Difference between revisions of "Forced revert back to older firmware"
| Line 87: | Line 87: | ||
-rwxr-xr-x 1 root 0 44 Jan 1 1980 Version.0 | -rwxr-xr-x 1 root 0 44 Jan 1 1980 Version.0 | ||
| − | First case we call it now '''1''' and second '''2''' and you proceed '''only one''' of them. | + | First case we call it now '''1''' and second '''2''' and you proceed '''only one''' of them. So you will write to alternative file opposite to allready existed. |
'''---1---''' | '''---1---''' | ||
Revision as of 09:51, 13 June 2010
This is procedure for reverting back to an older firmware. It can help you if you upgraded TV to latest firmware accidentally or buy TV with allready latest firmware, however it only works for TV which support Content Library.
Contents
Enabling Telnet
With the latest firmware, Samsung disabled both Ex-Link console connection and external applications probably to stopping us. So you cannot create telnet connection to TV because you cannot use Telnet Enabler application. If you copied Telnet Application to TV's flash memory before you are lucky. But if you didn't please don't cry, here is the solution.
Trojan Horse
Historically: Trojan is a giant horse that has hidden soldiers in it and it was used first at Troya A.D.2500-3000, which is in Ãanakkale, Turkey now. Soldiers leave a huge wooden horse behind them as a gift and fade away... Enemies take that giant horse inside of city walls. But when the night comes, soldiers hidden in the horse get out and open the gates... :)
First you need enable (if not allready) copy/remove feature in Content Library Manager.
- Enter Service Menu ( quickly push [INFO] [MENU] [MUTE] [POWER] on your remote control )
- Change setting (Control -> Sub Option -> Wiselink Write -> On )
- Download SamyGO Telnet Enabler Trojan.
- Unpack and copy telnet-enabler folder to root USB and plug in to TV.
- Enter Content Library Manager -> Select USB -> Select Children category.
- Use Copy function on TV to copy Telnet Enabler as Trojan content to TV internal flash.
- Return back to main manu in Content Library Manager and select again Children but from TV flash contents this time.
- Run Run this Telnet Enabler to enable telnet access (or open the gates :) ).
Forcing to Enable Alternative Firmware if you upgraded to latest firmware (CI and CI+)
After some firmware upgrades, Samsung disable reverting firmware back to older state. Actually we were using as a solution for that, flashing mtd_exe and mtd_appdata partitions via manual flashing procedure over telnet connection, enabled with Telnet Enabler application.
Instead of flashing dump of older firmware over actually used partition which is risky, we can switch to older firmware via this simple hack. This way is safer than other approaches. Code bellow unhides alternative firmware in TV.
Notice: These code lines are as an example for B650-B750 devices, so firmware name contains T-CHL7DEUC, for other TV's you need to use corresponding version string of previously installed firmware and corresponding missing Version file (Version.0 or Version.1)!!!
localhost login: root -sh: id: not found # cd /mtd_rwarea # ls -l Version.* -rwxr-xr-x 1 root 0 44 Jan 1 1980 Version.1 # cat Version.1 SWU_T-CHL7DEUC_003000_I02_EK000DK000_100125 # echo SWU_T-CHL7DEUC_002004_I02_ES000DS000_090816 > Version.0 # ls -l Version.* -rwxr-xr-x 1 root 0 44 Jan 1 00:00 Version.0 -rwxr-xr-x 1 root 0 44 Jan 1 1980 Version.1 # cat Version.* SWU_T-CHL7DEUC_002004_I02_ES000DS000_090816 SWU_T-CHL7DEUC_003000_I02_EK000DK000_100125 #
After this, disabled "Alternative Firmware" selection in standard TV's Support / Software Upgrade Menu becomes enabled and populated again. You can switch to previously flashed firmware and then flash some safe firmware over the latest firmware which has restrictions.
Find EXACT ID of older firmware
You can find your TV's older Version.* file via mounting backup partitions. You can extract EXACT ID of older Firmware at this step too. You needed to change Firmware model if its not T-CHL7DEUC that written bold at bellow.
# mkdir /dtv/test1 # mkdir /dtv/test2 # mount -t auto /dev/tbml8 /dtv/test1 # /bin/busybox egrep -e 'T-CHL7DEUC-[0-9][0-9][0-9][0-9].[0-9]' /dtv/test1/exeDSP SWU_T-CHL7DEUC_003000_I02_EK000DK000_100125 # mount -t auto /dev/tbml10 /dtv/test2 # /bin/busybox egrep -e 'T-CHL7DEUC-[0-9][0-9][0-9][0-9].[0-9]' /dtv/test2/exeDSP SWU_T-CHL7DEUC_002004_I02_ES000DS000_090816
This results show that tbml10 partition holding firmware 2004.
Flash older firmware on new TV (CI only) with latest firmware
- For safety reasons enable ex-link and turn off watchdog in service menu.
- Install python on your computer if not yet installed.
- Download one of below firmwares used by your TV.
- Download SamyGO Firmware Decrypter.
- Unpack firmware to some directory.
- Copy SamyGO Firmware Decrypter to unpacked firmware directory.
- Run shell/cmdline and change directory to unpacked firmware.
- Run Decrypter:
python "SamyGO Firmware Decrypter"
- After it successfully finished you will have two decrypted files in image folder: appdata.img and exe.img.
- Copy that two files into USB drive.
- Plug USB drive into TV.
- Telnet to TV.
Notice: These code lines below are as an example for B650-B750 devices, so firmware name contains T-CHL7DEUC and specific versions IDs!!!
# cd /mtd_rwarea/ # ls -l Version.*
You should have this:
-rwxr-xr-x 1 root 0 44 Jan 1 1980 Version.1
or
-rwxr-xr-x 1 root 0 44 Jan 1 1980 Version.0
First case we call it now 1 and second 2 and you proceed only one of them. So you will write to alternative file opposite to allready existed.
---1---
# echo SWU_T-CHL7DEUC_002004_I02_ES000DS000_090816 > Version.0 # bml.restore /dev/bml0/8 /dtv/usb/sda1/exe.img # bml.restore /dev/bml0/9 /dtv/usb/sda1/appdata.img
Now lets verify it:
# mkdir /dtv/test # mount -t auto /dev/tbml8 /dtv/test
If there are not errors unmount it.
# umount /dtv/test
And test second:
# mount -t auto /dev/tbml9 /dtv/test
If there are not errors unmount it.
# umount /dtv/test
Checks if version file is ok:
# ls -l Version.0 SWU_T-CHL7DEUC_003000_I02_EK000DK000_100125
---2---
# echo SWU_T-CHL7DEUC_002004_I02_ES000DS000_090816 > Version.1 # bml.restore /dev/bml0/10 /dtv/usb/sda1/exe.img # bml.restore /dev/bml0/11 /dtv/usb/sda1/appdata.img
Now lets verify it:
# mkdir /dtv/test # mount -t auto /dev/tbml10 /dtv/test
If there are not errors unmount it.
# umount /dtv/test
And test second:
# mount -t auto /dev/tbml11 /dtv/test
If there are not errors unmount it.
# umount /dtv/test
Checks if version file is ok:
# ls -l Version.1 SWU_T-CHL7DEUC_003000_I02_EK000DK000_100125
After this, disabled "Alternative Firmware" selection in standard TV's Support / Software Upgrade Menu becomes enabled and populated again. You can switch to previously flashed firmware and then flash some safe firmware over the latest firmware which has restrictions.
List Firmware links, versions and their ids
T-CHE7AUSC - 1013.0 SWU_T-CHE7AUSC_001013_I02_ES000DS000_090914 http://downloadcenter.samsung.com/content/FM/200909/20090922135709687/2009_DTV_2G_firmware.exe
T-CHEAUSC - 1012.3 SWU_T-CHEAUSC_001012_I02_ES000DS000_090907 http://downloadcenter.samsung.com/content/FM/200909/20090922132250765/2009_DTV_1G_firmware.exe
T-CHL6CIPDSEUC - 1008.0 SWU_T-CHL6CIPDSEUC_001008_I03_ES000DS000TS000_091112
T-CHL7DAUC - 2001.1 SWU_T-CHL7DAUC_002001_I02_ES000DS000_090921 http://downloadcenter.samsung.com/content/FM/200911/20091127101733312/T-CHL7DAUC.exe
T-CHL7DEUC - 2005.0 SWU_T-CHL7DEUC_002005_I02_ES000DS000_090930 http://downloadcenter.samsung.com/content/FM/200910/20091030222802906/T-CHL7DEUC.exe
T-CHLCIPDEUC - 2006.0 SWU_T-CHLCIPDEUC_002006_I02_ES000DS000_091112
T-CHU7DAUC - 1008.0 SWU_T-CHU7DAUC_001008_I02_ES000DS000_090701 http://downloadcenter.samsung.com/content/FM/200908/20090806125546515/T-CHU7DAUC.exe
T-CHU7DEUC - 3000.G SWU_T-CHU7DEUC_003000_I02_ES000DS000_091111 http://downloadcenter.samsung.com/content/FM/200911/20091124161213125/T-CHU7DEUC.exe
T-CHUCIPDEUC - 3000.0 SWU_T-CHUCIPDEUC_003000_I02_ES000DS000_091112
