Printable View
uploaded firmwares from G700, G900 PDA phones.
uploaded r1f030 firmware for z750 z770.
because that firmware is not released yet, i prepared language package with all language available inside.
treat that language package as customization file.
ps.
if you not need specific language - delete it from language packages.
Default
uploaded w200 red53 filesystems and firmwares r4gb001 r4gh001 r4ha014 r4ja011 r4jb001
uploaded w830 red53 filesystems and firmwares r1jc002 r1kg001
and little gift for setool2 owners: r1f030 firmware for k660 w890 w910
because that firmware is not released yet, i prepared language package with all language available inside.
treat that language package as customization file.
ps.
if you not need specific language - delete it from language packages.
*v0.914035*
-Updated A2 loaders to recent version
-Updated supported flash types for locosto-based phones
-Updated pphone model names
-Minor bugfixes
RapidShare: Easy Filehosting
-------------------------------------------------------
uploaded r1fa035 firmware for K850
because that firmware is not released yet, i prepared language package with all available languages inside.
treat that language package as customization file.
if you not need specific language - delete it from language package.
uploaded r3bf001 firmware and some langpacks for W980
uploaded r1fa031 firmware for G502.
i also included g502_r1fa031_langpack.zip with all possible languages,cause some langpacks (like israel) are not available for public.
treat it as custpack. not needed languages can be simple deleted from archive, of course.
i recently noticed, that our lovely kukuruzer friends finally, after one month, stoled new alternative bypass.
that is ok, they are well-known stealers
(all methods for new semc phones in their "kukuruzer suite" are stolen from setool2)
but what is NOT ok - their arrogant and completely bullshit tirade about
"worning, 'our' zovtware can eazily ripair phonez killet by setool2"
what a f_uckers !
their copycat programmer stoled setool2 new altbypass solution absolutely completely,byte-by-byte.
same executor, same loaders (even "loader for setool2" words are left), etc.
and they are dare to say such nonsense thing.
once again "kukuruzer" proved to be cheap lying shit.
just be careful,guys. do not trust mizerable kukuruzer team.
they are always last, they always working bad and slow, they are always lying.
it is better to use original, proved solutions.
updated k850 r1fa035 firmwares,fs images,custpacks
updated W760 r3ba035 firmwares,fs images,custpacks
v0.914036
- added support for new locosto-based ODM phones - T270,T280,R300,R306,T303,etc.
supported flash,correct unlock by patch,usercode reset.
be careful - select CORRECT model and CORRECT flashfiles.
- updated phone model names
- minor bugfixes
rapidshare LINK
RapidShare: Easy Filehosting
uploaded r300 r2ba005 firmware
uploaded t280 r2bc002 firmware
uploaded t303 r2ba005 firmware
uploaded w910 r1fa035 firmware,fs images,custpacks.
uploaded w890 r1fa035 firmware,fs images.
v0.914037
- added testpoint for db2020 phones.
db2020 testpoint idea made by dre_ambox team.
as i respected that, i not included db2020 testpoint in setool2
for a long time. but anything ends sometime.
now, setool2 users can enjoy gdfs db2020 gdfs repair.
usage:
1. it is only and only for professionals.
users,advanced users, please "go away".
2. testpoint is +3.3 voltage, connected to specific pin.
we suggesting to use +3.3v battery
(battery ground MUST be connected with phone's GROUND)
3. go to emptyboard fill & repair.
4. select any db2020 model.
5. press "TP STAGE #1". read instructions and execute them.
6. press "TP STAGE #2". read instructions and execute them.
7. phone is BROWN now.
8. staying on "emptyboard fill and repair" write correct gdfs_in_ssw format.
9. if flashing went fine, flash db2020 erom with needed CID.
10. phone now retail and repaired. fullflash phone as usual.
testpoint pictures (courtesy of drea_mbox team) included.
after SETOOL2 db2020 testpoint procedure phone FULLY
working in "alternative security bypass" mode without ANY restrictions.
- greatly decreased locosto-based SEMC ODM phones security bypass time.
(instead ~50 seconds, now we have ~18 seconds)
- minor bugfixes.
RAPIDSHARE LINK
RapidShare: Easy Filehosting
ps.
today i browsed different forums and saw that mizerable kukuruzer idiot
again shitting from his mouth about copycats,killing phones,
"professional kukuruzer solutions",etc.
well, most probably you already know, that you can trust mizerable idiot
only when he telling about next payed update for his copycat "suite".
lets see next kukuruzer update - i'm sure we will find inside
another byte-by-byte copy/paste from setool2 ;)
of course, mizer will write that it is original solution,which was developed
by "great mastermind" , it is safe and not killing phones,etc.
all normal ppls should see mizerable thing as clown in circus.
so, just allow clown to entertain us.
also i noticed that some ppl, who own drea_mbox, accusing me in
"stealing tp solution" and negation of that.
that is not true, cause only thing we used from drea_mbox is testpoint
pictures, that was noted in announce and credits was given for
really great and hard work by drea_mbox team.
uploaded c902 r3bh002 firmware,fsimages and custpacks
uploaded z780 r3ba035 firmware,fsimage, all languages file,custpacks
updated w980 firmwares,fsimages,custpacks
q:
when i attaching phone using dcu60 i see following messages:
Code:
erom_readvar: error reading unit 1/725
error while reading security units
SECURITY UNITS CAN'T BE READ !
DAMAGED FIRMWARE/GDFS OR EMPTY PHONE
or
erom_readvar: error reading unit 1/851
error while reading security units
SECURITY UNITS CAN'T BE READ !
DAMAGED FIRMWARE/GDFS OR EMPTY PHONE
and process stops,but phone works normally on com/ufs.
what is root cause and what is solution ?
A:
that phone is tampered by d_reambox software.
during their famous method of "testpoint bypass", they writing patched erom with own custom loader embedded, patching simlock signature check and ... erasing simlock signature without any reason, which prevents setool2 from making backup.
i had write a post on their forum, but they too arrogant even to read it.
fix is extremly simple:
using com/ufs write next script in SIGNED MODE (check ONLY "USE SIGNED MODE" on settings)
for db2020:
Code:
gdfswrite:0001085144554D4D5944415441
for db2012:
Code:
gdfswrite:0001072544554D4D5944415441
alas, they custom loader also breaks alternative bypass support using dcu60 cable,
so you only can use SIGNED MODE with dcu60 after their "testpoint".
maybe i will write program (embed option in setool2) to restore tampered by d_reambox erom to correctly patched.
q:
when i flashing/completing/etc phone i got error like
Code:
loader startup: executed
Loader refused to start GDFS services,error is:29
loader GDFS startup failed, that is fatal
Elapsed: 734 secs.
what to do ?
a:
that error can be caused by different problems. lets see all of them
1. user has run "executor" application, which was not deleted after "new altbypass unlock".
solution -
select correct model
on settings check only "use preloader security bypass".
execute any operation, say : "read flash"
2. main software somehow has been damaged (cause of free tools, etc)
solution -
select correct model
on settings check only "use signed mode".
add to firmware area only main part of firmware
press flash (use com/ufs or dcu60 with "2+5" keys if phone not connecting with "C" )
after that, phone should show identify normally.
.... and if not....
3. gdfs area has been damaged (bad flash ic, firmware error,etc)
solution -
a) install empty flash chip and do emptyboard fill procedure
b) try to repair gdfs area with VERY complex testpoints
c) change both mcu+flash chip from other phone
uploaded complete pack of RED53 k610 k610im k618 v630 w710 w850 z610 z710 firmwares and fsimages.
uploaded K630-V640-K660 full schematics and repair manual
uploaded K800-K810 full schematics and repair manual
uploaded C702 R3CA033 firmwares and *all_languages_pack*
uploaded C902 R3CA037 firmwares and *all_languages_pack*
uploaded K630-V640-K660 full schematics and repair manual
uploaded K800-K810 full schematics and repair manual
updated C702 R3CA033 firmwares and all_languages_pack
uploaded C902 R3CA037 firmwares and all_languages_pack
let me remember, that all_languages_pack is .zip file,which should be used as custpack.
of course, nobody stops you from deleting unneeded languages from it.
uploaded and updated r3ca033, r3ca038 firmwares and custpacks for w980
w760,c702,c902 r3ca037 firmware,fsimages and enormous custpack number uploaded.
also many other firmwares updated, check for "new" icon on support...
v0.914038
- added SCRC testpoint repair for db2012 phones.
supported CIDs : 50,51,52,53.
(db201x testpoint idea made by dre_ambox team).
usage:
1. it is only and only for professionals.
users,advanced users, please "go away".
2. testpoint is +3.3 voltage, connected to specific pin.
we suggesting to use +3.3v battery
(battery ground MUST be connected with phone's GROUND)
3. go to emptyboard fill & repair.
4. select needed db2012 model.
5. press "TP STAGE #1". read instructions and execute them.
6. phone is BROWN now.
7. now flash CORRECT db201x erom with needed CID.
NOTE, THAT EROM CID SHOULD BE >= OTP CID,OTHERWISE YOU WILL GET DEAD PHONE.
10. phone now retail,repaired and unlocked. fullflash phone as usual.
testpoint pictures (courtesy of drea_mbox team) included.
as all db201x shares same mcu, w200 testpoint picture is good
for all db201x phones.
IF YOU WROTE EROM WITH INCORRECT CID - USE "TP STAGE #2"
PLEASE NOTE, THAT CURRENT IMPLEMENTATION REQUIRES
VALID GDFS STRUCTURE. SO, IT SITUABLE ONLY FOR 5-LOCKS
REPAIR AND FULL STANDALONE UNLOCK.
- added all possible db201x eroms, now users can make cid50/51/52/53
phones from emptyboard phones
(not forget: add to firmware area gdfs_in_ssw FIRST and EROM LATEST)
- minor bugfixes.
RapidShare: Easy Filehosting
v0.914039
- PDA gdfs write was broken, fixed. thx to infogsmfor report.
RAPIDSHARE RapidShare: Easy Filehosting
r306,r306a r1ab002 firmware uploaded
c902 r3c038 firmware,fsimages,custpacks updated
uploaded K330 r1cd001 firmware
uploaded t280 r1cb002 (mr1) firmware
uploaded t700 r3da020 firmware,fsimages,custpacks. yes,few, but hot as hell
uploaded k660 r1fa035 firmware,fs images,custpacks.
w350 r11ca002 firmware added, custpacks updated
w380 r11ca002 firmware added, custpacks updated
v0.914040
- updated a2 loaders to recent versions
- added db3210 support
- updated bypass packages
- minor bugfixes
rapidshare link:
RapidShare: Easy Filehosting
v0.914041
- fixed old security PDA standalone support
- updated bypass packages
- minor bugfixes
rapidshare:
RapidShare: Easy Filehosting
uploaded k330 r1ce002, w902 r3da026+all_langpack,
updated t700 firmwares, g502 firmwares, c902 firmwares.
finally uploading of *lg 75x,lg ku580, lg ku52x *firmwares finished.
but it is just start...
yes, here is a brief description of lg firmware langpacks
Code:
---------
TIM ---- TIM/ITALY
CIS ---- RUSSIA
CZE ---- CZECHO
DEU ---- GERMANY
ESP ---- SPAIN
FRA ---- FRANCE
HUN ---- HUNGARY
GBR ---- UNITED KINGDOM
ITA ---- ITALY
CSM ---- COSMOTE/GREECE
POL ---- POLAND
ROM ---- ROMANIA
NLD ---- NLD/NETHERLANDS
PRT ---- PORTUGAL
GRC ---- GREECE
TSC ---- TESCO MOBILE/UK
SWS ---- SWISS/SWITZERLAND
VUK ---- VIRGIN MOBILE/UNITED KINGDOM
ORU ---- ORANGE UK/UNITED KINGDOM
SGP ---- SINGAPORE
BAL ---- BALTICS
AUS ---- AUSTRALIA
OPT ---- OPTUS/AUSTRALIA
VNZ ---- VODAFONE/NEW ZEALAND
VDA ---- VODAFONE/AUSTRALIA
BYT ---- BOUYGUES/FRANCE
MTB ---- M-TEL/BULGARIA
UKR ---- UKRAINE
ARG ---- ARGENTINA
CTI ---- CTI/ARGENTINA
PRN ---- PERSONAL/ARGENTINA
TFS ---- TELEFONICA/ARGENTINA
ERA ---- ERA/POLAND
HTE ---- HANOI_3HM_MOBILE/VIETNAM
ESI ---- PT PARASTAR/INDONESIA
MVN ---- MOVILNET/VENEZUELA
THA ---- THAILAND
STD ---- SUDATEL/SUDAN
USC ---- IUSACELL/MEXICO
YMN ---- YEMEN MOBILE/YEMEN
RLC ---- RELIANCE/INDIA
KTK ---- TELCOM/KENYA
MCL ---- CHINGUITEL/MAURITANIA
ATL ---- ALLTEL/USA
HIR ---- HUTCHISON/IRELAND
ORE ---- ORANGE/SPAIN
MBI ---- MOBISTAR/BELGIUM
O2U ---- O2/UNITED KINGDOM
CWT ---- CHUNGHWA TELECOM/TAIWAN
TWN ---- TAIWAN
NGR ---- NIGERIA
ATT ---- ATT/USA
TCL ---- TELCEL/MEXICO
TFV ---- TELEFONICA/VENEZUELA
O2D ---- O2D/GERMANY
IDN ---- INDONESIA
MYS ---- MALAYSIA
VNM ---- VIETNAM
CLP ---- CLARO/PERU
CHN ---- CHINA
SLO ---- SLOVENIA
TMK ---- T-MOBILE/CROATIA
TNH ---- TELENOR/SERBIA
BRA ---- BRASIL
VRZ ---- VERIZON/USA
RLC ---- RELIANCE/INDIA
CHM ---- CHINA MOBILE/CHINA
CNC ---- CARIBBEAN/JAMAICA
EPT ---- PORTA/ECUADOR
CTT ---- CARIB TNT/TRINIDAD AND TOBAGO
CRD ---- DIGICEL/CARIB JAMAICA
CRI ---- COSTA RICA
RSY ---- RADIOSHACK/USA
TLS ---- TELUS/CANADA
---------
v0.915017
- on some PNX5230 CID combination unlock by patch produced 5-locks
units with "err:19" message. that is fixed now
- k600 loader produced weird version output, that is fixed.
- added trim area images for completely killed a2 phones
(ta_forceopen err: 0006)
flash them as firmware. please note, that k850 trim area image only
working for K850, while for any other semc a2-phone
Shinobu_TA.ssw will do job just fine.
also please note, that for 100% normal work after trim area repair you
must full flash phone, then write gdfs package from normal working phone,
finally you must unlock phone.
i almost sure, thread with gdfs packages for a2 phone will appear soon.
rapidshare
v0.915018
- security backup was saved with wrong script command, fixed,
thx to gbluez for reporting.
RAPIDSHARE LINK
*v0.915019*
- possibility to repair total damaged a2 phones (err: 060101)
- latest bypass packages added
- misc bugfixes
please note.
there is common now to make mirrrors and etc of
setool2 updates.
be content to know, that i do NOT guarantee that ANY of that
mirrors NOT contains viruses,mailwares,whatever.
the ONLY 100% genuine updates are on support area and in that thread.
La subo para su comodidad puesto que solo estaba en el server y a veces es LENTO...
v0.915016_to_v0.915019
-Posibilidad de reparar por completo A2
-Nuevos paquetes de bypass agregados
-algunos errores resueltos
En general dice que algunos ''links'' contienen virus,malwares, y esas cosas por eso mejor bajarle del soporte o de Top Sony
v0.915020
- solved issue with lg kf75x phones with '01xxxx' IMEIs
such phones will be hanled and recognized automatically, but
you must manually enter generated unlock code.
unlock code can be entered by typing 2945#*750#
(in some cases, it will not work until you flash generic (open) firmware)
- latest bypass packages added
- misc bugfixes
c905,g705 firmwares updated.
warning.
currently i have 2 reports of unsucceful lg kf75x unlocks attempts:
both phones has IMEI like 01151600xxxxxx
i suggest refrain from unlocking of such phones until everything will be cleared.
if anybody tried to unlock such phones and got positive results, reports will be useful.
- issue with some rare semc A2 phones,which failed to unlock, should be solved
- latest bypass packages added
- misc bugfixes
rapidshare LINK
texas Instruments engineers patched locosto bypass bugs in their IC and new IC already on market.
if you will get error "ROMBOOT not answering", in 90% it is new IC revision.
there will be update which allow you to flash and reset userlock of such phones, but network unlock will be impossible for some time.
- reintroduced direct unlock for telcel lg kf750/kf755
- added support for sagem my750x (experimental,released to test and fix)
- added support for lg kf757,lg ks520 (experimental,released to test and fix)
- added signed mode for locosto,neptune semc odm phones
"signed mode" should be checked
signed flashfiles should be used (uploaded on support)
possible flashing,userlock reset,total call time reset
network unlock not enabled (will be done later, via server)
note ! not all semc odm phones support USB (only latest)
note ! most odm phones in signed mode will work stable only on 460800 baudrate
note ! backups of trim area, made in signed and in unsigned mode
ARE NOT EXCHANGEABLE !!!!
- removed auto-ignition for semc odm phones when using 4in1 cable,
use manual ignition - that will eliminate troubles with booting that phones.
- latest bypass packages added
- misc bugfixes
- a lot of bugs, need to find and eliminate
v0.915026
- fixed db201X recovery bug
- fixed nasty cosmetic bug in general unlock procedure
- still should be more bugs
rapidshare 025-026 UPDATE (VERY SMALL SIZE) LINK
rapidshare FULL SETUP LINK
i got sagem my750x phone finally and want to say:
please do not try to unlock sagem cid185,186 mobiles with current setool2 version.
wait for update.
v0.915027
- fixed cosmetic db2xxx gdfs write bug
- fixed bug with interface switching
- tested,fixed and approved support for lg db3200 cid54 phones
- lowered speed for locosto-based phones in alternative bypass mode
- removed experimental support for sagem a2 cid185,cid186 phones.
- added latest rest bypass packages
rapidshare 026-027 UPDATE (VERY SMALL SIZE) LINK
rapidshare FULL SETUP
v0.915028
- fixed critical bug with unsigned unlocking of r306 phone.
- added S1 erom collection, flash in UNSIGNED mode
- added latest rest bypass packages
v0.915029
- a2 flashing speed increased ~15%
- enabled error correction protocol for semc a2 phones
- again lowered altbypass speed of locosto-based phones to 460800
- misc unimportant changes/cosmetic bugfixes
v0.915030
- csca unlock was broken, fixed
rapidshare 029-030 UPDATE (VERY SMALL SIZE)
s1 network unlock enabled for both servers.
that means, users can unlock locosto-based semc phones with "bugfixed mcu"
and neptune-based phones.
to make full unlock user should check both
"signed mode" and "do full unlock instead usercode reset" settings.
first stage (signature calculation) will consume 2 credits.
second stage (unlock) requires at least 1 credit on account, but will NOT consume credits.
service NOT working all 24 hours, so try your luck...
ps.
big thanks goes to my friend eerchant, without him implementation of s1 unlock will take ages.