Difference between pages "Chip-Off BlackBerry Curve 9300" and "Chip-Off BlackBerry Bold 9780"

From Forensics Wiki
(Difference between pages)
Jump to: navigation, search
(NAND Removal)
 
(Created page with "== Tear Down == # Remove the back panel which holds the battery in place. # Remove the SIM and SD Memory Card. # Flip phone and remove the Vendor plate {| border="1" cellpaddi...")
 
Line 1: Line 1:
 
== Tear Down ==
 
== Tear Down ==
# Remove the back panel.
+
# Remove the back panel which holds the battery in place.
 
# Remove the SIM and SD Memory Card.
 
# Remove the SIM and SD Memory Card.
# Using a torx-6 screw driver remove the 2 visible screws on the back of the phone.
+
# Flip phone and remove the Vendor plate
 
+
 
{| border="1" cellpadding="2"
 
{| border="1" cellpadding="2"
 
|-
 
|-
| [[File:1-ScrewRemoval.jpg| 300px ]]
+
|[[File:1-BB9780-VendorPlateRemoval.jpg| 300px]]
 
|-
 
|-
 
|}
 
|}
 
 
<ol start="4">
 
<ol start="4">
    <li>Remove the screen protector using a plastic shim or guitar pick.</li>
+
<li> Using a torx-5 screw driver remove the 2 visible screws under the vendor.</li>
 
</ol>
 
</ol>
 
 
{| border="1" cellpadding="2"
 
{| border="1" cellpadding="2"
 
|-
 
|-
|[[File:2-PlasticScreen.jpg| 300px ]]
+
|[[File:2-BB9780-ScrewRemoval.jpg| 300px]]
 
|-
 
|-
 
|}
 
|}
 +
 
<ol start="5">
 
<ol start="5">
     <li>Use the shim to detach the top-plate/cover from the device.</li>
+
     <li>Use a guitar pick or pry tool to remove the outer bezel.</li>
 
</ol>
 
</ol>
 
{| border="1" cellpadding="2"
 
{| border="1" cellpadding="2"
 
|-
 
|-
| [[File:3-TopPlate.jpg| 300px ]]
+
|[[File:3-BB9780-BezelRemoval.jpg| 300px]]
 +
|[[File:4-BB9780-BezelRemoved.jpg| 300px]]
 
|-
 
|-
 
|}
 
|}
 +
 
<ol start="6">
 
<ol start="6">
     <li>Remove 4 additional torx-6 screws.</li>
+
     <li>Gently remove the keyboard to 4 additional torx-5 screws to be removed.</li>
 
</ol>
 
</ol>
 
{| border="1" cellpadding="2"
 
{| border="1" cellpadding="2"
 
|-
 
|-
| [[File:4-ScrewRemoval.jpg| 300px ]]
+
|[[File:5-BB9780-ScrewRemoval.jpg| 300px]]
 
|-
 
|-
 
|}
 
|}
 +
 
<ol start="7">
 
<ol start="7">
     <li>Detach vendor plate and remove 2 more torx-6 screws.</li>
+
     <li>Release the flex cable in the top left corner and remove the LCD/Motherboard from the housing.</li>
 
</ol>
 
</ol>
 
{| border="1" cellpadding="2"
 
{| border="1" cellpadding="2"
 
|-
 
|-
| [[File:5-ScrewRemoval.jpg| 300px ]]
+
|[[File:6-BB9780-LCDRemoval.jpg| 300px]]
 
|-
 
|-
 
|}
 
|}
 +
 
<ol start="8">
 
<ol start="8">
     <li>Separate back plate from the main board.</li>
+
     <li>Release the LCD and pointer flex cables and remove the LCD from the Motherboard.</li>
 
</ol>
 
</ol>
 
{| border="1" cellpadding="2"
 
{| border="1" cellpadding="2"
 
|-
 
|-
| [[File:6-SeperateBoard.jpg| 300px ]]
+
|[[File:7-BB9780-LCDRemoval.jpg| 300px]]
 
|-
 
|-
 
|}
 
|}
 +
 
<ol start="9">
 
<ol start="9">
    <li>The tear down is now complete</li>
+
1.#9 The tear down is now complete</li>
 
</ol>
 
</ol>
 
{| border="1" cellpadding="2"
 
{| border="1" cellpadding="2"
 
|-
 
|-
| [[File:7-TearDownComplete.jpg| 300px ]]
+
|[[File:8-BB9780-TearDownComplete.jpg| 300px]]
 
|-
 
|-
 
|}
 
|}
  
== NAND Removal ==
 
# Peel off the vendor sticker on the back side of the main circuit board
 
# The NAND is located beneath the heat shield directly above the Micro SD card slot.
 
  
 +
== NAND Removal ==
 +
# The NAND is located beneath the heat shield to the left of the USB port.
 
{| border="1" cellpadding="2"
 
{| border="1" cellpadding="2"
 
|-
 
|-
| [[File:8-NAND-Location.jpg| 300px ]]
+
|[[File:9-BB9780-NAND-Location.jpg| 300px]]
 
|-
 
|-
 
|}
 
|}
<ol start="3">
+
<ol start="2">
 
     <li>Place the main board in a stand or holder and position it under a heat gun or device the blows super hot air. We use a Wagner "model XYZ" positioned approximately 2 1/2" - 3" inches away from the main board.</li>
 
     <li>Place the main board in a stand or holder and position it under a heat gun or device the blows super hot air. We use a Wagner "model XYZ" positioned approximately 2 1/2" - 3" inches away from the main board.</li>
 
</ol>
 
</ol>
 
{| border="1" cellpadding="2"
 
{| border="1" cellpadding="2"
 
|-
 
|-
| [[File:9-Positioning.jpg| 300px ]]
+
|[[File:10-BB9780-Positioning.jpg| 300px]]
 
|-
 
|-
 
|}
 
|}
<ol start="4">
+
<ol start="3">
 
     <li>Monitoring the temperature the heat shield will come off easily between 190-200 Centigrade.</li>
 
     <li>Monitoring the temperature the heat shield will come off easily between 190-200 Centigrade.</li>
 
</ol>
 
</ol>
 
 
{| border="1" cellpadding="2"
 
{| border="1" cellpadding="2"
 
|-
 
|-
| [[File:10-Temperature.jpg| 300px ]]
+
|[[File:11-BB9780-Temperature.jpg| 300px]]
| [[File:11-HeatSheildRemoved.jpg| 300px ]]
+
|[[File:12-BB9780-HeatSheildRemoved.jpg| 300px]]
 
|-
 
|-
 
|}
 
|}
<ol start="5">
+
<ol start="4">
     <li>Continue working under the high heat. In the 9300's I've worked on there is typically a black epoxy that has been applied to the NAND. Using a razor under the high heat this epoxy can be easily cut into. Once the epoxy has been cut and with the temperature around 215 Centigrade the NAND will be easily removed from the main board.</li>
+
     <li>Continue working under the high heat. In the 9780's I've worked on there is typically a black epoxy that has been applied to the NAND. Using a razor under the high heat this epoxy can be easily cut into. Once the epoxy has been cut and with the temperature around 215 Centigrade the NAND will be easily removed from the main board.</li>
 
</ol>
 
</ol>
 
 
{| border="1" cellpadding="2"
 
{| border="1" cellpadding="2"
 
|-
 
|-
| [[File:12-NANDRemoval.jpg| 300px ]]
+
|[[File:13-BB9780-NANDRemoval.jpg| 500px]]
 +
|[[File:14-BB9780-NANDRemoved.jpg| 500px]]
 
|-
 
|-
 
|}
 
|}
  
The BlackBerry Curve 9300 uses a stacked die 152 pin BGA, this includes a NAND stacked on a controller which is soldered to the main board. We are interested in the NAND and therefore must separate it from the controller. This is accomplished with the use of high heat (heat gun), a 20 x 20 x 0.5cm steel plate and a 10cm razor blade.
+
The BlackBerry Bold 9780 uses a stacked die 152 pin BGA, this includes a NAND stacked on a controller which is soldered to the main board. We are interested in the NAND and therefore must separate it from the controller. This is accomplished with the use of high heat (heat gun), a 20 x 20 x 0.5cm steel plate and a 10cm razor blade.
  
<ol start="6">
+
<ol start="5">
<li>Position the steel plate under the heat gun. The plate will heat up and hold the heat, try not to burn yourself.</li>
+
    <li>Position the steel plate under the heat gun. The plate will heat up and hold the heat be mindful not to burn yourself.</li>
<li>Transfer the NAND+Controller to the plate and allow the chip to take in some heat ~1min.</li>
+
    <li>Transfer the NAND+Controller to the plate and allow the chip to take in some heat ~1min</li>
<li>Using long tweezers to hold the chip and the 10cm razor begin slicing away the epoxy that is surrounding the chip with a sharp razor the epoxy will slice easily allowing you to see a tiny gap between the NAND and the controller.</li>
+
    <li>Using long tweezers to hold the chip and the 10cm razor begin slicing away the epoxy that is surrounding the chip with a sharp razor the epoxy will slice easily allowing you to see a tiny gap between the NAND and the controller.</li>
 
</ol>
 
</ol>
 
{| border="1" cellpadding="2"
 
{| border="1" cellpadding="2"
 
|-
 
|-
| [[File:13-3-EpoxyCleanup.jpg| 300px ]]
+
|[[File:13-3-EpoxyCleanup.jpg| 300px]]
| [[File:13-4-EpoxyCleanup.jpg| 300px ]]
+
|[[File:13-4-EpoxyCleanup.jpg| 300px]]
| [[File:13-5-EpoxyCleanup.jpg| 300px ]]
+
|[[File:13-5-EpoxyCleanup.jpg| 300px]]
 
|-
 
|-
 
|}
 
|}
Line 114: Line 115:
 
{| border="1" cellpadding="2"
 
{| border="1" cellpadding="2"
 
|-
 
|-
| [[File:13-1-EpoxyCleanup.jpg| 450px ]]
+
|[[File:13-1-EpoxyCleanup.jpg| 500]px]
| [[File:13-2-EpoxyCleanup.jpg| 450px ]]
+
|[[File:13-2-EpoxyCleanup.jpg| 500px]]
 
|-
 
|-
 
|}
 
|}
<ol start="9">
+
 
<li>The razor can then be used to separate the two.</li>
+
<ol start="8">
 +
    <li>The razor can then be used to separate the two.</li>
 
</ol>
 
</ol>
 
{| border="1" cellpadding="2"
 
{| border="1" cellpadding="2"
 
|-
 
|-
| [[File:14-Separation.jpg| 450px ]]
+
|[[File:14-Separation.jpg| 500px]]
| [[File:15-Separated.jpg| 450px ]]
+
|[[File:15-Separated.jpg| 500px]]
 
|-
 
|-
 
|}
 
|}
  
<ol start="10">
+
 
 +
<ol start="4">
 
     <li>Using liquid flux, or flux paste and a soldering iron scrape the remaining epoxy off the NAND and clean it up real nice to prep for a NAND read.</li>
 
     <li>Using liquid flux, or flux paste and a soldering iron scrape the remaining epoxy off the NAND and clean it up real nice to prep for a NAND read.</li>
 
</ol>
 
</ol>
 
{| border="1" cellpadding="2"
 
{| border="1" cellpadding="2"
 
|-
 
|-
| [[File:16-1-SolderCleanup.jpg| 300px ]]
+
|[[File:16-1-SolderCleanup.jpg| 300px]]
| [[File:16-2-SolderCleanup.jpg| 300px ]]
+
|[[File:16-2-SolderCleanup.jpg| 300px]]
| [[File:17-AllClean.jpg| 300px ]]
+
|[[File:17-AllClean.jpg| 300px]]
 
|-
 
|-
 
|}
 
|}

Revision as of 01:30, 8 August 2013

Tear Down

  1. Remove the back panel which holds the battery in place.
  2. Remove the SIM and SD Memory Card.
  3. Flip phone and remove the Vendor plate
1-BB9780-VendorPlateRemoval.jpg
  1. Using a torx-5 screw driver remove the 2 visible screws under the vendor.
2-BB9780-ScrewRemoval.jpg
  1. Use a guitar pick or pry tool to remove the outer bezel.
3-BB9780-BezelRemoval.jpg 4-BB9780-BezelRemoved.jpg
  1. Gently remove the keyboard to 4 additional torx-5 screws to be removed.
5-BB9780-ScrewRemoval.jpg
  1. Release the flex cable in the top left corner and remove the LCD/Motherboard from the housing.
6-BB9780-LCDRemoval.jpg
  1. Release the LCD and pointer flex cables and remove the LCD from the Motherboard.
7-BB9780-LCDRemoval.jpg
    1.#9 The tear down is now complete
8-BB9780-TearDownComplete.jpg


NAND Removal

  1. The NAND is located beneath the heat shield to the left of the USB port.
9-BB9780-NAND-Location.jpg
  1. Place the main board in a stand or holder and position it under a heat gun or device the blows super hot air. We use a Wagner "model XYZ" positioned approximately 2 1/2" - 3" inches away from the main board.
10-BB9780-Positioning.jpg
  1. Monitoring the temperature the heat shield will come off easily between 190-200 Centigrade.
11-BB9780-Temperature.jpg 12-BB9780-HeatSheildRemoved.jpg
  1. Continue working under the high heat. In the 9780's I've worked on there is typically a black epoxy that has been applied to the NAND. Using a razor under the high heat this epoxy can be easily cut into. Once the epoxy has been cut and with the temperature around 215 Centigrade the NAND will be easily removed from the main board.
13-BB9780-NANDRemoval.jpg 14-BB9780-NANDRemoved.jpg

The BlackBerry Bold 9780 uses a stacked die 152 pin BGA, this includes a NAND stacked on a controller which is soldered to the main board. We are interested in the NAND and therefore must separate it from the controller. This is accomplished with the use of high heat (heat gun), a 20 x 20 x 0.5cm steel plate and a 10cm razor blade.

  1. Position the steel plate under the heat gun. The plate will heat up and hold the heat be mindful not to burn yourself.
  2. Transfer the NAND+Controller to the plate and allow the chip to take in some heat ~1min
  3. Using long tweezers to hold the chip and the 10cm razor begin slicing away the epoxy that is surrounding the chip with a sharp razor the epoxy will slice easily allowing you to see a tiny gap between the NAND and the controller.
13-3-EpoxyCleanup.jpg 13-4-EpoxyCleanup.jpg 13-5-EpoxyCleanup.jpg
[[File:13-1-EpoxyCleanup.jpg| 500]px] 13-2-EpoxyCleanup.jpg
  1. The razor can then be used to separate the two.
14-Separation.jpg 15-Separated.jpg


  1. Using liquid flux, or flux paste and a soldering iron scrape the remaining epoxy off the NAND and clean it up real nice to prep for a NAND read.
16-1-SolderCleanup.jpg 16-2-SolderCleanup.jpg 17-AllClean.jpg