LENOVO BIOS AUTO-PATCHER for Supervisor Password Removal

[wheeljack26]

T480
type - 20L6-S0GE00
S/N - PF-19CA8L
i7-8650U with mx150
bios locked, i took 4 bios dumps (bios1.bin) (confirmed via certutil hashfile MD5, they were all same) via unsoldering the W25Q128JVSQ and using the CH341B programmer, then patched it (bios1_PATCHED.bin), wrote to to IC, read the IC and confirmed with hash that the file is correctly written as patch and it was, soldered the IC and went to boot the laptop and it charges both the batteries but no display, no light on power button, the speakers aren't there because they were missing when i got this from the ewaste bin, i still connected an external speaker via 3.5mm jack but no idea if it will still be picked up while in bios, the power button light flashes 3 times when i plug it in which as per lenovo is just it signaling that it was plugged in? then i flashed the original bios and still same issue, no display (before any of the steps it was working fine), then read this sub an saw the ME Region thing(mepatch.bin), did that, same issue, Any help would be massively appreciated, I'll attach all 3 files for review, please let me know and after every flash i read the IC and confirmed that the flashed file and the read file after flash had the same hash.

[VirVir]

Hello Guys,
I also have a problem with my P53 and it's as follows:
Unsoldered the BIOS Chip, read+read+read...4 times, checked with certutil CMD, everything was fine. Used the autopacher on the bin file, write it on the Chip and again 4 times read and checked with certutil, again everything was fine. Resoldered the Chip on the MB, 15-20 minutes to put the laptop back together 😭 I hate this models... Plugged in and ... nothing. The power button light comes on, stays like that for 2-3 seconds, shuts down and repeat. After the second shutdown, it comes back on but this time blinking and accompanied by a clicky sound. I've tried counting (thinking it's a code for a error of some sort) but I've stopped counting after 60 🤣 It just keep going, as long as the AC or battery are connected. Nothing on the display, not even a sign. Because it's so damn hard to disassemble and put back together this laptop, I'll do it again if someone can look at the files and tell me if I did something wrong. Or maybe can someone much more better than me at this, unlock the original file. Thank you 🙏🏻

P53 (Type 20QN, 20QQ) Laptop (ThinkPad) - Type 20QQ
Serial Number
PF2AL6P7

Machine Type Model
20QQS2Q800

[IROC2022]

Hello can someone help me. I have a cleaned bin and the t580 still only beeps with black screen. The original file works and give the password prompt and check sum message.

[SMDFlea]

Hello can someone help me. I have a cleaned bin and the t580 still only beeps with black screen. The original file works and give the password prompt and check sum message.

Is this the same one that you posted earlier in this thread S/N R9-OVDHP1

[IROC2022]

Yes

[tchica]

I need lenovo thinkpad a475 motherboard schematic please

[danito]

I need lenovo thinkpad a475 motherboard schematic please

here is for BIOS Requests ONLY for schematic here https://www.badcaps.net/forum/troubl...-requests-only

[IROC2022]

Is this the same one that you posted earlier in this thread S/N R9-OVDHP1

Hello are you able to check

[Xargon1975]

Hello i´have a T480
Type: 20L6-SDR213
Serial No: PF-14H8HB
The BIOS is locked. I performed two BIOS dumps, and both were confirmed.
The chip is W25Q128JVSQ, and I used the CH341A programmer. I then patched it, wrote to the IC, read it, and confirmed the file was written correctly, which it was.
I proceeded to boot the laptop, but there is no screen. The buttons light up and a melody plays through the speakers; then it turns off.
I went back to the original BIOS and it locked again, but the screen boots correctly and asks for F1.
What could be the problem?

[Xargon1975]

Re: LENOVO BIOS AUTO-PATCHER for Supervisor Password Removal

Man thank u for ur tool!!!
it saved my locked lenovo x380 i bought it with locked bios and then tried to tamper with the setting with a tool used in windows(i wanted to install ubuntu alongside windows). then i got locked out of my laptop for good saying too many attempts for the supervisor password i could not even boot.
then bought the CH341A programmer
removed every battery and power source
did multiple backups of the winbond 25q128 chip
did an erase and then flashed the patched one and did as advised
then turned off and ERASED the chip again(at first i did not reset which resulted in black screen and melody beep sound)
then flashed the original backed up bios again and did reset as advised
and voila!!! thanx again

i bought the laptop for a reduced price due to the locked bios! it turned out a good deal after all

Can you explain what reset you did? I'm getting the melody and a black screen.

[Xargon1975]

T480
type - 20L6-S0GE00
S/N - PF-19CA8L
i7-8650U with mx150
bios locked, i took 4 bios dumps (bios1.bin) (confirmed via certutil hashfile MD5, they were all same) via unsoldering the W25Q128JVSQ and using the CH341B programmer, then patched it (bios1_PATCHED.bin), wrote to to IC, read the IC and confirmed with hash that the file is correctly written as patch and it was, soldered the IC and went to boot the laptop and it charges both the batteries but no display, no light on power button, the speakers aren't there because they were missing when i got this from the ewaste bin, i still connected an external speaker via 3.5mm jack but no idea if it will still be picked up while in bios, the power button light flashes 3 times when i plug it in which as per lenovo is just it signaling that it was plugged in? then i flashed the original bios and still same issue, no display (before any of the steps it was working fine), then read this sub an saw the ME Region thing(mepatch.bin), did that, same issue, Any help would be massively appreciated, I'll attach all 3 files for review, please let me know and after every flash i read the IC and confirmed that the flashed file and the read file after flash had the same hash.

Were you able to fix it? I have the same problem

[MrPope]

Re: LENOVO BIOS AUTO-PATCHER for Supervisor Password Removal
Thanks for this, workef on a x270 with a ch341a despite a dodgy clip

[yuyuyak]

In the interest of helping others I'd like to share my successful experience removing the SVP from bios of a Lenovo P51.
I used the clip throughout and clearly it is just as unreliable as everyone on the forum says. I recommend to not hurry through that 1st bios dump, if you mess it up you'll be sorry. My bios chip is the MX25L12873F and I used the EZP2019+ programmer. That chip is not supported on this programmer, but it does have the ability to add it to the definitions. There's a weird menu at the top of the programmer program, click on "Device (y)", it will take you to the chip editor and you can add it:

Elsewhere on this forum there is a post by someone who was stumped by that a few years ago, perhaps the programmer software was updated. This programmer works great, my only gripe is that it is windows only. But it is fast, slightly over 5 minutes to erase, write, verify. When you first clip on the chip you can hit the "test" button and it will try to determine the chip name. More often than not I would get a 24 series EEPROM, totally wrong, sometimes a 93 series. In the top ID window. You want to see "spi_flash". With this series of MX25L128.... chips, much of the data is the same for all of them, so when you do FINALLY get a good clip-on it will identify it as the 1st chip it has a definition for in that series, I think it was MX25L1282505D. That's good, you've probably got a good contact, just use the drop down menu to select the right chip. Read it, save it, I took 4 reads to be sure. Do the checksum and verify they are all good. Then do it all again, physically reconnecting the clip each time. Then again. If all these checksums match you are looking good.
Then I pulled one up in hexedit and took my time scanning through, making sure all looks good. Of course, it's mostly goobly-gook, but do your best to feel good about it, one thing, you should find the name of the bios near the end (in ascii), mine was N1UET91W, the 1.65 version which I foolishly updated to immediately on receiving the machine.
I say that because I spent many hours trying to patch that bios, but upon bootup, I got only a black screen, never those wonderful words stepping me through nuking the password.
It finally occurred to me that for whatever reason, the latest bios from Lenovo either deliberately or inadvertently did not work with the patch, although the patch program seemed to think all went fine, telling me good luck. Whilst researching all this (in my off-time) I came across a couple of bios postings for the P51. One is corrupted (says the patch program) but the other patched just fine. It came from a Winbond chip, but data is data I thought. It was version 1.46 or 1.49, I forget. So I tried it, voila! As you can imagine I was quite thrilled as those beautiful words popped up on screen. Then I burnt the 1.65 bios back on the chip and everything is great! Working! No SVP, as advertised.
Many thanks to knucklegrumble and to those upon whose shoulders he stands.
So if you have the black screen syndrome, take a look at what version you are trying to patch. For the P51 at least, you can find the official versions and in-house ID numbers here. Remember, this thread was started in 2020
And, good luck.

[wheeljack26]

Were you able to fix it? I have the same problem

nope, i think the motherboard might be shorted, just gonna learn schematics and prolly have a look at the board, got a multimeter for the thing too

[dino44]

Hi guys, I have the following problem: I can read my EC 25Q256JVEQ, and it's completely empty. When I try to flash other files, it takes a very long time and doesn't work. Deleting the chip is the same problem. I tried using AS Programmer, but NEO Programmer doesn't recognize the chip at all.

My notebook:
Lenovo T14 gen1
20S1-S1UJJ00
Serial number: PF-2ZQCB2
Board: NM-C931 rev. 1

Does anyone have any tips for me on how to revive it?

[Fabric4398]

Tried the patched file generated by this tool but it didn't seem to work for me on my P50

The file "MX25L12835F@SOP8_patched.zip" from https://www.badcaps.net/forum/troubl...16#post1736816 works for me on my P50 with BIOS chip MX25L12873F

Thank you.

[kindoo sergio]

Hello!

Im trying to remove supervisor password on my T480s laptop, after connecting de ch341a to the BIOS chip and read it with asprogrammer and CH341A Programmer, dumping the bios and trying to patch it with lenovo_autopatcher (obtained on this forum) i have the following error:


My chip is a W25Q80DV.



The bios is uploaded in rar format because I couldn't upload the .bios file, if you need any more information, let me know.




Thank you very much for your help!!!!

[peste]

post merged..next time look for a thread with the name and model, motherboard model of the laptop, and post there, if you can't find it, then make a new thread..
Don't post pictures unless asked..

read the forum rules..
https://www.badcaps.net/forum/troubl...before-posting

[peste]

Hello!

Im trying to remove supervisor password on my T480s laptop, after connecting de ch341a to the BIOS chip and read it with asprogrammer and CH341A Programmer, dumping the bios and trying to patch it with lenovo_autopatcher (obtained on this forum) i have the following error:


My chip is a W25Q80DV.



The bios is uploaded in rar format because I couldn't upload the .bios file, if you need any more information, let me know.




Thank you very much for your help!!!!

post S/N, full name and model, motherboard model, TYPE,etc.

[kordex35]

You are reading the wrong BIOS chip

[247HACKER]

Total NOOB here , looking for advice on how to get rid of a supervisor password , Lenovo Thinkpad X13 20WL - S52F00 , 2022/01 ITS A GEN2 ,

could someone tell me all the tools i need to dump the original bios from the laptop , and then i use the patcher to patch the bin file?
can someone be kind enought to write a simple guide ?

many thanks