Help with NTL card password ?

[bilabonic]

Hi All

Got a glitched NTL card but when i goto read it with Nagra Edit i get prompted to use a password.

Is there a way around this, sure there was a proggy about which i used years ago, something to do with Backdoor ??

Cheers

 

[matt1980]

hi mate think you can do it with m rom might be rong thow

 

[bod]

check pm m8

 

[slimshady]

use xncs and got tools then change bd keys to whatever u want

 

[bilabonic]

Cheers guys.

Got your PM Bod nice one.

Think i can remember using Mrom years back.

 

[ronster]

PM sent mate incase you havnt already sorted it:Biggrin2:

 

[bilabonic]

Weird -getting this now aftyer getting lines from xncs -

Using BD3 Key: B6 6B 07 66 02 62 39 A6 A4 34 F6 69 50 FE 66 07
Attempting to login to BD3
BackDoor login verified
Dumping Dataspace
Attempting to restore BackDoor 0 key
Attempting to login to BD3
BD3 login failed
Write error encountered, attempting to restore original decrypt keys
ProviderID: 54
CamID: CC CC CC CC
Attempting to login to BD3
Decrypt keys successfully restored
Reading ROM11 failed
Closing of COM1 was successful

 

[billyk]

Weird -getting this now aftyer getting lines from xncs -

Using BD3 Key: B6 6B 07 66 02 62 39 A6 A4 34 F6 69 50 FE 66 07
Attempting to login to BD3
BackDoor login verified
Dumping Dataspace
Attempting to restore BackDoor 0 key
Attempting to login to BD3
BD3 login failed
Write error encountered, attempting to restore original decrypt keys
ProviderID: 54
CamID: CC CC CC CC
Attempting to login to BD3
Decrypt keys successfully restored
Reading ROM11 failed
Closing of COM1 was successful

Just keep writing to the card. it will write eventually

 

[sparky2k1]

Was this a BOD glitched card?

Do you have the details you need IE: IRD & BK?

2 Things,

1. Get hold of BOXget2PC (This should show the BK)
2. Open MrRom but dont repair yet but instead reset card to get IRD and if thats a problen you can use the windows calc in scientific mode to convert the IRD from the box engineers menu (or sticker)

I'll look tomorrow to see how things go

 

[bilabonic]

Was this a BOD glitched card?

Do you have the details you need IE: IRD & BK?

2 Things,

1. Get hold of BOXget2PC (This should show the BK)
2. Open MrRom but dont repair yet but instead reset card to get IRD and if thats a problen you can use the windows calc in scientific mode to convert the IRD from the box engineers menu (or sticker)

I'll look tomorrow to see how things go

IRD no probs, need BK. Card shows Rev B09.

Card is glitched but has backdoor password, obtained this with XNCS and get above says, the password is ok but then still fails to read card..

Tried over 20 times with same results.

Looking for the voltmeter method for 4001.

 

[bilabonic]

Just keep writing to the card. it will write eventually

Tried over x20 times now, frustrating as i have to close down Nagra and enter the backdoor key manually each time...

Cheers

 

[Satch]

Hi All,

@bilabonic did you get your BK from the card yet? but if you use Mrom then it will be deleted anyways!

You could try this
Programmer in phoenix mode card in it open NagraEdit press Ctrl + D this opens debugging options, go to comm tick read rom11 dataspace only then click on read from card you will get a window pop up click OK.
When finished click on Eeprom scroll down to D000, A's are Ird B's are BK have a play see how it goes.

D000: 07 27 01 5C 01 00 01 00 00 00 00 00 00 AA AA AA | .'...........ªªª
D010: AA 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ª...............
D020: 00 BB BB BB BB BB BB BB BB 07 38 06 5C 00 00 24 | .»»»»»»»».8....$
D030: CC CC CC FF FF FF FF FF FF FF FF FF FF 00 FF FF | ÌÌÌÿÿÿÿÿÿÿÿÿÿ.ÿÿ

 

[bilabonic]

Hi All,

@bilabonic did you get your BK from the card yet? but if you use Mrom then it will be deleted anyways!

You could try this
Programmer in phoenix mode card in it open NagraEdit press Ctrl + D this opens debugging options, go to comm tick read rom11 dataspace only then click on read from card you will get a window pop up click OK.
When finished click on Eeprom scroll down to D000, A's are Ird B's are BK have a play see how it goes.

D000: 07 27 01 5C 01 00 01 00 00 00 00 00 00 AA AA AA | .'...........ªªª
D010: AA 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ª...............
D020: 00 BB BB BB BB BB BB BB BB 07 38 06 5C 00 00 24 | .»»»»»»»».8....$
D030: CC CC CC FF FF FF FF FF FF FF FF FF FF 00 FF FF | ÌÌÌÿÿÿÿÿÿÿÿÿÿ.ÿÿ

Awesome mate, gave me the box key but no IRD.

All up and running, never knew about that option before...

:banana:

 

[Satch]

Awesome mate, gave me the box key but no IRD.

All up and running, never knew about that option before...

:banana:

HiYa,

Glad your sorted M8, not long learned that info myself Thanx to a post from BeFast from another forum.

 

[bilabonic]

check pm m8

Bod, just tried this on a card and it says 'priveliged instruction'.

What is the settings for XNCS just to read the backdoor keys, lost the info from last time.....lol

Want to just unlock the mosc to use instead of funcard, do not need BK or IRD.

Cheers

 

[geforcefx]

hmmm, intesteing post above ..but i have the same prob & cant remmeber the setting for xncs, & how to use it ..ty .or might just tyr th nagra option ..

 

[geforcefx]

Awesome mate, gave me the box key but no IRD.

All up and running, never knew about that option before...

:banana:

hi there iv done the same but cant seem to work the results out ! OMG ! any chance u could help me , iv copyed the results !!

 

[matt1980]

here you go boys work every time for me hope it help

 

[geforcefx]

here you go boys work every time for me hope it help

cheers pal ,






just trted all that m8 ...but it still not log it ..its gives me thats same password!! .&when reading it first it nagra >it says " useing pasword 00 00 00 00 00 *8 A* 00 00 00 00 " to log in ....is the same 1 as im gettng in XNCS ??

 

[matt1980]

hi did you try to change the backdoor keys what nagra u using mat 4.1 also mate what os u using as i have some problems with vista so i run in 98 mod and never seem to get a problem