Unable to login, bad password detected

[jamid]

Hi Gut's

I have been trying to read my Rom and thats all I am haveing any help please.

Thanks.

Opening of COM1 was successful
ATR String: 3F FF 95 00 FF 91 81 71 A0 47 00 44 4E 41 53 50
30 31 31 20 52 65 76 42 30 44 3C
ROM Revision: 011
EEPROM Revision: RevB0D
ProviderID: 5A
CamID: 2A 27 15 48
Using BD3 Key: 4E 69 70 50 45 72 20 49 73 20 61 20 62 75 54 74
Attempting to login to BD3
BackDoor login verified
Dumping Dataspace
Using BD0 Key: 00 00 4C 00 00 00 00 00 00 00 00 00 00 00 00 00
Attempting to login to BD3
Attempting to login to BD0
Unable to login, bad password detected
Attempting to login to BD0
Unable to login, bad password detected
Attempting to login to BD0
Unable to login, bad password detected
Attempting to login to BD0
Unable to login, bad password detected
Login attempt aborted
Reading ROM11 failed
Closing of COM1 was successful

[G77]

do you have the bk? if so, try mrom and the d2c. one of them should do the trick

[jamid]

Hi Mate,
Thanks for your replay.
Sorry no, I already tried D2C with the same result.

[gazd001]

any1 can feel free to correct me here, but does a rom11 bod not mean the card needs unlooped first? feel free to correct me though

[pello]

they need glitched to open unlooper

[Widgetz]

@pello the card is glitched. it says BackDoor login verified

Put nagraedit into debug mode and read past the BD Key error.

[Widgetz]

@Jamid. Edit your 1st post and remove your Cam Id above.

Open Notepad as you will be pasting info into here.

Open Nagraedit and hold in CTRL and press D. A debug window will open. Select Comm and tick read Rom 10 and read Rom 11.

Now close the debug options and read your card.

An error will popup saying bad dataspace error. Click Ok and your card will now be read, but its basically skipped the BD Login.

Scroll to D000: and your IRD and Boxkey + Cam ID are below.

Your boxkey is located at D220: (of the top of my head it starts where you see the following above it 27 01)

To make certain, Copy all the details from D000: to where your Cam ID is which is 2A 27 1X 4X....

[jamid]

Hi Widgetz,

Thanks for your post.

I will try what you have sujested for my rom 11numberber 2.

My rom 11 number 1 from my V+ I have read it it and have my,BK,IRD and cam id's.

But every image I use, I m back to where I have started FTA only.

Any Idea please, as this has become an obssetion , and not a hobby?

Thanks

Jam.

[abbs2002]

Originally Posted by jamid

Hi Widgetz,

Thanks for your post.

I will try what you have sujested for my rom 11numberber 2.

My rom 11 number 1 from my V+ I have read it it and have my,BK,IRD and cam id's.

But every image I use, I m back to where I have started FTA only.

Any Idea please, as this has become an obssetion , and not a hobby?

Thanks

Jam.

Follow this tut m8;

Setting up you Original Smart Card
To get your Smart Card up and running you will need these tools;
1.Infinity USB phoenix card programmer or similar
2.Nagra 4.1
3.NagraDate
4.Unlooper to unlock the card
Assuming you cardis unlocked and ready for modding; Open you card in Nagra 4.1 and click on read from card “blue arrow” if you card is unlocked then all the details will be displayed, then click Data Editor “underneath the blue arrow” then follow these steps to set up your Mosccard;
* Tier: '01 IRD Info (41)’:
*Edit the sub tiers:
-IRD number (enter your IRD number “backwards” in normal format)
-BoxKey (enter your BoxKey number in normal format)
* Tier: '06 Provider Info (58)’: This is where you enter your Cam Id;
(you can make up a combination of numbers/ letters to replace xxxxxx use 1, 9 & A, F)
-TW Cam ID starts with 2CXXXXXX example 2C31E7D1
-CW Cam ID starts with 27XXXXXX
-Pure Cam ID starts with 24XXXXXX
* Tier: '08 Standard tier (31)’: Edit the sub tiers:
-Expiry Date (using Nagradate - enter a future date in here in hex format)
-Rights Date (using Nagradate - enter a future date in hex format MUST be different to expiry date)
-Rights Identifier (TW: 9896D9 or Pure/CW: 9896D6)
-Min Channel (keep as 0001)
-Max Channel (any number between 1000 and 32415 - make sure you convert this to hex format using Windows calc)
-Modification Date (can be altered to any date in the past - just to make your image unique -- hex format)
-Begin Date (can be altered to any date in the past - must be a date before the modification date you enter - hex format)
For all the dates you can use NagraDate Converter “it’s in the download section” so you can change the date from Dec to Hex, example “21/07/2009 = 24A7”
Once you’ve done all that click on write to card in Nagra 4.1 (Red Arrow) then insert the card in your box on channel 101 (BBC1) and give 5 to 15 minutes to update then go to S*Y Sport and check, if everything was done correct you should get all the channels, if not just go over it again and correct any mistakes.

[jamid]

Hi Abbas,
thanks for your post.
I have followed you instraction , and all I have now FTA with no menu or any other action from the remote???

And also when I try to read the rom again it will come up with backdoor password needed??

Can you please help and tell me what next ??

Thanks

Jam