The TM500 and TM600 image 2.0.20rev3 has an unknown telnet/ftp password contained within it. simply flashing over the top of it with another image will not work.

After 4 days and way too many beers, i finally managed to resurrect a receiver flashed with this image and get full access to flash another image onto it again. So what was the first thing i did, put the known problem image back onto it just to make sure i could verify what i had done actually worked.

If you are one of the unlucky people who flashed 2.0.20rev3 dated 12/5/2009 onto your receiver, heres how to fix it