Flashing PDA W950 blinking.
Cara flash
-cukup kita memilih firmware dalam bentuk .zip kita add kan pada tab file flash.
-kita gunakan kabel dcu-60
-meski kondisi hp blink konekan ponsel dg kabel dcu 60 sampai PC ndetek ponsel tersebut dg menekan tombol C di ponsel.(agak lama memang krn ponsel tdk normal dlm ndetek ponsel).
-setelah ponsel kedetek di pc arahkan driver driver w950 tentunya.
-lalu klik dulu indentify utk melihat info firmware juga kebetulan phonsel yg saya flah ada kode phonelock yg berubah dari standarnya.catat dulu kode tersebut.
-cek lagi firmware yg kita add kan tadi yg masih dalam bentuk .zip
-jangan lupa batre full.
-klik flash (tanpa menandai tab seting}.
Ini lognya
v0.914023/UNI
CARD SERIAL: 0000xxxxx
Loaded 51 flash descriptors
PLEASE IGNORE "PRESS POWER ON" MESSAGES !!!!
detected MASTER on COM28, SLAVE on COM29
PDA EROM VERSION: CXC162097 R2D01
Open COM port OK
ChipID:7100,EMP protocol:0301
NEW SECURITY MODEL DETECTED
PHONE IS RED RETAIL PRODUCT
FLASH CID detected:49
Speed:921600
Flash ID check:8964
Flash props sent ok
OTP LOCKED:1 CID:49 PAF:1 IMEI:35286301293258 CERT:RED
FLASH CID:49 COLOR:RED
phone model: W950i
part number: FAD-3022013-BV
Phone part version: CXC162037 R9G007
organizer part version: CXC162088 R6D22
CDA part version: CDA162014/2 R6D21
CCPU part version: CXC162098 R7A04
USERCODE:021286
Elapsed:92 secs.
PLEASE IGNORE "PRESS POWER ON" MESSAGES !!!!
detected MASTER on COM28, SLAVE on COM29
PDA EROM VERSION: CXC162097 R2D01
Open COM port OK
ChipID:7100,EMP protocol:0301
NEW SECURITY MODEL DETECTED
PHONE IS RED RETAIL PRODUCT
FLASH CID detected:49
Speed:921600
Flash ID check:8964
Flash props sent ok
OTP LOCKED:1 CID:49 PAF:1 IMEI:35286301293258 CERT:RED
FLASH CID:49 COLOR:RED
phone model: W950i
part number: FAD-3022013-BV
Phone part version: CXC162037 R9G007
organizer part version: CXC162088 R6D22
CDA part version: CDA162014/2 R6D21
CCPU part version: CXC162098 R7A04
USERCODE:021286
Elapsed:20 secs.
writing H:\BOX SETOOL3\FILE FLASH SETOOL\w950\R6A13_CDA162014_1_ACPU_NI_Generic_Worl d1.zip
Processing package
H:\BOX SETOOL3\FILE FLASH SETOOL\w950\R6A13_CDA162014_1_ACPU_NI_Generic_Worl d1.zip
detected MASTER on COM28, SLAVE on COM29
PDA EROM VERSION: CXC162097 R2D01
package not contains ISP files
Processing ACPU files
PROCESSING: Core OS
FILE FLASHED OK
PROCESSING: ROFS1
FILE FLASHED OK
PROCESSING: ROFS1 Extension
FILE FLASHED OK
PROCESSING: ROFS2
FILE FLASHED OK
PROCESSING: USERDATA
FILE FLASHED OK
PLEASE IGNORE "PRESS POWER ON" MESSAGES !!!!
fetched MASTER on COM28, SLAVE on COM29
Open COM port OK
ChipID:7100,EMP protocol:0301
NEW SECURITY MODEL DETECTED
PHONE IS RED RETAIL PRODUCT
FLASH CID detected:49
Speed:921600
OTP LOCKED:1 CID:49 PAF:1 IMEI:35286301293258 CERT:RED
LDR:060524 0930 LIECXC1325414_DB2000_FLASHLOADER_R1A003
Flash ID check:8964
Flash props sent ok
Processing CCPU files
Flashing:
R6A03_CXC162098_CCPU_fs_LL_NI_Red_CID49_Respin.sof tware
CURRENT FLASH FILE CID:49
SSW uses complete hash, hash len is:160
Will flash 8 blocks...
SSW loading returns:0
Flashing:
R9F011_CXC162037_CCPU_HE_LL_NI_Red_CID49_Respin.so ftware
CURRENT FLASH FILE CID:49
SSW uses complete hash, hash len is:2120
Will flash 106 blocks...
SSW loading returns:0
Processing update files
PLEASE IGNORE "PRESS POWER ON" MESSAGES !!!!
fetched MASTER on COM28, SLAVE on COM29
Open COM port OK
ChipID:7100,EMP protocol:0301
NEW SECURITY MODEL DETECTED
PHONE IS RED RETAIL PRODUCT
FLASH CID detected:49
Speed:921600
OTP LOCKED:1 CID:49 PAF:1 IMEI:35286301293258 CERT:RED
NEW SECURITY NOT SUPPORTED IN STANDALONE MODE.
Break.
Elapsed:550 secs.
Read More......
Sunday, October 26, 2008
Monday, October 20, 2008
6310 with 100% colour lcd !
As i wrote - it's 6310 with 100% colour lcd.
Not colorized like cheap sagem phones, lcd comes from 3510i.
Are you interested how to do it?
1. Firstly find working 6310, NOT 6310i (you have to use 6310 because it's dual band
like 8910i which is based on hagar).
2. Backup imei area in flash (use jaf or karwos suite or..)
3. Change flash ic into K5U64418TM.
you can find this ic in Nokia_DCT4 : 3100,3120, 3200, 6100, 6200, 8910i.
You must use this flash ic because it's combo flash.
here's full info about it:
Samsung combo flash.
64Mbit FLASH (4M x16) + 4Mbit SRAM (256k x16)
Vcc=1.8V
TOP boot block
ID=00EC22F2
4. Flash mcu, ppm and cnt using 8910i flashes.
5. Write .rpl, pm from 8910i, full defaults+unlock.
6. Change lcd into 3510i (use glass only, frame from 6310i).
After this you have working phone. Maybe you will need to increase backlight( chang leds etc).
I think about putting white led driver, then it should looks better.
Also there is a project with polyphonic melody.
If you are interested in this project then let me know, maybe we can made polyphonic together.
here's the pict :
regards,
gom3z.
Read More......
Not colorized like cheap sagem phones, lcd comes from 3510i.
Are you interested how to do it?
1. Firstly find working 6310, NOT 6310i (you have to use 6310 because it's dual band
like 8910i which is based on hagar).
2. Backup imei area in flash (use jaf or karwos suite or..)
3. Change flash ic into K5U64418TM.
you can find this ic in Nokia_DCT4 : 3100,3120, 3200, 6100, 6200, 8910i.
You must use this flash ic because it's combo flash.
here's full info about it:
Samsung combo flash.
64Mbit FLASH (4M x16) + 4Mbit SRAM (256k x16)
Vcc=1.8V
TOP boot block
ID=00EC22F2
4. Flash mcu, ppm and cnt using 8910i flashes.
5. Write .rpl, pm from 8910i, full defaults+unlock.
6. Change lcd into 3510i (use glass only, frame from 6310i).
After this you have working phone. Maybe you will need to increase backlight( chang leds etc).
I think about putting white led driver, then it should looks better.
Also there is a project with polyphonic melody.
If you are interested in this project then let me know, maybe we can made polyphonic together.
here's the pict :
regards,
gom3z.
Read More......
Saturday, October 18, 2008
Step by step testpoint "Repair GDFS" DB2012 dengan setool
Here's The Instructions :
1. first checked OTP CID as erom used and OTP CID should be same.
2. Then proceeded with TP and TP ok.
3. After that staying at empty board, added GDFS of k310i in ssw format and then added erom with same CID as of phone OTP CID.
4. Flashed them together. phone became retail red and repaired ok.
5. Again full flashed with firmawre and fs. Phone got everything OK....
<<<<< BIG THANKS TO MR LASER FOR THIS UPDATE >>>>>
Detailed info of phone before repair >>>
Open COM port OK
ChipID:8040,EMP protocol:0301
NEW SECURITY (MARITA RESPIN) PHONE
PHONE IS RED RETAIL PRODUCT
FLASH CID detected:50
Speed:921600
Flash ID check:897E
Flash props sent ok
OTP LOCKED:1 CID:50 PAF:1 IMEI:35727501381828 CERT:RED
FLASH CID:50 COLOR:RED
IMEI MISMATCH ! GDFS IMEI:35155901479069
Model:K310i
MAPP CXC article: R4EA031 prgCXC1250466_GENERIC_DO
MAPP CXC version: R4EA031
Language Package:MEDITERR
CDA article: CDA102576/4
CDA version: R5A
Default article: cxc1250474
Default version: R4DA044
PROVIDER: 000-00
SIMLOCKS NOT DETECTED
USERCODE:0000
RESTORATION FILE NOT PRESENT
"R4EA031_CXC1250466_GENERIC_DO"
YOU MUST PERFORM FULL FLASHING
WHEN "ALTERNATIVE SECURITY BYPASS" ENABLED
Elapsed: 112 secs.
REPAIR WAY >>>>
TESTPOINT REPAIR STAGE #1 STARTED
Open COM port OK
ChipID:8040,EMP protocol:0301
NEW SECURITY (MARITA RESPIN) PHONE
PHONE IS RED RETAIL PRODUCT
FLASH CID detected:50
Speed:921600
err: 0 (24)
Elapsed: 86 secs.
TESTPOINT REPAIR STAGE #1 STARTED
Open COM port OK
ChipID:8040,EMP protocol:0301
NEW SECURITY (MARITA RESPIN) PHONE
PHONE IS RED RETAIL PRODUCT
FLASH CID detected:50
Speed:921600
OTP LOCKED:1 CID:50 PAF:1 IMEI:35727501381828 CERT:RED
FLASH CID:50 COLOR:RED
ATTACH TP #1 AND PRESS "READY"
RELEASE TP #1 AND PRESS "READY"
Preparing backup...
total number of vars: 03E4
TP #1 INCORRECT
Elapsed: 74 secs.
TESTPOINT REPAIR STAGE #1 STARTED
Open COM port OK
ChipID:8040,EMP protocol:0301
NEW SECURITY (MARITA RESPIN) PHONE
PHONE IS RED RETAIL PRODUCT
FLASH CID detected:50
Speed:921600
OTP LOCKED:1 CID:50 PAF:1 IMEI:35727501381828 CERT:RED
FLASH CID:50 COLOR:RED
ATTACH TP #1 AND PRESS "READY"
RELEASE TP #1 AND PRESS "READY"
Preparing backup...
total number of vars: 03E4
TP #1 OKAY
INT LDRB2010_RESPIN_PRODLOADER_SETOOL2
WRITING BACKUP LOADER...
WRITING EROM...
Elapsed: 52 secs.
Open COM port OK
ChipID:8040,EMP protocol:0301
NEW SECURITY (MARITA RESPIN) PHONE
PHONE IS BROWN
FLASH CID detected:51
Speed:921600
OTP LOCKED:1 CID:50 PAF:1 IMEI:35727501381828 CERT:BROWN
LDRB2010_RESPIN_PRODLOADER_SETOOL2
Flash ID check:897E
Flash props sent ok
writing D:\SE Tool\v0[1].914038\gdfs_in_ssw_format\db2010\k310_gdfs_in_ssw _format.ssw
CURRENT FLASH FILE CID:254
SSW uses dynamic hash, dynamic hash len is:32
Will flash 32 blocks...
SSW loading returns:0
writing D:\SE Tool\v0[1].914038\eroms\db2010\db2012_erom_cid50.ssw
CURRENT FLASH FILE CID:36
Matching CID according file...
SSW uses dynamic hash, dynamic hash len is:2
Will flash 2 blocks...
SSW loading returns:0
Setting up GDFS...
OTP WRITE NOT EXECUTED.
Writing simlocks...
ALL UNLOCK/LOCK CODES SET TO "85244355"
Signing...
control keys complete.
full sig complete.
Elapsed: 61 secs.
SIGNED MODE (USING SERVER).
Open COM port OK
ChipID:8040,EMP protocol:0301
NEW SECURITY (MARITA RESPIN) PHONE
PHONE IS RED RETAIL PRODUCT
FLASH CID detected:50
Speed:921600
OTP LOCKED:1 CID:50 PAF:1 IMEI:35727501381828 CERT:RED
LDR:060712 1520 HAN_DB2012_FLASHLOADER_R1A002_CXC1250695
Flash ID check:897E
Flash props sent ok
writing D:\SE Tool\SETOOL\K310 CID50\R4EC001_1250466_GENERIC_DO.ssw
CURRENT FLASH FILE CID:50
SSW uses complete hash, hash len is:6080
Will flash 304 blocks...
SSW loading returns:0
writing D:\SE Tool\SETOOL\K310 CID50\R4EC001_fs_America1_do_Red_CID50.ssw
CURRENT FLASH FILE CID:50
SSW uses complete hash, hash len is:2180
Will flash 109 blocks...
SSW loading returns:0
LDR:070410 1405 HANCXC1327364_COMPACT_SEMC_CS_LOADER_1_R3B009
loader startup: executed
loader GDFS startup: executed
loader filesystem startup: executed
loader unlock: executed
writing tpa/preset/custom/C3_PCA_G3v2.cer
writing tpa/preset/custom/CONTENT_DOWNLOAD_HOOK_2.itm
writing tpa/preset/custom/customize.xml
writing tpa/preset/custom/DESKTOP_HOOK_2.itm
writing tpa/preset/custom/Entrust.net Root Certificate.cer
writing tpa/preset/custom/Entrust.net_WTLS_Root_Certificate.wcrt
writing tpa/preset/custom/FM_PICTURES_HOOK_3.itm
writing tpa/preset/custom/FM_SOUNDS_HOOK_3.itm
writing tpa/preset/custom/FM_THEMES_HOOK_3.itm
writing tpa/preset/custom/FM_VIDEOS_HOOK_3.itm
writing tpa/preset/custom/GAMES_HOOK_3.itm
writing tpa/preset/custom/GTE_CyberTrust_Root.cer
writing tpa/preset/custom/GTE_Cybe_Trust_Root_WTLS.wcrt
writing tpa/preset/custom/Root.cer
writing tpa/preset/custom/SEMC_E2E_Root_CA.crt
writing tpa/preset/custom/SETT_RINGTONE_HOOK_3.itm
writing tpa/preset/custom/ThawtePremium.der
writing tpa/preset/custom/ThawteServerCA.cer
writing tpa/preset/custom/Utiroot.cer
writing tpa/preset/custom/VeriSignClass3Root.cer
writing tpa/preset/custom/Verisign_Class_3_CA_WTLS.wcrt
Phone detached
Elapsed: 609 secs.
AFTER REPAIR >>>>>
SIGNED MODE (USING SERVER).
Open COM port OK
ChipID:8040,EMP protocol:0301
NEW SECURITY (MARITA RESPIN) PHONE
PHONE IS RED RETAIL PRODUCT
FLASH CID detected:50
Speed:921600
Flash ID check:897E
Flash props sent ok
OTP LOCKED:1 CID:50 PAF:1 IMEI:35727501381828 CERT:RED
FLASH CID:50 COLOR:RED
Model:K310i
MAPP CXC article: R4DA044 prgCXC1250125_GTAllInOneDO
MAPP CXC version: R4DA044
Language Package:World
CDA article: CDA100000/8
CDA version: R1A
Default article: cxc1250474
Default version: R4DA044
PROVIDER: 000-00
SIMLOCKS NOT DETECTED
USERCODE:0000
RESTORATION FILE NOT PRESENT
"R4DA044_CXC1250125_GTAllInOneDO"
YOU MUST PERFORM FULL FLASHING
WHEN "ALTERNATIVE SECURITY BYPASS" ENABLED
Elapsed: 6 secs.
Read More......
1. first checked OTP CID as erom used and OTP CID should be same.
2. Then proceeded with TP and TP ok.
3. After that staying at empty board, added GDFS of k310i in ssw format and then added erom with same CID as of phone OTP CID.
4. Flashed them together. phone became retail red and repaired ok.
5. Again full flashed with firmawre and fs. Phone got everything OK....
<<<<< BIG THANKS TO MR LASER FOR THIS UPDATE >>>>>
Detailed info of phone before repair >>>
Open COM port OK
ChipID:8040,EMP protocol:0301
NEW SECURITY (MARITA RESPIN) PHONE
PHONE IS RED RETAIL PRODUCT
FLASH CID detected:50
Speed:921600
Flash ID check:897E
Flash props sent ok
OTP LOCKED:1 CID:50 PAF:1 IMEI:35727501381828 CERT:RED
FLASH CID:50 COLOR:RED
IMEI MISMATCH ! GDFS IMEI:35155901479069
Model:K310i
MAPP CXC article: R4EA031 prgCXC1250466_GENERIC_DO
MAPP CXC version: R4EA031
Language Package:MEDITERR
CDA article: CDA102576/4
CDA version: R5A
Default article: cxc1250474
Default version: R4DA044
PROVIDER: 000-00
SIMLOCKS NOT DETECTED
USERCODE:0000
RESTORATION FILE NOT PRESENT
"R4EA031_CXC1250466_GENERIC_DO"
YOU MUST PERFORM FULL FLASHING
WHEN "ALTERNATIVE SECURITY BYPASS" ENABLED
Elapsed: 112 secs.
REPAIR WAY >>>>
TESTPOINT REPAIR STAGE #1 STARTED
Open COM port OK
ChipID:8040,EMP protocol:0301
NEW SECURITY (MARITA RESPIN) PHONE
PHONE IS RED RETAIL PRODUCT
FLASH CID detected:50
Speed:921600
err: 0 (24)
Elapsed: 86 secs.
TESTPOINT REPAIR STAGE #1 STARTED
Open COM port OK
ChipID:8040,EMP protocol:0301
NEW SECURITY (MARITA RESPIN) PHONE
PHONE IS RED RETAIL PRODUCT
FLASH CID detected:50
Speed:921600
OTP LOCKED:1 CID:50 PAF:1 IMEI:35727501381828 CERT:RED
FLASH CID:50 COLOR:RED
ATTACH TP #1 AND PRESS "READY"
RELEASE TP #1 AND PRESS "READY"
Preparing backup...
total number of vars: 03E4
TP #1 INCORRECT
Elapsed: 74 secs.
TESTPOINT REPAIR STAGE #1 STARTED
Open COM port OK
ChipID:8040,EMP protocol:0301
NEW SECURITY (MARITA RESPIN) PHONE
PHONE IS RED RETAIL PRODUCT
FLASH CID detected:50
Speed:921600
OTP LOCKED:1 CID:50 PAF:1 IMEI:35727501381828 CERT:RED
FLASH CID:50 COLOR:RED
ATTACH TP #1 AND PRESS "READY"
RELEASE TP #1 AND PRESS "READY"
Preparing backup...
total number of vars: 03E4
TP #1 OKAY
INT LDRB2010_RESPIN_PRODLOADER_SETOOL2
WRITING BACKUP LOADER...
WRITING EROM...
Elapsed: 52 secs.
Open COM port OK
ChipID:8040,EMP protocol:0301
NEW SECURITY (MARITA RESPIN) PHONE
PHONE IS BROWN
FLASH CID detected:51
Speed:921600
OTP LOCKED:1 CID:50 PAF:1 IMEI:35727501381828 CERT:BROWN
LDRB2010_RESPIN_PRODLOADER_SETOOL2
Flash ID check:897E
Flash props sent ok
writing D:\SE Tool\v0[1].914038\gdfs_in_ssw_format\db2010\k310_gdfs_in_ssw _format.ssw
CURRENT FLASH FILE CID:254
SSW uses dynamic hash, dynamic hash len is:32
Will flash 32 blocks...
SSW loading returns:0
writing D:\SE Tool\v0[1].914038\eroms\db2010\db2012_erom_cid50.ssw
CURRENT FLASH FILE CID:36
Matching CID according file...
SSW uses dynamic hash, dynamic hash len is:2
Will flash 2 blocks...
SSW loading returns:0
Setting up GDFS...
OTP WRITE NOT EXECUTED.
Writing simlocks...
ALL UNLOCK/LOCK CODES SET TO "85244355"
Signing...
control keys complete.
full sig complete.
Elapsed: 61 secs.
SIGNED MODE (USING SERVER).
Open COM port OK
ChipID:8040,EMP protocol:0301
NEW SECURITY (MARITA RESPIN) PHONE
PHONE IS RED RETAIL PRODUCT
FLASH CID detected:50
Speed:921600
OTP LOCKED:1 CID:50 PAF:1 IMEI:35727501381828 CERT:RED
LDR:060712 1520 HAN_DB2012_FLASHLOADER_R1A002_CXC1250695
Flash ID check:897E
Flash props sent ok
writing D:\SE Tool\SETOOL\K310 CID50\R4EC001_1250466_GENERIC_DO.ssw
CURRENT FLASH FILE CID:50
SSW uses complete hash, hash len is:6080
Will flash 304 blocks...
SSW loading returns:0
writing D:\SE Tool\SETOOL\K310 CID50\R4EC001_fs_America1_do_Red_CID50.ssw
CURRENT FLASH FILE CID:50
SSW uses complete hash, hash len is:2180
Will flash 109 blocks...
SSW loading returns:0
LDR:070410 1405 HANCXC1327364_COMPACT_SEMC_CS_LOADER_1_R3B009
loader startup: executed
loader GDFS startup: executed
loader filesystem startup: executed
loader unlock: executed
writing tpa/preset/custom/C3_PCA_G3v2.cer
writing tpa/preset/custom/CONTENT_DOWNLOAD_HOOK_2.itm
writing tpa/preset/custom/customize.xml
writing tpa/preset/custom/DESKTOP_HOOK_2.itm
writing tpa/preset/custom/Entrust.net Root Certificate.cer
writing tpa/preset/custom/Entrust.net_WTLS_Root_Certificate.wcrt
writing tpa/preset/custom/FM_PICTURES_HOOK_3.itm
writing tpa/preset/custom/FM_SOUNDS_HOOK_3.itm
writing tpa/preset/custom/FM_THEMES_HOOK_3.itm
writing tpa/preset/custom/FM_VIDEOS_HOOK_3.itm
writing tpa/preset/custom/GAMES_HOOK_3.itm
writing tpa/preset/custom/GTE_CyberTrust_Root.cer
writing tpa/preset/custom/GTE_Cybe_Trust_Root_WTLS.wcrt
writing tpa/preset/custom/Root.cer
writing tpa/preset/custom/SEMC_E2E_Root_CA.crt
writing tpa/preset/custom/SETT_RINGTONE_HOOK_3.itm
writing tpa/preset/custom/ThawtePremium.der
writing tpa/preset/custom/ThawteServerCA.cer
writing tpa/preset/custom/Utiroot.cer
writing tpa/preset/custom/VeriSignClass3Root.cer
writing tpa/preset/custom/Verisign_Class_3_CA_WTLS.wcrt
Phone detached
Elapsed: 609 secs.
AFTER REPAIR >>>>>
SIGNED MODE (USING SERVER).
Open COM port OK
ChipID:8040,EMP protocol:0301
NEW SECURITY (MARITA RESPIN) PHONE
PHONE IS RED RETAIL PRODUCT
FLASH CID detected:50
Speed:921600
Flash ID check:897E
Flash props sent ok
OTP LOCKED:1 CID:50 PAF:1 IMEI:35727501381828 CERT:RED
FLASH CID:50 COLOR:RED
Model:K310i
MAPP CXC article: R4DA044 prgCXC1250125_GTAllInOneDO
MAPP CXC version: R4DA044
Language Package:World
CDA article: CDA100000/8
CDA version: R1A
Default article: cxc1250474
Default version: R4DA044
PROVIDER: 000-00
SIMLOCKS NOT DETECTED
USERCODE:0000
RESTORATION FILE NOT PRESENT
"R4DA044_CXC1250125_GTAllInOneDO"
YOU MUST PERFORM FULL FLASHING
WHEN "ALTERNATIVE SECURITY BYPASS" ENABLED
Elapsed: 6 secs.
Read More......
Step by step testpoint "Repair GDFS" DB2020 dengan setool !
untuk DB2020
1. go to emptyboard fill & repair
2. select any db2020 model
3. press "TP STAGE #1". read "instructions" and execute them.
or (3a. check the box between the TP STAGE 1 & 2 in order to automatically proceed to tp sage 2 if your TP #1 is ok)
4. press "TP STAGE #2". read "instructions" and execute them.
now the the phone is cid49 brown
6. staying on "emptyboard fill and repair" write correct gdfs_in_ssw format
===write gfds ssw yg sesuai tipe hp nya"====
7. if flashing went fine, flash db2020 erom with needed CID
= since my otp cid is 51 so i used "DB2020EROM_CNV_RED52_BROWN_CID49_DB2020.ssw", ===
=== warning;=== example if your otp cid is CID51
=== do not write erom with lower cid
ex..k800_erom_cnv_RED49_BROWN_CID49_DB2020.ssw
because you cant flash the phone it gives you an error
when you perform fullflash
Read More......
1. go to emptyboard fill & repair
2. select any db2020 model
3. press "TP STAGE #1". read "instructions" and execute them.
or (3a. check the box between the TP STAGE 1 & 2 in order to automatically proceed to tp sage 2 if your TP #1 is ok)
4. press "TP STAGE #2". read "instructions" and execute them.
now the the phone is cid49 brown
6. staying on "emptyboard fill and repair" write correct gdfs_in_ssw format
===write gfds ssw yg sesuai tipe hp nya"====
7. if flashing went fine, flash db2020 erom with needed CID
= since my otp cid is 51 so i used "DB2020EROM_CNV_RED52_BROWN_CID49_DB2020.ssw", ===
=== warning;=== example if your otp cid is CID51
=== do not write erom with lower cid
ex..k800_erom_cnv_RED49_BROWN_CID49_DB2020.ssw
because you cant flash the phone it gives you an error
when you perform fullflash
Read More......
[Tutorial] Preview and the Reset Password to Lock Your Mobile, For help everybody!!
If you forgot your password lock staff, and your phone will not turn on a lack of password, you can view it or reset it using the SEtool2Lite.
Discover PASSWORD
We will need:
SEtool2Lite
l Open SETOOL and choose the model of your phone.
l Click IDENTIFY and take and put the battery and pressing "C" connect the cel l in the PC.
l Wait for SEtool acknowledge your cel.
l box of logs to look for SEtool "USERCODE" ... this is your code.
The PASSWORD RESET
l Open SETOOL and choose the model of your phone.
l Click UNLOCK / REPAIR and take and put the battery and pressing "C" connect the cells in the PC.
l Wait for SEtool acknowledge your cel.
l In box of logs to look for SEtool "USERCODE" ...
l Your code is restored as standard: 0000!!
Read More......
Discover PASSWORD
We will need:
SEtool2Lite
l Open SETOOL and choose the model of your phone.
l Click IDENTIFY and take and put the battery and pressing "C" connect the cel l in the PC.
l Wait for SEtool acknowledge your cel.
l box of logs to look for SEtool "USERCODE" ... this is your code.
The PASSWORD RESET
l Open SETOOL and choose the model of your phone.
l Click UNLOCK / REPAIR and take and put the battery and pressing "C" connect the cells in the PC.
l Wait for SEtool acknowledge your cel.
l In box of logs to look for SEtool "USERCODE" ...
l Your code is restored as standard: 0000!!
Read More......
T208 Sony LOGO only Repair Solution whit Setool !
Sony Ericsson ODM T280 repair SONY LOGO Only
Tanpa Reflashing
-Flash whit R2A_Angelina_Clean_File_System_Brown.software
-Kik Flash
-Wait Until Finish............................................ .......................
Done
Tested by me 100000000%
Code:
v0.914039/UNI
CARD SERIAL: xxxxxx
Loaded 51 flash descriptors
only COM/UFS supported
phone pre-boot failed,possible RECOVERY needed.
Elapsed: 0 secs.
PLEASE ATTACH TURNED OFF PHONE NOW
IF PROCESS NOT STARTING,UNPLUG/PLUG CABLE/BATTERY FEW TIMES...
bootROM version: 0502
Locosto HS detected, booting...
FLASH ID: 0089/8904 (00040000)
SECURITY AREA BACKUP CREATED.
PHONE IMEI:35341102111850
writing J:\FIRMWARES\SONY ERICSSON\SE TOOL\SE PHONES\T280\r1bc002\R2A_Angelina_Clean_File_System_Brown.software
Elapsed: 349 secs.
PLEASE ATTACH TURNED OFF PHONE NOW
IF PROCESS NOT STARTING,UNPLUG/PLUG CABLE/BATTERY FEW TIMES...
bootROM version: 0502
Locosto HS detected, booting...
FLASH ID: 0089/8904 (00040000)
SECURITY AREA BACKUP CREATED.
PHONE IMEI:35341102111850
MODEL:T280i
FACTORY CXC:CXC1250616_R5A028
CURRENT CXC:CXC1251071_R1BA003
CURRENT CDA:CDA102934/25_R4A
USERLOCK IS DEFAULT ("0000")
Elapsed: 21 secs.
Download: http://rapidshare.com/files/155123362/R2A_Angelina_Clean_File_System_Brown.rar.html
Read More......
Tanpa Reflashing
-Flash whit R2A_Angelina_Clean_File_System_Brown.software
-Kik Flash
-Wait Until Finish............................................ .......................
Done
Tested by me 100000000%
Code:
v0.914039/UNI
CARD SERIAL: xxxxxx
Loaded 51 flash descriptors
only COM/UFS supported
phone pre-boot failed,possible RECOVERY needed.
Elapsed: 0 secs.
PLEASE ATTACH TURNED OFF PHONE NOW
IF PROCESS NOT STARTING,UNPLUG/PLUG CABLE/BATTERY FEW TIMES...
bootROM version: 0502
Locosto HS detected, booting...
FLASH ID: 0089/8904 (00040000)
SECURITY AREA BACKUP CREATED.
PHONE IMEI:35341102111850
writing J:\FIRMWARES\SONY ERICSSON\SE TOOL\SE PHONES\T280\r1bc002\R2A_Angelina_Clean_File_System_Brown.software
Elapsed: 349 secs.
PLEASE ATTACH TURNED OFF PHONE NOW
IF PROCESS NOT STARTING,UNPLUG/PLUG CABLE/BATTERY FEW TIMES...
bootROM version: 0502
Locosto HS detected, booting...
FLASH ID: 0089/8904 (00040000)
SECURITY AREA BACKUP CREATED.
PHONE IMEI:35341102111850
MODEL:T280i
FACTORY CXC:CXC1250616_R5A028
CURRENT CXC:CXC1251071_R1BA003
CURRENT CDA:CDA102934/25_R4A
USERLOCK IS DEFAULT ("0000")
Elapsed: 21 secs.
Download: http://rapidshare.com/files/155123362/R2A_Angelina_Clean_File_System_Brown.rar.html
Read More......
Test Card For Sony Ericsson !!
For Unlock Simlock Sony Ericsson !!
write this file to blank simcard with sim reader/writer !
File: http://www.4shared.com/file/66884473/76458f92/TEST_CARD.html
Read More......
Solution DB2020 phone with some GDFS issue ( No Network ) !
Case:
Let's say you have a DB2020 phone with some GDFS issue, say you wrote K800 firmware to a K790 and now you have "no network".
Solution:You'll have to rewrite the original GDFS. Sadly, most users never back it up before proceeding with whatever operation they intended to do in the first place. This is done through the "Read GDFS" button in SETool, btw . it will produce a .bin-file named with the phones IMEI and can be found in your SETool basedir. Take good care of it.
Now, lets say you didn't back up the phones GDFS and did something to screw it up. Then you have a problem, because rewriting it with another phones GDFS will screw the security units and the phone will be bricked. Generally a bad thing, right ?.
Luckily, there is a way to solve this and the procedure is as follows:
Use only COM/UFS interfaces!
1 (Optional): Back up the corrupt GDFS (yes, even though it's corrupted, so you have a full backup just in case). Again: "Read GDFS". Move it to a safe place on your HD, this is to avoid accidentally deleting it and for avoiding confusion with all the other txt-files that will appear later on.
2: Create a scriptfile (a normal txt-file will do) with the following contents:
Code:
gdfsread:00020e5a
gdfsread:00020e48
gdfsread:00010851
gdfsread:00000006
gdfsread:0000000E
gdfsread:00000013
gdfsread:0000001C
gdfsread:00000018
gdfsread:000000AA
Now save it. Name it "readsecunits.txt" or whatever. Select the file in SETool's MISC-field and press "Write SCRIPT".
All the read units will be stored in a single file named by the phone's IMEI.
rename it as "secunitsbackup.txt" to avoid confusion
3: Apply the GDFS from a working DB2020 phone.
- Read it out from the source phone (it will be stored in the SETool basedir named by the source phone's IMEI)
- Check "Format GDFS" in "Settings" and write it to the damaged phone by selecting it in the MISC-field and pressing "Write GDFS".
If the phone in question is OTP/FLASH CID52, DO NOT CHECK "Format GDFS"
Do NOT turn the phone on afterwards.
4: Now, you'll have to write back the original units. Apply the "secunitsbackup.txt" you created by selecting it in the MISC-field and pressing "Write SCRIPT".
Voila, it should have done the trick.
I'll ask the_laser to produce some DB2020 GDFS files in case you don't have a working phone to read from.
Another method (Without the need for GDFS backup/etc...)
Create and execute the following script:
gdfswrite:000000ACXX
Set XX to whatever corresponds to your phones bandlock:
Code:
;00 MS_GSM900
;01 MS_EGSM900
;02 MS_DCS1800
;03 MS_PCS1900
;04 MS_GSM900_DCS1800
;05 MS_EGSM900_DCS1800
;06 MS_GSM900_PCS1900
;07 MS_EGSM900_PCS1900
;08 MS_DCS1800_PCS1900
;09 MS_GSM900_DCS1800_PCS1900
;0a MS_EGSM900_DCS1800_PCS1900
;0b MS_GSM850
;0c MS_GSM850_PCS1900
;0d MS_EGSM900_GSM850
;0e MS_DCS1800_GSM850
;0f MS_EGSM900_DCS1800_GSM850
;10 MS_EGSM900_GSM850_PCS1900
;11 MS_DCS1800_GSM850_PCS1900
;12 MS_EGSM900_DCS1800_GSM850_PCS1900
Read More......
Let's say you have a DB2020 phone with some GDFS issue, say you wrote K800 firmware to a K790 and now you have "no network".
Solution:You'll have to rewrite the original GDFS. Sadly, most users never back it up before proceeding with whatever operation they intended to do in the first place. This is done through the "Read GDFS" button in SETool, btw . it will produce a .bin-file named with the phones IMEI and can be found in your SETool basedir. Take good care of it.
Now, lets say you didn't back up the phones GDFS and did something to screw it up. Then you have a problem, because rewriting it with another phones GDFS will screw the security units and the phone will be bricked. Generally a bad thing, right ?.
Luckily, there is a way to solve this and the procedure is as follows:
Use only COM/UFS interfaces!
1 (Optional): Back up the corrupt GDFS (yes, even though it's corrupted, so you have a full backup just in case). Again: "Read GDFS". Move it to a safe place on your HD, this is to avoid accidentally deleting it and for avoiding confusion with all the other txt-files that will appear later on.
2: Create a scriptfile (a normal txt-file will do) with the following contents:
Code:
gdfsread:00020e5a
gdfsread:00020e48
gdfsread:00010851
gdfsread:00000006
gdfsread:0000000E
gdfsread:00000013
gdfsread:0000001C
gdfsread:00000018
gdfsread:000000AA
Now save it. Name it "readsecunits.txt" or whatever. Select the file in SETool's MISC-field and press "Write SCRIPT".
All the read units will be stored in a single file named by the phone's IMEI.
rename it as "secunitsbackup.txt" to avoid confusion
3: Apply the GDFS from a working DB2020 phone.
- Read it out from the source phone (it will be stored in the SETool basedir named by the source phone's IMEI)
- Check "Format GDFS" in "Settings" and write it to the damaged phone by selecting it in the MISC-field and pressing "Write GDFS".
If the phone in question is OTP/FLASH CID52, DO NOT CHECK "Format GDFS"
Do NOT turn the phone on afterwards.
4: Now, you'll have to write back the original units. Apply the "secunitsbackup.txt" you created by selecting it in the MISC-field and pressing "Write SCRIPT".
Voila, it should have done the trick.
I'll ask the_laser to produce some DB2020 GDFS files in case you don't have a working phone to read from.
Another method (Without the need for GDFS backup/etc...)
Create and execute the following script:
gdfswrite:000000ACXX
Set XX to whatever corresponds to your phones bandlock:
Code:
;00 MS_GSM900
;01 MS_EGSM900
;02 MS_DCS1800
;03 MS_PCS1900
;04 MS_GSM900_DCS1800
;05 MS_EGSM900_DCS1800
;06 MS_GSM900_PCS1900
;07 MS_EGSM900_PCS1900
;08 MS_DCS1800_PCS1900
;09 MS_GSM900_DCS1800_PCS1900
;0a MS_EGSM900_DCS1800_PCS1900
;0b MS_GSM850
;0c MS_GSM850_PCS1900
;0d MS_EGSM900_GSM850
;0e MS_DCS1800_GSM850
;0f MS_EGSM900_DCS1800_GSM850
;10 MS_EGSM900_GSM850_PCS1900
;11 MS_DCS1800_GSM850_PCS1900
;12 MS_EGSM900_DCS1800_GSM850_PCS1900
Read More......
Friday, October 17, 2008
BIG NEWS - Ultimate Unlocker just released !!
Hello all!
We have just released a new product - Ultimate Unlocker offers much faster and cheaper full direct unlock and relock of all existing A2, DB2020 and DB2012 Sony Ericsson mobile phones.
* Short unlock time - typically 2 unlocks per minute
* Instant unlock - 24 hours a day, 7 days a week
* No modem drivers installation required anymore
WORLD FIRST FEATURES
* New revolutionary security bypass technique
* Non-TP full security zone repair
* Non-TP full EROM/SEMCBOOT repair
* Unlocking via codes of all existing A2, DB2020 & DB2012 phones even for the latest CIDs
Addidtional features:
* CID change (downgrade/upgrade)
* supports USB DCU-60 and original Fighter/UC10/UC20 boxes + many their clones
PROMOTION
* Until the end of September for free: full direct unlocking of all supported phones!
* Any qty for all registered customers with non-zero Supreme Credit account!
All customers which have SE Full Unlocker account or D-Unlocker account with at least 1 supreme log can unlock unlimited quantity of phones for free until the end of September 2008.
Download the Ultimate Unlocker or Cruiser Suite Ultimate Unlocker from our Download section or from these rapid links
Code:
http://rapidshare.com/files/14813570...-installer.rar
http://rapidshare.com/files/14813570...-installer.rar
ENJOY !
Just to be sure...
Ultimate Unlocker
- is succesor of the D-Unlocker, it uses D-Unlocker account (username & password)
- if you have or you will buy D-Unlocker account with at least 1 D-Unlocker log - you'll have free unlock until end of the September 2008
SE Ultimate Unlocker
- is successor of the SE Full Unlocker, it require Cruiser Plus -07 dongle and SE Full Unlocker supreme logs (dongle & password)
- if you have or you will buy Cruiser Supreme logs account with at least 1 supreme log - you'll have free unlock until end of the September 2008
Read More......
Subscribe to:
Posts (Atom)