Секреты сотовых телефонов

Секреты сотовых телефонов1

Секреты сотовых телефонов2

Секретные команды и меню

                      Секреты сотовых телефонов

                   Alcatel One Touch Club Dualband

#06# показывает IMEI (International Mobile Equipment Identity) код
000000* вход в сервисное меню

TRACES - channel indicator menus (нетмонитор индицируются параметры сети)

SWOFF CODES - журнал выключений телефона

EMPTY SWOFF - очистка журнала выключений телефона

                         Alcatel One Touch Easy Dualband

#06# показывает IMEI (International Mobile Equipment Identity) код
000000* вход в сервисное меню.

                   Alcatel One Touch GUM Dualband

#06# показывает IMEI (International Mobile Equipment Identity) код
000000* вход в сервисное меню

                   Alcatel One Touch  MAX Dualband

#06# показывает IMEI (International Mobile Equipment Identity) код
000000* вход в сервисное меню

                         Alcatel One Touch

Show IMEI code --- *#06#
Service/Info Mode --- *#000000#
Hidden Menu --- 000000*

                         Alcatel One Touch Pocket

 #06# показывает IMEI (International Mobile Equipment Identity) код

000000* вход в сервисное меню
000000* cкрытая меню

                  Alcatel One Touch View Dualband

#06# показывает IMEI (International Mobile Equipment Identity) код
000000* вход в сервисное меню

                        Alcatel One Touch Easy

To view IMEI (International Mobile Equipment Identity) number enter *#06#

To Enter Service Menu enter: *#000000#

To view Secret Menu type 000000 then press *

Secret Menu Appears

TRACES channel indicator menus
ARRETS - ?
VIDER ARRETS Press OK and the phone responds: This action is executed!
CTRL CHARGE It show the charger voltage and battery voltage.
DAMIER display test

This is something that I got that I have yet to decipher.

IMEI 3300 1453 1139 420
When activated with a Telstra card the Phone boots up with:

"PRODUCT CODE"
"VAL. => OK"

Then we enter 025121992 OK

"ENTER SPECIAL CODE"

**05* same as Motorola

"UNBLOCKING"
" PUK ? "

10608CC2*. These two from Vodaphone also work 906081C2* 15900807*

"UNBLOCKING"
" PIN ? "

0000*

"UNBLOCKING"
"PIN AGAIN "

0000#

It seems that I need to find out the PIN because at this point the phone reboots

Removing SP lock on Alcatel Easy

This is how to remove the SP lock on Alcatel (one touch) Easy.
(You wil need a cable, a eeprom device and some sw)

Edit the eeprom:

Address Replace with
------------- ---------------
176h FFh
177h FFh

                     Alcatel Разное...

Alcatel Software Info UPDATED / NEW

Software releases

HC400 on the backside near the IMEI number is a sticker with a software release.
Alcatel have split the software releases

1.x No Cellbroadcast
5.x Cell broadcast

The newest software release of the HC 1000 is AK1 03
Alcatel HC600/800/1000 Pin-Out diagram

Alcatel HC600/800/1000 Pin-Out diagram

  1    3    5    7    9   11   13   15
    I    I    I    I    I    I    I    I
O                                        O 17
    I    I    I    I    I    I    I    I
     2    4    6    8   10   12   14   16


1 Vbat_ext                      9 SDA_E 
2 EMMI_PAE                10 GND
3 Mic                                11 GND
4 EMMI_OPE                12 DC_IN (charge)

5 GND 13 Speaker
6 EXT_EMET               14 MARCHE
7 SCL_E                         15 DC_IN (charge)
8 EXT_RECDIT           16 GND
17 Antenna+internal switch (int/ext)

Сервисное меню
Для активизации сервисного меню необходимо набрать 000000*. Появятся пункты сервисного меню:

TRACES - Информация о каналах и базовых станций
SWOFF CODES - Журнал причин отключения телефона
EMPTY SWOFF - Очистака журнала отключений телефона
CHARGE CTRL - Информация об уровне зарядки батареи
CHECKER - Проверка работоспособности экрана

Меню TRACES содержит следующие пункты подменю:

NETWORK -- информация о текущем активном канале

aaa bb cc dd ee ffff, где

aaa - BCH - номер текущего активного канала (каналы с 1 по 124 - GSM 900, каналы больше 124 - GSM 1800)
bb - качество приема в условных единицах (в пределах от 1 до 63)
cc - BSIC - номер текущей базовой станции
dd ee - ?? (обычно не изменяются, у МТС 20 18, у БиЛайна 20 15)
ffff - LAC - код локальной области в шестнадцатиричной форме
RSSI -- Receive Signal Strength Indication - Уровень приемного сигнала

aaa bb - (несколько раз парами)

aaa - BCH - номер канала
bb - уровень приема в шестнадцатиричной системе (единица измерения = -0.5 dBm)
RXLEV -- Rx Level - Уровень приема

Тоже самое, что и предыдущий пункт меню, но значения bb выставляются в условных единицах (в пределах от 1 до 63)

BSIC -- Base Station Identification Code
aaaa bb - (несколько раз парами)
aaaa - BCH - номер канала
bb - номер базовой станиции
C1 -- ??

C2 -- ??

SWOFF CODES -- Журнал причин отключения телефона

46: ручное отключение (долгое нажатие на кнопку 'C')
44: запрограмированое отключение (с помощью таймера)
43: отключение из-за разрядки батарейки
10: внезапное отключение батарейки
45: ручное отключение при присоединенной зарядке
00: ???
EMPTY SWOFF -- Очистка журнала отключение телефона

CHARGE CTRL -- Информация о зарядке телефона

aa bbb ccccc ddd e.ee, боковой клавишей вниз
---- ---- ff gg hhhh jjjj, боковй клавишей вниз,
iii kkkk, где

aa - Текущий источник питания, (RE - штатная батарея)
bbb - ??
ccccc - время прошедшее с момента включения телефона или изменения истояника питания (2-х минутных интервалах)
ddd - ??
e.ee - текущее напряжение питания в вольтах
ff gg - ??
hhhh - тип батареи:

NIX1 - никель-металлгидрид

jjjj - ???
iii - степень зарядки батареи в процентах
kkkk - ???

CHECKER -- Тест экрана типа "шахматная доска"

       BOSCH 738 and BOSCH 718, BOSCH COM 607 and 908

*#3262255*8378# (*#DANCALL*TEST#) to make secret Engineering menu (menu 10) appear.

10. Engineering
10.1 MS Info
10.1.1 on
10.1.2 off
10.2 Software details
10.2.1 Software version
10.2.2 EEPROM version
10.2 Test / Production details
10.3.1 Hardware data
10.3.2 Production data
10.3.3 Service data
10.3.4 Mechanical data

*#06# to display the IMEI (International Mobile Equipment Identity)
*#0000# to set the language automaticaly (Reset to english)
*#3370# to set the Enhaced Full Rate
#3370# to Reset the phone
*#9000# to enter sim lock code
*#9001# To enter the corporate code (Bosch 908)
*#9002# To enter the provider code (Bosch 908)
*#9003# to enter the network code
*#9004# to enter the subset code
*#9100# to remove the sim lock permanently
*#9101# to remove the corporate lock permanently
*#9102# to remove the provider lock permanently
*#9103# to remove the network lock permanently
*#9104# to remove the subset lock permanently


(SIM-lock is NOT the SP-lock/Service Provider lock!!)

The SIM-lock makes your phone to fusion with the SIM-card, and the phone will not accept any other SIM cards after you lock your phone! You get ten chances to type the correct code! After the tenth time your phone gets "SIM-lock permanently blocked", and you will be unable to open it !! The best thing you can do is to remove the SIM-lock permanently!!

NB. Tested on Bosh 738 phone and 607.

                             Bosch 909 Dual

*#06# показывает IMEI (International Mobile Equipment Identity) код

*#0000# устанавливает меню на Английский
*#3370# устанавливает Enhaced Full Rate (режим улучшающий качество звука)
#3370# выключает Enhaced Full Rate
*#9000# для ввода SIM lock кода
*#9001# для ввода corporate lock кода (Bosch 908)
*#9002# для ввода provider lock кода (Bosch 908)
*#9003# для ввода network lock кода
*#9004# для ввода subset lock кода
*#9100# для снятия SIM lock кода
*#9101# для снятия corporate lock кода
*#9102# для снятия provider lock кода
*#9103# для снятия network lock кода
*#9104# для снятия subset lock кода

*#3262255*8378# (*#DANCALL*TEST#) для открытия секретного Инженерного меню.(меню 10)

10. Engineering
10.1 MS Info
10.1.1 on
10.1.2 off
10.2 Software details
10.2.1 Software version
10.2.2 EEPROM version
10.2 Test / Production details
10.3.1 Hardware data
10.3.2 Production data
10.3.3 Service data
10.3.4 Mechanical data

                                Bosch Разное...

 Bosch 608 PIN-OUTS UPDATED / NEW

Bosch bottom connector
           ______________
           | 15                       1 |
           |( ) ========        |
           |___16______2_|


16 GND Ground
15 EQUIP-ID Pulled low by HF, internal pullup 100k
14 AGND Analog ground
13 A-DL Analog output from phone
12 AGND Analog ground
11 A-UL Analog input to phone
10 GND Ground-this pin is checked by HF, if
GND=>phone is present
9 CHG-ID Charger ID - detects type of charger
8 D-BUS Data output
7 IGNITION Sensing ignition (in car kit),
internal pulldown 100k
6 HF_ENABLE HF enable output
5 V-BATT Connected directly to the MS battery. NO FUSE!
4 PA_BIAS_ON Trigger signal synchronous withr TX burst
3 I-BUS Data input (internal 100k pullup)
2 C-BUS Bi-directional serial control bus
1 VIN Input voltage - supply pin
Tips and Tricks

The 54# Tip (for Bosch 738 ..):
Type 1#, 2#........54# on the keypad (when you're not in the menu) to get the phone number used for
with this key when speed dialing.

                                        Ericsson 388

*#06# for checking the IMEI (International Mobile Equipment Identity)
*#0000# to reset the phones menu-language to English.

>*<<*<* for checking the firmware revision information (software release)

>*<<*<*> 1-row text strings. if pressing yes you can check
the phones text programming in currently selected language. (298 entries)

>*<<*<*>> n-row text strings. if pressing yes you can check
the phones text programming in currently selected language. (160 entries?)

                                              Ericsson DH-3xx/vi

Secret Codes

923885[Menu] --- NAM programming
904060[Menu] --- Reset phone
904080[Menu] --- Title blink
904090[Menu] --- TestMode on/off
904059[Menu] - Test Set (commands)
(0..9=0..9 *=A; #=B; clr=C; menu=D; no=E; rcl=F).
press Yes, at the @ enter the command.
some of the commands have parameters of different lenght.
if one parameter doesnt work try another.

                                          Ericsson GF768

Редактирование приветствия

1. Войдите в Keylock меню.
2. Установите блокировку в Auto.
3. Нажмите YES затем удерживайте Левую стрелку пока не появится Greetings меню.

GF788 меню в вашем GF768 телефоне! (1)
1. Войдите в EDIT Меню и нажмите YES.
2. Нажмите число "2" затем YES.
3. В "NAME" удерживайте клавишу "2" пока не появится число "2". Нажмите YES.
4. Нажмите YES еще раз (для сохранения позиции ) затем БЫСТРОнажмите и удерживайте левую стрелку пока на дисплее не появится "SIZE".
5.Нажмите YES и выберите "Full size". Теперь у вас будет меню как и в GF788 .

GF788 меню в вашем GF768 телефоне! (2)
1.Войдите в MissedCall
2. Очистите список
3. Нажмите Правую стрелку -> на пару секунд
4. Появится SIZE меню
5. Выберете YES и выйдете от туда
Примечание . Данный код работает с версией 990122.

GF788 меню в вашем GF768 телефоне! (3)
1. Войдите и установите громкость звонка и нажмите YES.
2. Когда 'STORED' появится - удерживайте нажатой правую стрелку пока на экране не появится 'Extended Menu'
3. Выберете "Activate" в меню
Примечание . Данный код работает с версией 980910

                                       Ericsson KF-768/788

Secret Codes

923885[Menu]  ---  NAM programming
904060[Menu]  --- 
Reset phone
904080[Menu]  ---  
Title blink
904090[Menu]  ---  
TestMode on/off
904059[Menu]   --- 
Test Set

Known commands:
(dunno what the data's say)

1F Mode Set
2F Mode Set

27 Some Data (2*param=00..99)
28 Some Data (4*param=00..FF)
38 Many Data
3A Some Data
3C Set Channel Number
(in mode 1F) (4*param=0001..1023)
3D Show RX Level
3F Reboot
4F Exit
5F Some Data (XXXXXXXXXXh)
63 Some Data (XXXX)
73 Copyright
83 Set Channel Number
(in mode 1F) (4*param=?001..?31F)
85 Speaker Off (in mode 1F)
86 Speaker On (in mode 1F)
8B Show TX Level
94 Many Data
95 Some Data (XXXXh)
96 ESN num in hex (XXh-XXXXXXh)
AA Tone (in mode 2F) (2*param=00..FF)
E2 Reset Phone
E3 Reset Phone
E4 Some Data (2*param=00..03,..,90..93)
E5 Check Screen (2*param)
E6 Some Data (2*param=00..99)

UnKnown commands:
(dunno what they do but this is what they say...)

22 Param (2*param)
29 Done (6*param)
2B Error (8*param)
2C Done (4*param)
2D Param (6*param)
2E Param
30 Error (16*param)
31 Error
32 Error
34 Error
35 Error (7*param)
37 Param (>100*param)
39 Done (4*param)
3B Done
60 Error (42*param)
62 Done (6*param)
64 Done (2*param)
65 Done (2*param)
66 Done (2*param)
69 Done (6*param)
72 Param (6*param)
74 Error (6*param)
77 Error (6*param)
78 Done (2*param)
80 Done
81 Done
82 Done
84 Done (2*param)
87 Done
88 Done
8C Done (2*param)
8D Done (4*param)
8F Done
90 Done
92 Error halts (2*param)
98 Error
9A Error
9B Error
9E Error
A0 Done (2*param)
A1 Done
A2 Done (12*param)
AB Done
AC Done
AD Done
E0 Done (4*param)
E1 Done (6*param)
E7 Error
E9 Param
EB Done (2*param)
EC Done (12*param)
ED Done
EE Done (8*param)
EF Error (2*param)

1st. Technique:

    904059 Menu - Enter Test Mode
    Yes 1F - Enter Mode
    Yes 86 - Speaker On
    Yes 83???? - Set Channel (?001..?31F)
    Yes 3D - Signal Level
    Yes 3F - Exit

2nd. Technique:

    904059 Menu - Enter Test Mode
    Yes 1F - Enter Mode
    Yes 86 - Speaker On
    Yes 3C???? - Set Channel (0001..1023)
    Yes 3D - Signal Level
    Yes 3F - Exit

(0..9=0..9 *=A; #=B; clr=C; menu=D; no=E; rcl=F).
press Yes, at the @ enter the command.
some of the commands have parameters of different lenght.
if one parameter doesnt work try another. 

                                       Ericsson A1018s

(UN)LOCKING YOUR ERICSSON A1018s TO SPECIFIC NETWORK :

A way to (un)lock your cell phone on to the network:
1. Press : <**<
2. Then on the display appear and give you two choices:
Lock to Network ? and Lock to Network subset?
3. Enter the NCK number (code is provided by the SP)
4. You have 5 attemps to do this
5. Then your cell phone will work 'only' with the network

                                          Ericsson 218/337

To view IMEI number *#06#
To view Software Version enter -> * <- <- * <- * CLR (Use with Care)

To activate operator lock <- * * <- (This locks the phone to one carriers SIM card - Use with lots of care)

Press Yes to lock and No to notlock. You can also use the codes below to undo this function. USE AT OWN RISK

I have tested the function Lock to SP... At least on the 337 there's a submenu: Enter SPCK-code. There are 5 attempts, which is showed (05 attempts). At final attempt the phone beeps as a warning, 'this is the final try', when entering the menu... Wrong code exits the menu, so you are not stuck in something... When you have tried to enter the code (wrong) all five times, the menu is deactivated, and you'll get: 'Not allowed' when entering <-**<-

A "secret test mode" can be accessed on the GH337. There seems to be two methods:

> * < < * > * displays software version, such as 940810 1310

> * < < * < * displays software version, such as 951024 1054

After entering this mode, the < and > keys scroll through a menu. There seems to be different menus for different versions of software.

Software version number are apparently a date and time stamp.

940810 1310 version commands:

TEXT CHECK - shows 254 messages in current language

INIT EEPROM MMI - resents NVRAM settings (User Settings).

Other, probably more recent version:

FLASH - will restart the phone, to the point of entering PIN numbers.You can't kill a 337 when pressing YES while it says "FLASH?", you must connect it to 5/12 volts first to be able to erase the flash-memory.

1-ROW TEXTS - scroll through 174 single line text messages with < and >

n-ROW-TEXTS - scroll through full-screen messages with < and >

950626 1405 version commands:

CXC (number) - The Application software's "product number". The GH337/GF337 is always "CXC 125 005"

PRG - Indication for Programming

                                         Ericsson 368

Try these Codes on your DH-368 phone:

1) Power on.
2) Press 904059 + 'MENU'
3) 'TEST SET' display ...
4) Press 'YES' will display @ then press 1 'RCL' will turn light off
and you will see 'DONE'
5) Press 'YES' will display @ then press 86 'RCL' display 'DONE'
also you will hear static...

You can just enter the channel number (up to 1023) by pressing
'Yes' 3 'CLR' XXXX - channel number to enter a channel directly.
You can also see the signal level on channel by pressing 3 'MENU'.
You can see the ESN number by pressing 'YES' 1 'RCL' 96 in HEX format.

6) Press 3 to exit, now you phone will power down and power up again.
You can install the phone number into the phone by pressing 923885 + 'MENU'

                                          Ericsson GA628

*#06# for checking the IMEI (International Mobile Equipment Identity)
*#0000# to reset the phones menu-language to English.

*#103# then YES Time and date will be shown.

>*<<*<* for checking the firmware revision information (software release)

>*<<*<*> 1-row text strings. if pressing yes you can check
the phones text programming in currently selected language. (298 entries)

>*<<*<*>> n-row text strings. if pressing yes you can check
the phones text programming in currently selected language. (160 entries?)



Software UPDATED / NEW

The phone should display something similar to this:

CXC125065 - Cell phone's internalproduct code.
PRG - Firmware revision - software version (date & time stamp).
970715 1515

LASTEST Version is: <990401>
Fixes: ???

Software update, how?

I have been asked a lot about how to update the software in cellular phones.
The easiest thing to do is to go to the nearest Ericsson
dealer and make him do it for you. Just remember that it is supposed to
be free (a receipt is requiet) so don't let him tell you anything else!



Service Provider Lock

The Service Provider (SP) Lock menu is used to lock the cell phone to the
SP's SIM card. Once the cell phone is locked to a specific operator, if one
inserts a SIM card from a different operator the phone will refuse to accept it!
The cell phone will however accept another SIM card from the same operator.

To activate/deactivate this lock one needs a special secret code that is not
available to the end user. (not even to you... or is it ? in case please let me know!)

Here is how to activate the menu:

<**< Lock to Network? if pressing yes you have 5 attempts
to enter NCK.

<**<< Lock to Network subset? if pressing yes you have
5 attempts to enter NSCK.

Warning: Your phone can be locked to a service provider FOREVER by doing this!
If an invalid code is entered all five times, the menu will exit and be deactivated!
Any further attempt to activate the NCK/NSCK lock Menu will result in the response
"Not allowed"! However the NCK/NSCK lock can be recover through a direct clearing
in the EEPROM.


Tips and Info

Shortcut for Last Dialed call menu...
If you for some reason don't want to enter the 'Last Dialed
calls menu' by using the 'YES' key you can use the following
key stroke instead: First '0' then '#'.
Bat. level indicator when turned OFF...
When the phone is turned off and the phone is not changing -
the bat. level can be seen for a short period of time by pressing
the 'NO' key quick once (it has to be quick!) and then wait for
about 2 sec. The bat. level will now be shown in the display
at its normal position.

Access menu without Sim card ...
To access to the menu in your phone without having a card inside do the following:
type **04*0000*0000*0000# When display say "Wrong Pin" press NO and you have access to the all menus: Info, Access, Settings, Calculator, Clock, Keylock On?, Mail, Phone book.
NOTE if you try this on your phone may stop at Keylock On? menu and you?ll have to take your battery out to turn the phone on again.

Alarm Clock Menu..

Go to MissedCall
Empty the list
Press the -> key for a second or two
The option Menu size turns up
Choose 'yes' and go from there.

An alarm clock turned up too but it never rang. I think this was
because there is no clock in the phone.

Free phone calls using the GA628..

NB! This trick has only been reported working on PREPAID GSM CARDS
and in some countries and with some sw versions.

The prepaid GSM SIM CARD is a kind of "SIM card" which only has a sertant
amount of credit on it (like a normal phonebox telecard)...
if it can be traced? - I don't know...

Well..here's the trick you dial the no. normally and press YES. While "connecting"
is shown on the screen, the following procedure should be carried out:
Press CLR then 0 then # and then NO (twice) so as to switch OFF the phone.
You can then still speak on the phone while it is switched off but the
SIM card does not record your calls which will lead to FREE
phone calls in some countries.. we hope!!

Another variant of the code ..
Make a Call, while the phone says Connecting type 083# (the position 83 must be empty! ), when phone says Pos Emtpy, press the NO key and turn off the phone.

If you can make the call with the phone turned off you will face a problem when
you need to hang up the phone...the only way for you to do that is remove the
battery...???

                                        Ericsson GF768

Tips & Tricks

Edit Greetings Tip.

1. Go to the Keylock menu.
2. Set lock to Auto.
3. Press YES then hold the left arrow untill the Greetings menu appears.
GF788 menu in your GF768 phone! (1)

1. Go to the EDIT MENU and press YES.
2. Type the number "2" and press YES.
3. In "NAME" HOLD DOWN the "2" key untill the number "2" apperars. Press YES.
4. Press YES again (to save any position) then QUICKLY press
and hold left arrow (<) untill "SIZE" appears in the display.
5.Press YES and choose "Full size". You now have the GF788 menu!

NB. Confirmed working on version 970716 and 980318.

GF788 menu in your GF768 phone! (2)

1.Go to MissedCall
2. Empty the list
3. Press the -> key for a second or two
4. The option Menu size turns up
5. Choose 'yes' and go from there

NB. Confirmed working on version 990122.

GF788 menu in your GF768 phone! (3)

1. Go and set the ring volume and press yes.
2. When 'STORED' is displayed - keep the right button -> pressed until 'Extended Menu' is displayed.
3. Select "Activate" the menus and you now have lots of extra features

NB. Confirmed working on version 980910

Software

Lastest Firmaware
Lastest Firmaware version: 990317

                                       Ericsson GF788

*#06# for checking the IMEI (International Mobile Equipment Identity)
>*<<*<* for checking the firmware revision information (software release)

>*<<*<*> 1-row text strings. if pressing yes you can check
the phones text programming in currently selected language. (298 entries)

>*<<*<*>> n-row text strings. if pressing yes you can check
the phones text programming in currently selected language. (160 entries?)



Software

The phone should display something similar to this:

CXC125065 - Cell phone's internalproduct code.
PRG - Firmware revision - software version (date & time stamp).
970715 1515
LASTEST Version is: <971128>
Fixes: ???

Software update, how?

I have been asked a lot about how to update the software in cellular phones.
The easiest thing to do is to go to the nearest Ericsson
dealer and make him do it for you. Just remember that it is supposed to
be free (a receipt is requiet) so don't let him tell you anything else!



Service Provider Lock

The Service Provider (SP) Lock menu is used to lock the cell phone to the
SP's SIM card. Once the cell phone is locked to a specific operator, if one
inserts a SIM card from a different operator the phone will refuse to accept it!
The cell phone will however accept another SIM card from the same operator.

To activate/deactivate this lock one needs a special secret code that is not
available to the end user. (not even to you... or is it ? in case please let me know!)

Here is how to activate the menu:

<**< Lock to Network? if pressing yes you have 5 attempts
to enter NCK.

<**<< Lock to Network subset? if pressing yes you have
5 attempts to enter NSCK.

Warning: Your phone can be locked to a service provider FOREVER by doing this!
If an invalid code is entered all five times, the menu will exit and be deactivated!
Any further attempt to activate the NCK/NSCK lock Menu will result in the response
"Not allowed"! However the NCK/NSCK lock can be recover through a direct clearing
in the EEPROM.



Tips and Info

Shortcut for Last Dialed call menu...
If you for some reason don't want to enter the 'Last Dialed
calls menu' by using the 'YES' key you can use the following
key stroke instead: First '0' then '#'.
Bat. level indicator when turned OFF...
When the gh688 is turned off and the phone is not changing -
the bat. level can be seen for a short period of time by pressing
the 'NO' key quick once (it has to be quick!) and then wait for
about 2 sec. The bat. level will now be shown in the display
at its normal position.

Access menu without Sim card ...
To access to the menu in your phone without having a card inside do the following:
type **04*0000*0000*0000# When display say "Wrong Pin" press NO and you have access to the all menus: Info, Access, Settings, Calculator, Clock, Keylock On?, Mail, Phone book.
NOTE if you try this on the GH688 your phone may stop at Keylock On? menu and you?ll have to take your battery out to turn the phone on again.

Free phone calls using the GF788..

NB! This trick has only been reported working on PREPAID GSM CARDS
and in some countries and with some sw versions.

The prepaid GSM SIM CARD is a kind of "SIM card" which only has a sertant
amount of credit on it (like a normal phonebox telecard)...
if it can be traced? - I don't know...

Well..here's the trick you dial the no. normally and press YES. While "connecting"
is shown on the screen, the following procedure should be carried out:
Press CLR then 0 then # and then NO (twice) so as to switch OFF the phone.
You can then still speak on the phone while it is switched off but the
SIM card does not record your calls which will lead to FREE
phone calls in some countries.. we hope!!

Another variant of the code ..
Make a Call, while the phone says Connecting type 083# (the position 83 must be empty! ), when phone says Pos Emtpy, press the NO key and turn off the phone.

If you can make the call with the phone turned off you will face a problem when
you need to hang up the phone...the only way for you to do that is remove the
battery...??? (Please tell me otherwise!!)



Pin Outs

Bottom view, keyboard up, counting from the left:

01 Out Audio from Mobile Station
02 In Audio to Mobile Station
03 In External Analog Audio Accessory Sense. Connect to GND to enable external mike and speaker
04 - Audio Signal Ground, 0V reference
05 In Portable Handsfree.
06 Out Music Mute (to mute e.g. the car radio) High when calling.
07 In Flash Memory Voltage and Service Voltage. Phone enters debugmode when tied to +5V at power-up.
08 Out Logic Reference, Status On. Sources over 100mA.
09 Out Data from Mobile Station. Debug messages appear here at 112KBaud when in debug mode.
10 GND Digital Ground and DC return
11 In Data to Mobile Station
12 I/O DC positive for battery charging (in)/DC for extenal accessory powering (out)

All signals seem to be at 5V logic. Most debug messages are text. Like "CB ok!" etc. Debug messages are trailed by 0x0A, 0x0D. Power-up means removal of battery, reconnection of battery, depressure of "NO".

A portable handsfree kit is connected as follows:
Portable Handsfree (directly connected to pins 01, 02, 04):
01 Earphone: 16 Ohm
02 Microphone: <= 2 kOhm
05 to be connected to 04 (GND)

                                           Ericsson GH688

*#06# for checking the IMEI (International Mobile Equipment Identity)
*#0000# to reset the phones menu-language to English.

>*<<*<* for checking the firmware revision information (software release)

>*<<*<*> 1-row text strings. if pressing yes you can check
the phones text programming in currently selected language. (298 entries)

>*<<*<*>> n-row text strings. if pressing yes you can check
the phones text programming in currently selected language. (160 entries?)


Software

The phone should display something similar to this:

CXC125065 - Cell phone's internalproduct code.
PRG - Firmware revision - software version (date & time stamp).
970715 1515

LASTEST Version is: <980114>
Fixes: ???

Fixes in Software version<971009>
After receiving an SMS the prompt >>Message read?<< stayed
on the screen until you pressed YES or NO. This new software eliminated
this "feature" and when you receive an SMS >>Message read?<< stays on
the screen only for a few seconds then it changes into an envelope.

Fixes in Software version <970905>
(and Ericsson 788 - software version 970716)
The error is described as "MS unable to find HPLMN if 30 or more competitor
ARFCN+s have greater signal strength than the HPLMN."
In other words:
if there are 30 or more channels belonging to other
carriers which are stronger than the customer's home network, the phone
will not be able to find the customer's home network.

Fixes in Software version <970715>
- The bug of the missing arrow on display when all diverting active.
- Key lock key on display turned around , like in manual. (???)
- An updated GSM operators' list.
- Better and more solid reception.
- Changing problem when turned OFF.

Software update, how?

I have been asked a lot about how to update the software in cellular phones.
The easiest thing to do is to go to the nearest Ericsson
dealer and make him do it for you. Just remember that it is supposed to
be free (a receipt is requiet) so don't let him tell you anything else!


Service Provider Lock

The Service Provider (SP) Lock menu is used to lock the cell phone to the
SP's SIM card. Once the cell phone is locked to a specific operator, if one
inserts a SIM card from a different operator the phone will refuse to accept it!
The cell phone will however accept another SIM card from the same operator.

To activate/deactivate this lock one needs a special secret code that is not
available to the end user. (not even to you... or is it ? in case please let me know!)

Here is how to activate the menu:

<**< Lock to Network? if pressing yes you have 5 attempts
to enter NCK.

<**<< Lock to Network subset? if pressing yes you have
5 attempts to enter NSCK.

Warning: Your phone can be locked to a service provider FOREVER by doing this!
If an invalid code is entered all five times, the menu will exit and be deactivated!
Any further attempt to activate the NCK/NSCK lock Menu will result in the response
"Not allowed"! However the NCK/NSCK lock can be recover through a direct clearing
in the EEPROM.



Tips and Info UPDATED / NEW

Shortcut for Last Dialed call menu...
If you for some reason don't want to enter the 'Last Dialed
calls menu' by using the 'YES' key you can use the following
key stroke instead: First '0' then '#'.
Bat. level indicator when turned OFF...
When the gh688 is turned off and the phone is not changing -
the bat. level can be seen for a short period of time by pressing
the 'NO' key quick once (it has to be quick!) and then wait for
about 2 sec. The bat. level will now be shown in the display
at its normal position.

Access menu without Sim card ...
To access to the menu in your phone without having a card inside do the following:
type **04*0000*0000*0000# When display say "Wrong Pin" press NO and you have access to the all menus: Info, Access, Settings, Calculator, Clock, Keylock On?, Mail, Phone book.
NOTE if you try this on the GH688 your phone may stop at Keylock On? menu and you?ll have to take your battery out to turn the phone on again.

Full Network Name...
You can see the Full Network Name by doing the following:
Go to the network menu, when the phone displays the networks
available (in 'Select net' and 'Edit list' menu) you can press * and
you will see the full name.

Full Operator List...
You can view the full operator list by doing the following:
Go to the 'Edit list' menu under 'networks'. The phone say
'please wait' (searching for other networks). When finished,
Press the < key once, then YES twice. Now the phone displays
the full list. Browse through the list with the < > keys.

Monitor mod on Ericsson GH688..
How to enable net monitor on Ericson 688..(Let me know from you if your try this.. Haven't got a 688 anymore ;( )

1. Remove SIM from phone
2. Dial 112, press YES, hear something,
3. Dial 112YESNO
4. Press <(left arrow) before SETTINGS
5. Then YES, <(left arrow), then u will see NM on?
6. press YES

Free phone calls using the GH688..

NB! This trick has only been reported working on PREPAID GSM CARDS
and in some countries and with some sw versions.

The prepaid GSM SIM CARD is a kind of "SIM card" which only has a sertant
amount of credit on it (like a normal phonebox telecard)...
if it can be traced? - I don't know...

Well..here's the trick you dial the no. normally and press YES. While "connecting"
is shown on the screen, the following procedure should be carried out:
Press CLR then 0 then # and then NO (twice) so as to switch OFF the phone.
You can then still speak on the phone while it is switched off but the
SIM card does not record your calls which will lead to FREE
phone calls in some countries.. we hope!!

Another variant of the code ..
Make a Call, while the phone says Connecting type 083# (the position 83 must be empty! ), when phone says Pos Emtpy, press the NO key and turn off the phone.

If you can make the call with the phone turned off you will face a problem when
you need to hang up the phone...the only way for you to do that is remove the
battery...??? (Please tell me otherwise!!)


Pin Outs

Bottom view, keyboard up, counting from the left:

01 Out Audio from Mobile Station
02 In Audio to Mobile Station
03 In External Analog Audio Accessory Sense. Connect to GND to enable external mike and speaker
04 - Audio Signal Ground, 0V reference
05 In Portable Handsfree.
06 Out Music Mute (to mute e.g. the car radio) High when calling.
07 In Flash Memory Voltage and Service Voltage. Phone enters debugmode when tied to +5V at power-up.
08 Out Logic Reference, Status On. Sources over 100mA.
09 Out Data from Mobile Station. Debug messages appear here at 112KBaud when in debug mode.
10 GND Digital Ground and DC return
11 In Data to Mobile Station
12 I/O DC positive for battery charging (in)/DC for extenal accessory powering (out)

All signals seem to be at 5V logic. Most debug messages are text. Like "CB ok!" etc. Debug messages are trailed by 0x0A, 0x0D. Power-up means removal of battery, reconnection of battery, depressure of "NO".

A portable handsfree kit is connected as follows:
Portable Handsfree (directly connected to pins 01, 02, 04):
01 Earphone: 16 Ohm
02 Microphone: <= 2 kOhm
05 to be connected to 04 (GND)

                                    Ericsson SH888

*#06# for checking the IMEI (International Mobile Equipment Identity)
>*<<*<* for checking the firmware revision information (software release)

>*<<*<*> 1-row text strings. if pressing yes you can check
the phones text programming in currently selected language.

>*<<*<*>> n-row text strings. if pressing yes you can check
the phones text programming in currently selected language.

>*<<*<*>>> IR version info. if pressing yes you can check
the phones IR device's driver version.



Software

The phone should display something similar to this:

CXC125131- Cell phone's internalproduct code.
PRG - Firmware revision
970715 1515 - software version (date & time stamp).

LASTEST Version is: <991022>

Older versions:
<990614>

CXC125131
PRG
990614 1714

IVER
980408 1035
PRGCXC125101

Software update, how?

I have been asked a lot about how to update the software in cellular phones.
The easiest thing to do is to go to the nearest Ericsson
dealer and make him do it for you. Just remember that it is supposed to
be free (a receipt is requiet) so don't let him tell you anything else!


Service Provider Lock

The Service Provider (SP) Lock menu is used to lock the cell phone to the
SP's SIM card. Once the cell phone is locked to a specific operator, if one
inserts a SIM card from a different operator the phone will refuse to accept it!
The cell phone will however accept another SIM card from the same operator.

To activate/deactivate this lock one needs a special secret code that is not
available to the end user. (not even to you... or is it ? in case please let me know!)

Here is how to activate the menu:

<**< Lock to Network? if pressing yes you have 5 attempts
to enter NCK.

<**<< Lock to Network subset? if pressing yes you have
5 attempts to enter NSCK.

Warning: Your phone can be locked to a service provider FOREVER by doing this!
If an invalid code is entered all five times, the menu will exit and be deactivated!
Any further attempt to activate the NCK/NSCK lock Menu will result in the response
"Not allowed"! However the NCK/NSCK lock can be recover through a direct clearing
in the EEPROM.


Tips and Info

Shortcut for Last Dialed call menu...
If you for some reason don't want to enter the 'Last Dialed
calls menu' by using the 'YES' key you can use the following
key stroke instead: First '0' then '#'.
Bat. level indicator when turned OFF...
When the gh688 is turned off and the phone is not changing -
the bat. level can be seen for a short period of time by pressing
the 'NO' key quick once (it has to be quick!) and then wait for
about 2 sec. The bat. level will now be shown in the display
at its normal position.

Access menu without Sim card ...
To access to the menu in your phone without having a card inside do the following:
type **04*0000*0000*0000# When display say "Wrong Pin" press NO and you have access to the all menus: Info, Access, Settings, Calculator, Clock, Keylock On?, Mail, Phone book.
NOTE if you try this on the SH888 your phone may stop at Keylock On? menu and you?ll have to take your battery out to turn the phone on again.

                                         Ericsson T28

*#06# for checking the IMEI (International Mobile Equipment Identity)
>*<<*<* for checking the firmware revision information (software release)

>*<<*<*> 1-row text strings. if pressing yes you can check
the phones text programming in currently selected language.)

>*<<*<*>> n-row text strings. if pressing yes you can check
the phones text programming in currently selected language.



Software

Type: CXC125115!

The phone should display something similar to this:

PRCXC125115 - Cell phone's internalproduct code.
PRG - Firmware revision - software version (date & time stamp).
990718 1258

LASTEST Version is: <991022>

Version <990831>
Version <990718>

Software update, how?

I have been asked a lot about how to update the software in cellular phones.
The easiest thing to do is to go to the nearest Ericsson
dealer and make him do it for you. Just remember that it is supposed to
be free (a receipt is requiet) so don't let him tell you anything else!



Service Provider Lock

The Service Provider (SP) Lock menu is used to lock the cell phone to the
SP's SIM card. Once the cell phone is locked to a specific operator, if one
inserts a SIM card from a different operator the phone will refuse to accept it!
The cell phone will however accept another SIM card from the same operator.

To activate/deactivate this lock one needs a special secret code that is not
available to the end user. (not even to you... or is it ? in case please let me know!)

Here is how to activate the menu:

<**< Lock to Network? if pressing yes you have 5 attempts
to enter NCK.

<**<< Lock to Network subset? if pressing yes you have
5 attempts to enter NSCK.

Warning: Your phone can be locked to a service provider FOREVER by doing this!
If an invalid code is entered all five times, the menu will exit and be deactivated!
Any further attempt to activate the NCK/NSCK lock Menu will result in the response
"Not allowed"! However the NCK/NSCK lock can be recover through a direct clearing
in the EEPROM.


Tips and Info

Shortcut for Last Dialed call menu...
If you for some reason don't want to enter the 'Last Dialed
calls menu' by using the 'YES' key you can use the following
key stroke instead: First '0' then '#'.

                                Ericsson v3688 Dual Band

To view IMEI (International Mobile Equipment Identity) number enter *#06#

Enhanced Full Rate Codec (EFR):
To Enable EFR press [][][] 119 [] 1 [] OK.
To Disable EFR press [][][] 119 [] 0 [] OK


NOTE: Nothing appears on Screen

                                 LG ic-300W

menu +9 , enter Service code (default = 000000) - programming mode
press STO for a few seconds, 2539** , wait until you will see a massage press STO and enter "A Key". --- A Key

                             Motorola StarTac 130

**05* Block Code
**052* PIN2 Code

                                  Motorola 3688 Dual Band

To view IMEI (International Mobile Equipment Identity) number enter *#06#

Enhanced Full Rate Codec (EFR):
To Enable EFR press [][][] 119 [] 1 [] OK.
To Disable EFR press [][][] 119 [] 0 [] OK

                                     Motorola StarTac 6500

#program# Nam Editing
[fnc]**testmode[sto] Enter Test Mode

                                     Motorola 7500, 7820

Activate RBS

(Note: pause means the * key held in until box appears)
To activate RBS type: [pause] [pause] [pause] 1 1 3 [pause] 1 [pause] [ok]
You now have to press the [MENU] and scroll to the 'Eng Field Options' function with the keys, and enable it.

De-activate RBS

To de-activate RBS type: [pause] [pause] [pause] 1 1 3 [pause] 0 [pause] [ok]
This only works with some versions of software. Please report to me what versions work and which doesn't.

These countries has been reported working:

d460: IT
6200 Flare: UK (Orange), AU
7500: IT (model: F16 HW: 5.2 SW: 2.1)
8200: ES, AU, NL, BE
8400: IT, NL
8700: AU, IT, SG, DE, ES, ZA

What's the use of RBS:

Get Distance From Base Station - Place a call, when it is answered, press [MENU] until 'Eng Field Option' is displayed, press [OK], select 'Active Cell', press [OK], press [MENU] until 'Time Adv xxx' appears, where xxx is a number. Multiply this number by 550, and the result is the distance from the RBS (Radio Base Station), in meters.

Get Signal Quality - press [MENU] until 'Eng Field Option' is displayed, press [OK], select 'Active Cell', press [OK], press [MENU] until 'C1' appears. This is the signal quality. If it becomes negative for longer than 5 seconds, a new cell is selected.

Motorola Сервисный режим AMPS/DAMPS/NAMPS телефонов

В этой статье рассматриваются некоторые малоизвестные функции AMPS/NAMPS/DAMPS телефонов от Motorola, очень вероятно, что они могут понадобиться Вам в жизни.
Заранее предупреждаем, что это сервисные настройки, и работать они могут не на всех телефонах, так что вы действуете на свой страх и риск.

Проверено на TeleTac250, Profile300e.

Итак: как сломать пароль (например Вы включаете чужой телефон, а он высвечивает Loc'd и стандартный пароль "123" не подходит):

-включаем телефон
-Видим Loc'd
-жмем (FNC)-00**83786633-(STO)-# (вход в сервисный режим) - в итоге должны увидеть US' -жмем 55# - это настройки пользовательских параметров -жмем несколько раз * пока не увидим мигающие по очереди 7 и 000000, нули -это системный код который надо вводить при "легальной" смене пароля
-жмем еще раз * и видим мигающие по очереди 8 (оно нам не надо) и трехзначное число - пароль, которое нам и нужно
-теперь можно выключить телефон, а при включении набрать тот самый код из трех цифр!!!

Общий сброс телефона, может понадобиться например при продаже телефона:

-включаем телефон
- жмем (FNC)-00**83786633-(STO)-# (вход в сервисный режим) - в итоге должны увидеть US'
-давим 32# (нужно ждать пока не пикнет или не перезагрузится),
-сбрасываются все таймеры, все телефонные книги, все настройки возвращаются в состояние по умолчанию;
настройки вашего оператора ессно останутся (телефон резетится около минуты)...

                             Nec DB 2000

To see IMEI code type: *#06#
To Reset to defaults type: *73738# (send?)
To show Software version type : *#2820#
SP Lock info:
The procedure will show if your phone is locked. * # 3210 # (send?) for SIM lock info,
type : *#8140# (send?) for Net lock info.

SIM lock :
*#4960 # (send?) - Inquiry * 4960 * password * password # (send?) to Lock
#4960* password # (send?) to Unlock

[password] is an 8 digits number]

Net Lock:
*#7320# (send?) - Inquiry * 7320 * password * password # (send?) to Lock.
#7320* password # (send?) to Unlock.

[password] is an 8 digits number]

Net Lock 2:
*#2220# (send?) - Inquiry * 2220 * password * password # (send?) to Lock
#2220* password # (send?) to Unlock

[password] is an 8 digits number]

Subnet Lock:
*#1110# (send?) - Inquiry * 1110 * password * password # (send?) to Lock
#1110* password # (send?) to Unlock

[password] is an 8 digits number]

                                             Nokia 3110

*#06# for checking the IMEI (International Mobile Equipment Identity)

*#7780# restores Factory Settings..(Memory, language, counters not included)

*#3110# for checking the phone's software (SW) - called firmware revision information.
*#746025625# [*#sim0clock#] to check if the Sim-Clock can be Stopped
(Sim-clock-stop is a kind of standby mode which will save battery time)

*#92702689# [*#war0anty#] Phone asks 'warranty code:'

Press the following warranty code:

6232 (OK) : Displays the Month and Year of Manufacture (0997)
7332 (OK) : Displays the date of the last repairment - if found ('DATE NOT SAVED'...)
7832 (OK) : Displays (if found) the date where the phone was purchased ('DATE NOT SAVED'...)
9268 (OK) : Displays Serial Number
37832 (OK) : Set the Purchasing Date MMYY (Warning: You can only do this once - So be careful ...)
87267 (OK) : Transfers ALL phone numbers, pictures, sounds from one phone to another
(eg. if broken) with 6110 u can transfer all data via IRport. (Confirm Transfer?)

                                                Nokia 3210

*#06# for checking the IMEI (International Mobile Equipment Identity)
*#0000# shows the SW version.

*#3370# - Enhanced Full Rate Codec (EFR) activation. It will automatically restart.
*#3370* - Enhanced Full Rate Codec (EFR) deactivation. It will automatically restart.
*#4720# - Half Rate Codec activation. It will automatically restart
*#4720* - Half Rate Codec deactivation. It will automatically restart
*#746025625# - Sim clock allowed status.
Enhanced Full Rate will give you much better sound quality when you enable it. The new Enhanced Full Rate CODEC adopted by GSM uses the ASELP (AlgebraicCode Excitation Linear Prediction) compression technology. This technology allows for much great voice quality in the same number of bits as the older Full Rate CODEC. The older technology was called LPC-RPE (Linear Prediction Coding with Regular Pulse Excitation). Both operate at 13 kilobits.(but you take up more space on the network, so they can charge you more) - Talk-time is reduced with about 5%

Half Rate will give you bad soundquality, which gives the serviceprovider the opportunity to have more calls on the network, and you might get a lower charge from them. - Will give you 30% longer talk-time.


*#92702689# - takes you to a secret menu with 6 choices
1) shows the serial nr.
2) shows when the cel phone was made mmyy
3) shows when the the cel. phone was purchased mmyy
4) shows how many times the cel. phone has been repaired.
5) makes u capebel of transferring user data if u have the gear for it
6) shows how many houres the phone has been on

                                                 Nokia 6110

*#06# for checking the IMEI (International Mobile Equipment Identity)

*#0000# for checking the phones software (SW) - called firmware revision information.
*#6110# Try this code if the above code doen't work.
On SW-Version 5.24 (only this version) you can check if the Sim-Clock can be Stopped
with this code. (Sim-clock-stop is a kind of standby mode which will save battery time)

*#746025625# [*#sim0clock#] to check if the Sim-Clock can be Stopped
(Sim-clock-stop is a kind of standby mode which will save battery time)

*#92702689# [*#war0anty#] Warranty code.
You don't need the warranty-codes any more - you can
just scroll through the information like in any other menu. It has the the
same data as 81xx and 31xx phones (with "Edit" button for purchase date, and "User data transfer").

Menu:
1: Displays Serial Number.
2: Displays the Month and Year of Manufacture (0997)
3: Displays (if there) the date where the phone was purchased (MMYY)
you can here set the Purchasing Date (Warning: You can only do this once -
so be careful what you write...)
4: Displays the date of the last repairment - if found (0000)
6: Transfers ALL phone numbers, pictures, sounds from one phone to another
(eg. if broken) 6110 can also transfer all data via IRport (Confirm Transfer?)


Software

Type: NSE-3

                                 Philips Genie

*#06# IMEI number (International Mobile Equipment Identity)
*#2254*# Status register: C, BS, RR, MMI, CREAT.
*#2255*# activate and deactivate the "DEBUG CALL"-Mode; when activated,
make a call to a busy line an the phone will disp some hex-codes on the disp.
*#2558*# the time in days,hours and minutes you are connected to the net
*#2562*# not clear; the phone reconnects to the net
*#2565*# not clear; warmstart ?
*#3333*# (NO) BLOCKING - list (15 items)
*#2377*# "BEER": not clear, the phone waits a random time and reconnects
to the net, sometimes the phone makes a reset or something
*#3377*# Init, Flags, SIM LCK
*#3353*# resets the (NO) BLOCKING - list
*#7378*# Name, Length, SIM phase
*#7489*# SECURITY CODE
*#7693*# you can activate and deactivate the SLEEP MODE
(when deactivated the battery will go down!)
*#7787*# not clear: SPURIOUS INTERRUPT
*#7948*# SWITCH OFF: not clear; it is a timer or something
*#8463*# Some information about the SLEEP MODE: Wake, Sleep Req., Sleep
Philips Genie (TCD838)
Type *#2337*# and it will be activate the beep signal when the cellphone reconnected to the net.

                                Samsung SCH - 600

*#06# -> Show IMEI
*#9999# -> Show Software Version
*#0837# -> Show Software Version (instructions)
*#0001# -> Show Serial Parameters
*#9125# -> Activates the smiley when charging.

*#9998*228# -> Battery status (capacity, voltage, temperature)
*#9998*246# -> Program status
*#9998*289# -> Change Alarm Buzzer Frequency
*#9998*324# -> Debug screens
*#9998*364# -> Watchdog
*#9998*377# -> EEPROM Error Stack - Use side keys to select values. Cancel and ok.
*#9998*427# -> Trace Watchdog
*#9998*523# -> Change LCD contrast - Only with version G60RL01W
*#9998*544# -> Jig detect
*#9998*636# -> Memory status
*#9998*746# -> SIM File Size
*#9998*778# -> SIM Service Table
*#9998*785# -> RTK (Run Time Kernel) errors - if ok then phn is reset, info is put in memory error.
*#9998*786# -> Run, Last UP, Last DOWN
*#9998*837# -> Software Version
*#9998*842# -> Test Vibrator - Flash the screenligth during 10 seconds and vibration activated.
*#9998*862# -> Vocoder Reg - Normal, Earphone or carkit can be selected
*#9998*872# -> Diag
*#9998*947# -> Reset On Fatal Error
*#9998*999# -> Last/Chk

*#9998*9266# -> Yann debug screen (=Debug Screens?)
*#9998*9999# -> Software version

*0001*s*f*t# -> Changes serial parameters (s=?, f=0,1, t=0,1) (incomplete)
*0002*?# -> unknown
*0003*?# -> unknown

SP-unlock SGH-600 and SGH 2100

*2767*3855# -> Full EEPROM Reset ( THIS CODE REMOVES SP-LOCK!! )

*2767*2878# -> Custom EEEPROM Reset

These codes has been tested with version FLD_2C6 G60SB03X of Samsung SGH-600

                                     Siemens C25/Siemens C35i

All siemens phones:
SP unlock *#0003*(secret code 8 digits)#
Siemens C 25

Show IMEI code: * # 06 #
Resets language to automatic selection : * # 0000 # then Green button

                                  Sony CM1300/CM3300

111111 [Jog Dial™]

Version - Software version
Programming - NAM programming
Field Debug - System information

                                 Sony CMDX 1000

Show Software date Following procedure will show on your phone the software date.
Remove your SIM Card, then press:

* # 06 #

and finally press:

[left softkey]

To enter Monitor Mode on Network Option menu:
Menu
9 (Phone Options)
7 (Phone Status)
[Left Display Button] (left MENU key) 7684666 [HangUp Button] (Red HandSet key)
Sony C-1

Remove SP lock (For advanced users only):
Just edit your eeprom and at the address 16b-1D8 fill this address with 00.

                              Следующая страница



ГЛАВНАЯ      МЕЛОДИИ      ПРОШИВКИ      Отправка SMS     УТИЛИТЫ ДЛЯ ТЕЛЕФОНОВ      СЕКРЕТЫ     WAP ЭМУЛЯТОРЫ
Matrix Company © 2003 •Mobilhits•
Hosted by uCoz