abi artık bi + rep verirsin :P

1) BIOS üreticisinin standart Şifresi ile laptop bios şifresi sıfırlama
2) Yazılım ile notebook bios şifresi resetleme
3) Donanım ile laptop bios reset
4) Laptop üreticisinin çözüm metodlarıyla laptop bios şifresi sıfırlama

1) BIOS üreticisinin standart Şifreleri ile Sıfırlama Laptop Bios Şifresi Sıfırlama :

Bir çok bios üreticisi bu tür durumlara karşın ürettikleri bioslarda standart bir şifre kullanarak kullanıcılarının bu tür olaylarda bios şifresini sıfırlamaya olanak tanır. Bu şifreler üreticilerin ürettikleri bioslara göre farklılık gösterebilir. Aşağıda ki listede bazı bios üretici markalarının standart sıfırlama şifreleri vardır. Sizde biosunuzun markasına göre bu şifreleri deneyebilirsiniz.

Önemli NOT : Bazı Bios Şifreleme sistemleri sadece 3 şifre girme hakkı tanırlar ve bu 3 şifre girme işleminden sonra sistemi tamamen kitlerler. Böyle bir olayla karşılaşmak istemiyorsanız bu işleme başlamadan önce ilk olarak anakartınızın üreticisinin manuelini okuyun.

AMI Bios Standart Sıfırlama Şifreleri :

.M.I., AAAMMMIII, AMI?SW , AMI_SW, BIOS, CONDO, HEWITT RAND, LKWPETER, MI ve PASSWORD.

Award Bios Standart Sıfırlama Şifreleri :

Award marka biosların şifreleri 8 basamaktan oluşmaktadır. 1322222, 589589, 589721, 595595, 598598 , ALFAROME, ALLY, ALLy, aLLY, aLLy, aPAf, award, AWARD PW, AWARD SW, AWARD?SW, AWARD_PW, AWARD_SW, AWKWARD, awkward, BIOSTAR, CONCAT, CONDO, Condo, condo, d8on, djonet, HLT, J256, J262, j262, j322, j332, J64, KDD, LKWPETER, Lkwpeter, PINT, pint, SER, SKY_FOX, SYXZ, syxz, TTPTHA, ZAAAADA, ZAAADA, ZBAAACA ve ZJAAADC.

Phoenix Bios Standart Sıfırlama Şifreleri :

BIOS, CMOS, phoenix and PHOENIX.

2) Yazılım İle Bios Şifresi Sıfırlama Notebook Bios Şifresi Sıfırlama :

Bütün sistemlerin şifreleri mutlaka bilgisayarın bir yerlerinde muhafaza edilir. Eğer unuttuğunuz bios şifresi laptobınızı açmaya izin veriyorsa, bios şifrenizi öğrenebilirsiniz. Bios şifresinin muhafaza edildiği yeri biliyorsanız burayı sıfırlayabilirsiniz veya bu işlemi yapacak bir program kullanabilirsiniz.

0x371 portundan CMOS bellekteki byte i belirten bir program yazarak unuttuğunuz bios şifresini okuyabilirsiniz. Bu http://www.11a.nu/software/bios-pc-bios-security-and-maintanance-toolkit/ - program ile IBM, American Megatrends Inc, Award ve Phoenix marka biosların koyduğunuz şifreleri dos ortamında sıfırlayabilirsiniz.

Bu http://www.cgsecurity.org/wiki/CmosPwd - programla da aşağıdaki marka biosları sıfırlayabilirsiniz :

• ACER/IBM BIOS
• AMI BIOS
• AMI WinBIOS 2.5
• Award 4.5x/4.6x/6.0
• Compaq (1992)
• Compaq (New version)
• IBM (PS/2, Activa, Thinkpad)
• Packard Bell
• Phoenix 1.00.09.AC0 (1994), a486 1.03, 1.04, 1.10 A03, 4.05 rev 1.02.943, 4.06 rev 1.13.1107
• Phoenix 4 release 6 (User)
• Gateway Solo - Phoenix 4.0 release 6
• Toshiba
• Zenith AMI

Bu /programlar/hirens-bootcd-10-0 - iso dosyası ile de başlangıç cd si hazırlayabilirsiniz. Bu cd ile dos ortamında içindeki bios sıfırlama programları ile şifrenizi sıfırlamayı deneyebilirsiniz.

3) Donanım ile Bios Şifresi Sıfırlama Laptop Bios Reset :

Eğer laptobınızı açtığınızda bilgisayarınız başlamadan bios ekranında şifre ister şekilde kalıyorsa, şifreyi sıfırlamanın bir yolu da donanım ile sıfırlamaktır. Yukarda da bahsettiğimiz gibi bios şifreleri CMOS belleğinde depolanır. Bu bellek bilgisayar kapatılıp gücü kesildiğinde ufak bir pin sayesinde çalışır. Eğer biz bilgisayarı güçten kesip bu pini de devre dışı bırakabilirsek CMOS belleğinin üzerindeki tüm bilgiler sıfırlanır(bios şifresi dahil). Tabi ki öncelikle bu işlemi gerçekleştirmek için laptobımızın anakartında ki bu CMOS belleğine güç sağlayan pinin enerjisini kesecek doğru jumperları bulmalıyız. Her marka ve modele göre bu jumperların yerleri değişmektedir. Bu yüzden laptobınızın anakartının manuel kitapcığını bulup, cmos pininin jumper yerlerini öğrenmelisiniz. Deminde bahsettiğimiz üzere her laptop üretici firması bios şifre sıfırlama da kendilerine has zorluklar belirlemişlerdir. Kimisi CMOS pinine kısa devre yaptırırken kimisi de jumper veya saat pili gibi bileşenler kullanmışlardır.

4) Laptop Üreticisinin Çözüm Metodlarıyla Laptop Bios Şifre Sıfırlama :

Toshiba Bios Şifre Sıfırlama :

http://www.cgsecurity.org/keydisk.exe - Keydisk dos programını deneyin.

Bazı Toshiba laptop modellerinde de laptop açılışında sol shift tuşuna basılı tutarak bios şifre ekranını geçebilirsiniz.

IBM Aptiva Bios Şifre Sıfırlama :

Bazı IBM Aptiva modelleri açılışı sırasında mouse'a devamlı basılarak bios şifre ekranı geçilebilir.

Dell Latitude Bios Şifre Sıfırlama :

Bu http://www.users.globalnet.co.uk/~skynet/zips/latitude.exe - program sayesinde laptobınızın altında bulanan servis nosunu girerek bios master şifrenizi öğrenip sıfırlayabilirsiniz.

Dökümanlara devam ediyoruz

HOW TO BYPASS BIOS PASSWORDS
by Elf Qrin ( http://www.elfqrin.com/ - http://www.ElfQrin.com )
v2.24 r03Sep2000-13aug2004
First Release: r25Mar2000
The latest version of this document can be found at http://www.elfqrin.com/docs/biospw.html - http://www.ElfQrin.com/docs/biospw.html

The aim of this article is to explain how to bypass BIOS passwords. By reading this article you should realize you can't rely on BIOS passwords if you need to secure your computer.

Accessing information on the hard disk

May be you don't actually need to access the computer, but you only need to access the information contained on the hard disk. In this case it could be more convenient to remove it temporarely from that machine and put it as a secondary hard disk on another machine, that you'll use as a host to retrieve data.
Before to put the hard disk on the host machine, set its jumper according to the EIDE channel to which you are connecting it (master, slave, or stand alone). Each disk drive has its own configuration, but it's usually explained on a sticker on the top. Take note of the original position of the jumper first, to set it back when you'll have to put the hard disk back to the original machine.
When you turn on the host machine, enter the CMOS setup menu (usually you have to press F2, or DEL, or CTRL+ALT+S during the boot sequence) and go to STANDARD CMOS SETUP, and set the channel to which you have put the hard disk as TYPE=Auto, MODE=AUTO, then SAVE & EXIT SETUP. Now you have access to the hard disk.

Standard BIOS backdoor passwords

The first, less invasive, attempt to bypass a BIOS password is to try on of these standard manufacturer's backdoor passwords:

AWARD BIOS
AWARD SW, AWARD_SW, Award SW, AWARD PW, _award, awkward, J64, j256, j262, j332, j322, 01322222, 589589, 589721, 595595, 598598, HLT, SER, SKY_FOX, aLLy, aLLY, Condo, CONCAT, TTPTHA, aPAf, HLT, KDD, ZBAAACA, ZAAADA, ZJAAADC, djonet, %øåñòü ïpîáåëîâ%, %äåâÿòü ïpîáåëîâ%

AMI BIOS
AMI, A.M.I., AMI SW, AMI_SW, BIOS, PASSWORD, HEWITT RAND, Oder

Other passwords you may try (for AMI/AWARD or other BIOSes)
LKWPETER, lkwpeter, BIOSTAR, biostar, BIOSSTAR, biosstar, ALFAROME, Syxz, Wodj

Note that the key associated to "_" in the US keyboard corresponds to "?" in some European keyboards (such as Italian and German ones), so -- for example -- you should type AWARD?SW when using those keyboards. Also remember that passwords are Case Sensitive. The last two passwords in the AWARD BIOS list are in Russian.

Flashing BIOS via software

If you have access to the computer when it's turned on, you could try one of those programs that remove the password from the BIOS, by invalidating its memory.
However, it might happen you don't have one of those programs when you have access to the computer, so you'd better learn how to do manually what they do. You can reset the BIOS to its default values using the MS-DOS tool DEBUG (type DEBUG at the command prompt. You'd better do it in pure MS-DOS mode, not from a MS-DOS shell window in Windows). Once you are in the debug environment enter the following commands:

AMI/AWARD BIOS

PHOENIX BIOS

GENERIC
Invalidates CMOS RAM.
Should work on all AT motherboards
(XT motherboards don't have CMOS)

Note that the first letter is a "O" not the number "0". The numbers which follow are two bytes in hex format.

Flashing BIOS via hardware

If you can't access the computer when it's on, and the standard backdoor passwords didn't work, you'll have to flash the BIOS via hardware. Please read the important notes at the end of this section before to try any of these methods.

Using the jumpers

The canonical way to flash the BIOS via hardware is to plug, unplug, or switch a jumper on the motherboard (for "switching a jumper" I mean that you find a jumper that joins the central pin and a side pin of a group of three pins, you should then unplug the jumper and then plug it to the central pin and to the pin on the opposite side, so if the jumper is normally on position 1-2, you have to put it on position 2-3, or viceversa). This jumper is not always located near to the BIOS, but could be anywhere on the motherboard.
To find the correct jumper you should read the motherboard's manual.
Once you've located the correct jumper, switch it (or plug or unplug it, depending from what the manual says) while the computer is turned OFF. Wait a couple of seconds then put the jumper back to its original position. In some motherboards it may happen that the computer will automatically turn itself on, after flashing the BIOS. In this case, turn it off, and put the jumper back to its original position, then turn it on again. Other motherboards require you turn the computer on for a few seconds to flash the BIOS.
If you don't have the motherboard's manual, you'll have to "bruteforce" it... trying out all the jumpers. In this case, try first the isolated ones (not in a group), the ones near to the BIOS, and the ones you can switch (as I explained before). If all them fail, try all the others. However, you must modify the status of only one jumper per attempt, otherwise you could damage the motherboard (since you don't know what the jumper you modified is actually meant for). If the password request screen still appear, try another one.
If after flashing the BIOS, the computer won't boot when you turn it on, turn it off, and wait some seconds before to retry.

Removing the battery

If you can't find the jumper to flash the BIOS or if such jumper doesn't exist, you can remove the battery that keeps the BIOS memory alive. It's a button-size battery somewhere on the motherboard (on elder computers the battery could be a small, typically blue, cylinder soldered to the motherboard, but usually has a jumper on its side to disconnect it, otherwise you'll have to unsolder it and then solder it back). Take it away for 15-30 minutes or more, then put it back and the data contained into the BIOS memory should be volatilized. I'd suggest you to remove it for about one hour to be sure, because if you put it back when the data aren't erased yet you'll have to wait more time, as you've never removed it. If at first it doesn't work, try to remove the battery overnight.
Important note: in laptop and notebooks you don't have to remove the computer's power batteries (which would be useless), but you should open your computer and remove the CMOS battery from the motherboard.

Short-circuiting the chip

Another way to clear the CMOS RAM is to reset it by short circuiting two pins of the BIOS chip for a few seconds. You can do that with a small piece of electric wire or with a bended paper clip. Always make sure that the computer is turned OFF before to try this operation.
Here is a list of EPROM chips that are commonly used in the BIOS industry. You may find similar chips with different names if they are compatible chips made by another brand. If you find the BIOS chip you are working on matches with one of the following you can try to short-cicuit the appropriate pins. Be careful, because this operation may damage the chip.

CHIPS P82C206 (square)

Short together pins 12 and 32 (the first and the last pins on the bottom edge of the chip) or pins 74 and 75 (the two pins on the upper left corner).

       gnd
       74
        |__________________
5v 75--|                   |
       |                   |
       |                   |
       |       CHIPS       |
   1 * |                   |
       |      P82C206      |
       |                   |
       |                   |
       |___________________|
        |                 |
        | gnd             | 5v
        12                32

OPTi F82C206 (rectangular)

Short together pins 3 and 26 (third pin from left side and fifth pin from right side on the bottom edge).

    80              51
     |______________|
81 -|                |- 50
    |                |
    |                |
    |      OPTi      |  
    |                |
    |     F82C206    |
    |                |
100-|________________|-31
     ||           | |
   1 ||           | | 30
      3           26

Dallas DS1287, DS1287A
Benchmarq bp3287MT, bq3287AMT

The Dallas DS1287 and DS1287A, and the compatible Benchmarq bp3287MT and bq3287AMT chips have a built-in battery. This battery should last up to ten years. Any motherboard using these chips should not have an additional battery (this means you can't flash the BIOS by removing a battery). When the battery fails, the RTC chip would be replaced.
CMOS RAM can be cleared on the 1287A and 3287AMT chips by shorting pins 12 and 21.
The 1287 (and 3287MT) differ from the 1287A in that the CMOS RAM can't be cleared. If there is a problem such as a forgotten password, the chip must be replaced. (In this case it is recommended to replace the 1287 with a 1287A). Also the Dallas 12887 and 12887A are similar but contain twice as much CMOS RAM storage.

         __________
     1 -| *  U     |-  24 5v
     2 -|          |-  23
     3 -|          |-  22
     4 -|          |-  21 RCL (RAM Clear)
     5 -|          |-  20
     6 -|          |-  19
     7 -|          |-  18
     8 -|          |-  17
     9 -|          |-  16
    10 -|          |-  15                            
    11 -|          |-  14
gnd 12 -|__________|-  13

NOTE: Although these are 24-pin chips,
the Dallas chips may be missing 5 pins,
these are unused pins.
Most chips have unused pins,
though usually they are still present. 

Dallas DS12885S
Benchmarq bq3258S
Hitachi HD146818AP
Samsung KS82C6818A

This is a rectangular 24-pin DIP chip, usually in a socket. The number on the chip should end in 6818.
Although this chip is pin-compatible with the Dallas 1287/1287A, there is no built-in battery.
Short together pins 12 and 24.

 5v
 24          20                   13
 |___________|____________________|
|                                  |
|             DALLAS               |
|>                                 |
|            DS12885S              |
|                                  |
|__________________________________|
 |                                |
 1                                12
                                  gnd

Motorola MC146818AP

Short pins 12 and 24. These are the pins on diagonally opposite corners - lower left and upper right. You might also try pins 12 and 20.

          __________
     1  -| *  U     |-  24 5v
     2  -|          |-  23
     3  -|          |-  22
     4  -|          |-  21
     5  -|          |-  20
     6  -|          |-  19
     7  -|          |-  18
     8  -|          |-  17
     9  -|          |-  16
    10  -|          |-  15
    11  -|          |-  14
gnd 12  -|__________|-  13

Replacing the chip

If nothing works, you could replace the existing BIOS chip with a new one you can buy from your specialized electronic shop or your computer supplier. It's a quick operation if the chip is inserted on a base and not soldered to the motherboard, otherwise you'll have to unsolder it and then put the new one. In this case would be more convenient to solder a base on which you'll then plug the new chip, in the eventuality that you'll have to change it again. If you can't find the BIOS chip specifically made for your motherboard, you should buy one of the same type (probably one of the ones shown above) and look in your motherboard manufacturer's website to see if there's the BIOS image to download. Then you should copy that image on the chip you bought with an EPROM programmer.

Important

Whether is the method you use, when you flash the BIOS not only the password, but also all the other configuration data will be reset to the factory defaults, so when you are booting for the first time after a BIOS flash, you should enter the CMOS configuration menu (as explained before) and fix up some things.
Also, when you boot Windows, it may happen that it finds some new device, because of the new configuration of the BIOS, in this case you'll probably need the Windows installation CD because Windows may ask you for some external files. If Windows doesn't see the CD-ROM try to eject and re-insert the CD-ROM again. If Windows can't find the CD-ROM drive and you set it properly from the BIOS config, just reboot with the reset key, and in the next run Windows should find it. However most files needed by the system while installing new hardware could also be found in C:\WINDOWS, C:\WINDOWS\SYSTEM, or C:\WINDOWS\INF .

Key Disk for Toshiba laptops

Some Toshiba notebooks allow to bypass BIOS by inserting a "key-disk" in the floppy disk drive while booting. To create a Toshiba Keydisk, take a 720Kb or 1.44Mb floppy disk, format it (if it's not formatted yet), then use a hex editor such as http://www.bpsoft.com/downloads/index.html - Hex Workshop to change the first five bytes of the second sector (the one after the boot sector) and set them to 4B 45 59 00 00 (note that the first three bytes are the ASCII for "KEY" :) followed by two zeroes). Once you have created the key disk put it into the notebook's drive and turn it on, then push the reset button and when asked for password, press Enter. You will be asked to Set Password again. Press Y and Enter. You'll enter the BIOS configuration where you can set a new password.

Key protected cases

A final note about those old computers (up to 486 and early Pentiums) protected with a key that prevented the use of the mouse and the keyboard or the power button. All you have to do with them is to follow the wires connected to the key hole, locate the jumper to which they are connected and unplug it. That's all.

How To Clear Your Toshiba Bios Password

Plug it into your parallel port and boot up your machine, the password should be removed as soon as it boots.

Note: This will work on majority of older Toshiba's (1995 – 2002) and obviously only ones that have a parallel port.

CG Security

CG Security have a utility available that claims to work for a range of Toshiba bios passwords as well as the following machines;

• ACER/IBM BIOS
• AMI BIOS
• AMI WinBIOS 2.5
• Award 4.5x/4.6x/6.0
• Compaq (1992)
• Compaq (New version)
• IBM (PS/2, Activa, Thinkpad)
• Packard Bell
• Phoenix 1.00.09.AC0 (1994), a486 1.03, 1.04, 1.10 A03, 4.05 rev 1.02.943, 4.06 rev 1.13.1107
• Phoenix 4 release 6 (User)
• Gateway Solo - Phoenix 4.0 release 6
• Toshiba
• Zenith AMI

The utility also has the ability to restore, backup and erase/kill cmos. There is also some info about generic passwords for Award motherboards.

Check it out at http://www.cgsecurity.org/wiki/CmosPwd - CGI Security

Toshiba Bios Password Deletion

Satellite P100 & Satellite Pro P100

With notebook turned off;

• Open Wi-Fi Cover
• Remove Mini Card Wi-Fi card
• Locate & Short Out JP8 for 5 Seconds
• Remove short and turn on
• NO BOOT
• Press & Hold Power button to turn off
• Turn on again & password is cleared

Satellite L10, L20, L30 & Satellite Pro L20

With notebook turned off;

• Open Wi-Fi Cover
• Locate & Short Out JP1 for 15 Seconds
(Satellite L10)
• Satellite L20/Pro L20 short out G1

Satellite M100 & Tecra A6

With notebook turned off;

• Open Memory Cover
• Remove Memory
• Remove Black plastic insulation
• Locate & Short CMOS CLR1 for 15 Seconds

NOTE:
All the following models use the same password removal process.

Satellite: 17xx Series, 1000, 1110,1130, 1200, 1900, 2430, 3000 P20,P30, P33, A30, A70, A80, M40X, M50,M60, M70, M100

Tecra A3/S2, A5, A6

• The jumper is always located under or near the memory modules
• Depending on the model the jumper could be labelled J1, J2, J5, J7, J9 or CMOS CLR1 (M100 & A6)

Satellite A100 & Tecra A7

1. Remove Strip cover
2. Remove 2 x K/B screws
3. Move K/B Unit up but don’t disconnect
4. Release & Remove Mini Card Wi-Fi Card
5. Locate & short C88 Pin 1 & 2 together
6. Power on Machine while still shorting Pin 1 & 2
7. As soon as the TOSHIBA logo appears, remove short
8. If machine boots, Password has been removed

Satellite A100 (PSAA2A-02C01N)

1. Remove Memory Cover from base of machine
2. Release & remove right side Memory Module
3. Lift black plastic insulation
4. Locate & short PAD500 Pin 1 & 2 together
5. Power on machine while still shorting Pin 1 & 2
6. As soon as the TOSHIBA logo appears, remove short
7. If machine boots, password has been removed

TECRA A4 & Satellite M40

1. Open modem & Wi-Fi card cover
2. Remove mini PCI Wi-Fi card
3. Lift up black plastic
4. Locate & short C738 Pin 1 & 2 together
5. Power on machine while still shorting Pin 1 & 2
6. As soon as the TOSHIBA logo appears, remove short
7. If machine boots, password has been removed

TECRA S1

1. Open palm rest cover
2. Remove mini PCI Wi-Fi card
3. Lift up black plastic
4. Locate & short C5071 Pin 1 & 2 together
5. Power on machine while still shorting Pin 1 & 2
6. As soon as the TOSHIBA logo appears, remove short
7. If machine boots, password has been removed

TE 2300

1. Remove 2 x B12 screws from bottom of system
2. Remove strip cover
3. Remove keyboard screws 1 x B2.5 & 1 x SF4
4. Remove 1 x 4mm screw & Wi-Fi cover
5. Remove mini PCI Wi-Fi card if fitted
6. Locate & short points as shown in picture below
7. Power on machine while still shorting points
8. Short for 5 seconds
9. Nothing will appear on the screen
10. Turn system off holding down power button
11. Password is now removed








Satellite A60
1. Open Wi-Fi slot cover
2. Lift up black plastic
3. Locate & short C561 Pin 1 & 2 together
4. Power on machine while still shorting Pin 1 & 2
5. As soon as the TOSHIBA logo appears, remove short
7. If machine boots, password has been removed

If you need your Toshiba bios password removed and your model is not listed above then chances are it's a procedure that can only be done at an authorised repair centre.


 

 

Introduction to BIOS Passwords

The best method to reset a BIOS password depends on what BIOS the computer has. Common BIOS's include AMI, Award, IBM and Phoenix. Numerous other BIOS's do exist, but these are the most common.

Some BIOS's allow you to require a password be entered before the system will boot. Some BIOS's allow you to require a password to be entered before the BIOS setup may be accessed.

The general categories of solutions to reset a BIOS password are:

• Using a Backdoor BIOS Password
• Resetting the BIOS Password using Software
• Resetting the BIOS Password using Hardware
• Vendor Specific Solutions for resetting the BIOS Password

Using a Backdoor BIOS Password

Some BIOS manufacturers implement a backdoor password. The backdoor password is a BIOS password that works, no matter what the user sets the BIOS password to. These passwords are typically used for testing and maintenance. Manufacturers typically change the backdoor BIOS passwords from time to time.

AMI Backdoor BIOS Passwords

Reported AMI backdoor BIOS passwords include A.M.I., AAAMMMIII, AMI?SW , AMI_SW, BIOS, CONDO, HEWITT RAND, LKWPETER, MI, and PASSWORD.

Award Backdoor BIOS Passwords

One reported Award backdoor BIOS password is eight spaces. Other reported Award backdoor BIOS passwords include 01322222, 589589, 589721, 595595, 598598 , ALFAROME, ALLY, ALLy, aLLY, aLLy, aPAf, award, AWARD PW, AWARD SW, AWARD?SW, AWARD_PW, AWARD_SW, AWKWARD, awkward, BIOSTAR, CONCAT, CONDO, Condo, condo, d8on, djonet, HLT, J256, J262, j262, j322, j332, J64, KDD, LKWPETER, Lkwpeter, PINT, pint, SER, SKY_FOX, SYXZ, syxz, TTPTHA, ZAAAADA, ZAAADA, ZBAAACA, and ZJAAADC.

Phoenix Backdoor BIOS Passwords

Reported Phoenix BIOS backdoor passwords include BIOS, CMOS, phoenix, and PHOENIX.

Backdoor BIOS Passwords from Other Manufacturers

Reported BIOS backdoor passwords for other manufacturers include:

Manufacturer	BIOS Password
VOBIS & IBM	merlin
Dell	Dell
Biostar	Biostar
Compaq	Compaq
Enox	xo11nE
Epox	central
Freetech	Posterie
IWill	iwill
Jetway	spooml
Packard Bell	bell9
QDI	QDI
Siemens	SKY_FOX
SOYO	SY_MB
TMC	BIGO
Toshiba	Toshiba

Remember that what you see listed may not be the actual backdoor BIOS password, this BIOS password may simply have the same checksum as the real backdoor BIOS password. For Award BIOS, this checksum is stored at F000:EC60.

Resetting the BIOS Password using Software

Every system must store the BIOS password information somewhere. If you are able to access the machine after it has been booted successfully, you may be able to view the BIOS password. You must know the memory address where the BIOS password is stored, and the format in which the BIOS password is stored. Or, you must have a program that knows these things.

You can write your own program to read the BIOS password from the CMOS memory on a PC by writing the address of the byte of CMOS memory that you wish to read in port 0x370, and then reading the contents of port 0x371.

http://www.11a.nu/software/bios-pc-bios-security-and-maintanance-toolkit/ - !BIOS will recover the BIOS password for most common BIOS versions, including IBM, American Megatrends Inc, Award and Phoenix.

http://www.cgseurity.org/wiki/CmosPwd - CmosPwd will recover the BIOS password for the following BIOS versions:

• ACER/IBM BIOS
• AMI BIOS
• AMI WinBIOS 2.5
• Award 4.5x/4.6x/6.0
• Compaq (1992)
• Compaq (New version)
• IBM (PS/2, Activa, Thinkpad)
• Packard Bell
• Phoenix 1.00.09.AC0 (1994), a486 1.03, 1.04, 1.10 A03, 4.05 rev 1.02.943, 4.06 rev 1.13.1107
• Phoenix 4 release 6 (User)
• Gateway Solo - Phoenix 4.0 release 6
• Toshiba
• Zenith AMI

Resetting the BIOS Password using Hardware

If you cannot access the machine after if has been powered up, it is still possible to get past the BIOS password. The BIOS password is stored in CMOS memory that is maintained while the PC is powered off by a small battery, which is attached to the motherboard. If you remove this battery, all CMOS information (including the BIOS password) will be lost. You will need to re-enter the correct CMOS setup information to use the machine. The machines owner or user will most likely be alarmed when it is discovered that the BIOS password has been deleted.

On some motherboards, the battery is soldered to the motherboard, making it difficult to remove. If this is the case, you have another alternative. Somewhere on the motherboard you should find a jumper that will clear the BIOS password. If you have the motherboard documentation, you will know where that jumper is. If not, the jumper may be labeled on the motherboard. If you are not fortunate enough for either of these to be the case, you may be able to guess which jumper is the correct jumper. This jumper is usually standing alone near the battery. If you cannot locate this jumper, you might short both of the points where the battery connects to the motherboard.

If all else fails, you may have to clear the BIOS password by resetting the RTC (Real Time Clock) IC (Integrated Circuit) on your motherboard.

Many RTC's require an external battery. If your RTC is one of this type, you can clear the BIOS password just by unsocketing the RTC and reseating it.

RTC's which require external batteries include:

• http://www.embeddedsys.com/subpages/resources/images/documents/DS12885_datasheet.pdf - Dallas Semiconductor DS12885S
• http://www-s.ti.com/sc/ds/bq3285.pdf - TI benchmarq bq3258S
• Motorola MC146818AP
• Hitachi HD146818AP
• Samsung KS82C6818A

Most RTC chips with integrated batteries can be reset to clear the BIOS password by shorting two pins together for a few seconds.

You will see more than one option for some chips due to testing by various people in the field. Remember to remove power from the system before shorting these pins.

RTC Chip	Pins
Dallas DS1287A http://focus.ti.com/lit/ds/symlink/bq3287a.pdf - TI benchmarq bp3287AMT	3 (N.C.) and 21 (NC/RCL)
Chips & Technologies P82C206	12 (GND) and 32 (5V)-or-74 (GND) and 75 (5V)
OPTi F82C206	3 and 26
http://pdfserv.maxim-ic.com/en/ds/DS12887A.pdf - Dallas Semiconductor DS12887A	3 (N.C.) and 21 (RCLR)

You should be able to discover how to reset the BIOS password stored in most RTC (Real Time Clock) chips by reading the manufacturers data sheet for that RTC. Some RTC's, like the Dallas DS1287 and TI benchmarq bq3287mt cannot be cleared. The solution to resetting the BIOS password on systems with those RTC's is to purchase a replacement RTC chip. How inconvenient!

Vendor Specific Solutions for Resetting the BIOS Password

Resetting a Dell BIOS Password

For information on how to recover a Dell BIOS password, please refer to http://www.topbits.com/reset-dell-bios-password.html - How do I reset Dell BIOS password?

Resetting a Toshiba BIOS Password

http://www.cgsecurity.org/keydisk.exe - KeyDisk will reset the BIOS password on Toshiba laptops.

Older Toshiba laptops can be convinced to boot without their power-on BIOS password by attaching a dongle to the parallel port which crosses a number of the pins. The pin out is:

Pins
1-5-10
2-11
3-17
4-12
6-16
7-13
8-14
9-15

Some Toshiba's can be convinced to bypass the startup BIOS password if you hold down the <LEFT-SHIFT> key while booting the system.

Resetting an IBM ThinkPad BIOS Password

For information on how to recover an IBM Thinkpad BIOS password, please refer to http://www.topbits.com/reset-ibm-thinkpad-bios-password.html - How do I reset an IBM ThinkPad BIOS password?

Resetting an IBM Aptiva BIOS Password

Some IBM Aptiva's can be convinced to bypass the startup BIOS password if you press both mouse buttons repeatedly while booting the system.

Resetting an Acer BIOS Password

For information on how to recover an Acer BIOS password, please refer to