A guide showing how to JTAG repair a bricked, broken, bad flash, corrupt firmware image on a Dreambox DM500S receiver. Useful when all else has failed.
JTAG DM500s AiO Repair
5 resistors of 100 Ohms at 2,3.4.5 and 11 pin 25 pin male connector
These labels are 1,2,4,5,6 tags that go on board Dream, you do not revolt it is not correct labels soldering those points, but my own label as indicated in Fig.
On the other side to connect a 15-25 and this wire goes to the board Dream at no. 16 or to ground.
And it goes as indicated in figure, with very short holding soldering iron at these points because it is very easy to know how to come off, and then you will need to solder the SMD resistors, so that it does not keep as short soldering iron.
When it all together, connect the 25 pin male connector on the extension serial cable 25pin / 25 pin m / f to the PC LPT port, you can now include the power to dream. If the Chinese copy of your Dream suffered from the “bomb” then you will Shine on Dream no LEDs.
This procedure requires repeated switching on and off the receiver dream to revive the process started, it is enough to click on the info.bat to verify that the tuner is working and what is the MAC address in the “dead” dream, and it will be written:
As can be seen in it is the correct MAC address DreamMultimedije 00 09 34 01 a4 3f, it is because this process has been revived, and this is just repeated that it could be PrintScreen-at
After pressing any key, the screen disappears, and now you can run write flash, then click on 2alps.bat:
Flash-Gel takes about 2 min. and it shows you the percentage. This file is 2alps.bat
MAC address 00 09 34 01 4d 1f, it can at will change if you rename the file 2alps.bat 2alps.txt and open it with ultra editor, change the MAC address, and only the second half, as it must be among the first DMM 00 09 34 the other half can be any combination of 0-9 and AF. To save and then rename again to 2alps.bat. This change does not have to work unless you have a local area network 2 Dream with the same MAC address, then one needs to address in this way to edit.
After 100% you get this message:
Btw, if you have an older copy of the Chinese Dream with Philips tuner, which you showed info.bat
Then you use 3philips.bat
After this, turn the power off, unplug the JTAG, turn the power back, and your dream is alive everything in it is left as it was before the bomb.
Now is your DM500 DMM’s MAC address and do not have to be afraid any bombs because the U.S.
as the original.
The files :
Mirror :
http://www.herosh.com/download/8895015/JTAG_DM500_AiO_Repair.rar.html
18 comments
bouni says:
September 3, 2011 at 9:02 am (UTC 0 )
salut .
j’ai besoin de jtag pour demo dreambox dm500s
jtag dm500s
DrF says:
September 3, 2011 at 9:11 am (UTC 0 )
Translation : hello. “I need to jtag jtag demo Dreambox DM500 DM500S”
How to guide: JTAG repair all in one guide for Dreambox Dm500S http://starview-6.info/?p=992
How to Jtag repair Dreambox DM500s Satellite receiver (video) http://starview-6.info/?p=260
vijai says:
October 24, 2011 at 9:49 pm (UTC 0 )
need try this
vijai says:
October 24, 2011 at 9:52 pm (UTC 0 )
I need Jtag dreambox 500
DrF says:
October 24, 2011 at 10:22 pm (UTC 0 )
The how to guide and I think we have videos on how to make the JTAG cable up for the DM500s and its clones.
Here is the video guide :
How to Jtag repair Dreambox DM500s Satellite receiver (video)
http://starview-6.info/?p=260
abs says:
November 23, 2011 at 10:10 pm (UTC 0 )
Hi, is there a way to jtag and read the root password or reset it?
Thanks
DrF says:
November 23, 2011 at 10:22 pm (UTC 0 )
If you was Jtagging the DM500S you would end up reflashing putting another image on the box.
If you want to just recover or reset the password see these :
Tool: Windows Utility to remove all Dreambox passwords
http://starview-6.info/?p=1277
How to: Delete password from Dreambox using TuxBox Commander
http://starview-6.info/?p=936
How to guide: Changing a Dreamboxs password using DreamBox Control Center (DCC)
http://starview-6.info/?p=863
How to guide: Reseting Dreambox Root password
http://starview-6.info/?p=861
How to guide: Change the password on the Dreambox receiver.
http://starview-6.info/?p=825
How to reset your Dreambox password using remote control
http://starview-6.info/?p=415
Guide : Remove the password from Dreambox,with tuxbox Commander
http://starview-6.info/?p=292
How to reset DreamBox password
http://starview-6.info/?p=230
Theres a few more around the site, check the Dreambox section might be some of use in there, or clones like the EagleBox im sure we had guides for that too in the same password situation
onepic says:
December 21, 2011 at 8:23 pm (UTC 0 )
Is it possible to write the full image whith JTAG ? I have flashed the bootloader OK (green light on after the procedure) on my DM500S clone but the serial port is unaccesible with dreamup (all verssions) or with Hyperterminal. I replaced also the MAX3243 but the same. Thank you !
DrF says:
December 22, 2011 at 11:25 am (UTC 0 )
Usually its easiest to flash a complete image via JTAG as that puts the Dreambox back into its factory firmware working state. However since you seem to only have the bootloader working you could try this guide to force a flash over network.
How to guide: Flashing a Dreambox DM500S or DM600 in less than 2 mins
http://starview-6.info/?p=1188
basharat ali says:
January 1, 2012 at 7:27 pm (UTC 0 )
i have dream dm 500s and it is not conect by rs232 now my dreambox is dead plz help me.
DrF says:
January 1, 2012 at 9:01 pm (UTC 0 )
You could try as mentioned above your post, or you will be forced to do a full JTAG image recovery I think.
Jahn says:
January 13, 2012 at 7:17 am (UTC 0 )
Is there available SOURCE code of the jtag software for DM500 flashing?
(Not only compiled source)
Thanks
DrF says:
January 13, 2012 at 8:49 am (UTC 0 )
Not that I know off, there are many open source applications that can be used to flash the DM500s I am pretty sure some of them would come with there source, what is it you are looking for? just how they work? or whats in there?
What about taking it apart with something like IDAPro?
Jahn says:
January 13, 2012 at 10:00 am (UTC 0 )
Yes, I would like to modify it.
Do you have any link to such source?
Thanks
DrF says:
January 13, 2012 at 11:57 am (UTC 0 )
That’s quite interesting, I do not have the source to this app. I’m sure some more generic flash/jtag apps would come with there source there’s quite a few of them available for Linux/Windows. Part of the prob I think is people have made the app for a certain box or task and made it easy for everyone to use, hence no instructions, source code or any other help
mmm says:
July 22, 2012 at 8:12 pm (UTC 0 )
whta do i need to jtag my dm500
jiangou2007 says:
July 24, 2012 at 1:45 am (UTC 0 )
Hi,
I tried DOS Jtag but it hangs at certain %..keep trying still same..
now my when power on DM 500C-
most of the times -green led will not turn on
sometimes – both red and green led turn on
sometimes -all 3 netowrk orange leds on
i tried measure TP voltages on board and i do get reading.
need your advise.
thanks.
kenny says:
February 25, 2013 at 4:58 pm (UTC 0 )
How to show the percentage and program title in channel list for Dreambox DM 500s? Thanks.