Hacking Fully bricked Wii

[Vilux]

Hey so I believe I was using version 4.2u when my wii first became bricked. It would load to the health and safety screen and freeze. I was able to get it into the system menu occasionally and installed Bootmii as boot2 and the priiloader. I also made a nand backup through bootmii (although this was only after the wii was first bricked). I tried a few fixes which didn't work (I could post some of them if you guys are interested) and then used modmii to downgrade to 4.1 u and install a bunch of IOS's. Now when I start the Wii it will just boot to a black screen and I lose the video signal. I can still load the priiloader and get to the homebrew channel through that, however whenever I try to start a game or go to the wii system menu I get the black screen and no video signal. Is there anything I can do to get my wii back to normal? Thanks guys
JoostinOnline

 

[JoostinOnline]

Post a SysCheck using the guide in my signature.

 

[Vilux]

How long should the SysCheck usually take? Mine seems to be stuck at 'Testing IOS12 Vulnerabilities'

 

[anarchocptlist]

While some recommend against it I've found a fresh install using ohneschwanzenegger works well if you can afford to wipe it clean.

http://spawn.link/factory-reset-revirginizing-your-wii/

 

[JoostinOnline]

How long should the SysCheck usually take? Mine seems to be stuck at 'Testing IOS12 Vulnerabilities'

It should only take 1-2 seconds per IOS. You were using the version of SysCheck linked to in my guide, right?

Try just scanning IOS60 and posting the report.

 

[Vilux]

Yes, I used the version of SysCheck from the thread in your sig

Here is my SysCheck:

Spoiler

SysCheck v2.2.0 HD Edition by Double_A and R2-D2199, JoostinOnline, Nano
...runs on IOS58 (rev 6176).

Region: NTSC-U
System Menu 4.1U (v449)
Priiloader installed
Drive date: 02.13.2007
Homebrew Channel 1.1.2 running on IOS58

Hollywood v0x11
Console ID: 67484423
Console Type: Wii
Shop Channel Country: Canada (18)
Boot2 v2
Found 155 titles.
Found 46 IOS on this console. 2 of them are stub.

IOS60 (rev 16174): Trucha Bug, NAND Access
Report generated on 07/16/2014.

 

[Yepi69]

Yes, I used the version of SysCheck from the thread in your sig

Here is my SysCheck:

Spoiler

SysCheck v2.2.0 HD Edition by Double_A and R2-D2199, JoostinOnline, Nano
...runs on IOS58 (rev 6176).

Region: NTSC-U
System Menu 4.1U (v449)
Priiloader installed
Drive date: 02.13.2007
Homebrew Channel 1.1.2 running on IOS58

Hollywood v0x11
Console ID: 67484423
Console Type: Wii
Shop Channel Country: Canada (18)
Boot2 v2
Found 155 titles.
Found 46 IOS on this console. 2 of them are stub.

IOS60 (rev 16174): Trucha Bug, NAND Access
Report generated on 07/16/2014.

-deleted-

 

[JoostinOnline]

Sorry I didn't respond earlier, I've been away from my computer. I modified Title Lister to log the results and exit.
http://expirebox.com/download/ec3b9cb4f35532c40cb33458e42dfc02.html
Run it and paste "Title Lister.log", which will be created in the same folder as boot.dol.

 

[Vilux]

No problem,
Here's the Title Lister report:

Spoiler

Title Lister: Using IOS58 v6176.
Found 155 titles:
Unknown title type 10005 77525845
Unknown title type 10005 77525845
1: vers: 0.2 (2) FW: IOS56 vers: 0.2 (2) FW: IOS56
2: Title=10004-524d4345 (game channel 'RMCE') FW: IOS36
3: Title=10001-4944434c (downloaded channel 'IDCL') vers: 2.0 (512) FW: IOS58
4: Title=10001-4e47424c (downloaded channel 'NGBL') vers: 2.0 (512) FW: IOS35
5: Title=10001-4743424c (downloaded channel 'GCBL') vers: 0.1 (1) FW: IOS35
6: Title=10001-4c554c5a (downloaded channel 'LULZ') vers: 1.2 (258) FW: IOS58
7: Title=10001-4e474254 (downloaded channel 'NGBT') vers: 2.0 (512) FW: IOS35
8: Title=10001-554e454f (downloaded channel 'UNEO') vers: 2.0 (512) FW: IOS35
9: Title=10001-554c4e52 (downloaded channel 'ULNR') vers: 2.0 (512) FW: IOS58
10: Title=10001-4e414250 (downloaded channel 'NABP') vers: 0.3 (3) FW: IOS9
11: Title=10001-56424758 (downloaded channel 'VBGX') vers: 2.0 (512) FW: IOS58
12: Title=10001-4f545756 (downloaded channel 'OTWV') vers: 0.1 (1) FW: IOS35
13: Title=10001-57534e45 (downloaded channel 'WSNE') vers: 1.0 (256) FW: IOS56
14: Title=10001-57525845 (downloaded channel 'WRXE') vers: 0.1 (1) FW: IOS56
15: Title=10001-57424b4c (downloaded channel 'WBKL') vers: 2.0 (512) FW: IOS35
16: Title=10001-4e595045 (downloaded channel 'NYPE') FW: IOS9
17: Title=10001-54383043 (downloaded channel 'T80C') vers: 0.1 (1) FW: IOS9
18: Title=10001-3941504b (downloaded channel '9APK') vers: 0.1 (1) FW: IOS9
19: Title=10001-4a574458 (downloaded channel 'JWDX') vers: 0.1 (1) FW: IOS9
20: Title=10001-574d3845 (downloaded channel 'WM8E') vers: 0.1 (1) FW: IOS36
21: Title=10001-4e414a4e (downloaded channel 'NAJN') vers: 0.1 (1) FW: IOS21
22: Title=10001-5547424b (downloaded channel 'UGBK') vers: 0.1 (1) FW: IOS9
23: Title=10001-4a51584a (downloaded channel 'JQXJ') vers: 0.1 (1) FW: IOS21
24: Title=10001-4a49524d (downloaded channel 'JIRM') vers: 0.1 (1) FW: IOS9
25: Title=10001-4a4e5751 (downloaded channel 'JNWQ') vers: 0.1 (1) FW: IOS9
26: Title=10001-57523945 (downloaded channel 'WR9E') vers: 0.1 (1) FW: IOS37
27: Title=10001-48415445 (downloaded channel 'HATE') vers: 0.4 (4) FW: IOS35
28: Title=10008-44564458 (hidden? channel 'DVDX') vers: 0.1 (1) FW: IOS36
29: Title=10008-48414c45 (hidden? channel 'HALE') vers: 0.2 (2) FW: IOS31
30: Title=10008-48414b45 (hidden? channel 'HAKE') vers: 0.3 (3) FW: IOS56
31: Title=10002-48415941 (system channel 'HAYA') vers: 0.3 (3) FW: IOS61
32: Title=10002-48414745 (system channel 'HAGE') vers: 0.7 (7) FW: IOS31
33: Title=10002-48414645 (system channel 'HAFE') vers: 0.7 (7) FW: IOS31
34: Title=10002-48414741 (system channel 'HAGA') vers: 0.3 (3) FW: IOS13
35: Title=10002-48414241 (system channel 'HABA') vers: 0.20 (20) FW: IOS56
36: Title=10002-48414641 (system channel 'HAFA') vers: 0.3 (3) FW: IOS13
37: Title=10002-48414141 (system channel 'HAAA') vers: 0.2 (2) FW: IOS13
38: Title=10002-48414341 (system channel 'HACA') vers: 0.6 (6) FW: IOS31
39: Title=10000-4b4d4e45 (savedata for 'KMNE') FW: IOS53
40: Title=10000-00555045 (savedata for '.UPE') vers: 0.10 (10) FW: IOS4
41: Title=10000-53583445 (savedata for 'SX4E') FW: IOS53
42: Title=10000-53374145 (savedata for 'S7AE') FW: IOS56
43: Title=10000-53535345 (savedata for 'SSSE') FW: IOS53
44: Title=10000-52393245 (savedata for 'R92E') FW: IOS33
45: Title=10000-52474845 (savedata for 'RGHE') FW: IOS21
46: Title=10000-53535150 (savedata for 'SSQP') FW: IOS56
47: Title=10000-534c5350 (savedata for 'SLSP') FW: IOS56
48: Title=10000-4d4d5245 (savedata for 'MMRE') FW: IOS53
49: Title=10000-534f4a45 (savedata for 'SOJE') FW: IOS56
50: Title=10000-534f5545 (savedata for 'SOUE') FW: IOS56
51: Title=10000-53554b45 (savedata for 'SUKE') FW: IOS56
52: Title=10000-53583450 (savedata for 'SX4P') FW: IOS53
53: Title=10000-50445545 (savedata for 'PDUE') FW: IOS53
54: Title=10000-52495045 (savedata for 'RIPE') FW: IOS21
55: Title=10000-53584950 (savedata for 'SXIP') FW: IOS56
56: Title=10000-534e4345 (savedata for 'SNCE') FW: IOS56
57: Title=10000-53555045 (savedata for 'SUPE') FW: IOS56
58: Title=10000-53463845 (savedata for 'SF8E') FW: IOS56
59: Title=10000-52544145 (savedata for 'RTAE') FW: IOS56
60: Title=10000-53465545 (savedata for 'SFUE') FW: IOS56
61: Title=10000-53353945 (savedata for 'S59E') FW: IOS55
62: Title=10000-53423345 (savedata for 'SB3E') FW: IOS53
63: Title=10000-524b3545 (savedata for 'RK5E') FW: IOS56
64: Title=10000-53584545 (savedata for 'SXEE') FW: IOS56
65: Title=10000-53504445 (savedata for 'SPDE') FW: IOS56
66: Title=10000-52334f45 (savedata for 'R3OE') FW: IOS56
67: Title=10000-52325645 (savedata for 'R2VE') FW: IOS55
68: Title=10000-53543545 (savedata for 'ST5E') FW: IOS53
69: Title=10000-53423445 (savedata for 'SB4E') FW: IOS56
70: Title=10000-524d4845 (savedata for 'RMHE') FW: IOS55
71: Title=10000-52443245 (savedata for 'RD2E') FW: IOS53
72: Title=10000-53424445 (savedata for 'SBDE') FW: IOS55
73: Title=10000-52555945 (savedata for 'RUYE') FW: IOS53
74: Title=10000-53544b45 (savedata for 'STKE') FW: IOS55
75: Title=10000-534d4e45 (savedata for 'SMNE') FW: IOS53
76: Title=10000-524d5345 (savedata for 'RMSE') FW: IOS55
77: Title=10000-525a4a45 (savedata for 'RZJE') FW: IOS53
78: Title=10000-52325445 (savedata for 'R2TE') FW: IOS55
79: Title=10000-52534645 (savedata for 'RSFE') FW: IOS53
80: Title=10000-525a5445 (savedata for 'RZTE') FW: IOS55
81: Title=10000-52434a45 (savedata for 'RCJE') FW: IOS55
82: Title=10000-52343945 (savedata for 'R49E') FW: IOS53
83: Title=10000-52375045 (savedata for 'R7PE') FW: IOS53
84: Title=10000-52583345 (savedata for 'RX3E') FW: IOS55
85: Title=10000-525a5a45 (savedata for 'RZZE') FW: IOS53
86: Title=10000-52484f45 (savedata for 'RHOE') FW: IOS33
87: Title=10000-52544e45 (savedata for 'RTNE') FW: IOS33
88: Title=10000-52533545 (savedata for 'RS5E') FW: IOS21
89: Title=10000-5242584a (savedata for 'RBXJ') FW: IOS55
90: Title=10000-524f5745 (savedata for 'ROWE') FW: IOS21
91: Title=10000-52444745 (savedata for 'RDGE') FW: IOS36
92: Title=10000-52535645 (savedata for 'RSVE') FW: IOS33
93: Title=10000-52543445 (savedata for 'RT4E') FW: IOS33
94: Title=10000-5237394a (savedata for 'R79J') FW: IOS21
95: Title=10000-52423445 (savedata for 'RB4E') FW: IOS21
96: Title=10000-52484450 (savedata for 'RHDP') FW: IOS21
97: Title=10000-524e4845 (savedata for 'RNHE') FW: IOS21
98: Title=10000-52534245 (savedata for 'RSBE') FW: IOS36
99: Title=10000-52445345 (savedata for 'RDSE') FW: IOS21
100: Title=10000-524d4745 (savedata for 'RMGE') FW: IOS33
101: Title=10000-524d3345 (savedata for 'RM3E') FW: IOS28
102: Title=10000-52385045 (savedata for 'R8PE') FW: IOS17
103: Title=10000-52535245 (savedata for 'RSRE') FW: IOS9
104: Title=10000-525a4445 (savedata for 'RZDE') FW: IOS9
105: Title=10000-52535045 (savedata for 'RSPE') FW: IOS9
106: Title=1-ec (IOS236) vers: 255.255 (65535)
107: Title=1-0 (IOS0)
108: Title=1-3e (IOS62) vers: 25.30 (6430)
109: Title=1-34 (IOS52) vers: 63.46 (16174)
110: Title=1-30 (IOS48) vers: 16.28 (4124)
111: Title=1-2e (IOS46) vers: 14.23 (3607)
112: Title=1-2d (IOS45) vers: 14.23 (3607)
113: Title=1-2b (IOS43) vers: 14.23 (3607)
114: Title=1-28 (IOS40) vers: 63.46 (16174)
115: Title=1-fe (IOS254) vers: 255.1 (65281)
116: Title=1-e0 (IOS224) vers: 255.255 (65535)
117: Title=1-50 (IOS80) vers: 63.46 (16174)
118: Title=1-46 (IOS70) vers: 63.46 (16174)
119: Title=1-3d (IOS61) vers: 22.30 (5662)
120: Title=1-3c (IOS60) vers: 63.46 (16174)
121: Title=1-39 (IOS57) vers: 23.31 (5919)
122: Title=1-33 (IOS51) vers: 19.0 (4864)
123: Title=1-32 (IOS50) vers: 63.46 (16174)
124: Title=1-29 (IOS41) vers: 14.23 (3607)
125: Title=1-10 (IOS16) vers: 212.49 (54321)
126: Title=1-a (IOS10) vers: 3.0 (768)
127: Title=1-3a (IOS58) vers: 24.32 (6176)
128: Title=1-df (IOS223) vers: 0.4 (4)
129: Title=1-ca (IOS202) vers: 255.255 (65535)
130: Title=1-38 (IOS56) vers: 22.30 (5662)
131: Title=1-de (IOS222) vers: 0.4 (4)
132: Title=1-fa (IOS250) vers: 82.16 (21008)
133: Title=1-37 (IOS55) vers: 22.31 (5663)
134: Title=1-35 (IOS53) vers: 22.31 (5663)
135: Title=1-26 (IOS38) vers: 16.28 (4124)
136: Title=1-f9 (IOS249) vers: 82.16 (21008)
137: Title=1-25 (IOS37) vers: 22.31 (5663)
138: Title=1-24 (IOS36) vers: 14.24 (3608)
139: Title=1-22 (IOS34) vers: 14.24 (3608)
140: Title=1-23 (IOS35) vers: 14.24 (3608)
141: Title=1-21 (IOS33) vers: 14.24 (3608)
142: Title=1-1c (IOS28) vers: 7.15 (1807)
143: Title=1-16 (IOS22) vers: 5.14 (1294)
144: Title=1-1f (IOS31) vers: 14.24 (3608)
145: Title=1-15 (IOS21) vers: 4.15 (1039)
146: Title=1-14 (IOS20) vers: 63.46 (16174)
147: Title=1-1e (IOS30) vers: 63.46 (16174)
148: Title=1-11 (IOS17) vers: 4.8 (1032)
149: Title=1-f (IOS15) vers: 4.8 (1032)
150: Title=1-b (IOS11) vers: 63.46 (16174)
151: Title=1-101 (MIOS) vers: 0.10 (10)
152: Title=1-100 (BC) vers: 0.6 (6)
153: Title=1-2 (System Menu) vers: 1.193 (449) FW: IOS60
154: Title=1-9 (IOS9) vers: 4.10 (1034)
155: Title=1-4 (IOS4) vers: 255.0 (65280)

 

[JoostinOnline]

I went ahead and sorted the IOS's for anybody who wants to jump in:

Spoiler

(IOS4) vers: 255.0 (65280)
(IOS9) vers: 4.10 (1034)
(IOS10) vers: 3.0 (768)
(IOS11) vers: 63.46 (16174)
(IOS15) vers: 4.8 (1032)
(IOS16) vers: 212.49 (54321)
(IOS17) vers: 4.8 (1032)
(IOS20) vers: 63.46 (16174)
(IOS21) vers: 4.15 (1039)
(IOS22) vers: 5.14 (1294)
(IOS28) vers: 7.15 (1807)
(IOS30) vers: 63.46 (16174)
(IOS31) vers: 14.24 (3608)
(IOS33) vers: 14.24 (3608)
(IOS34) vers: 14.24 (3608)
(IOS35) vers: 14.24 (3608)
(IOS36) vers: 14.24 (3608)
(IOS37) vers: 22.31 (5663)
(IOS38) vers: 16.28 (4124)
(IOS40) vers: 63.46 (16174)
(IOS41) vers: 14.23 (3607)
(IOS43) vers: 14.23 (3607)
(IOS45) vers: 14.23 (3607)
(IOS46) vers: 14.23 (3607)
(IOS48) vers: 16.28 (4124)
(IOS50) vers: 63.46 (16174)
(IOS51) vers: 19.0 (4864)
(IOS52) vers: 63.46 (16174)
(IOS53) vers: 22.31 (5663)
(IOS55) vers: 22.31 (5663)
(IOS56) vers: 22.30 (5662)
(IOS57) vers: 23.31 (5919)
(IOS58) vers: 24.32 (6176)
(IOS60) vers: 63.46 (16174)
(IOS61) vers: 22.30 (5662)
(IOS62) vers: 25.30 (6430)
(IOS70) vers: 63.46 (16174)
(IOS80) vers: 63.46 (16174)
(IOS202) vers: 255.255 (65535)
(IOS222) vers: 0.4 (4)
(IOS223) vers: 0.4 (4)
(IOS224) vers: 255.255 (65535)
(IOS249) vers: 82.16 (21008)
(IOS250) vers: 82.16 (21008)
(IOS254) vers: 255.1 (65281)

Getting a black screen when running a game is what is really throws me off.

You're missing a couple IOS's there, so try installing IOS12 and IOS13 again. See if SysCheck works then.

 

[Vilux]

Ok, I reinstalled IOS12 and IOS13 and SysCheck still gets stuck on 'Testing IOS12 for vulnerabilities...

 

[JoostinOnline]

Ok, I reinstalled IOS12 and IOS13 and SysCheck still gets stuck on 'Testing IOS12 for vulnerabilities...

That's bizarre. Are you installing it via wad?

 

[Vilux]

Yes, through the multi mod manager

 

[JoostinOnline]

Try installing them through IOS Manager on MMM. Download from NUS if prompted for a location.

 

[Vilux]

Sorry, that's what I meant. I opened MMM thru Homebrew and then installed the IOS's with the IOS manager. When I launch Smash Bros Brawl thru the USB GX loader the game will load but then freeze in a few seconds

 

[JoostinOnline]

Sorry, that's what I meant. I opened MMM thru Homebrew and then installed the IOS's with the IOS manager. When I launch Smash Bros Brawl thru the USB GX loader the game will load but then freeze in a few seconds

Try loading a game through a disc.

 

[Vilux]

I was just able to launch Super Mario Galaxy 2 successfully off of the disc using the Neogamma launcher tool. However, I just received a black screen when I tried the same thing with my burned copy of Mega Man Anniversary Collection for Gamecube

 

[JoostinOnline]

Okay, so games aren't really a problem, just loaders and/or cIOS's. That's good. Run InspectMii and post InspectMii.log.

Edit: Do you hear sound when you go to the System Menu?

 

[Vilux]

The system mennu seems to launch properly now (with sound) when I boot it thru Priiloader or Homebrew, but when I just turn on the console normally I still just get a black screen (no sound or signal)
Here is my InspectMii report:

Spoiler

********************************************************************************
InspectMii v1.2 by JoostinOnline (HacksDen.com)
********************************************************************************


********************************************************************************
Non-configurable Settings (setting.txt):
********************************************************************************
AREA=USA
MODEL=RVL-001(USA)
DVD=0
MPCH=0x7FFE
CODE=LU
SERNO=300219843
VIDEO=NTSC
GAME=US


********************************************************************************
Configurable Settings (SYSCONF):
********************************************************************************
IPL.IDL (Shutdown Mode)=0 [Full]
IPL.PGS (Progressive Scan)=1 [Enabled]
IPL.E60 (PAL 576i)=-0x6002 [No Entry]
BT.SENS (IR Sensitivity)=3 [High]
BT.BAR (Sensor Bar Position)=1 [Top]
BT.SPKV (WPad Speaker Volume)=0
BT.MOT (WPad Rumble)=1 [Enabled]
IPL.SND (Sound Mode)=-0x6002 [No Entry]
IPL.LNG (Language)=1 [English]
IPL.CB (Counter Bias)=217784455 (6Y-10M-25D 15:40:55)
IPL.SSV (Burn-in Reduction)=0 [Disabled]
IPL.DH (Display Offset)=0
IPL.AR (Aspect Ratio)=1 [Widescreen (16:9)]
IPL.EULA (EULA Accepted)=1 [Accepted]
NET.WCFG (WiiConnect24)=0 [Disabled]
IPL.SADR (Shop Code)=18 [Canada]
IPL.CD (Initial Setup)=1 [Completed]
IPL.CD2 (Network Setup)=1 [Completed]
IPL.INC (Installed Channels)=24
MPLS.MOVIE (Motion Plus Instructional Video)=1 [Completed]


********************************************************************************
Configurable Settings (SYSCONF):
********************************************************************************
IPL.NIK (Nickname)={4d,61,74,74,69,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00} [Matti]
IPL.PC (Parental PIN)=[No Entry]

IPL.PC (Parental Question)=-0x6002 [No Entry]
IPL.PC (Parental Answer)=[No Entry]



********************************************************************************
Misc and Developement Unit Settings (SYSCONF):
********************************************************************************
DEV.BTM (Boot Mode)=-0x6002 [No Entry]
DEV.VIM (Unknown purpose)=-0x6002 [No Entry]
DEV.CTC (Unknown purpose)=-0x6002 [No Entry]
DEV.DSM (Drive Saving Mode)=-0x6002 [No Entry]
WWW.RST (WWW Restriction)=-0x6002 [No Entry]
NET.CTPC (Net Content Restrictions)=-0x6002 [No Entry]


********************************************************************************
WPad Devices (BT.DINF in SYSCONF):
********************************************************************************
Remotes Registered: 6
Remote 1: Nintendo RVL-CNT-01
Remote 2: Nintendo RVL-CNT-01
Remote 3: Nintendo RVL-CNT-01
Remote 4: Nintendo RVL-CNT-01
Remote 5: Nintendo RVL-CNT-01
Remote 6: Nintendo RVL-CNT-01


********************************************************************************
Network Info (config.dat):
********************************************************************************
Connection 1:
Connection Type:Wireless
SSID (Wireless Only):queenofswords
MTU:0 (Default)
Static IP:Not set
Encryption:WEP64
Encryption Key: Not logged for security reasons
Connection Test Passed:Yes
Selected:Yes
Proxy: Disabled
IP SourceHCP
DNS SourceHCP


********************************************************************************
Network Info (config.dat):
********************************************************************************
Connection 2:
Connection Type:Wireless
SSID (Wireless Only):queen of swords
MTU:0 (Default)
Static IP:Not set
Encryption:WPA-PSK (AES)
Encryption Key: Not logged for security reasons
Connection Test Passed:No
Selected:No
Proxy: Disabled
IP SourceHCP
DNS SourceHCP


********************************************************************************
Network Info (config.dat):
********************************************************************************
Connection 3:
Connection Type:Wireless
SSID (Wireless Only):MIJO
MTU:0 (Default)
Static IP:Not set
Encryption:WPA-PSK (TKIP)
Encryption Key: Not logged for security reasons
Connection Test Passed:No
Selected:No
Proxy: Disabled
IP SourceHCP
DNS SourceHCP

 

[JoostinOnline]

Go into Priiloader and tell me what hacks you have enabled.