Hello All

This is my firs post on this group.
Need bios flash content ( mx25L8005 ) of Dell D620 laptop.
How to disable password lock, not used procedure generate master password from service tag ?

THX

The Dell D620 is probably the toughest of all computers to deal with when you have a BIOS or a password problem. I doubt you will have much luck, unless you know somebody who can program EEPROMS... Service Tag can be fixed if you do a Google search, but that won't help you if the board is password protected.

Eeprom and flash programming not problem it's possible on my workshop.
Need info where is service tag stored on bios map in serial flash 25L8005 , or or in other IC chip on board ?
Usually on new devices eeprom ara is emulated on flash( there is bios too) , but on this dell i not see typical symptoms for eep area emulated in flash.

Sorry for my bad english.

Eeprom and flash programming not problem it's possible on my workshop.
Need info where is service tag stored on bios map in serial flash 25L8005 , or or in other IC chip on board ?
Usually on new devices eeprom ara is emulated on flash( there is bios too) , but on this dell i not see typical symptoms for eep area emulated in flash.

Sorry for my bad english.


Allredy read and program 25L8005 password not stored in there only bios some one told me to find 24u05 ou 25u04 but i give laptop to custmer

Yo are shure so iside D620 is 24u05 or 24u04 memory ?
Where is it on PCB ??

the admin password is stored into the KBC flash memory. you can read it if you have a suitable programmator.

Where is this kbc flash , can you send me photo, or i send to you phot and you type for me this IC.
What is name KBC IC ?

KBC stands for Keyboard Controller. This info isn't much help, because the number of people in the tech repair or Dell repair business who can read the code are few indeed. The system used provides KBC data and a KBC flash utility to be combined and embedded into a basic input/output system read-only memory (BIOS ROM). It is not like reading a regular 8 digit password. Your BIOS checks the versions of the KBC data embedded in the BIOS ROM and the KBC in the system. This information is basically useless for most visitors to this forum, but should you know somebody who has the equipment, and the time, and the interest, they can provide you with the probable password so you can enter it yourself next time. If the version of the embedded KBC is newer than the version of the KBC in the system, the KBC flashing process is performed during a POST of the system.
Reading the code is "easy" for the person who is trained. Finding the trained person is still the difficult part.

KBC stands for Keyboard Controller. This info isn't much help, because the number of people in the tech repair or Dell repair business who can read the code are few indeed. The system used provides KBC data and a KBC flash utility to be combined and embedded into a basic input/output system read-only memory (BIOS ROM). It is not like reading a regular 8 digit password. Your BIOS checks the versions of the KBC data embedded in the BIOS ROM and the KBC in the system. This information is basically useless for most visitors to this forum, but should you know somebody who has the equipment, and the time, and the interest, they can provide you with the probable password so you can enter it yourself next time. If the version of the embedded KBC is newer than the version of the KBC in the system, the KBC flashing process is performed during a POST of the system.
Reading the code is "easy" for the person who is trained. Finding the trained person is still the difficult part.

Tell here i can find KBC and i will read

Are you an EEPROM programmer? It is not in standard English. If you are not trained in this controller code, you probably cannot access it to read it. If you are trained, you should already know where to find it.

It remains the policy of TechSpot to not allow forum members to participate in projects of possible piracy. That rule may apply here, but you will need to discuss it with one of the moderators.

what piracy? the SMSC-controller is standalone RISC processor. you can use it for various purposes. And the datasheet for it's free to download. in this datashet you can find the programming timings and so on. so you can read it via i2c bus if you can build a own programmer.

Maybe. Maybe not. There is the argument about enabling access to a stolen computer or stolen data. There is a legal way through Dell.
It is not a simple matter of building your own programmer. From your description, I would be surpised if you could do it.

not sure but you can look here for the answer
http://www.dellpassword.net.ms/

helo a lost my bios password for dell latitude d620 please help
service tag :GQ6ZG2J
express service code:364-123-694-35
thanks for help mail s_fethy@yahoo.fr

helo a lost my bios password for dell latitude d620 please help
service tag :GQ6ZG2J
express service code:364-123-694-35
thanks for help mail s_fethy@yahoo.fr
i find e chip mx 25l8005m2c but Icant read it please datasheet for reading and programming bios.thanks.

Also maybe somebody will help me?
the same problem dell d 620
j2ydg2j -595b

Express service code 415-375-310-35

mx15-g 25L8005m2C chip inside

PLEASE HELP ME!

Also maybe somebody will help me?
the same problem dell d 620
j2ydg2j -595b

Express service code 415-375-310-35

mx15-g 25L8005m2C chip inside

PLEASE HELP ME!

Great Thanks for help....
i still can't post my e-mail...plesea give me a link to information or any other help.

have bios lock on dell d620 and not sure if the shorting pins method would work here, and where is that chip located on the board?
Thanks

not sure but you can look here for the answer

this manual doesn't have any info about D620!!!!

any other link could have an info about the security chip in this model and which pins to deal with?

Thanks

also have XPS M1710
all the manuals shows that M1700 has the security chip next to the RAM where can short it during the boot. but none knows where is the security chip in XPS M1710!!!!!

any idea and which pins applies here?

Thanks

this chip is below PCI slot of your laptop also below big black sticker paper... it have 8 pins on chip should be name like this mx15-g 25L8005m2C
....i'm also looking for information how to deal with this pins...If somebody knows please help us!
Thank you!

this chip is below PCI slot of your laptop also below big black sticker paper... it have 8 pins on chip should be name like this mx15-g 25L8005m2C
....i'm also looking for information how to deal with this pins...If somebody knows please help us!
Thank you!

Thanks this is a great help i appreciate it. is this info for M1710 model or D620 as i have two??
now we need a help about how to deal with it.

the "shorting method" on serial flash chip is useless. don't waste your time, guys. the password is stored in the keyboard controller chip.

the "shorting method" on serial flash chip is useless. don't waste your time, guys. the password is stored in the keyboard controller chip.

where is this chip? what's the name appear on it? how can we clear the password there?

specifically talking about 2 modles here: D620 and XPS M1710

the "shorting method" on serial flash chip is useless. don't waste your time, guys. the password is stored in the keyboard controller chip.

let them hope!.........maybe after getting thier laptop damaged and wont even boot then they will understand you.

let them hope!.........maybe after getting thier laptop damaged and wont even boot then they will understand you.

we not intend to get our laptops damaged here, but we looking for a solution benefit every one!!!!

i don't think you added any benefit in your reply!!!! do you think?

you free to share your knowledge and you get the thanks for it. this is what's all about. if i'm dum excuse me please but it's not shame to be a learner!!!

Thanks mate for your time.

walid, as i told, the password is stored in the keyboard controller chip. the chip has marking SMSC********(revision may differ). you can try to find the datasheet for this controller and build the programmator for this chip, but this is secret information, and i very doubt that you could do this. also, you can just replace the chip from the same laptop model.

the admin password is stored into the KBC flash memory. you can read it if you have a suitable programmator.

I think I asked this a couple of times but I will do again...
can you provide us some more detailed information on this?
I am not a programmer but a good friend of mine always says " its all about 0 and 1" so everything is possible somehow.
if the kbc is a flash memory and you can read it would it be possible to (over)write it?
what do you mean with a suitable programmator? is it a device you attach to the laptop or a software? sorry for all the questions but I'd like to dig into it but donno how.

thanks for any info!
mscrx

Thanks lamo for explaining even it still unclear or maybe it's clear now where is the password but our willing for the chellenge takes us to dig more and keep asking questions. saying it's not clear till we get a resolution then we would say it's clear.

as what mscrx said we would like to know how to read from that controller is it by a device could we make our self or some thing ells as you refered to it by saying datasheet and secret. all of these things and the whole procedure is worth to try and learn.

would be nice if we get you and any programmer to put a hand with us here and guide us thru it.

very important question here:

do you know any one managed to clear this password in that chip?

my believe is as long as you can learn then there is nothing impossible.

Thanks guys.

mscrx and walid, you're on the right way in digging the problem. it seems, that you can't make the programmer for this KBC controller. that's because, the datasheet is closed for downloading(there's programming timings in this datasheet which allow you to make the programmer). yes, i know that reflashing process goes via i2c bus, thus you can use something like modified PonyProg programmer. the SMSC roots are from intel (yes, intel bought this company not so long ago), so if you have guys from this company, i think they can help you with datasheets and manuals for this controller. the bios chip contains only small part of the password generation algorhythms. but! the bios update software contains the KBC flasher too, and there you can extract the binary KBC flash file for dissasembling. don't forget to disassembly the bios binary file, you can use the phoedeco.exe tool, sorry, i don't remember exactly which tool used for dell *.bin files(you can google the file, and this file contains all tools).
.... it's can be continued....

and again. as for me, digging into this problem will costs plenty of time. i recommend you to unlock this laptop and pay some money, instead reading tons of manuals and datasheets.

ok, I have a .rom and a .hdr file out of the d620_a08.exe.
how would I proceed? I can read some data in a hexviewer but I doubt thats where I can find out more.

mscrx, you need only the rom file. try to use the phoedeco.exe utils to unpack this rom file. after this step, i can't help you, sorry, 'cos i'm not a programmer/reverse engineer.

ok, thanks for your help so far!

edit:

Filelength : 100000 (1048576 bytes)
Filename : A08.rom
Searched through file. Not a PhoenixBIOS

is it because its a "Phoenix ROM BIOS PLUS"?