BIOS password after reset

Discussion in 'Hardware' started by 94dgrif, Nov 14, 2010.

  1. 94dgrif

    94dgrif Corporal

    I'm doing a home project of transforming an old broken laptop to a customized DVR. Along the way I've needed to get to the BIOS, and was faced with a BIOS password. So I turned it off, took everything apart to get down tot he CMOS battery, removed it for 10 seconds (there wasn't a jumper alternative), put it back in and attempted again to get into the BIOS. Again it asked me for the password.

    I then did a little research and discovered that, by default, the Compaq Presario 2100 has a BIOS password. Resetting the CMOS battery simply restored the password tot he factory setting.

    No problem I thought, I'd just find a manual for the laptop on line and enter the password. The manual can be found here. It says a couple of really icky things. Firstly, that HP keeps the password private and you'll not only need the original receipt but also need to deliver your laptop to one of their technicians to have them remove it (!!!!!). Secondly, that upgrading the BIOS will reset the settings but NOT remove the BIOS password.

    I like the fact that HP believes so strongly in security, but this is a laptop that didn't have a hard drive in it long before I ended up with it, and is ancient and probably worth all of $100 on ebay.

    So far I've tried:
    - Resetting CMOS battery
    - Pressing the tiny reset button (which I believe does the same thing)
    - Weighing down the ESC key at the password screen to attempt a buffer overrun
    - Various different passwords like 'Compaq', 'compaq', 'presario' etc

    I've never come across a BIOS password problem this bad before. Does anyone have any other suggestions?
     
  2. mcsmc

    mcsmc MajorGeek

    Hi

    Unfortunately, HP will be your only official source of removing the password. Laptop motherboards store the BIOS password in an EEPROM, and without specialized tools and equipment (not to mention expertise), it can't be reset... removing the battery, etc. will not reset it, period.

    The only suggestion I have besides HP (which I'm sure is out of the question), is to search eBay... there are services offered on there, not sure how legal they are, but usually I believe they charge anywhere from $15-$50 to provide the password. The passwords are unique to the laptop, based on a code generated by a combination of the service tag number, serial number, etc.
     
  3. jlphlp

    jlphlp Master Sergeant

    Hi,

    Just a thought: Removeing the battery for a few seconds will not reset the BIOS Setup. The circuit is designed to retain the data for long enough for you to change the battery without losing the settings. Some even give you time to take the old battery to the store to get the new one. The test is if the CLOCK and DATE go way off. It it does then you really got a reset. Also you must remove all power from the machine including the main battery.

    Good Luck, Jim
     
  4. tgell

    tgell Major Geek Extraordinaire

    Download the UBCD, a linux bootable CD and burn the iso file with your burning program or something like Imgburn. When is boots, it will give an option for BIOS. There is a program called CMOSPWD. See if that will reveal the BIOS password.
     
  5. 94dgrif

    94dgrif Corporal

    Thank you three for your advice - you all had a piece to the puzzle.

    mcsmc - Yup, I've since done a lot of research on EEPROMs and BIOS passwords and everything you said was right.

    jlphlp - I did know about unplugging and removing the battery before removing/unplugging the CMOS battery, but I didn't know that some motherboards are designed to give you extended time before wiping. That's something I'll remember for the future, and very useful.

    tgell - I love UBCD and didn't even think to look there for such a utility. CMOSPWD didn't work for me, and after reading the literature it was as mcsmc said - laptops tend to store the BIOS password in the EEPROM.

    While I still haven't been able to get into the BIOS, I am content knowing that there's nothing else to try. If I really, really need to then I'll have to buy an EEPROM programmer, or pay someone to reprogram it for me. Either way that is the Only way to get around my BIOS password issue.

    I'm calling this issue closed. Thanks again for all your help!
     
  6. tgell

    tgell Major Geek Extraordinaire

    Hello,
    I realize you said this issue was closed but if you decide to get the BIOS password I have provided a link for your reference. If it does not work, he will refund your money.

    http://www.mastermindit.biz/freehpbios.html
     
  7. mcsmc

    mcsmc MajorGeek

    Nice link... I forgot that eBay isn't the only place people offer those services. If only I had the means to figure out those passwords, I could be making easy money like those folks do!
     
  8. 94dgrif

    94dgrif Corporal

    Thanks for the added suggestion.

    I have to admit even though I said it was closed I still had one more idea to try. mcsmc mentioned (as did tgell) that there are people you can pay to provide you a password to access the BIOS. Since not only the manufacturer but also individuals out there have a password generator, then maybe such programs are somewhere out there on the Internet.

    Well, a long story short: yes, they are available on the Internet, and several of them can be found here:
    http://dogber1.blogspot.com/2009/05/table-of-reverse-engineered-bios.html

    I tried the PWs generated for the HP laptop and sure enough it was accepted and I'm finally into the BIOS!

    For others stuck in the same boat, here is the process to bypass your BIOS password:
    1. Verify the normal methods for bypassing the password don't work:
    a) Call your manufacturer and see if you have the correct documentation for them to give you the master PW.
    b) Reset your CMOS by removing/unplugging the CMOS battery for a minute or two and reseating/plugging it back in.
    c) Boot from the Ultimate Boot CD and run CMOSPWD (in the documentation it warns not to use on laptops however, and stresses it can damage IBM Thinkpads).
    d) Do some Internet research for 'default' or 'backdoor' along with "BIOS password" as some BIOSs have generic passwords such as 'phoenix', or 'D3ADB33F'
    2. If none of the above works, boot your PC and tap F2 to enter BIOS (for some PCs you instead tap DEL, and others F1).
    3. You'll be presented with the BIOS password window. Now tap F12
    4. A screen will appear with a message like "System Hash Code" or "Locked", along with a code of 5 to 16 characters made up of numbers, or letters and numbers.
    5. Write this code down.
    6. On any computer, download and run the program from this site which matches your laptop manufacturer and the format of the code:
    http://dogber1.blogspot.com/2009/05/table-of-reverse-engineered-bios.html
    7. You'll be asked to give the System Hash Code, so enter it as instructed.
    8. Write down each of the possible passwords
    9. Again go to the BIOS password window and now enter each password one after another until you successfully enter the BIOS.

    If you enter a password incorrectly 3 times in a row your computer may reboot. If so then simply return to the BIOS password screen and carry on from where you left off. If none of the passwords work then recheck the System Hash Code (step 4) to make sure you wrote it correctly, and in case your BIOS produces a fresh code on each boot up.


    My problem is fixed, so this time the problem is resolved for Real!
     
    Last edited: Nov 15, 2010
  9. 94dgrif

    94dgrif Corporal

    Then: cha-ching!
     
  10. mcsmc

    mcsmc MajorGeek

    Wow... dangerous information that could definitely be misused in the wrong hands! I didn't even know that site existed... good job finding it. Got any bomb-making links while you're at it? If so... don't post 'em here!
     
  11. 94dgrif

    94dgrif Corporal

    Yeah good point. None of the information is illegal, but it definitely could be used by criminals; in that after stealing a laptop they could use this information to process it and sell it.

    I'll let the admins approve it or remove it at their own discretion, with my apologies if it was TMI. And here's the bomb making link you mentioned:
    http://www.drinkswap.com/mvp's-strawberry-bomb.htm
     
  12. tgell

    tgell Major Geek Extraordinaire

    Wow 94dgrif, nice find. Bookmarked that link in case I ever run into this problem.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds