CMOS密码破解全攻略
“CMOS密码”就是通常所说的“开机密码”，主要是为了防止别人使用自已的计算机，设置的一个屏障，（本文只作忘记时使用，不得用于恶意目的）
“CMOS密码”破解方法很多，主要有以下几种：
一、更改硬件配置
当丢失CMOS密码时，你可以先试着改动机器的硬件后再重新启动，因为启动时如果系统发现新的硬件配置与原来的硬件配置不相同，可能会充许你直接进入CMOS重新设置而不需要密码。改动硬件配置的方法很简单：比如拔去一根内存条或安装一块不同型号的CPU（当然要主板支持）、更换一块硬盘等。
二、建立自已的密码破解文件
A. 当系统自检完毕，准备引导Windows时按下F8键，选择“Safe mode command prompt only”（安全命令模式）后在DOS提示符下输入COPY CON YK.COM，回车后在编辑环境里输入：
ALT+179、ALT+55、ALT++136、ALT+216、ALT+230、ALT+112、ALT+176、ALT+32、ALT+230、ALT+113、ALT+254、ALT+195、ALT+128、ALT+251、ALT+64、ALT+117、ALT+241、ALT+195后按F6保存。注意，输入以上数据时是先按下ALT键，接着按下数字键盘里（按键盘上面那一排数字键是没有作用的）的数字键，输完一段数字后再松开ALT键，然后再按下ALT键输入下一段数字…… 输入过程中，每松开一次ALT键屏幕上都会出现一个乱字符，我们不必管它。
保存退出后，我们直接运行YK.COM这个文件，屏幕上应该没有任何提示信息，然后重新启动计算机即可清除CMOS里的密码，当然，CMOS里的其它设置也会同时被清除，这就需要我们重新设置了。
B.启动时选择安全命令模式后，输下COPY CON YK.COM，然后在编辑环境里输入：
ALT+176、ALT+17、ALT+230、p、ALT+176、ALT+20、ALT+230、q、ALT+205、空格 后按F6保存后运行这个文件，重新启动计算机即可。
三、DEBUG法
在DOS提示符下，运行DEBUG后输入：
—o70 18
—o71 18
—q
或
—o70 21
—o71 21
—q
退出到DOS提示符后重新启动计算机便将CMOS密码完全清除了。请注意，70和71是CMOS的两个端口，我们可以向它们随意写入一些错误数据（如20、16、17等），就会破坏CMOS里的所有设置，有时间的朋友不妨多用几个数据试试。
四、万能密码
如果有人将COMS里的安全选项设为系统，那么当你每次开机时都必须输入正确密码，否则别说进入Windows，就连DOS也进入不了，这样我们就只能靠万能密码来解决问题了。
AMI 的BIOS： AMI ；Sysg
AWARD的BIOS： award ； Syxz； h996； wantgirl；eBBB ； dirrid 。
以上万能密码在386、486、奔腾主板上破解CMOS口令几乎百发百中，而对PII级或以上的主板就不那么灵光了，能破解PII以上的新主板的万能密码很少，几乎还没有听说过，不过小弟找到一个口令——abaubjao，已成功破解了承启6ATA4（PIII）、伟格MVP4（K6—2）、奔驰160A、160A+（PIII）等十余块主板上的CMOS口令，不敢独享，在此献给大家。
五、使用工具软件
在网上你会发现能破解CMOS密码的软件比比皆是，俺认为最好用的软件要数Biospwds，它是一个德国人做的小软件，使用时只需轻轻一点“Get passwords”（获得密码）按钮，你的CMOS密码便尽显于屏幕之上了，此外你还可以看到BIOS版本、时间等信息。有条件者可在
www.geocities.com/mbockelkamp处下载。
转贴者注：其实还有很多好用的Cmos解密的软件。当然以Dos软件为主了。
推荐：1。cmos.com 只有630字节！放在启动盘里最合适不过了。用法：
cmos /c /s /r (/c为清除密码，/s 为存储cmos信息到文件 /r为从文件里恢复cmos信息。）
2。cmos.exe 54904字节。记不清了。在win2000下没法试用。所以，抱歉。
3。cmospwd.exe 13035字节。 最好用的最强大的破解cmos的工具。前面的cmos.com只能算是绕过cmos密码，而这个能算出与你原来设置的cmos密码相当的密码来。（由于cmos密码的特殊性，所算出的不一定与你原来设置的一样，但同样可以用，具体的介绍请自己去找相关资料看看就知道为什么）
六、放电
如果你运气太差，用以上方法都破解不了CMOS口令，那就只有这一条路可走了。翻开主板说明书，找到清除CMOS设置的那个跳线，按说明书所述改变其短接的方法，清空CMOS。什么，你的主板太老，没有此跳线？ 那就将主板上那块钮扣电池取下来吧。 放电后怎么开不了机？ 将电池安回去嘛，笨！
Last edited by ko20010214 on 2008-10-22 at 00:50 ]
Full Guide to CMOS Password Cracking
"CMOS password" is what is commonly referred to as the "boot password", mainly to prevent others from using your own computer, setting up a barrier. (This article is only for when you forget it and should not be used for malicious purposes.)
There are many ways to crack the "CMOS password", mainly the following types:
1. Change Hardware Configuration
When you lose the CMOS password, you can first try to change the hardware configuration of the machine and then restart. Because if the system finds that the new hardware configuration is different from the original hardware configuration during startup, it may allow you to directly enter the CMOS for reconfiguration without the password. The method to change the hardware configuration is very simple: for example, remove a memory module or install a different model of CPU (of course, the motherboard needs to support it), replace a hard disk, etc.
2. Create Your Own Password Cracking File
A. When the system self-check is completed and you are about to boot Windows, press the F8 key, select "Safe mode command prompt only" (safe command mode), and then enter COPY CON YK.COM at the DOS prompt. After pressing Enter, enter the following in the editing environment:
ALT+179, ALT+55, ALT++136, ALT+216, ALT+230, ALT+112, ALT+176, ALT+32, ALT+230, ALT+113, ALT+254, ALT+195, ALT+128, ALT+251, ALT+64, ALT+117, ALT+241, ALT+195, and then press F6 to save. Note that when entering the above data, first press the ALT key, then press the number keys on the numeric keypad (pressing the number keys on the top row of the keyboard is useless). After entering a segment of numbers, release the ALT key, then press the ALT key again to enter the next segment of numbers... During the input process, a random character will appear on the screen every time you release the ALT key, and we don't need to care about it.
After saving and exiting, we directly run the YK.COM file. There should be no prompt information on the screen, and then restart the computer to clear the password in the CMOS. Of course, other settings in the CMOS will also be cleared at the same time, so we need to reconfigure them.
B. After selecting the safe command mode during startup, enter COPY CON YK.COM, and then enter the following in the editing environment:
ALT+176, ALT+17, ALT+230, p, ALT+176, ALT+20, ALT+230, q, ALT+205, space, and then press F6 to save. After running this file, restart the computer.
3. DEBUG Method
At the DOS prompt, run DEBUG and then enter:
—o70 18
—o71 18
—q
or
—o70 21
—o71 21
—q
After exiting to the DOS prompt, restart the computer to completely clear the CMOS password. Please note that 70 and 71 are two ports of the CMOS. We can randomly write some incorrect data (such as 20, 16, 17, etc.) to them, which will damage all settings in the CMOS. Friends with time may try more data.
4. Universal Password
If someone sets the security option in the COMS as the system, then every time you boot, you must enter the correct password. Otherwise, not only can you not enter Windows, but you can't even enter DOS. Then we can only rely on the universal password to solve the problem.
AMI BIOS: AMI; Sysg
AWARD BIOS: award; Syxz; h996; wantgirl; eBBB; dirrid.
The above universal passwords are almost always successful in cracking the CMOS password on 386, 486, and Pentium motherboards, but they are not so effective for PII-level or above motherboards. There are very few universal passwords that can crack new motherboards above PII, and almost no one has heard of them. However, the author found a password - abaubjao, which has successfully cracked the CMOS passwords on more than a dozen motherboards such as Chenqi 6ATA4 (PIII), Weige MVP4 (K6—2), Benz 160A, 160A+ (PIII), etc. and is not willing to keep it to himself, so he presents it to everyone here.
5. Use Tool Software
On the Internet, you will find that there are many software that can crack the CMOS password. The author thinks the best software is Biospwds, which is a small software made by a German. When using it, just gently click the "Get passwords" (obtain password) button, and your CMOS password will be displayed on the screen. In addition, you can also see the BIOS version, time, etc. Those with conditions can download it at
www.geocities.com/mbockelkamp.
Note from the reprint: In fact, there are many good Cmos decryption software. Of course, most are Dos software.
Recommended: 1. cmos.com is only 630 bytes! It is most suitable to put it on the boot disk. Usage:
cmos /c /s /r (/c is to clear the password, /s is to save the cmos information to a file, /r is to restore the cmos information from the file.)
2. cmos.exe is 54904 bytes. I can't remember clearly. It can't be tested under win2000. So, sorry.
3. cmospwd.exe is 13035 bytes. The most useful and powerful tool to crack cmos. The previous cmos.com can only be regarded as bypassing the cmos password, but this one can calculate the password equivalent to your original set cmos password. (Due to the particularity of the cmos password, the calculated one may not be the same as your original set one, but it can be used the same. For specific introduction, please find relevant information by yourself to know why.)
6. Discharge
If you are too unlucky and can't crack the CMOS password with the above methods, then there is only this way. Open the motherboard manual, find the jumper to clear the CMOS settings, and change the method of its short circuit according to the manual to clear the CMOS. What, your motherboard is too old and there is no such jumper? Then take out the button battery on the motherboard. Why can't you boot after discharging? Put the battery back, silly!
Last edited by ko20010214 on 2008-10-22 at 00:50 ]
