360 T7使用CH341A救砖教程

KOAD

最近将360 T7刷回原厂固件时出错，导致开机无反应，TTL也没有输出，最后使用CH341A重新烧录刷机前备份的完整固件成功救砖。



方法比较简单，首先就是你要有CH341A编程器，某宝10元左右一个，第二就是你要有完整的备份固件,H大的那个也可以，128M的，链接在此：360 T7 路由器 开启telnet及uboot控制台方法 (hanwckf.top)。
软件使用的是NeoProgrammer 2.2.0.10,站内有，链接在此：[汉化] CH341A土豪金编程器软件NeoProgrammer v2.2.0.10 汉化版【10.16更新】（转帖）-无线路由器硬件改造以及故障维修-恩山无线论坛 - Powered by Discuz! (right.com.cn)。
教程如下：
第一步肯定时先把闪存拆下来，我是用热风枪吹下来的，然后再焊接到CH341A上。用热风枪吹闪存的时候记得加助焊膏，对周围元件做好防护，免得把闪存周围元件吹飞，那就麻烦了。
闪存焊接到CH341A上要区分正反。（特别说明，由于W25N01GVZEIG底部有一块金属区域，为了避免短路，强烈建议用高温胶带遮挡CH341A焊盘中间部分,）

第二步，下载解压NeoProgrammer，安装驱动

第三步，驱动装完后，打开NeoProgrammer,插上CH341A，点击主界面的检测，会弹出芯片型号，点击选择IC：W25N01GV。

第四步，不用勾选主界面的“在备用区读取/写入”，点击主界面的第二栏的擦除图标，等待擦除完成后，点击主界面第一栏的文件->打开，选择自己备份的128M完整固件，没有备份的可以用H大的，但刷完后应该需要修改mac地址等信息。
选择完成后主界面应该时这样，在这个界面点击“写入/编程”图标，等待写入完成。

最后，写入完成后将闪存从CH341A上拆下，焊接到主板上，待主板冷却后，插电开机，看下是否修复。

总的来说，360 T7使用的是spi-nand闪存，on-die ECC,可以使用CH341A救砖，相对容易些。

航校门口二楼修

谢谢分享，教程不错

刘加仕

谢谢分享，教程不错

panchen

C:\>snander -v -w jike.bin

SNANDer - Spi Nor/nAND programmER v.1.5.1 by McMCC <mcmcc@mail.ru>

Found programmer device: WinChipHead (WCH) - CH341A
Detaching kernel drivers is not supported. Further accesses may fail.
Device revision is 3.0.4
spi_nand_probe: mfr_id = 0xc8, dev_id = 0x40
SPI NAND Flash Not Detected!
spi device id: c8 40 17 c8 40 (4017c840)
Detected SPI NOR Flash: GD25Q64CSIG, Flash Size: 8 MB
WRITE:
Write addr = 0x0000000000000000, len = 0x0000000000400004
.................................................................
Status: OK
VERIFY:
Read addr = 0x0000000000000000, len = 0x0000000000400004
................................................................
Status: BAD
在板上写入不了，是否就要拆下来？

KOAD

panchen 发表于 2023-3-28 19:29
C:\>snander -v -w jike.bin

SNANDer - Spi Nor/nAND programmER v.1.5.1 by McMCC

你这个好像写入成功了，但是没通过校验。

henrek

居然用的不是那种几十条腿的nand

panchen

KOAD 发表于 2023-3-29 00:03
你这个好像写入成功了，但是没通过校验。

读了一下还是原来内容。

倒影年华

panchen 发表于 2023-3-29 08:41
读了一下还是原来内容。

芯片型号和备份的固件的原芯片不一样

sdjames64157

大哥牛逼

钧宇

T7怎么修改mac地址

小格格

不拆能不能救砖

yh0

谢谢

那年夏天的微风

你好，问下我的是砖了吗
F0: 102B 0000

FA: 1040 0000

FA: 1040 0000 [0200]

F9: 0000 0000

V0: 0000 0000 [0001]

00: 0000 0000

BP: 2400 0041 [0000]

G0: 1190 0000

EC: 0000 0000 [1000]

T0: 0000 024B [010F]

Jump to BL


NOTICE:  BL2: v2.6(release):12dffbfc4a-dirty
NOTICE:  BL2: Built : 05:20:26, Jul 15 2022
NOTICE:  WDT: disabled
NOTICE:  EMI: Using DDR3 settings

dump toprgu registers data:
1001c000 | 00000000 0000ffe0 00000000 00000000
1001c010 | 00000fff 00000000 00f00000 00000000
1001c020 | 00000000 00000000 00000000 00000000
1001c030 | 003c0003 003c0003 00000000 00000000
1001c040 | 00000000 00000000 00000000 00000000
1001c050 | 00000000 00000000 00000000 00000000
1001c060 | 00000000 00000000 00000000 00000000
1001c070 | 00000000 00000000 00000000 00000000
1001c080 | 00000000 00000000 00000000 00000000

dump drm registers data:
1001d000 | 00000000 00000000 00000000 00000000
1001d010 | 00000000 00000000 00000000 00000000
1001d020 | 00000000 00000000 00000000 00000000
1001d030 | 00a003f1 000000ff 00100000 00000000
1001d040 | 00027e71 000200a0 00020303 000000ff
1001d050 | 00000000 00000000 00000000 00000000
1001d060 | 00000002 00000000 00000000 00000000
drm: 500 = 0xc
[DDR Reserve] ddr reserve mode not be enabled yet
DDR RESERVE Success 0
[EMI] ComboMCP not ready, using default setting
BYTE_swap:0
BYTE_swap:0
Window Sum 532, worse bit 4, min window 64
Window Sum 512, worse bit 8, min window 64
Window Sum 334, worse bit 3, min window 38
Window Sum 342, worse bit 9, min window 40
Window Sum 350, worse bit 3, min window 40
Window Sum 358, worse bit 8, min window 44
Window Sum 360, worse bit 3, min window 42
Window Sum 366, worse bit 12, min window 44
Window Sum 372, worse bit 3, min window 44
Window Sum 382, worse bit 8, min window 46
Window Sum 380, worse bit 3, min window 46
Window Sum 392, worse bit 9, min window 48
Window Sum 396, worse bit 3, min window 48
Window Sum 398, worse bit 9, min window 48
Window Sum 398, worse bit 3, min window 48
Window Sum 412, worse bit 9, min window 50
Window Sum 420, worse bit 3, min window 50
Window Sum 420, worse bit 14, min window 50
Window Sum 422, worse bit 3, min window 50
Window Sum 428, worse bit 9, min window 52
Window Sum 422, worse bit 0, min window 52
NOTICE:  EMI: Detected DRAM size: 256MB
NOTICE:  EMI: complex R/W mem test passed
NOTICE:  CPU: MT7981 (1300MHz)
NOTICE:  SPI_NAND parses attributes from parameter page.
NOTICE:  SPI_NAND Detected ID 0xef
NOTICE:  Page size 2048, Block size 131072, size 134217728
NOTICE:  Initializing NMBM ...
NOTICE:  Signature found at block 1023 [0x07fe0000]
NOTICE:  First info table with writecount 0 found in block 976
NOTICE:  Second info table with writecount 0 found in block 979
NOTICE:  NMBM has been successfully attached in read-only mode
NOTICE:  BL2: Booting BL31
NOTICE:  BL31: v2.6(release):12dffbfc4a-dirty
NOTICE:  BL31: Built : 05:20:26, Jul 15 2022
NOTICE:  Hello BL31!!!
In:    serial@11002000
Out:   serial@11002000
Err:   serial@11002000
Net:   eth0: ethernet@15100000
detect button reset released!
Reading from 0x0 to 0x4f7fdd7c, size 0x4 ... OK
Boot failure detected on both systems
Reading from 0x0 to 0x4f7fdd7c, size 0x4 ... OK
Saving Environment to MTD... Erasing on MTD device 'nmbm0'... OK
Writing to MTD device 'nmbm0'... OK
OK
Booting System 1
ubi0: attaching mtd10
ubi0: scanning is finished
ubi0: attached mtd10 (name "ubi1", size 34 MiB)
ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
ubi0: good PEBs: 272, bad PEBs: 0, corrupted PEBs: 0
ubi0: user volume: 0, internal volumes: 1, max. volumes count: 128
ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 0
ubi0: available PEBs: 248, total reserved PEBs: 24, PEBs reserved for bad PEB handling: 20
Reading from volume 'kernel' to 0x46000000, size 0x0 ... *** Cannot find volume 'kernel' ***
resetting ...

我是一哥

请问擦除与写入你用了多少久时间啊？

forestdai

有没有带uboot的完整救砖估计啊，不想刷完估计后又刷机 以免来回操作很多次，希望一次性用救砖固件直接刷好