Topics

46

J.A.F - Just Another Flasher / 5610-d Express Music restart problem solved

« on: May 25, 2008, 12:19:37 PM »

Problem: 5610-d Express Music when powered-up after nokia logo and connecting hands appear, unit shuts down and restarts.
Action taken: full flash with jaf.



LOGS:

JAF version 1.98.49
Detected PKEY:
Card life counter: 95.88%
P-key nokia module version 01.02
Detected JAF INTERFACE version: 01.B0, Driver version: 40000, Library version: 30112
JAF DCT4/BB5 LOADERS DIR: C:\Program Files\ODEON\JAF\Flash\
JAF DCT4/BB5 PRODUCT DIR: C:\Program Files\Nokia\Phoenix\Products\
JAF USB LOADERS DIR: C:\Program Files\ODEON\JAF\FlashUSB\
JAF DCT3/DCTL LOADERS DIR: C:\Program Files\ODEON\JAF\Flash3\
Changing mode...Done!
FILES SET FOR FLASHING:
MCU Flash file: NONE
PPM Flash file: NONE
CNT Flash file: NONE
APE Variant file: NONE

FILES SET FOR FLASHING:
MCU Flash file: C:\Program Files\Nokia\Phoenix\Products\Products\RM-242\rm242__04.81.mcusw
PPM Flash file: C:\Program Files\Nokia\Phoenix\Products\Products\RM-242\rm242__04.81.ppm_blue_c
CNT Flash file: C:\Program Files\Nokia\Phoenix\Products\Products\RM-242\rm242__04.81_ISM_007.image_blue_c
APE Variant file: NONE
Languages in ppm: English,German,French,Italian,Dutch,Spanish,Turkish,Portuguese
Backing up CRT data...
Setting FLASH MODE
FAST PHONE detected!
Loader version: 01.1E.00 -> Revision: 0000
Patching CMT boot step1...
Patching CMT boot step2...
Patching CMT boot step3...
CMT Boot Ready
Loader version: 01.21.01 -> Revision: 0000
Patching CMT loader step1...
Patching CMT loader step3...
Getting CMT Public Keys...
CMT Loader Ready
Reading CMT NPC certificate...
Reading CMT VARIANT certificate...
VARIANT CRT not available...
Reading CMT CCC certificate...
Reading CMT HWC certificate...
Saved to C:\Program Files\ODEON\JAF\ProgData\35895201942665_CRT_backup_1335255.rpl
Backup CRT OK!
Backing up SIMLOCK data...
Setting local mode...
Reading IMEI...
C:\Program Files\ODEON\JAF\ProgData\358952019426659_CRT_backup_1336255.pm
Done!
Backup LCK OK!
Manual mode selected, version can't be checked!
Booting phone...
FAST PHONE detected!

CMT Boot Data:
Asic ID: 000000010000022600010006010C192101003000
Asic Mode ID: 00
Asic EM ID: 00000B22
Asic Public ID: 0BF00019F6660254290A1AA4B3C87294B9416EF1
HASH: BAF3A9C3DBFA8454937DB77F2B8852B100000000
ROM ID: 273F6D55DFAAF68F
CMT Boot File: C:\Program Files\ODEON\JAF\Flash\rap3gv3_2nd.fg
Loader version: 01.1E.00 -> Revision: 0000
Patching CMT boot step1...
Patching CMT boot step2...
Patching CMT boot step3...
CMT Boot Ready
CMT Flash ID: 220C00EC <=> SAMSUNG (SEC) -> K5G1257ATM
CMT Flash Data: 00000000000000000000000000000000
CMT Loader: C:\Program Files\ODEON\JAF\Flash\RAP3Gv3_algo.fg
Loader version: 01.21.01 -> Revision: 0000
Patching CMT loader step1...
Patching CMT loader step3...
CMT Loader Ready
Operation took 0 minutes 5 seconds...
No convertion block detected or file already converted.
Erasing...
Operation took 0 minutes 59 seconds...
Writing...
Stage 1
Sending CMT HASH for NOLO
Sending CMT HASH for KEYS
Sending CMT HASH for PRIMAPP
Sending CMT HASH for PASUBTOC
Sending CMT PUB KEYS...
Sending CMT HASH for UPDAPP
Sending CMT HASH for DSP0
Sending CMT HASH for MCUSW
Booting phone...
FAST PHONE detected!

CMT Boot Data:
Asic ID: 000000010000022600010006010C192101003000
Asic Mode ID: 00
Asic EM ID: 00000B22
Asic Public ID: 0BF00019F6660254290A1AA4B3C87294B9416EF1
HASH: BAF3A9C3DBFA8454937DB77F2B8852B100000000
ROM ID: 273F6D55DFAAF68F
CMT Boot File: C:\Program Files\ODEON\JAF\Flash\rap3gv3_2nd.fg
Loader version: 01.1E.00 -> Revision: 0000
Patching CMT boot step1...
Patching CMT boot step2...
Patching CMT boot step3...
CMT Boot Ready
CMT Flash ID: 220C00EC <=> SAMSUNG (SEC) -> K5G1257ATM
CMT Flash Data: 00000000000000000000000000000000
CMT Loader: C:\Program Files\ODEON\JAF\Flash\RAP3Gv3_algo.fg
Loader version: 01.21.01 -> Revision: 0000
Patching CMT loader step1...
Patching CMT loader step3...
CMT Loader Ready
Operation took 0 minutes 5 seconds...
Stage 1
Booting phone...
FAST PHONE detected!

CMT Boot Data:
Asic ID: 000000010000022600010006010C192101003000
Asic Mode ID: 00
Asic EM ID: 00000B22
Asic Public ID: 0BF00019F6660254290A1AA4B3C87294B9416EF1
HASH: BAF3A9C3DBFA8454937DB77F2B8852B100000000
ROM ID: 273F6D55DFAAF68F
CMT Boot File: C:\Program Files\ODEON\JAF\Flash\rap3gv3_2nd.fg
Loader version: 01.1E.00 -> Revision: 0000
Patching CMT boot step1...
Patching CMT boot step2...
Patching CMT boot step3...
CMT Boot Ready
CMT Flash ID: 220C00EC <=> SAMSUNG (SEC) -> K5G1257ATM
CMT Flash Data: 00000000000000000000000000000000
CMT Loader: C:\Program Files\ODEON\JAF\Flash\RAP3Gv3_algo.fg
Loader version: 01.21.01 -> Revision: 0000
Patching CMT loader step1...
Patching CMT loader step3...
CMT Loader Ready
Operation took 0 minutes 5 seconds...
Stage 1
Booting phone...
FAST PHONE detected!

CMT Boot Data:
Asic ID: 000000010000022600010006010C192101003000
Asic Mode ID: 00
Asic EM ID: 00000B22
Asic Public ID: 0BF00019F6660254290A1AA4B3C87294B9416EF1
HASH: BAF3A9C3DBFA8454937DB77F2B8852B100000000
ROM ID: 273F6D55DFAAF68F
CMT Boot File: C:\Program Files\ODEON\JAF\Flash\rap3gv3_2nd.fg
Loader version: 01.1E.00 -> Revision: 0000
Patching CMT boot step1...
Patching CMT boot step2...
Patching CMT boot step3...
CMT Boot Ready
CMT Flash ID: 220C00EC <=> SAMSUNG (SEC) -> K5G1257ATM
CMT Flash Data: 00000000000000000000000000000000
CMT Loader: C:\Program Files\ODEON\JAF\Flash\RAP3Gv3_algo.fg
Loader version: 01.21.01 -> Revision: 0000
Patching CMT loader step1...
Patching CMT loader step3...
CMT Loader Ready
Operation took 0 minutes 5 seconds...
Stage 1
Booting phone...
FAST PHONE detected!

CMT Boot Data:
Asic ID: 000000010000022600010006010C192101003000
Asic Mode ID: 00
Asic EM ID: 00000B22
Asic Public ID: 0BF00019F6660254290A1AA4B3C87294B9416EF1
HASH: BAF3A9C3DBFA8454937DB77F2B8852B100000000
ROM ID: 273F6D55DFAAF68F
CMT Boot File: C:\Program Files\ODEON\JAF\Flash\rap3gv3_2nd.fg
Loader version: 01.1E.00 -> Revision: 0000
Patching CMT boot step1...
Patching CMT boot step2...
Patching CMT boot step3...
CMT Boot Ready
CMT Flash ID: 220C00EC <=> SAMSUNG (SEC) -> K5G1257ATM
CMT Flash Data: 00000000000000000000000000000000
CMT Loader: C:\Program Files\ODEON\JAF\Flash\RAP3Gv3_algo.fg
Loader version: 01.21.01 -> Revision: 0000
Patching CMT loader step1...
Patching CMT loader step3...
CMT Loader Ready
Operation took 0 minutes 5 seconds...
Stage 1
Booting phone...
FAST PHONE detected!

CMT Boot Data:
Asic ID: 000000010000022600010006010C192101003000
Asic Mode ID: 00
Asic EM ID: 00000B22
Asic Public ID: 0BF00019F6660254290A1AA4B3C87294B9416EF1
HASH: BAF3A9C3DBFA8454937DB77F2B8852B100000000
ROM ID: 273F6D55DFAAF68F
CMT Boot File: C:\Program Files\ODEON\JAF\Flash\rap3gv3_2nd.fg
Loader version: 01.1E.00 -> Revision: 0000
Patching CMT boot step1...
Patching CMT boot step2...
Patching CMT boot step3...
CMT Boot Ready
CMT Flash ID: 220C00EC <=> SAMSUNG (SEC) -> K5G1257ATM
CMT Flash Data: 00000000000000000000000000000000
CMT Loader: C:\Program Files\ODEON\JAF\Flash\RAP3Gv3_algo.fg
Loader version: 01.21.01 -> Revision: 0000
Patching CMT loader step1...
Patching CMT loader step3...
CMT Loader Ready
Operation took 0 minutes 5 seconds...
Stage 1
Booting phone...
FAST PHONE detected!

CMT Boot Data:
Asic ID: 000000010000022600010006010C192101003000
Asic Mode ID: 00
Asic EM ID: 00000B22
Asic Public ID: 0BF00019F6660254290A1AA4B3C87294B9416EF1
HASH: BAF3A9C3DBFA8454937DB77F2B8852B100000000
ROM ID: 273F6D55DFAAF68F
CMT Boot File: C:\Program Files\ODEON\JAF\Flash\rap3gv3_2nd.fg
Loader version: 01.1E.00 -> Revision: 0000
Patching CMT boot step1...
Patching CMT boot step2...
Patching CMT boot step3...
CMT Boot Ready
CMT Flash ID: 220C00EC <=> SAMSUNG (SEC) -> K5G1257ATM
CMT Flash Data: 00000000000000000000000000000000
CMT Loader: C:\Program Files\ODEON\JAF\Flash\RAP3Gv3_algo.fg
Loader version: 01.21.01 -> Revision: 0000
Patching CMT loader step1...
Patching CMT loader step3...
CMT Loader Ready
Operation took 0 minutes 5 seconds...
Stage 1
FAST MODE finish!
Operation took 15 minutes 18 seconds...
Reseting phone...
PPM: C:\Program Files\Nokia\Phoenix\Products\Products\RM-242\rm242__04.81.ppm_blue_c

Booting phone...
FAST PHONE detected!

CMT Boot Data:
Asic ID: 000000010000022600010006010C192101003000
Asic Mode ID: 00
Asic EM ID: 00000B22
Asic Public ID: 0BF00019F6660254290A1AA4B3C87294B9416EF1
HASH: BAF3A9C3DBFA8454937DB77F2B8852B100000000
ROM ID: 273F6D55DFAAF68F
CMT Boot File: C:\Program Files\ODEON\JAF\Flash\rap3gv3_2nd.fg
Loader version: 01.1E.00 -> Revision: 0000
Patching CMT boot step1...
Patching CMT boot step2...
Patching CMT boot step3...
CMT Boot Ready
CMT Flash ID: 220C00EC <=> SAMSUNG (SEC) -> K5G1257ATM
CMT Flash Data: 00000000000000000000000000000000
CMT Loader: C:\Program Files\ODEON\JAF\Flash\RAP3Gv3_algo.fg
Loader version: 01.21.01 -> Revision: 0000
Patching CMT loader step1...
Patching CMT loader step3...
CMT Loader Ready
Operation took 0 minutes 5 seconds...
No convertion block detected or file already converted.
Erasing...
Operation took 0 minutes 14 seconds...
Writing...
Stage 1
Booting phone...
FAST PHONE detected!

CMT Boot Data:
Asic ID: 000000010000022600010006010C192101003000
Asic Mode ID: 00
Asic EM ID: 00000B22
Asic Public ID: 0BF00019F6660254290A1AA4B3C87294B9416EF1
HASH: BAF3A9C3DBFA8454937DB77F2B8852B100000000
ROM ID: 273F6D55DFAAF68F
CMT Boot File: C:\Program Files\ODEON\JAF\Flash\rap3gv3_2nd.fg
Loader version: 01.1E.00 -> Revision: 0000
Patching CMT boot step1...
Patching CMT boot step2...
Patching CMT boot step3...
CMT Boot Ready
CMT Flash ID: 220C00EC <=> SAMSUNG (SEC) -> K5G1257ATM
CMT Flash Data: 00000000000000000000000000000000
CMT Loader: C:\Program Files\ODEON\JAF\Flash\RAP3Gv3_algo.fg
Loader version: 01.21.01 -> Revision: 0000
Patching CMT loader step1...
Patching CMT loader step3...
CMT Loader Ready
Operation took 0 minutes 6 seconds...
Stage 1
Booting phone...
FAST PHONE detected!

CMT Boot Data:
Asic ID: 000000010000022600010006010C192101003000
Asic Mode ID: 00
Asic EM ID: 00000B22
Asic Public ID: 0BF00019F6660254290A1AA4B3C87294B9416EF1
HASH: BAF3A9C3DBFA8454937DB77F2B8852B100000000
ROM ID: 273F6D55DFAAF68F
CMT Boot File: C:\Program Files\ODEON\JAF\Flash\rap3gv3_2nd.fg
Loader version: 01.1E.00 -> Revision: 0000
Patching CMT boot step1...
Patching CMT boot step2...
Patching CMT boot step3...
CMT Boot Ready
CMT Flash ID: 220C00EC <=> SAMSUNG (SEC) -> K5G1257ATM
CMT Flash Data: 00000000000000000000000000000000
CMT Loader: C:\Program Files\ODEON\JAF\Flash\RAP3Gv3_algo.fg
Loader version: 01.21.01 -> Revision: 0000
Patching CMT loader step1...
Patching CMT loader step3...
CMT Loader Ready
Operation took 0 minutes 5 seconds...
Stage 1
FAST MODE finish!
Operation took 4 minutes 49 seconds...
Reseting phone...
CNT: C:\Program Files\Nokia\Phoenix\Products\Products\RM-242\rm242__04.81_ISM_007.image_blue_c

Booting phone...
FAST PHONE detected!

CMT Boot Data:
Asic ID: 000000010000022600010006010C192101003000
Asic Mode ID: 00
Asic EM ID: 00000B22
Asic Public ID: 0BF00019F6660254290A1AA4B3C87294B9416EF1
HASH: BAF3A9C3DBFA8454937DB77F2B8852B100000000
ROM ID: 273F6D55DFAAF68F
CMT Boot File: C:\Program Files\ODEON\JAF\Flash\rap3gv3_2nd.fg
Loader version: 01.1E.00 -> Revision: 0000
Patching CMT boot step1...
Patching CMT boot step2...
Patching CMT boot step3...
CMT Boot Ready
CMT Flash ID: 220C00EC <=> SAMSUNG (SEC) -> K5G1257ATM
CMT Flash Data: 00000000000000000000000000000000
CMT Loader: C:\Program Files\ODEON\JAF\Flash\RAP3Gv3_algo.fg
Loader version: 01.21.01 -> Revision: 0000
Patching CMT loader step1...
Patching CMT loader step3...
CMT Loader Ready
Operation took 0 minutes 5 seconds...
No convertion block detected or file already converted.
Erasing...
Operation took 1 minutes 43 seconds...
Writing...
Stage 1
Booting phone...
FAST PHONE detected!

CMT Boot Data:
Asic ID: 000000010000022600010006010C192101003000
Asic Mode ID: 00
Asic EM ID: 00000B22
Asic Public ID: 0BF00019F6660254290A1AA4B3C87294B9416EF1
HASH: BAF3A9C3DBFA8454937DB77F2B8852B100000000
ROM ID: 273F6D55DFAAF68F
CMT Boot File: C:\Program Files\ODEON\JAF\Flash\rap3gv3_2nd.fg
Loader version: 01.1E.00 -> Revision: 0000
Patching CMT boot step1...
Patching CMT boot step2...
Patching CMT boot step3...
CMT Boot Ready
CMT Flash ID: 220C00EC <=> SAMSUNG (SEC) -> K5G1257ATM
CMT Flash Data: 00000000000000000000000000000000
CMT Loader: C:\Program Files\ODEON\JAF\Flash\RAP3Gv3_algo.fg
Loader version: 01.21.01 -> Revision: 0000
Patching CMT loader step1...
Patching CMT loader step3...
CMT Loader Ready
Operation took 0 minutes 5 seconds...
Stage 1
Booting phone...
FAST PHONE detected!

CMT Boot Data:
Asic ID: 000000010000022600010006010C192101003000
Asic Mode ID: 00
Asic EM ID: 00000B22
Asic Public ID: 0BF00019F6660254290A1AA4B3C87294B9416EF1
HASH: BAF3A9C3DBFA8454937DB77F2B8852B100000000
ROM ID: 273F6D55DFAAF68F
CMT Boot File: C:\Program Files\ODEON\JAF\Flash\rap3gv3_2nd.fg
Loader version: 01.1E.00 -> Revision: 0000
Patching CMT boot step1...
Patching CMT boot step2...
Patching CMT boot step3...
CMT Boot Ready
CMT Flash ID: 220C00EC <=> SAMSUNG (SEC) -> K5G1257ATM
CMT Flash Data: 00000000000000000000000000000000
CMT Loader: C:\Program Files\ODEON\JAF\Flash\RAP3Gv3_algo.fg
Loader version: 01.21.01 -> Revision: 0000
Patching CMT loader step1...
Patching CMT loader step3...
CMT Loader Ready
Operation took 0 minutes 5 seconds...
Stage 1
Booting phone...
FAST PHONE detected!

CMT Boot Data:
Asic ID: 000000010000022600010006010C192101003000
Asic Mode ID: 00
Asic EM ID: 00000B22
Asic Public ID: 0BF00019F6660254290A1AA4B3C87294B9416EF1
HASH: BAF3A9C3DBFA8454937DB77F2B8852B100000000
ROM ID: 273F6D55DFAAF68F
CMT Boot File: C:\Program Files\ODEON\JAF\Flash\rap3gv3_2nd.fg
Loader version: 01.1E.00 -> Revision: 0000
Patching CMT boot step1...
Patching CMT boot step2...
Patching CMT boot step3...
CMT Boot Ready
CMT Flash ID: 220C00EC <=> SAMSUNG (SEC) -> K5G1257ATM
CMT Flash Data: 00000000000000000000000000000000
CMT Loader: C:\Program Files\ODEON\JAF\Flash\RAP3Gv3_algo.fg
Loader version: 01.21.01 -> Revision: 0000
Patching CMT loader step1...
Patching CMT loader step3...
CMT Loader Ready
Operation took 0 minutes 5 seconds...
Stage 1
Booting phone...
FAST PHONE detected!

CMT Boot Data:
Asic ID: 000000010000022600010006010C192101003000
Asic Mode ID: 00
Asic EM ID: 00000B22
Asic Public ID: 0BF00019F6660254290A1AA4B3C87294B9416EF1
HASH: BAF3A9C3DBFA8454937DB77F2B8852B100000000
ROM ID: 273F6D55DFAAF68F
CMT Boot File: C:\Program Files\ODEON\JAF\Flash\rap3gv3_2nd.fg
Loader version: 01.1E.00 -> Revision: 0000
Patching CMT boot step1...
Patching CMT boot step2...
Patching CMT boot step3...
CMT Boot Ready
CMT Flash ID: 220C00EC <=> SAMSUNG (SEC) -> K5G1257ATM
CMT Flash Data: 00000000000000000000000000000000
CMT Loader: C:\Program Files\ODEON\JAF\Flash\RAP3Gv3_algo.fg
Loader version: 01.21.01 -> Revision: 0000
Patching CMT loader step1...
Patching CMT loader step3...
CMT Loader Ready
Operation took 0 minutes 5 seconds...
Stage 1
Booting phone...
FAST PHONE detected!

CMT Boot Data:
Asic ID: 000000010000022600010006010C192101003000
Asic Mode ID: 00
Asic EM ID: 00000B22
Asic Public ID: 0BF00019F6660254290A1AA4B3C87294B9416EF1
HASH: BAF3A9C3DBFA8454937DB77F2B8852B100000000
ROM ID: 273F6D55DFAAF68F
CMT Boot File: C:\Program Files\ODEON\JAF\Flash\rap3gv3_2nd.fg
Loader version: 01.1E.00 -> Revision: 0000
Patching CMT boot step1...
Patching CMT boot step2...
Patching CMT boot step3...
CMT Boot Ready
CMT Flash ID: 220C00EC <=> SAMSUNG (SEC) -> K5G1257ATM
CMT Flash Data: 00000000000000000000000000000000
CMT Loader: C:\Program Files\ODEON\JAF\Flash\RAP3Gv3_algo.fg
Loader version: 01.21.01 -> Revision: 0000
Patching CMT loader step1...
Patching CMT loader step3...
CMT Loader Ready
Operation took 0 minutes 5 seconds...
Stage 1
FAST MODE finished!
Operation took 12 minutes 3 seconds...
Reseting phone...
Done!
Total time: 35 Minutes, 24 Seconds

DCT4/BB5 counter: 25773
After flash processing...
Waiting for phone to boot...
Reading...
Phone type: RM-242, Software version: 04.81
IMEI: 358952019426659
APE Ver: (null)
Variant Ver: (null)
Product Code: 0558264
Done!


B.R.

47

HWK / >>> HWK Release 14/05/2008 <<<

« on: May 14, 2008, 12:06:39 PM »

>>> HWK Release 14/05/2008 <<<
Release Date: 14/05/2008

The Official release is ready in our download area http://sarunasoftware.com.


Since this is a MINOR release there is NO need to update your HWK, there is also NO need to remove HWK Suite v2.0.7


WARNING !!!
If the HWK is a "TRIAL" or affected by 3rd party tools, this software may not work properly, so use at your own risk.


UFS_DCTxBB5 v2.0.7.1
----------------------

1. New BB5 products: RM-337,RM-364,RM-365,RM-366,RM-451
(6300i,3120c-x,8800e-5)
2. New DCT4 products: RM-340,RM-341,RM-362,RM-363
(2600c-2,2600c-2b,5000d-2,5000d-2b)
3. Flash Update pack (8.6.1.31560) added.
4. New RAP, UPP ASIC's and FLASH Chip's support.
5. New DCT4+ product unlock (see corresponding list)
6. BB5 ASK file will be created during "Rd Cert"

Do not use external VPP adapter with RX2 enabled cables, since this will put VPP direct to RX2 and its possible to KILL the phone. This has always been the case with 7 pin cables, but from this release 7 pin cables are supported by UFS+HWK.


Nokia DCT4+ Patch Unlock List is installed to your start menu under:-

SarasSoft\HWK\Documents

b.r.

48

FuriouS TeaM Products / Lg U890 Unlock

« on: May 14, 2008, 11:36:47 AM »

1. Flash using special file from support (U890_64K_SIM_EASY_TEMPUNLOCK.sex)
2. Detach phone from usb cable
3. Insert orginal simcard or any sim card accepted by phone
4. Put the usb cable or charger (phone start charging)
5. Wait 10 sec then power on the phone.
6. Go in phone menu at 'unit converter' (the phone will restart)
7. Quickly remove battery, change current sim with other one (64k, 128k) and put battery back and wait.

P.S: if phone results on 'no network' then write nv file for u890 from support and
then repeat the procedure from 2 to 7.[/I][/SIZE]







This temporary unlock only not permanent unlock.

b.r.

49

Infinity-Box / 6300 china phone format success

« on: May 11, 2008, 01:26:36 PM »

problem:  phone restarts when sim is inserted.
action taken : Formatt Fs with infinity

phone read info:



Formatt Fs:



imei rebuild after formatt fs:



Pinout used:



b.r.

50

Infinity-Box / 6120C china phone FORMATT SUCCESS

« on: May 07, 2008, 08:42:40 AM »

formatt fs:



imei rebuild




PINOUTS:





b.r.

51

Universalbox Dongle / 1650 dead successfully revived with UB box

« on: May 03, 2008, 08:00:34 AM »

Problem: Nokia 1650 dead phone. My costumer said he was just changing the sim card while the unit was charging. After changing the sim and replacing the battery. He did not put the back cover of the unit. The battery accidentally was removed for about 2 mins. After noticing the battery was removed, he inserted the battery again. And he noticed it was not charging anymore. He tried powering on the unit, but won't power-on.

Action taken : 1st tried flashing the unit couple of times. But phone still won't boot after flashing. So i decided full erasing the unit using 1110 erase files. After full erase, flashed the unit, write pm file, then unlock the unit. Now unit is alive and working fine. After write pm you have to unlock unit first beacuase phone will display " contact service" just unlock unit to solve this.

screen shots:


flashing error:



flash erase (using 1110 erase files)



flashing completed:



pm write





unlocking







b.r.

52

DCT4 Section / 2610b at&t 4.70 ver. imei 01xxxxxxxxxxx convert success

« on: May 01, 2008, 12:48:14 PM »

1. Check firmware version , if it.s 4.70. If so, just flash unit with rh-86 fw 4.90 mcu,ppm,cnt. Write good pm file.
2. after flashing unlock unit. Then do hardware modifications. Change 2 filters.

Flash file + pm file here: http://www.mediafire.com/?yttlcth2wzq

Jaf operation logs:

Read info

Powering the phone...
Reading...
MCU SW version: V 04.70
29-01-07
RH-87
(c) Nokia.  
HW version: 6001
PCI version:
UEM version: 1328
UPP version: 12352
RFIC version: 0500
DSP version: P05w45.v48
LCD version: ELBE
PPM version: V 04.70
29-01-07
RH-86_87
(c) Nokia.  
MCR
Content Pack version: Content: att
V 04.70
29-03-07
RH-87
(c) Nokia.  
Production serial number: RYL105981
Product code: 0544144
Module code: 0202932
Basic production code: 0531164
Flash code:
Order number:
Product specific data:
Long production SN:
ATO:
Default SN type:
IMEI plain: 011191003736869
IMEI spare to net: 0A 11 91 01 30 37 86 06
IMEI SV to net: 03 11 91 01 30 37 86 36 F4
Master Code: 6213514410
Phone type: RH-87, Software version: 04.70, Language Pack: MCR
User code: 12345

Block 1:
Lock 1: CLOSED -> Lock Data: 310150
Block 2:
Lock 1: CLOSED -> Lock Data: 310170
Block 3:
Lock 1: CLOSED -> Lock Data: 311180
Block 4:
Lock 1: CLOSED -> Lock Data: 310410
Block 5:
Lock 1: CLOSED -> Lock Data: 310980

Searching for saved ini...
Checking for file C:\Program Files\ODEON\JAF\JAF_RH-87.ini
Saved INI not found, loading INI list...
Setting local mode...
Reading product code...
Product Code: 0544144

Flashing

FILES SET FOR FLASHING:
MCU Flash file: C:\Program Files\Nokia\Phoenix\Products\RH-86\rh86_87__04.90.mcusw
PPM Flash file: C:\Program Files\Nokia\Phoenix\Products\RH-86\rh86_87__04.90.ppm_eh
CNT Flash file: C:\Program Files\Nokia\Phoenix\Products\RH-86\rh86_87__04.90.image_bite_lt
ADSP Flash file: NONE
APE Variant file: NONE
APE User Flash file: NONE
Languages in ppm: English,Lithuanian,Russian
Backing up PM Field 208 as RPL...
Setting local mode...
Reading IMEI...
Reading IMEI data...
Building RPL backup file...
C:\Program Files\ODEON\JAF\ProgData\011191003736869_imei_backup_175304.rpl
Done!
Backup imei OK!
MCU: C:\Program Files\Nokia\Phoenix\Products\RH-86\rh86_87__04.90.mcusw
Booting phone...
MCU ID: 0x3040
BOOT file: C:\Program Files\ODEON\JAF\Flash\u3_2nd.fia
Loader version: 04.46.01 -> Revision: 0007
Boot size is 0x09A8
Boot is ready...
FLASH ID0: 2C7E0001 <=> SPANSION -> 72NS128N Addr0: 0x01000000 - 0x01FFFFFF, SectorSize0: 11
FLASH ID1: 00010000 <=> Flash -> not used Addr1: 0x02000000 - 0x02FFFFFF, SectorSize1: 0
First 16 bytes: AD 7E B6 1A 1B BE 0B E2 7D 58 6B E4 DB EE 65 14
Flash ID is 0x7E2C0100
Flash loader is C:\Program Files\ODEON\JAF\Flash\u3_amd.fia
Loader version: 04.46.01 -> Revision: 0007
Loader size is 0x7528; Loader chk: 84
Loader is ready...
P-key nokia module version 01.01
MSID: 8415363C7D1FFEDB8D4665B414
MSID decoded: 4FE0BAE9001354A9A9000000
FAID: 67758FE3A7FA896547406D98
Operation took 0 minutes 16 seconds...
Erasing...
Found 3 interval(s) to erase
Erasing area: 01000000 - 0101FFFF...
Erasing area: 01020000 - 018DFFFF...
Erasing area: 01EE0000 - 01FDFFFF...
Operation took 0 minutes 47 seconds...
Writing...
Perm. Data Restore OK
Operation took 1 minutes 38 seconds...
Restarting MCU...
CNT: C:\Program Files\Nokia\Phoenix\Products\RH-86\rh86_87__04.90.image_bite_lt
Booting phone...
MCU ID: 0x3040
BOOT file: C:\Program Files\ODEON\JAF\Flash\u3_2nd.fia
Loader version: 04.46.01 -> Revision: 0007
Boot size is 0x09A8
Boot is ready...
FLASH ID0: 2C7E0001 <=> SPANSION -> 72NS128N Addr0: 0x01000000 - 0x01FFFFFF, SectorSize0: 11
FLASH ID1: 00010000 <=> Flash -> not used Addr1: 0x02000000 - 0x02FFFFFF, SectorSize1: 0
First 16 bytes: AD 7E B6 1A 1B BE 0B E2 7D 58 6B E4 DB EE 65 14
Flash ID is 0x7E2C0100
Flash loader is C:\Program Files\ODEON\JAF\Flash\u3_amd.fia
Loader version: 04.46.01 -> Revision: 0007
Loader size is 0x7528; Loader chk: 84
Loader is ready...
P-key nokia module version 01.01
MSID: 84F19C235358A223A5BECF735C
MSID decoded: D26EBAF1001354A9AA000610
FAID: 79FA22DCF2C49571C19F5006
Operation took 0 minutes 17 seconds...
Erasing Content Pack...
Found 1 interval(s) to erase
Erasing area: 01B80000 - 01EDFFFF...
Operation took 0 minutes 15 seconds...
Writing...
Writing converted flash to 128k page
Perm. Data Restore OK
Operation took 0 minutes 14 seconds...
Restarting MCU...
Operation took 0 minutes 1 seconds...
Extracting Content Pack...
Running: (c) Nokia File Server
CNT Extract Skiped.
Operation took 0 minutes 4 seconds...
PPM: C:\Program Files\Nokia\Phoenix\Products\RH-86\rh86_87__04.90.ppm_eh
Booting phone...
MCU ID: 0x3040
BOOT file: C:\Program Files\ODEON\JAF\Flash\u3_2nd.fia
Loader version: 04.46.01 -> Revision: 0007
Boot size is 0x09A8
Boot is ready...
FLASH ID0: 2C7E0001 <=> SPANSION -> 72NS128N Addr0: 0x01000000 - 0x01FFFFFF, SectorSize0: 11
FLASH ID1: 00010000 <=> Flash -> not used Addr1: 0x02000000 - 0x02FFFFFF, SectorSize1: 0
First 16 bytes: AD 7E B6 1A 1B BE 0B E2 7D 58 6B E4 DB EE 65 14
Flash ID is 0x7E2C0100
Flash loader is C:\Program Files\ODEON\JAF\Flash\u3_amd.fia
Loader version: 04.46.01 -> Revision: 0007
Loader size is 0x7528; Loader chk: 64
Loader is ready...
P-key nokia module version 01.01
MSID: 8459D0CCCC8D7AC933D421175D
MSID decoded: 3E4EBAE9001354A9A9000000
FAID: 9DD41165DAA4299F88DA3531
Operation took 0 minutes 16 seconds...
Erasing PPM...
Found 1 interval(s) to erase
Erasing area: 018E0000 - 01B7FFFF...
Operation took 0 minutes 13 seconds...
Writing...
Perm. Data Restore OK
Operation took 0 minutes 18 seconds...
Restarting MCU...
Flashing Done!
Operation took 4 minutes 27 seconds...

After flash processing...
Waiting for phone to boot...
Reading...
Phone type: RH-87, Software version: 04.90
IMEI: 011191003736869
Product Code: 0544144
Resetting PPC...
Done!

Pm write

30:04:2008  17:10 -> Powering the phone...
30:04:2008  17:10 -> Writing PM...
30:04:2008  17:10 -> Field: 1, Record: 0, Len: 120
30:04:2008  17:10 -> Field: 1, Record: 2, Len: 90
30:04:2008  17:10 -> Field: 1, Record: 4, Len: 110
30:04:2008  17:10 -> Field: 1, Record: 5, Len: 2
30:04:2008  17:10 -> Field: 1, Record: 6, Len: 90
30:04:2008  17:10 -> Field: 1, Record: 11, Len: 2
30:04:2008  17:10 -> Field: 1, Record: 12, Len: 2
30:04:2008  17:10 -> Field: 2, Record: 0, Len: 384
30:04:2008  17:10 -> Field: 4, Record: 0, Len: 1
30:04:2008  17:10 -> Field: 4, Record: 1, Len: 48
30:04:2008  17:10 -> Field: 4, Record: 2, Len: 44
30:04:2008  17:10 -> Field: 4, Record: 3, Len: 10
30:04:2008  17:10 -> Field: 4, Record: 4, Len: 8
30:04:2008  17:10 -> Field: 4, Record: 5, Len: 8
30:04:2008  17:10 -> Field: 4, Record: 6, Len: 8
30:04:2008  17:10 -> Field: 4, Record: 9, Len: 5
30:04:2008  17:10 -> Field: 4, Record: 16, Len: 4
30:04:2008  17:10 -> Field: 4, Record: 18, Len: 80
30:04:2008  17:10 -> Field: 4, Record: 19, Len: 4
30:04:2008  17:10 -> Field: 7, Record: 0, Len: 4
30:04:2008  17:10 -> Field: 7, Record: 1, Len: 32
30:04:2008  17:10 -> Field: 7, Record: 2, Len: 4
30:04:2008  17:10 -> Field: 8, Record: 0, Len: 12
30:04:2008  17:10 -> Field: 8, Record: 1, Len: 12
30:04:2008  17:10 -> Field: 8, Record: 2, Len: 128
30:04:2008  17:10 -> Field: 8, Record: 3, Len: 128
30:04:2008  17:10 -> Field: 8, Record: 7, Len: 8
30:04:2008  17:10 -> Field: 8, Record: 8, Len: 8
30:04:2008  17:10 -> Field: 8, Record: 9, Len: 8
30:04:2008  17:10 -> Field: 11, Record: 0, Len: 4
30:04:2008  17:10 -> Field: 11, Record: 1, Len: 4
30:04:2008  17:10 -> Field: 11, Record: 2, Len: 4
30:04:2008  17:10 -> Field: 11, Record: 3, Len: 4
30:04:2008  17:10 -> Field: 11, Record: 4, Len: 1
30:04:2008  17:10 -> Field: 11, Record: 5, Len: 6
30:04:2008  17:10 -> Field: 11, Record: 6, Len: 2
30:04:2008  17:10 -> Field: 11, Record: 7, Len: 1
30:04:2008  17:11 -> Field: 11, Record: 8, Len: 1
30:04:2008  17:11 -> Field: 11, Record: 9, Len: 1
30:04:2008  17:11 -> Field: 11, Record: 10, Len: 1
30:04:2008  17:11 -> Field: 11, Record: 11, Len: 1
30:04:2008  17:11 -> Field: 11, Record: 12, Len: 1
30:04:2008  17:11 -> Field: 11, Record: 13, Len: 1
30:04:2008  17:11 -> Field: 11, Record: 14, Len: 2
30:04:2008  17:11 -> Field: 11, Record: 15, Len: 2
30:04:2008  17:11 -> Field: 11, Record: 16, Len: 2
30:04:2008  17:11 -> Field: 11, Record: 17, Len: 2
30:04:2008  17:11 -> Field: 11, Record: 18, Len: 16
30:04:2008  17:11 -> Field: 11, Record: 19, Len: 2
30:04:2008  17:11 -> Field: 11, Record: 20, Len: 2
30:04:2008  17:11 -> Field: 11, Record: 21, Len: 2
30:04:2008  17:11 -> Field: 11, Record: 22, Len: 2
30:04:2008  17:11 -> Field: 11, Record: 23, Len: 2
30:04:2008  17:11 -> Field: 11, Record: 24, Len: 2
30:04:2008  17:11 -> Field: 11, Record: 25, Len: 2
30:04:2008  17:11 -> Field: 11, Record: 26, Len: 2
30:04:2008  17:11 -> Field: 11, Record: 27, Len: 2
30:04:2008  17:11 -> Field: 11, Record: 28, Len: 2
30:04:2008  17:11 -> Field: 11, Record: 29, Len: 2
30:04:2008  17:11 -> Field: 11, Record: 30, Len: 2
30:04:2008  17:11 -> Field: 11, Record: 31, Len: 2
30:04:2008  17:11 -> Field: 11, Record: 32, Len: 2
30:04:2008  17:11 -> Field: 11, Record: 33, Len: 2
30:04:2008  17:11 -> Field: 11, Record: 34, Len: 2
30:04:2008  17:11 -> Field: 11, Record: 35, Len: 2
30:04:2008  17:11 -> Field: 11, Record: 36, Len: 2
30:04:2008  17:11 -> Field: 11, Record: 37, Len: 2
30:04:2008  17:11 -> Field: 11, Record: 38, Len: 2
30:04:2008  17:11 -> Field: 11, Record: 39, Len: 2
30:04:2008  17:11 -> Field: 11, Record: 40, Len: 2
30:04:2008  17:11 -> Field: 11, Record: 41, Len: 2
30:04:2008  17:11 -> Field: 11, Record: 42, Len: 2
30:04:2008  17:11 -> Field: 11, Record: 43, Len: 2
30:04:2008  17:11 -> Field: 11, Record: 44, Len: 2
30:04:2008  17:11 -> Field: 11, Record: 45, Len: 2
30:04:2008  17:11 -> Field: 11, Record: 46, Len: 2
30:04:2008  17:11 -> Field: 11, Record: 47, Len: 2
30:04:2008  17:11 -> Field: 11, Record: 48, Len: 2
30:04:2008  17:11 -> Field: 11, Record: 49, Len: 2
30:04:2008  17:11 -> Field: 11, Record: 50, Len: 2
30:04:2008  17:11 -> Field: 11, Record: 51, Len: 2
30:04:2008  17:11 -> Field: 11, Record: 52, Len: 2
30:04:2008  17:11 -> Field: 11, Record: 53, Len: 2
30:04:2008  17:11 -> Field: 11, Record: 54, Len: 2
30:04:2008  17:11 -> Field: 11, Record: 55, Len: 2
30:04:2008  17:11 -> Field: 11, Record: 56, Len: 2
30:04:2008  17:11 -> Field: 11, Record: 57, Len: 2
30:04:2008  17:11 -> Field: 11, Record: 58, Len: 2
30:04:2008  17:11 -> Field: 11, Record: 59, Len: 2
30:04:2008  17:11 -> Field: 11, Record: 60, Len: 4
30:04:2008  17:11 -> Field: 11, Record: 61, Len: 1
30:04:2008  17:11 -> Field: 11, Record: 62, Len: 4
30:04:2008  17:11 -> Field: 11, Record: 63, Len: 4
30:04:2008  17:11 -> Field: 11, Record: 64, Len: 4
30:04:2008  17:11 -> Field: 11, Record: 65, Len: 4
30:04:2008  17:11 -> Field: 11, Record: 66, Len: 16
30:04:2008  17:11 -> Field: 11, Record: 67, Len: 4
30:04:2008  17:11 -> Field: 11, Record: 68, Len: 2
30:04:2008  17:11 -> Field: 11, Record: 69, Len: 21
30:04:2008  17:11 -> Field: 12, Record: 0, Len: 102
30:04:2008  17:11 -> Done!

Unlock

30:04:2008  17:12 -> Powering the phone...
30:04:2008  17:12 -> Unlocking...
30:04:2008  17:12 -> IMEI: 011191003736869
30:04:2008  17:12 -> ASIC: b
30:04:2008  17:12 -> SW version: 04.90
30:04:2008  17:12 -> Selected flash file: C:\Program Files\Nokia\Phoenix\Products\RH-86\rh86_87__04.90.mcusw
Decrypting flash...
30:04:2008  17:12 -> Encrypting....
30:04:2008  17:12 -> CHK Patch found - Unlock Patch found and are not in same block
30:04:2008  17:12 -> Patch status: 01
30:04:2008  17:12 ->
MCU ID: 0x3040
30:04:2008  17:12 -> Algo is ready...
30:04:2008  17:12 -> P-key nokia module version 01.01
30:04:2008  17:12 -> Erasing area: 010A0000 - 010BFFFF...
30:04:2008  17:12 -> Unlocking...
30:04:2008  17:12 -> Checking locks...
30:04:2008  17:12 ->
Block 1:
30:04:2008  17:12 -> Lock 1: OPEN 30:04:2008  17:12 -> Lock 2: OPEN 30:04:2008  17:12 -> Lock 3: OPEN 30:04:2008  17:12 -> Lock 4: OPEN 30:04:2008  17:12 -> Lock 5: OPEN 30:04:2008  17:12 ->
Block 2:
30:04:2008  17:12 -> Lock 1: OPEN 30:04:2008  17:12 -> Lock 2: OPEN 30:04:2008  17:12 -> Lock 3: OPEN 30:04:2008  17:12 -> Lock 4: OPEN 30:04:2008  17:12 -> Lock 5: OPEN 30:04:2008  17:12 ->
Block 3:
30:04:2008  17:12 -> Lock 1: OPEN 30:04:2008  17:12 -> Lock 2: OPEN 30:04:2008  17:12 -> Lock 3: OPEN 30:04:2008  17:12 -> Lock 4: OPEN 30:04:2008  17:12 -> Lock 5: OPEN 30:04:2008  17:12 ->
Block 4:
30:04:2008  17:12 -> Lock 1: OPEN 30:04:2008  17:12 -> Lock 2: OPEN 30:04:2008  17:12 -> Lock 3: OPEN 30:04:2008  17:12 -> Lock 4: OPEN 30:04:2008  17:12 -> Lock 5: OPEN 30:04:2008  17:12 ->
Block 5:
30:04:2008  17:12 -> Lock 1: OPEN 30:04:2008  17:12 -> Lock 2: OPEN 30:04:2008  17:12 -> Lock 3: OPEN 30:04:2008  17:12 -> Lock 4: OPEN 30:04:2008  17:12 -> Lock 5: OPEN 30:04:2008  17:12 ->
Block 6:
30:04:2008  17:12 -> Lock 1: OPEN 30:04:2008  17:12 -> Lock 2: OPEN 30:04:2008  17:12 -> Lock 3: OPEN 30:04:2008  17:12 -> Lock 4: OPEN 30:04:2008  17:12 -> Lock 5: OPEN 30:04:2008  17:12 ->
Block 7:
30:04:2008  17:12 -> Lock 1: OPEN 30:04:2008  17:12 -> Lock 2: OPEN 30:04:2008  17:12 -> Lock 3: OPEN 30:04:2008  17:12 -> Lock 4: OPEN 30:04:2008  17:12 -> Lock 5: OPEN 30:04:2008  17:12 ->



b.r.

53

Infinity-Box / Alcatel E101 " permanently blocked " unblocked

« on: April 29, 2008, 10:25:34 AM »

Unit does not accept any simcards when inserted. Display shows "permanently blocked". Action taken unlock unit. I used Alcatel E207 from FG.







b.r.

54

Setool Section / Z530i hardtime flashing unit

« on: April 24, 2008, 08:36:59 AM »

problem : Z530i hang/restart when powered on.
action taken : Tried 1st flashing with setool. But always get this error " Send superblock command NAK ". I used fully charged battery and rps.Tried many times always this same error. For this reheat cpu and flash I.C. Now flashing completed succesfully.

error log:

ChipID:8040,EMP protocol:0301
PHONE IS RED RETAIL PRODUCT
FLASH CID detected:49
Speed:460800
OTP LOCKED:1 CID:49 PAF:1 IMEI:35928400144671 CERT:RED
PATCH:061204 1529 HAN_DB2010_MEM_PATCHER_R2A007_CXC9876543210 0
LDR:060718 0842 LIE_DB2010_FLASHLOADER_R2A003_CXC1326738

REMOVE BATTERY FROM PHONE, THEN INSERT IT BACK
THEN PRESS "READY"

Trying to launch embedded bootloader...
INT LDR:COMPACT_ID_LOADER_CRIPPLED_SETOOL2_R2
Flash ID check:897E
Flash props sent ok
FOUND: R6BA030_CXC1250457_HONG_KONG_MU
Restore from:R6BA030_CXC1250457_HONG_KONG_MU
writing E:\setool flashes\SE\Z530i\r6ac001_CXC1250454_GENERIC_MU.ssw .cry
CURRENT FLASH FILE CID:49
SSW uses dynamic hash, dynamic hash len is:328
Will flash 328 blocks...
Send superblock command NAK
Elapsed: 327 secs.

Flashing screenshots after reheat of cpu and flash i.c.



unlock repair





b.r.

55

Setool Section / K600 white-screen/ freeze on "please wait" repair done

« on: April 19, 2008, 03:07:58 PM »

Problem : k600 white screen only
Action taken: Flash unit first with main +fs settings complete. After flashing phone powers up but just freezes on " please wait " display menu. To solve that i flashed it again with k600_gdfs_in_ ssw_format.ssw (can be found on setool gdfs_in_ssw_format), main + fs. settings complete/unlock after flash/patch otp<>gdfs check in firmware/allow imei change when unlocking.

Setool logs:

v0.914027/UNI
CARD SERIAL: 0000:)
Loaded 51 flash descriptors
Connecting to UFS...
Found 2 FTDI device(s).
UFS #2:) READY
ChipID:7100,EMP protocol:0301
PHONE IS RED RETAIL PRODUCT
FLASH CID detected:49
Speed:460800
OTP LOCKED:1 CID:36 PAF:1 IMEI:35657300002144 CERT:RED
 
REMOVE BATTERY FROM PHONE, THEN INSERT IT BACK
THEN PRESS "READY"
 
Trying to launch embedded bootloader...
INT LDR:050810 0923 DB2000_CRIPPLED_PRELOADER_SETOOL2_R2B
Flash ID check:890D
Flash props sent ok
FOUND: R2T002_CXC1250079_CHINA_MI
Restore from:R2T002_CXC1250079_CHINA_MI
Switching to USB...
interface not changed
writing E:\BOX UPDATES\setool updates\v0.914020\gdfs_in_ssw_format\k600_gdfs_in_ssw_format.ssw
CURRENT FLASH FILE CID:254
SSW uses dynamic hash, dynamic hash len is:16
Will flash 16 blocks...
SSW loading returns:0
writing E:\setool flashes\SE\K600\R2T002\K600_r2t002_main_Red49.cry
CURRENT FLASH FILE CID:254
SSW uses dynamic hash, dynamic hash len is:353
Will flash 353 blocks...
SSW loading returns:0
writing E:\setool flashes\SE\K600\R2T002\K600_r2t002_fs_Red49.cry
CURRENT FLASH FILE CID:254
SSW uses dynamic hash, dynamic hash len is:114
Will flash 114 blocks...
SSW loading returns:0
LDR:051125 1048 FILE_SYSTEM_LOADER_SETOOL2_V24
loader startup: executed
loader GDFS startup: executed
loader filesystem startup: executed
loader unlock: executed
writing tpa/preset/custom/C3_PCA_G3v2.cer
writing tpa/preset/custom/CONTENT_DOWNLOAD_HOOK_2.itm
writing tpa/preset/custom/customize.xml
writing tpa/preset/custom/DESKTOP_HOOK_2.itm
writing tpa/preset/custom/Entrust.net Root Certificate.cer
writing tpa/preset/custom/Entrust.net_WTLS_Root_Certificate.wcrt
writing tpa/preset/custom/FM_PICTURES_HOOK_3.itm
writing tpa/preset/custom/FM_SOUNDS_HOOK_3.itm
writing tpa/preset/custom/FM_THEMES_HOOK_3.itm
writing tpa/preset/custom/FM_VIDEOS_HOOK_3.itm
writing tpa/preset/custom/GAMES_HOOK_3.itm
writing tpa/preset/custom/GTE_CyberTrust_Root.cer
writing tpa/preset/custom/GTE_Cybe_Trust_Root_WTLS.wcrt
writing tpa/preset/custom/Root.cer
writing tpa/preset/custom/SEMC_E2E_Root_CA.crt
writing tpa/preset/custom/SETT_RINGTONE_HOOK_3.itm
writing tpa/preset/custom/ThawtePremium.der
writing tpa/preset/custom/ThawteServerCA.cer
writing tpa/preset/custom/Utiroot.cer
writing tpa/preset/custom/VeriSignClass3Root.cer
writing tpa/preset/custom/Verisign_Class_3_CA_WTLS.wcrt
Phone detached
Elapsed: 901 secs.
ChipID:7100,EMP protocol:0301
PHONE IS RED RETAIL PRODUCT
FLASH CID detected:49
Speed:460800
OTP LOCKED:1 CID:36 PAF:1 IMEI:35657300002144 CERT:RED
 
REMOVE BATTERY FROM PHONE, THEN INSERT IT BACK
THEN PRESS "READY"
 
Trying to launch embedded bootloader...
INT LDR:050810 0923 DB2000_CRIPPLED_PRELOADER_SETOOL2_R2B
Flash ID check:890D
Flash props sent ok
FOUND: R2T002_CXC1250079_CHINA_MI
Restore from:R2T002_CXC1250079_CHINA_MI
Searching...
Firmware OTP check determined.
Setting up GDFS...
IMEI MISMATCH !!!! POSSIBLE STOLEN PHONE !!!!!
ORIGINAL IMEI:35657300002144
CURRENT  IMEI:35657300001947
Writing simlocks...
ALL UNLOCK/LOCK CODES SET TO "22431451"
Signing...
control keys complete.
full sig complete.
Unlock DONE
Elapsed: 85 secs.


b.r.

56

HWK / D900i unlock succes ufs hwk samsung

« on: April 19, 2008, 09:47:06 AM »

I used D800 cable from Ns Pro.


b.r.

57

DreamBox / K800 white screen success repair via flashing

« on: April 18, 2008, 02:38:05 PM »

-- Writing firmware-----------------------------------------------------------
User selected phone K800 using Normal boot mode
1) Turn OFF the phone.
2) Connect the phone to DreamBox cable.
Boot Responce = 5A
Processor ID = 99000301FFFFFFFF (DB2020 / DB2030)
NOR Flash ID = 897E
OTP Status = LOCKED
OTP IMEI = 353996-01-53744:)
OTP CID = 49
EROM Color = 4 : RED
EROM CID = 52
Sending Main Firmware Certificate ... OK.
Writing Main Firmware Blocks Finished.
Sending File System Certificate ... OK.
Writing File System Blocks Finished.
Starting CS Loader GDFS Service ...
Starting CS Loader File System Service ...
Uploading files:
> tpa\preset\custom\CONTENT_DOWNLOAD_HOOK.itm ... OK.
> tpa\preset\custom\Customize.xml ... OK.
> tpa\preset\custom\FM_PICTURES_HOOK_3.itm ... OK.
> tpa\preset\custom\FM_SOUNDS_HOOK_3.itm ... OK.
> tpa\preset\custom\FM_THEMES_HOOK_3.itm ... OK.
> tpa\preset\custom\FM_VIDEOS_HOOK_3.itm ... OK.
> tpa\preset\custom\GAMES_HOOK_3.itm ... OK.
> tpa\preset\custom\MEDIA_PLAYER_HOOK_3.itm ... OK.
> tpa\preset\custom\ORG_APPLICATIONS_HOOK_3.itm ... OK.
> tpa\preset\custom\preloaded_config.xml ... OK.
> tpa\preset\custom\SETT_RINGTONE_HOOK_1.itm ... OK.
> tpa\preset\custom\SETT_SCREENSAVER_HOOK_1.itm ... OK.
> tpa\preset\custom\SETT_STARTSHOW_HOOK_1.itm ... OK.
> tpa\preset\custom\SETT_WALLPAPER_HOOK_1.itm ... OK.
> tpa\preset\custom\VIDEO_PLAYER_HOOK_1.itm ... OK.

Customizing GDFS ...
country : Sweden
operator : Sony Ericsson
language-variant-name : M_EAST_N_AFR

Done.

Phone's original CID is CID49 convert it first to CID52 then flash unit with CID52 flashfiles from DBSS support site.

b.r.

58

DreamBox / Dbss 3.3.1

« on: April 17, 2008, 09:27:31 AM »

Dbss 3.3.1 --------------------------------------------------------------------------------

Dear users,
We are pleased to announce a release of new versions of DBSS v3.3.1

In this update:
"New CID" option for Execute "Security Bypass" Operations.

This option is meant for those users who repaired/unlocked K310/K320/K510/W810 phones before the support of these models was officially added in DBSS 3.3. To ensure correct update process by means of SEUS, just set CID=50 in these phones.

DreamBox – get more with it.

b.r.

59

Smart-Clip / My step by step V3x "bootloader only" flashing procedure with smart moto

« on: April 16, 2008, 12:25:00 PM »

Just want to share my flashing procedure for V3x bootloader only.You can also use this for unlocking via prepare phone and repair pds operations.




1.disassemble phone, locate tp location, solder jumperwire



2.now open smart moto
3.connect USB cable
4.connect testpoint to ground (i use unit vibrator as ground connection)
5.insert battery and put rubberband for support



6.press search tab on smart moto then connect phone battery.



7.smart moto should detect "S blank neptune lte" OR "s blank paragon POG", or s blank rainbow POG"
8.After unit is detected by smartmoto disconnect testpoint
9.Now phone is for flash/repair operations

Smart moto flashing:

1.After unit is detected via tp




2. tick flash tab on smart moto




3. tick enter flashmode tab, wait after unit is prepared for flashing by smartmoto




4. tick browse tab and select flash file




5. After flash files are loaded tick write flash tab wait until flash operation finishes.





note: if you encounter "clip communication failed" or "i.o. timeout" just restart pc, then repeat process again.

Hope this will be useful for others.

my test point pics:



Cable is from old damage k750 cable which has tp cable. I also use it for  703sh and 903sh which requires tp procedure for flash / unlock purposes.

b.r.

60

Motorolla Hardware Section / Need c139 P.A. jumper solution

« on: April 15, 2008, 09:59:46 AM »

Bros anybody have C139 p.a. jumper solution. thanks in advance.

b.r.