Rom11 mrom romstudio nightmares

[J-Dogg]

firstly a big hi to everyone out there,

now...

iam having problems with a rom11 n*l card, i have tried backdoor method in romstudio and when i go to write my changes i get the message 'error reading card' also it looks like some of my numbers have been reset to zero on my ird tier and my bk and ird have also been reset.

in mrom i can reset my card then when i go on repair it works until 87% (sending second string) then it stops and says shit.

ive been 5 solid days trying to do this card (and its my first) iam quite clueless but not as clueless as i was last saturday when i first started trying, any help would be greatly recived, it is a rom11 bd09 card

thanks guys.

 

[davidh]

firstly a big hi to everyone out there,

now...

iam having problems with a rom11 n*l card, i have tried backdoor method in romstudio and when i go to write my changes i get the message 'error reading card' also it looks like some of my numbers have been reset to zero on my ird tier and my bk and ird have also been reset.

in mrom i can reset my card then when i go on repair it works until 87% (sending second string) then it stops and says shit.

ive been 5 solid days trying to do this card (and its my first) iam quite clueless but not as clueless as i was last saturday when i first started trying, any help would be greatly recived, it is a rom11 bd09 card

thanks guys.

it is possible it is locked either by cc's and hasnt been used for a long while or by a trader
look for the d2c file and use that with nagraedit 4.1

 

[J-Dogg]

hi,

i cant open the card using nagra either

 

[billyk]

hi,

i cant open the card using nagra either

If you've used Mrom then you've wiped the ird and possibly the boxkey.

if you don't need the ird and boxkey the open nagra , open d2c file and then send d2c file, you might need to do this a couple of times bit it will then tell you your backdoor key is set to edca5e0011223344556677899edac5e, you can then get into your card and write to it using that bd key.

But if you've already mrom'd the card then your information is most likely gone.

 

[J-Dogg]

i have my bk and ird written down, and somebody has sent me an image to write to the card, but i cant repair it using mrom, i cant open it in nagra, and i cant write my changes in romstudio via backdoor, iam pretty much stumped as to what to do now, thanks for the replies guys.

 

[billyk]

If your card is a B09 then look for the file D2C , open nagra, click on comm , open D2c then send d2c, it will send the file, do it 2 or 3 times, it will tell you backdoors open and changed to the password i gave you above, then write yor new image to the card and when it asks for bd passwword use that one.

 

[J-Dogg]

ok, please bare with me cos iam new to this, i used the d2c file but when i go to read from card using nagra i get this error message

Opening of COM2 was successful
ATR String: 3F FF 95 00 FF 91 81 71 A0 47 00 44 4E 41 53 50
30 31 31 20 52 65 76 42 30 39 41
ROM Revision: 011
EEPROM Revision: RevB09
SetIFS failed
Using BD3 Key: 4E 69 70 50 45 72 20 49 73 20 61 20 62 75 54 74
Reading ROM11 failed
Closing of COM2 was successful

mabye iam not using your instructions correctly, is that the correct process? thanks again

 

[J-Dogg]

Opening of COM2 was successful
ATR String: 3F FF 95 00 FF 91 81 71 A0 47 00 44 4E 41 53 50
30 31 31 20 52 65 76 42 30 39 41
ROM Revision: 011
EEPROM Revision: RevB09
Error, ROM revision of card does not match loaded image
Closing of COM2 was successful


just got this error after trying last method

 

[billyk]

Is your programmer set to comm 2 ? also right click on nagra then go to properties/compataabilty/set it to run in windows 98/me , if not then try again in windows 95 compatability.

 

[J-Dogg]

yeah ports are set correctly, i will try running it in compatability for windows 98/me then ill see what happends, cheers mate, iam pulling my hair out with this

 

[billyk]

yeah ports are set correctly, i will try running it in compatability for windows 98/me then ill see what happends, cheers mate, iam pulling my hair out with this

you're doing everything right. only after using mrom if it's giving you provider id as 00 then you've probably fucked the card and i would write it off as a lesson learned.

never use mrom unless as a last resort.

 

[J-Dogg]

hahaha thanks, i kind of got further than ive ever been when i set it to windows 98/me mode then it crashed again it was a one off so i cant post it i never copied it, i have an old v*r*in media card as well i could experiment on, could i use the same bk and ird number for that card?, but it has never been modified in anyway shape or form, what else, if anything would i need to do to it change the bk or ird? and dates? i will keep trying with the other card tho, last reading gave this error

Opening of COM2 was successful
ATR String: 3F FF 95 00 FF 91 81 71 A0 47 00 44 4E 41 53 50
30 31 31 20 52 65 76 42 30 39 41
ROM Revision: 011
EEPROM Revision: RevB09
SetIFS failed
Using BD3 Key: 4E 69 70 50 45 72 20 49 73 20 61 20 62 75 54 74
Reading ROM11 failed
Closing of COM2 was successful

i dont even know if its writing the d2c file to the card or not, but when i run the file it says success then dosent seem to use the bd key. i dunno my heads boxed, iam gonna try again tomorrow, thanks for your help tho mate.

 

[billyk]

you can't use 1 ird and bk for another box, they are card specific. Set if failed usualy means threses a problem between your com port and your progarammer but not always.

Someone else might be able to able help uoi further here.

If you have your bk and ird then change the old card to that and update the dates on it. it should work.

 

[gooner71]

What programmer are you using - SetIFS will almost certainly mean a comms error - Try rebooting your pc and then checking Nagraedit is running in win98/2000 compat mode and try reading the card again!!

 

[J-Dogg]

using an infinity usb programmer, i know my ports are ok as i have a checker, i cant get into my card to open it, only by backdoor romstudio can i get into it, then i cannot write my changes to the card. iam gonna try restarting my computer then iam gonna try the nagra method again, thanks for your time fellas.

 

[J-Dogg]

just tried again today and got this error

Opening of COM2 was successful
ATR String: 3F FF 95 00 FF 91 81 71 A0 47 00 44 4E 41 53 50
30 31 31 20 52 65 76 42 30 39 41
ROM Revision: 011
EEPROM Revision: RevB09
ProviderID: 5C
CamID: ** ** ** **
Using BD3 Key: 4E 69 70 50 45 72 20 49 73 20 61 20 62 75 54 74
Attempting to login to BD3
BD3 login failed
Reading ROM11 failed
Closing of COM2 was successful


anyone got any ideas? any help would be superb

 

[J-Dogg]

wow tried again then got this


Opening of COM2 was successful
ATR String: 3F FF 95 00 FF 91 81 71 A0 47 00 44 4E 41 53 50
30 31 31 20 52 65 76 42 30 39 41
ROM Revision: 011
EEPROM Revision: RevB09
ProviderID: 5C
CamID: ** ** ** **
Using BD3 Key: 4E 69 70 50 45 72 20 49 73 20 61 20 62 75 54 74
Attempting to login to BD3
BackDoor login verified
Dumping Dataspace
Error changing decrypt keys
Write error encountered, attempting to restore original decrypt keys
ProviderID: 5C
CamID: ** ** ** **
Attempting to login to BD3
Error, unabled to restore decrypt keys
Decrypt keys: E9 1D 82 AF 9F 8D 63 A5 9E 30 1A CD 03 B1 99 69
A9 B7 E3 BA A1 93 A3 FF 59 C4 70 60 78 B8 F5 60
EE 44 C2 C3 BA 94 D0 ED 2A DE 52 8F C9 B8 CF 4A
E6 11 E0 B1 6B C7 B1 D5 64 2E D5 A6 20 2D 65 B6
90 9F 62 2F 35 DF E5 AC A5 78 3B 79 D1 09 91 5E
AA AF E6 29 F3 89 D0
Reading ROM11 failed
Closing of COM2 was successful


i reckon iam a cock hair away from getting in, any ideas please?

 

[gooner71]

Right, looks like the reboot has got rid of the comms problem. You should now be able to run the D2C script and that will then overwrite the card but importantly changing backdoor keys to known values!!

Once you have done this read the card again and insert BD3 key when prompted as edca5e00112233445566778899edca5e - you should then be able to write an image of your choice to the card.

A tip though, when you go to write the image to the card you will be prompted again for the BD3 key - although nagraedit will show the correct digits overwrite them manually in the box otherwise it will use all zeros - just a small bug with Ne4.1 i think!!!

 

[J-Dogg]

hello

just tried that method and when i tried to write the image to the card i got this error message

Opening of COM2 was successful
ATR String: 3F FF 95 00 FF 91 81 71 A0 47 00 44 4E 41 53 50
30 31 31 20 52 65 76 42 30 39 41
ROM Revision: 011
EEPROM Revision: RevB09
Error, ROM revision of card does not match loaded image
Closing of COM2 was successful

any ideas whats gone wrong there, thanks.

 

[mastichick]

Hi

When you ran the d2c script did you get the message successful, run it again sometimes you got to run it a few times before it works.

Regards