it worked on a thinkpad T20 with the 14 pin chip! The Chip here is locatet under the RAM Cover. The SDA is on pin 8 and SCL is on pin 10.
Here you can find the datasheet:
(8 pin Version)
http://www.atmel.com/dyn/resources/prod_documents/DOC1072.PDF
(14 pin Version)
http://www.adapt-plus.com/pdf/tssop_dip/140805tss.pdf
Monday, January 7th 2008 at 9:51 am
Hi All Friends in the IT Line.
This process is VERY GOOD FOR REMOVING BIOS PASSW-
if you have not access this HARDWAR THEN YOU ALSO CONT ME.
I THINK I M TRYING MY LB.
GO TO THIS PROCESS
“COPY FROM SOME FRNDS REPLY”
1. 1. remove the mainboard (Hardware maintenance manual page 87)
2. locate EEPROM 24C01A at the bottom of the motherboard, right hand side, close to the upper left corner of the big PCIBus-IC when the connector row is facing to you
3. solder 3 wires to pin 4, 5 and 6 of 24C01A
4. build schematic: driven-i2cprog.pdf
5. connect driven-i2cprog to com port of working PC and check port settings
6. install ponyprog2000 2.05a Beta (freeware from www)
7. Select from menu “Device>I2C bus 8 bit eeprom>2401″.
8. setup > Interface Setup: serial, SI Prog API, select com port
9. In “Setup> Interface Setup” invert the D-in, D-out and SCLK.
10. change PONYPROG2000.INI: modify the line: I2CBaseAddress=0xA0 to I2CBaseAddress=0xAE
11. Save PONYPROG2000.INI
12. Setup > calibrate > OK….
13. connect AC adapter to the TP 600 mainboard (mainboard without any other boards but with BIOS battery attached)
14. connect GND wire of driven-i2cprog to pin 4 of 24C01A (GND also can be connected to any GND pad of the mainboard)
15. press power button of the TP 600 mainboard
16. connect SDA to pin 5 and SCL to pin 6 of 24C01A
17. read eeprom with ponyprog
18. disconnect SDA and SCL wires
19. switch off the mainboard
20. disconnect GND wire
21. store the bin-file
22. install ibmpass2
23. open stored bin file with ibmpass2
24. at ibmpass press button “AA” – on
25. View>Translation>Scancode
26. For 24C01 eeproms the password is located at 0×38, 0×40 – read password starting at 0×38 – ending at ????
27. note password, if password is not shown proceed with a.
a. Install R24RF01
b. press power button of the TP 600 mainboard
lc connect SDA to pin 5 and SCL to pin 6 of 24C01A
d. Run R24C01.exe
e. Use command: r24c01 your.bin /x /d /i
f. disconnect SDA and SCL wires
g. switch off the mainboard
h. disconnect GND wire
i. open your.bin file with ibmpass2 (as above 23 ff)
IF UR NOT ABLE TO CRACK THEN CONTACT MY EMAIL ID:
lovever_bboy@yahoo.co.in
or call me ;- 9853482334
INDIA.
Monday, January 7th 2008 at 9:53 am
I HAVE THE HARDWARE IF YOU WANT THEN CONT ME.
JUST MIN PRICE ONLY RS 50.00.
YEH THIS IS TRUE.
OK BYE FRIENDS.
SEE YOU VERY SOON.
DHANANJAY
HW&SW ENGG
Wednesday, January 9th 2008 at 5:06 am
It worked with my R50e laptop!
Thanks so much to the author, this has been quite an active DIY article. Started in 10/2006 and still going strong.
If anyone needs additional help for their r50e, I would be glad to assist.
my email is drerock at gmail dot com
I made the circuit required for the reader, and could probably send it to someone if they need. I had never soldered anything before, and the gun I had was a big ol’ thing, so I managed to get it to work with some of the smallest clips I could find at radioshack. I had 2 serial ports on my computer, and the first one I tried didn’t work.
Good luck to anyone else to tries this, it felt so good to get past that stupid bios lock icon.
Wednesday, January 9th 2008 at 10:09 am
Hi, i have a problem whith my thinkPad r40, the bios pass was changed by himself. Enother problem is that the laptop has no com port’s, only USB, 1394 and for printer…. What can i do?
Wednesday, January 9th 2008 at 6:56 pm
HELLO,
I have a X31 type 2673.
Just want to recover the supervisor pass.
BUT,
The ship is an “ATMEL 422 93C46 SI27A”, 8 pins.
My 3 questions are :
Do i have to use the same reader as for ATMEL 24RF08 ?
same ” simplified schematic ”
How do i recognized the slc and sda on the ship ?
Thanks a lot.
Gbs
Thursday, January 10th 2008 at 8:37 am
hi all.i bought thinkpad t22 and there is a powered on password.i read a lot of in the web about programing security chip but any information is little about my experience.i couldn’t found security chip on motherboard.can someone send me picture or tell where exactly are placed that security chip.
thanks of all answered me.
Thursday, January 10th 2008 at 10:03 pm
Thanks a lot for this guide, I cant seem to get mine to work I tried it on TP T40, and a T41P, the dump file works fine but when I check the address 0×340 for the T40 it shows ff1 it dows not work as a password and the T41P shows 21 it does not work either thanx in advance if anybody know if I’m doing somethong wrong.
Friday, January 11th 2008 at 9:17 am
Thanks for this guide. I just follow the guide on TP X30 and everything works fine. Find the password @0×330 and use it to enter the bios without any problem.
Thanks again for the infomation to crack the bios password.
Friday, January 11th 2008 at 11:22 am
Hi for all ,
Any one can unlock my Lenovo Duo centrino T60???
Please make offer by e-mail :
rsoudane@gmail.com
Sunday, January 13th 2008 at 9:24 am
For anybody who needs w24rf08.exe, here is the full version for free! Use this to fix CRC, CRC1, and CRC2 errors! All you need to do is rewrite the Atmel with a good .bin file.
Multiple links in case they go down:
http://www.mediafire.com/?9k3mo1z9nxs
http://www.sendspace.com/file/mi6oub
http://www.badongo.com/file/7289886
http://www.uploading.com/files/JIHWTPQ7/24rf08c_tools_141_w24rf08_r24rf08.zip.html
Sunday, January 13th 2008 at 6:43 pm
Hi, thanks to the poster for the guide. I have a T42 and have followed the steps closely. I managed to dump the password ok but I cannot see the password when i scroll down to address 0×330 using the IBMPass software.
Can i send my dump file to anyone with experience that can help me or can you please send me some advice.
Is it possible that the dump file can be created without including the password in it???
Thanks in advance.
Sunday, January 13th 2008 at 9:09 pm
Hit the Off/On button to the top left in IBMPass.
Monday, January 14th 2008 at 12:49 pm
Dear Guys,
Please help me in the case of T61 lenovo, widescreen model. Is there a solution for it? I have checked with IBM service center, and they asked me to replace the mother board. Please help me … if you guys can ….please let me know if its possible or not…… thanks
Monday, January 14th 2008 at 1:11 pm
Sorry guys, the problem is that i have set a supervisor password, and it doesnt work at all.
Tuesday, January 15th 2008 at 4:02 am
Hi, does this method work on R60? I can’t locate eprom chip. Stripped completely TP, took out motherboard, but still can’t find it. Can anybody help with location of this chip if it exists? many thanks.
Tuesday, January 15th 2008 at 7:12 am
I just want to say how wonderful this site is!!!!!! I had all but lost hope with my T42. IBM had told me $175 to remove a supervisor password, they then came back and said $475. I was not gong to pay that much for a laptop that I had only given $50 for in the first place. Using your instructions, (after a little trouble with the programing) it worked liked a charm. Thank you guys so much for your time and effort in the making of this page. Keep up the good work and I will be referring anyone who has problems to you.
Thursday, January 17th 2008 at 9:22 am
I wonder how many of these T60 laptops are stolen…
Thursday, January 17th 2008 at 4:39 pm
Thank you for the help this site provides, I am trying to recover a t30 I was successful in retrieving the password from the dump.bin file by following all the instructions to the letter. However now my computer hangs during startup with the error 0175: bad CRC1, stop post task.
As best as I can tell, a few people have had this same problem but I can’t seem to find instructions on how to get past this error. In searching the web I am directed to replacing the motherboard (I would like to avoid this). Is there anyone who experienced this error and has instructions to correct it?
Thanks in advance.
Friday, January 18th 2008 at 11:01 am
Grazie, grazie molte per le informazioni che mi hanno permesso di trovare la password (SVP) del mio IBM ThinkPad A21e CXG 2628.
Thanks a lot
Friday, January 18th 2008 at 1:01 pm
Dear Guys,
Please help me in the case of T61 lenovo, widescreen model. Is there a solution for it? I have checked with IBM service center, and they asked me to replace the mother board. Please help me … if you guys can ….please let me know if its possible or not…… thanks
Tuesday, January 22nd 2008 at 8:22 am
Any one can find r52 Laptop bios ic please kindley send details
sdheenadayalan@gmail.com
Thursday, January 24th 2008 at 6:49 am
This is really awesome. I successfully revealed my T41 supervisor password. I did this exactly as the instruction, except I used two 4.3V Zeners since I don’t have 5.1V type in hand. Only r24rf08_setup.zip and setup_ibmpass21.zip were needed. I didn’t use w24rf08_setup.zip which is not free. I have a very old PC coming with RS232 port, and this PC is even running Windows 95. The r24rf08 is running well on the PC, but it can’t run setup_ibmpass21.msi. I use anther PC with WinXP to run IBMpass 2.1 Lite and it decoded the bin file amazingly. Thanks to this great stuff in sodoityourself.com and allservice.ro.
Thursday, January 24th 2008 at 1:52 pm
I located the eeprom ATMEL 24RF08 on my ThinkPad R40 2722-CU3. It is on the motherboard under the hard drive (U18) caddy, adjacent to the USB port. It is a two colored chip (black with a red stripe).
Saturday, January 26th 2008 at 11:06 am
Hello
there is an other way, to hack the IBM Bios Password. I made a documentation and ziiped it with all the things you use. (Programs, Schematics, Documentation) and uploaded it. http://rapidshare.com/files/86727521/Hack_ThinkPad_A20m_BIOS_Password.zip.html
I hope, this is helpful. Enjoy it.
Saturday, January 26th 2008 at 11:41 pm
Does anyone has the eeprom dump for thinkpad T21? Thanks!
Sunday, January 27th 2008 at 1:02 pm
Hi guys,
you’re great. With the knowhow from your page i could get my t22 back to life. I had some problems, especialy because the T22 has the 14 pin atmel chip directly under the ram cover(this i found out after the complete disassembling of my thinkpad) and later i forgot to scwitch on the AA decode switch in ibmpass 2.1 lite, but finally everything work and i could kill this damn biospassword.
Thanks a lot to you gyus and keep going.
Sunday, January 27th 2008 at 3:20 pm
aye i got a kind of big prob here i try to read from a a22 tp and i just get the message saying eeprom not found or cannot find circuit or bus i triple checked my soldering everything seems just fine then my wiring once again it’s ok but still get the same error. i already did it in a t20 tp with the same wiring and stuff do i need to use the max232 driven eeprom schema? help plzzzz
Monday, January 28th 2008 at 4:02 am
I find this post to the fastest and safest way to get ANY of your PCs running. You can also purchase a AVR/Atmel programmer for about 20 US dollars. You can build one for about 5 dollars. Using an ISO7816 device with dip switches is safe as you dont need to power on the laptop and risk damage. Here is a Copy/Paste of the post again ::::
Comment by justsomewellerdude:
Sunday, February 18th 2007 at 7:32 pm
sorry for poor spelling.
1. Get ISO
2. Open ISO
3. Remove Atmel chip from your IBM
4 Solder in your IBM Atmel
5 with seperate PC download from IBM the correct flash for your unit.
6 with seperate PC download the XPAtmel 2.0 program found all over net
7 open XpAtmel2.0
8 choose the file and click download
*note*
make sure your file is in the same folder as XP Atmel
if your ISO has dip switches you use either 1&5 on or 1&6 on to program.
9. Then re-solder in your Atmel into the Thinkpad
*you now also have most current flash file (BIOS) for that unit.
Enjoy.
Monday, January 28th 2008 at 12:00 pm
Hi, thanks to the poster for the guide. I have a T42 and have followed the steps closely. I managed to dump the password ok but I cannot see the password when i scroll down to address 0×330 using the IBMPass software.
Can i send my dump file to anyone with experience that can help me or can you please send me some advice.
Is it possible that the dump file can be created without including the password in it???
Thanks in advance.
PS: Thanks user ‘crack’ but i already tried restarting the T42.
Monday, January 28th 2008 at 7:27 pm
WONDERFULL….. it’s works perfectly….. thanks a lot!!!!!. In my country, IBM says “give me US$D 1.800 plus taxes to change your motherboard….. the new mac air is only for USD$ 1.700.. IBM must crazy with this prices….
Regards….
Jack
Wednesday, January 30th 2008 at 6:37 pm
i have problem finding the password chip for tp570 kindly send me the details of chip.Also the details of pins to which i have to connect the circut made as given.will the same softwares work with tp570.please please please
Wednesday, January 30th 2008 at 10:45 pm
Does anyone have a working dump of a TP A31? If so, e-mail me at powerhouseharry@triad.rr.com. Thanks
Thursday, January 31st 2008 at 5:20 am
I am unable to find the eprom for the T43. Is it the 24c64wp? I really need this, so who ever knows the location please email me. slevos@gmail.com Please help me i´m in chihuahua mexico
No puedo encontrar la memoria eeprom para mi laptop T43, alguien que me pueda ayudar decirme donde esta, en unas paginas dicen que es PC8394 y lo unico que encontre parecido al que dicen aqui es el 24c64wp? si es ese o favor de indicarme cual es?
Thursday, January 31st 2008 at 9:09 pm
Hellow everybody.
I read the article and I tryied to do it alone, and I succeded in recovering the password exactly how the article describes but the password does not match.Anyone has this problem too ?My IBM is a T42 model.
help please.
thank you.
Friday, February 1st 2008 at 1:17 pm
Hello,
i have readen everyting i could find about this subject and built the interface for Atmel chip. Works fine on TP 600x and now only thing im missing is correct dump file for it. Does anybody have the dump file for 600x to correct the crc error?
Thanks in advance, my email is mslovic@gmail.com
Friday, February 1st 2008 at 9:45 pm
WOOHOO! Thankyou for this info. Was given T21 that was locked, thanks to this info it’s now working again… Cheers!
Sunday, February 3rd 2008 at 10:20 am
hi i have a imb tp t60 can anyone tel me where the svp chip is ive striped the laptop ive found a atmel chip in the same location as other u53 its a atmel 618 25010AN SU27 is this the right chip ? if not can someone please tell me thanks
Sunday, February 3rd 2008 at 6:46 pm
hey i’m currently working to get the algorythm for encodage of password used by ibm. heard that when u call them u just have to tell them the s/n under ur tp then they give u a pass for ur bios. if ne1 feels concern about it or have info to share contact me at kranium45@hotmail.com
Wednesday, February 6th 2008 at 2:29 am
The only carbon-film resistors i can find are 2.2-k ohm ! they come in 1/8 watt, 1/4 and 1/2 … is this the right kind? and what wattage should i use if so? thanks email me jfallon@knology.net
Thursday, February 7th 2008 at 10:26 pm
Hi all,
Catalin, I am having similar problems, did u get a result yet? Please email me at das_bade@yahoo.co.uk
Thanks to the poster for the guide. I managed to dump the password ok which created a 1kb dump.bin file but when i scroll down to address 0×330 using the IBMPass software, IT IS BLANK. I have tried with the translation off and on.
Can i send my dump file to anyone with experience that can help me
Thanks in advance.
DAS_BADE@YAHOO.CO.UK
Thursday, February 7th 2008 at 11:50 pm
I tried this on a T30. I made the device followed step by step after several times loading
to my .bin file it loaded 128byte file via the shell. Used V21Lite to extract data
but received only 0s on 12 lines. No luck after several tries. Unhooked home-made reader device and upon rebooting password lock is gone but now I receive a error code 0176 CRC
error on system freeze. I see now someone posted that the COM plug diagram is from the back side not the front so my home-made device was wired wrong. If you mess up the first time apparently there is no way to go back on the T30. The eprom is now blank and I don’t think there is a way to add data back to the erased EPROM chip. I see you can
buy a new chip and solder them yourself on the MB if you search on google for one.
For those that say they built this setup found the EPROM and did it in five minutes must be suppermen cause it took me many-many hours.
DeepFreeze
Friday, February 8th 2008 at 12:38 am
CRC1 error fix???
I see after reading some posts that there is a way to fix the CRC1 error but has anyone tried this with success? If so let me know OK. All the links to the so called utility have been removed due to copy right infringement it says. Does someone have a legit site/link to this utility?
Thanks, DeepFreeze
Friday, February 8th 2008 at 11:07 am
hi. my thinkpad is A23 and ATMEL 24rf08ct on it have 14 pin ! which pins must be scl,sda ?
Sunday, February 10th 2008 at 2:12 am
@DeepFreeze
The legit site is http://www.allservice.ro/forum/
They can help you with the CRC error, they helped a lot of people there. just talk to Victor Voinea
Sunday, February 10th 2008 at 10:07 pm
Hi,
Does anyone have a w24rf08 program? the links that crack gave does not have that files anymore.
Thanks.
PS. you can mail me the program if you have to onehotamanda (at sign) hotmail (dot) com
Monday, February 11th 2008 at 12:33 am
All good for T41, thanks for the site especially the photos, makes a heap of difference to the allservice forum site.
thanks
Monday, February 11th 2008 at 6:20 am
Works perfectly. Just a note: you don’t really have to solder anything to the eeprom. Here’s what I did:
1 - Assembled the reader with extended GND, SDA, and SCL leads
2 - Prepared the 2nd computer (installing the R24RF08 and IBMPass Lite software)
3 - Hooked the reader up to the 2nd computer
4 - Turn on the 1st laptop aand press F1 to get to the password prompt
5 - On the 2nd computer, go to the command prompt and CD into the directory where r24rf08.exe is
6 - Connect the GND to a metal part on the laptop
7 - Using both hands connect the SDA first and then the SCL
8 - Have another person type r24rf08 dump.bin and press enter on the 2nd computer
9 - It’s safe to unhook the reader
10 - Start IBMPass Lite and open the dump.bin file
11 - Click the translate button to ON
12 - Look for the password
NOTE: This will not work with a USB to serial converter. It must be hooked up directly to an actual serial port set to COM1.
Thanks all.
Monday, February 11th 2008 at 9:17 pm
Worked fine, i had no 5V1 diodes and used 4V7 ones.
Thanks.
Friday, February 15th 2008 at 12:42 am
Hey, I have an IBM Thinkpad T41 type 2373. I succeeded in finding the ATMEL 24rf08 on my laptop. I was asking whether the electronic stuff is necessary, can’t I just plug it in the seria lport and start things up.
PLEASE SOMEONE ENLIGHTEN ME.
MY EMAIL: hell-raiserx@hotmail.com
thanks in advance
Saturday, February 16th 2008 at 5:31 pm
Haven’t seen X21 laptops mentioned here. I found my X21’s ATMEL chip buried deep on the back of the MB. It is centered on the back of the MB board about half an inch from the rear edge. You have to remove the MB to get to it. You have to practically dissassemble the entire PC. Luckily that isn’t really hard and IBM has thoughtfully posted all their Service Manuals at this site with graphic instructions.
ftp://ftp.software.ibm.com/pc/pccbbs/mobiles_pdf/24p2975.pdf
Have not tried to recover the password yet, I have to get the electronics.but I will post results when I do
Sunday, February 17th 2008 at 4:45 am
3 month to find this page only to find out that the password was ( pass ) what is with this Admin’s today I fell so stupid. on to my next stupid problem now my T42 have a HDD Password and it is not “Pass” please help me…
Sunday, February 17th 2008 at 7:12 pm
I have just unlocked my T60 using the reader software from allservice.ro.
It includes a really easy manual and the allservice.ro support is great.
If somebody cannot solder the interface and/or fulfill the task of unlocking feel free to contact me. I would do it. I would not betray allservice.ro so costs would be $45 or $100 (depends on security options) for allserivce.ro plus shipping to germany and additional EUR 50 for my work.
Germany residents can get the whole package for EUR 100,-.
Interfaces for EUR 30,-.
Simply help for free.
Greets dare_@gmx.de
Tuesday, February 19th 2008 at 11:37 am
hi has anyone had any luck with the T60 ive searched everywhere and cant find anything ive found this [url=http://img409.imageshack.us/my.php?image=48108068vg2.jpg][img=http://img409.imageshack.us/img409/8427/48108068vg2.th.jpg][/url] just need the software to dump the eeprom thanks
Tuesday, February 19th 2008 at 11:38 am
Tuesday, February 19th 2008 at 11:39 am
this one
Tuesday, February 19th 2008 at 11:40 am
[URL=http://imageshack.us][IMG]http://img409.imageshack.us/img409/8427/48108068vg2.jpg[/IMG][/URL]
Thursday, February 21st 2008 at 1:14 am
CC computer can remove all the IBM Thinkpad password, 100% successful rate,
Even the newest model for T61 wide screen, Don’t waste your time, T61 BIOS and Password is build in the BGA which can not be replaced.
We developed the tools for this one, it took us 1 month to remove the newest model T61 Core 2 duo, just out of market for
Thursday, February 21st 2008 at 1:17 am
I can remove all the Thinkpad password, all means 100%,
included the T60, T61, X60, X61, service for $299 CAD,
Same day service available. Toronto, Canada
Call 416-518-6889.
Thursday, February 21st 2008 at 2:48 am
I follow the directions and when I hit the enter key on the PC I get no dump.bin file stored, any thoughts, I have checked and rechecked all connections.
Thanks.
Friday, February 22nd 2008 at 1:36 am
T61 use P24S08 (24RF08 clone) and can be done using the free R24RF08 tool form allservice. Stop spamming here buster.
See http://www.allservice.ro/forum/viewtopic.php?t=779
Saturday, February 23rd 2008 at 2:07 am
IBM G40
I Replaced CPU Fan And Lost Date & Time And Had Never Needed Admin Password in Pass But it Was Need To Set Time & Date Before i Could Boot to Any Drive .
Followed This How-To Cost About $2.00 US Parts From Radio Shack .
## Worked First Time Like A Charm ##
Thanks Alot for this How-To
Saturday, February 23rd 2008 at 8:15 pm
Thinpad R30: The R24RF08 is indeed located at the underside of the board near the edge of the PCB. It is hidden behind a black adhesive tape, why I first didn’t detect it.
Another mistake I made was not to insert any RAM modules. Without RAM there is no proper POST and the PWD won’t be revealed while reading it with the dumper-program.
One should not forget to set the software IBMpass 2.0 properly. Under menu VIEW/TRANSLATION one has to set it to “Alternate Scancode (R Series)”.
Tuesday, February 26th 2008 at 8:49 am
Hello,
i have a Thinpkad A20M, last week i substituted the bios battery because it was finished, After this operation when i start up my PC it required a POWER-ON password. The strange is that i haven’t filled any password before and i do not know which is the value to be filled. I have already try to remove again all battery (PC and BIOS) for many times but the password still required.
Have anyone suggestion? Can i use above procedure? if yes in which row i can found the value of this password?
Thank you in advance for your help !
Wednesday, February 27th 2008 at 8:25 am
Thank You, I’ll Try it !!!
Thursday, February 28th 2008 at 1:17 am
6269f1t ibm card you sri
Thursday, February 28th 2008 at 1:17 am
6269f1t ibm card you sri
Thursday, February 28th 2008 at 1:17 am
6269f1t ibm card you sri
Sunday, March 2nd 2008 at 9:30 pm
Hi, i’m trying to restore a T21 that have “0175 Bad CRC1, stop POST task”, i found AMTEL 24RF08CT EPROM, …. anyone can send me a clear dump .bin file? pls send to vallors [AT] inwind [dot] it
thanks a lot!
Monday, March 3rd 2008 at 2:37 am
BTW: those last numbers (e.g. 0042) is just the date when the chip was produced (YYWW).. meaning 0042 is week 42, year 2000.. its unimportant to search for it
Tuesday, March 4th 2008 at 11:39 pm
hi.All
Can you help me, i want to know locating
IC Atmel 24RF08 in Motherboard IBM X41? can you show me
or sent Picture Motherboard IBM X41 Large Size,
because i cant find in my MB X41
thanks for your kind
–
Warm regards,
khamex
Tuesday, March 4th 2008 at 11:40 pm
hi.All
Can you help me, i want to know locating
IC Atmel 24RF08 in Motherboard IBM X41? can you show me
or sent Picture Motherboard IBM X41 Large Size,
because i cant find in my MB X41
i want to reply at khamex@plasa.com
thanks for your kind
–
Warm regards,
khamex
Tuesday, March 4th 2008 at 11:40 pm
hi.All
Can you help me, i want to know locating
IC Atmel 24RF08 in Motherboard IBM X41? can you show me
or sent Picture Motherboard IBM X41 Large Size,
because i cant find in my MB X41
i want to reply at : nkhamex@plasa.com
thanks for your kind
–
Warm regards,
khamex
Thursday, March 6th 2008 at 5:37 pm
Hi all,
will this work for a Thinkpad T60?
Anyone can help me!
Thanks,
Leo
Friday, March 7th 2008 at 1:48 am
haha my girlfriend and i both have lenovo r60 core duo anyways i was arguing one day with my lovely ladie and i threw it at my dresser ! when i booted it up again the ibm tpm bios support had lost the finger print files and allowed me to set new ones…..hum sometthing to think about !
Friday, March 7th 2008 at 9:42 pm
This is just a little warning about ALLService and their staff. (a little long, sorry)
I have been using my laptop but it does have a supervisor password set that just annoying, if nothing else. I was interested in their service for my T60 to remove the password as I heard they could do it. They, for the most part only take moneybooker payments, but, will take others like western Union. I sent them a letter trying to explain that here in the US we get scams all the time in emails that say “buy this cheap and send us money Western Union”.
My letter:
Hello again, well, I would like to order your service, but, I am a little hesitant. You are in Romania and request a wire transfer, I guess you do not have paypal? I feel a little unsure as I have no protection if this does not work. I am not saying this is a scam, Trust me, I am NOT a jerk , but, how do I know this will work? I have NO job and I do not wish to lose $45 if this is a scam. You will probably say “trust me”. I wish you used ebay and took paypal because then I could show you from my Ebay record of 140 buys, that I am a man of my word, because, I would ask if you would be interested in helping me with the password first, and then if successful, I would pay. If I was making 60,000 a year, I probably would not care at all either way.
Okay, it’s a little whiney, but, no way is it derogatory, or, offensive. I was merely stating that if they could give me some reassurance, I would be more than happy to pay them or do whatever they wished. It was a proverbial stretched out hand for help, a faith of good will.
This is their letter back to me:
Are you a joker? Or I guess I am having a good time.
Excuse me, but I am really bussy.
I then said:
No, I am serious. How do I know I will not be robbed/money stolen? I do not know you, and, you are in Romania! There are 100’s of scams in America that say “send money by western union”, to take money from Americans. How do I know you are NOT the same? Where is MY “guarantee”, if this does not work, I get my money back? With a company like “paypal”, I have help. If I send money by Western Union, I have NO help if you are not honest.
(Actually, paypal will not even help since it is virtual goods, so beware that fact also.)
There letter back to me:
Mr Bond, (funny name, cause that Jan Fleming’s character is brit and you are just a redneck),
We do our business via Moneybookers on a daily basis, WU is just an option. We accept PayPal as well, but PP is also the easiest way to obtain free software, used by con artists, and is the worst selling instrument for small software companies like ours.
I could accept PayPal, however, but after your last emails I just realized you are simply an idiot.
We do not sell to this kind of people, because to gurantee the success, a certain IQ level is needed, you know.
Victor Voinea
(there is also a guy named Bob who is just as bad, if he even really exists)
Now, I am here to say that I don’t know if their service works or not, but, it is obvious they do not care too much about others. I just want all to be forewarned that if you absolutely need their service and want to take a chance, I wish you luck. They are not concerned about you!! Here is something directly from their site:
“We do not accept PayPal, as this company lacks in any minimal seller protection. We do our business through MoneyBookers or bank or at elast Western Union, etc.”
Yet, when I ask about MY guarantee, I am an “idiot”? What the………?????
WOW! We need customer service like that in America! Apparently it’s a Romanian trait as they seem to be the most hated people in Europe, from what I have read last three days
while I was trying to find some Romanian words. I, personally, judge people as a one on one basis, but, they put that theory to rest for me. People are people, but, between all of the stories I have heard, people I have met (as I have dated a Romanian girl) and especially Europe, its true, they are not so good people. Then again, look up Vlad Dracula the impaler, bad bad baaad man, lol.
As far as I am concerned, as soon as I find out how they do it, I will share it free with the world and put an end to their abusive hostage holding attitudes. I will be more than happy to show them what kind of idiot I am.
All I need now is the PC8394 data sheet and I am 1 step from closing this deal. Being unemployed it’s a little hard, but, if I have to buy the data sheet, I will. As soon as I know where the SDL pins are, dump the file, I just need to run the hash programs and it’s done. You ALL will know then how to take care of this locked problem.
When they see this, they will surely start to act nice to everyone and try to give you a warm fuzzy feeling. Let it be shown here, that what you see from their personality isn’t real. I bet people will even get on here to defend them. It will be either the people from ALLservice, or, others that bent to their requests. It’s also funny that they try to look like they are doing the world a favor by explaining how to unlock the T40’s. The reason they did that was because the Japanese/Chinese found a way and was sharing it with the world. Guess they wanted to look like the hero. I wonder what excuse THEY will have and post, as they know I am now spreading the word about them. In all fairness too, let it be known that I DID give them a good piece of my mind, but, it was after the fact that it was clear how rude they were to me. I think people should be treated better, no matter who they are, unless they are in fact a-holas.
If you want to know more about this company, please feel free to contact me. Everywhere I go, I am going to try to have it where I am notified when someone posts to my story, so, you will be seeing a lot of me. “I” will give you the full story, or what you would like to know about them about them if you want to hear it, but, hopefully you see them through this warning for who they are.
Well, good luck with them if you go that route, I have to go take them down
Chris
Saturday, March 8th 2008 at 12:31 am
@chris,
You sound really like an idiot, if you ask me. When you want something from somebody, you don’t start saying: Hey, give me that you stupid Romanian or French or Italian. Or: You want to steal American’s money! How stupid are you, they have the right to call you that, baby.
Victor is the most supportive man I have ever know, I really like that man and he really helped a lot of people, just see the last news about T61 and X61 on their website:
http://www.allservice.ro/forum/viewtopic.php?p=3521#3521
Saturday, March 8th 2008 a