Hacking TV over Hotel mode (C650 T-VALDEUC-3009.2)

How to get access to Samsung Le40C650 via hotel model.

1. Download network_opt_18.02.2011_1.zip from here "http://www.megaupload.com/?d=MOTXPMMO"
2. Connect your pendrive to you TV and then change your TV source to Aerial source (normal antenna) then go to Menu ->Channel ->Channel list transfer -> Export to USB, now channel list will be exported to your pendrive
3. Now press on you remote [Mute]-[1]-[1]-[9]-[OK] and activate Hotel mode, then choose "Clone Tv to USB" and wait till everything will be copied.
4. Unplug your pendrive , connect it to your computer.
5. You will find on your pendrive file channel_list_LE40C650_1001.scm and folder T-VALDEUC.
6. Copy all files from pendrive somewhere on you computer, and open file channel_list_LE40C650_1001.scm with winzip/7-zip.
7. The content of this file should be like this:
   • CloneInfo
   • FineTuneDigital
   • map-AirA
   • map-AirD
   • map-CableA
   • map-CableD
   • map-ChKey
   • RadioMap

   Now you should create new folder inside this file (channel_list_LE40C650_1001.scm) named "usb_mount" and in the folder new file "1.txt" So now your *.scm file should look like this:

   • usb_mount <- this is the folder that you need to create and in this folder should be file "1.txt"
   • CloneInfo
   • FineTuneDigital
   • map-AirA
   • map-AirD
   • map-CableA
   • map-CableD
   • map-ChKey
   • RadioMap
8. Now extract files from file that you downloaded from step 1 ( "http://www.megaupload.com/?d=MOTXPMMO") and run Win32DiskImager.exe
9. Run win32DiskImager.exe choose you pendrive and select image file "network_opt_18.02.2011_sda2" then click write.
10. Two partitions will be created on your pendrive. The first one will be Fat32 the second Ext3.
11. Copy your modified channel_list_LE40C650_1001.scm to Fat32 and all files from T-VALDEUC/Clone to HotelMode. Now the content of your pendrive should look like this:
    • channel_list_LE40C650_1001.scm <- your modified scm file from step 6
    • first_run.sh
    • HotelMode <- in this folder there should be content of T-VALDEUC/Clone (the folder you exported in HotelMode) below you can find how is he look like
    • modules
    • opt
    • T-MSX5DEUC
    • T-MSX6DEUC
    • T-TDT5DEUC
    • T-VAL6DEUC
    • T-VALDEUC
    • usb_mount_first_run

    Content of folder - HotelMode:

    • Clone.dat
    • FADAT
    • FineTune_Digital
    • LNBSettingsDataBase.dat
    • map-AirA
    • map-AirD
    • map-CableA
    • map-CableD
    • map-ChKey
    • PackageDataBase.dat
    • PLDAT
    • RadioMap
    • SatDataBase.dat
    • SSDAT
    • TransponderDataBase.dat
    • UserTransponderDataBase.dat
12. Now unplug your pendrive and connect it to your TV.
13. Press on you remote [Mute]-[1]-[1]-[9]-[OK] and activate Hotel mode
14. Choose "Clone USB to TV"
15. Now don't do anything just wait couple of minutes, there will be black screen and Tv will restart (approx. 3-4 min)
16. Try to connect to your Tv via Telnet.
17. Run command cp $OPT_DIR/usr/restore/start.sh /mtd_rwarea/start.sh