Hello,

My WNR3500Lv2 started malfunctioning (blinking yellow power light, not responding with its admin web page over the network). I used the instructions in this post:

How to Debrick Your WNR3500Lv2 Using Windows and a USB-TTL Cable

and was able to establish serial communication and upload the Netgear firmware, but it doesn't fix the problem. I thought maybe the firmware file on the Netgear website was bad, so I tried the previous version, but the results are the same - the firmware upload seems to complete successfully, but the router remains with a blinking yellow power light and is unresponsive.

Here's a copy of the Putty upload session. If anyone has a suggestion (beyond, replace it ;-)  I'd appreciate your help.

Thx!

AbbotM

CFE> ^C
CFE> ^C
CFE> tftpd
Start TFTP server
Reading :: Done. 7508026 bytes read
Programming...done. 7508026 bytes written
Skip writing CHK checksum for nflash.
Found a Samsung NAND flash with 2048B pages or 128KB blocks; total size 128MB
Decompressing...done

CFE for WNR3500Lv2 version: v1.0.9
Build Date: Fri May  6 11:54:17 CST 2011
Init Arena
Init Devs.
Boot partition size = 262144(0x40000)
NFLASH Boot partition size = 524288(0x80000)
et0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 5.60.136
CPU type 0x19749: 480MHz
Tot mem: 131072 KBytes

Device eth0:  hwaddr 10-0D-7F-9B-E4-2A, ipaddr 192.168.1.1, mask 255.255.255.0
        gateway not set, nameserver not set
Checking crc...done.
Loader:raw Filesys:raw Dev:flash0.os File: Options:(null)
Loading: ....... 4171516 bytes read
Entry at 0x80001000
Closing network.
Starting program at 0x80001000
Linux version 2.6.22 (edward@sw-server-206) (gcc version 4.2.3) #19 Thu Jan 22 0   9:04:44 CST 2015
CPU revision is: 00019749
Found a Samsung NAND flash with 2048B pages or 128KB blocks; total size 128MB
Determined physical RAM map:
 memory: 07fff000 @ 00000000 (usable)
Zone PFN ranges:
  Normal          0 ->    32767
  HighMem     32767 ->    32767
early_node_map[1] active PFN ranges
    0:        0 ->    32767
Built 1 zonelists.  Total pages: 32767
Kernel command line: root=/dev/mtdblock15 console=ttyS0,115200 init=/sbin/preini   t
Primary instruction cache 32kB, physically tagged, 4-way, linesize 32 bytes.
Primary data cache 32kB, 4-way, linesize 32 bytes.
Synthesized TLB refill handler (20 instructions).
Synthesized TLB load handler fastpath (32 instructions).
Synthesized TLB store handler fastpath (32 instructions).
Synthesized TLB modify handler fastpath (31 instructions).
PID hash table entries: 512 (order: 9, 2048 bytes)
CPU: BCM5357 rev 2 at 480 MHz
Using 240.000 MHz high precision timer.
Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
Memory: 125240k/131068k available (3266k kernel code, 5668k reserved, 629k data,    176k init, 0k highmem)
Mount-cache hash table entries: 512
NET: Registered protocol family 16
SCSI subsystem initialized
PCI: no core
PCI: no core
PCI: Fixing up bus 0
NET: Registered protocol family 2
Time: MIPS clocksource has been installed.
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 4096 (order: 3, 32768 bytes)
TCP bind hash table entries: 4096 (order: 2, 16384 bytes)
TCP: Hash tables configured (established 4096 bind 4096)
TCP reno registered
squashfs: version 3.4 (2008/08/26) Phillip Lougher
squashfs: LZMA suppport for slax.org by jro
JFFS2 version 2.2. (NAND) © 2001-2006 Red Hat, Inc.
fuse init (API version 7.8)
io scheduler noop registered
io scheduler deadline registered (default)
Serial: 8250/16550 driver $Revision: 1.1.1.1 $ 4 ports, IRQ sharing disabled
serial8250: ttyS0 at MMIO 0x0 (irq = 8) is a 16550A
loop: module loaded
PPP generic driver version 2.4.2
NET: Registered protocol family 24
PPPoL2TP kernel driver, V0.17
tun: Universal TUN/TAP device driver, 1.6
tun: (C) 1999-2004 Max Krasnyansky <[email protected]>
pflash: found no supported devices
Found an ST compatible serial flash with 0 64KB blocks; total size 0MB
sflash: found no supported devices
Boot partition size = 524288(0x80000)
lookup_nflash_rootfs_offset: offset = 0x500000
nflash: squash filesystem with lzma found at block 51
Creating 16 MTD partitions on "nflash":
0x00000000-0x00080000 : "boot"
0x00080000-0x00200000 : "nvram"
0x00200000-0x00240000 : "board_data"
0x00240000-0x00280000 : "POT1"
0x00280000-0x002c0000 : "POT2"
0x002c0000-0x00300000 : "T_Meter1"
0x00300000-0x00340000 : "T_Meter2"
0x00340000-0x00380000 : "ML1"
0x00380000-0x003c0000 : "ML2"
0x003c0000-0x00400000 : "ML3"
0x00400000-0x00440000 : "ML4"
0x00440000-0x00480000 : "ML5"
0x00480000-0x004c0000 : "ML6"
0x004c0000-0x00500000 : "ML7"
0x00500000-0x02000000 : "linux"
0x0066ea78-0x02000000 : "rootfs"
nand_read_bbt: Bad block at 0x072e0000
Creating 1 MTD partitions on "brcmnand":
0x02000000-0x07f00000 : "brcmnand"
brcmnand_isbad_bbt(): bbt info for offs 0x072e0000: (block 919) 0x03
u32 classifier
TCP cubic registered
NET: Registered protocol family 1
NET: Registered protocol family 10
6WIND/LSIIT IPv6 multicast forwarding 0.1 plus PIM-SM/SSM with *BSD API
lo: Disabled Privacy Extensions
IPv6 over IPv4 tunneling driver
sit0: Disabled Privacy Extensions
NET: Registered protocol family 17
802.1Q VLAN Support v1.8 Ben Greear <[email protected]>
All bugs added by David S. Miller <[email protected]>
VFS: Mounted root (squashfs filesystem) readonly.
Freeing unused kernel memory: 176k freed
Warning: unable to open an initial console.
Failed to execute /init
[sighandler]: No more events to be processed, quitting.
[cleanup]: Waiting for children.
[cleanup]: All children terminated.
Reading board data...
WSC UUID: 0xf1ec2b3b04e6938b3ce582a404bcffa8
NTP synchronized date/time: Sun Oct 26 23:48:21 2014
MAC address of 1st STA connected: BC-52-B7-A4-A9-76
Initialise conn table 2048 entries
Hit enter to continue...wlconf: PHYTYPE: 4
wlconf: PHYTYPE: 4
killall: upnp: no process killed
UPnP daemon is ready to run
killall: wps_monitor: no process killed
killall: wps_ap: no process killed
killall: wps_enr: no process killed
start_wl937

### wps_wfi_init(): <wl0_wfi_enable=(null)>WFI is not enabled ###
Reading board data...
WSC UUID: 0xf1ec2b3b04e6938b3ce582a404bcffa8
wan_lan_conflict_flag_on
hotplug detected product:  0/0/206
hotplug detected product:  (null)
hotplug detected product:  0/0/206
hotplug detected product:  (null)
sourcing  /tmp/eco.env ...
DEVICE_MODEL_NAME is wnr3500lv2
        -- /usr/sbin/cp_installer.sh,  52 seconds
acosFW_accessCtrlEnable 2520 bEnable: 0
acosFW_accessCtrlMode 2527 mode: 1
acosFW_accessCtrlConfig 2534
killall: arp_check: no process killed
shm ID: 32769
 Get a correct Segment_ID: 32769 and semaphore ID:0
info, udhcp server (v0.9.8) started
error, unable to parse 'option wins '
error, unable to parse 'option domain '
mevent start...
opened loopback socket 4
Can't find handler for ASP command: genie_get_5g_wireless_security_key();
POT integrity check OK.
POT time is up.
IOCTL_AG_REGION_SET: English
Start DHCP client daemon
info, udhcp client (v0.9.8) started
killall: udchpd: no process killed
eth0: No such process
Info: No FWPT default policies.
agnat QOS disable!
rmmod: l7_filter
rmmod: /lib/modules/2.6.22/kernel/lib/AccessCntl.ko
killall: bftpd: no process killed
httpd: socket bound in 10.0.0.1:80.
httpd: socket bound in 0.0.0.0:443.
detect_dhcp_with_two_mac socket timedout: iCount: 99
detect_dhcp_with_two_mac socket timedout: iCount: 99
route: ioctl 0x890c failed: No such process
killall: dhcp6c: no process killed
killall: IPv6-relay: no process killed
killall: pppdv6: no process killed
killall: rtsol: no process killed
killall: dhcp6s: no process killed
killall: radvd: no process killed
route: ioctl 0x890c failed: No such process
killall: dhcp6s: no process killed
killall: radvd: no process killed
Hit enter to continue...detect_dhcp_with_two_mac socket timedout: iCount: 99
info, udhcp server (v0.9.8) started
error, unable to parse 'option wins '
error, unable to parse 'option domain '
Hit enter to continue...

BusyBox v1.7.2 (2015-01-22 09:05:53 CST) built-in shell (ash)
Enter 'help' for a list of built-in commands.

#
# APPS_MOUNT_POINT is /tmp/media/nand
/tmp/media/nand mounted ok.
      -- checking server updates.netgear.com
#############¦¦