To check Nokia mobile or cellphones IMEI (International Mobile Equipment
Identity)
On the main screen type *#06#
Information you get from the IMEI (International Mobile Equipment Identity)
XXXXXX XX XXXXXX X
TAC FAC SNR SP
TAC = Type approval code of your nokia Mobile
FAC = Final assembly code of your cellphone
SNR = Serial number of your nokia Phone
SP = Spare
Other secret tricks for Nokia mobile or cellphone
To check the phones Software revision for Nokia Mobile.
On the main screen type *#0000#
To enter in the secret menu in Nokia Phone.
On the main screen type *#92702689# [*#war0anty#]
It will take you to a secret menu where you may find some of the information
below:
1. Displays Serial Number.
2. Displays the Month and Year of Manufacture
3. Displays (if there) the date where the phone was purchased (MMYY)
4. Displays the date of the last repair - if found (0000)
5. Shows life timer of phone (time passes since last start)
To restore Factory Settings for Nokia mobile
*#7780# reset to factory settings.
Taking picture without getting noticed.
Turn on/off the "click" sound made by the camera by selecting the 'Silent' profile or
by turning warning tones on/off.
Hiding your Mobile/ Cellphone Number
Go to: Menu > Tools > Settings > Call > Send My Caller ID >
'Yes', 'No' or 'Set By Network' to follow the default settings of your home network.
It works only with very few network who provide you facility of “Private Number”
Speed Dialing From Simcard contact (not stored in mobile phonebook)
Type number followed by # then call.
Example: 1# or 2# or 21#
SECRET PRANK
Change closed caller group (settings >security settings>user groups) to 00000 and
your phone will sound the message tone when you are near a radar speed trap.
Setting it to 500 will cause your phone 2 set off security alarms at shop exits.
Try this secret trick if you can handle the unexpected.
Note: This secret trick wont work with all phones Models.
THE DETECTIVE TRICK (Mobile Spying)
Now you can spy on anyone using your cellphone. Just do the following.
1. Activate the "Automatic Answer" in the headset profile of your cellphone and
set the ringing volume to "Mute"
2. Short-circuit the left middle and right pins on the bottom of the mobile phone
with all connections touching each other this will activate profile "Headset".
If you cant do this just keep your earphone connected to mobile.
3. Now place it under a table in a room and call it. Now you can use your phone
for checking out what people are talking about in a room. Just call on your
phone.
4. The phone receives the call without ringing and you can listen to what people
are saying.
To check Samsung mobile or cellphones IMEI (International Mobile
Equipment Identity)
On the main screen type *#06#
Information you get from the IMEI (International Mobile Equipment Identity)
XXXXXX XX XXXXXX X
TAC FAC SNR SP
TAC = Type approval code of your samsung Mobile
FAC = Final assembly code of your cellphone
SNR = Serial number of your samsung Phone
SP = Spare
Other secret tricks for samsung mobile or cellphone
If you have downloaded corrupted or incompatible Java midlets or other
media,
which are causing problems with the phone, try this
*2767*JAVA# Java Reset and (Deletes all Java Midlets)
*2767*MEDIA# Reset Media (Deletes All Sounds and Pics)
*2767*WAP# Wap Reset
*2767*CUST# Reset Custom EEPR0M
*2767*FULL# Reset Full EEPR0M (Caution)
For example : *2767*JAVA# would be keyed in as *2767*5282#
Note : Not all codes will work with SGH-C100.
The master reset code is:
#*7728#
This will not delete anything from your
mobile phone, but set each and eveything to its
default/standard setting as it was on the time of purchase.
To unlock your phone put a sim from another company,
now type *#9998*3323# it will reset your phone. Push exit and then push 7,
it will reset again. Put your other sim in and it will say sim lock,
type in 00000000 then it should be unlocked. Type in *0141# then
the green call batton and it's unlocked to all networks.
This code may not work on the older phones and some of the newer phones.
If it doesn't work you will have to reset your phone without a sim in it
by typing *#2767*2878# or *#9998*3855# (not tested)
Other Samsung Codes
*#9998*4357# Help Menu
*#9998*5282# Java menu (GRPS/CSD settings for JAVA server)
*#9999#0# Monitor Mode
*#9999# or *#9998*9999# Software Version
*#8888# or *#9998*8888# Hardware Version
*#9998*746# or *#9998*0746# or *#0746# Sim Infos
*#9998*523# or *#9998*0523# or *#0523# Display Contrast
*#9998*842# or *#9998*0842# or *#0842# Vibration On (until you push OK)
*#9998*289# or *#9998*0289# or *#0289# Buzzer On (until you push OK)
*#9998*288# or *#9998*0288# or *#0288# Battery & Field Infos
*#9998*377# or *#9998*0377# Error log
*#9998*778# or *#9998*0778# or *#0778# Sim Service table
*#9998*782# show date and alarm clock
*#8999*638# show network information
*#9998*5646# change operator logo at startup
*#9998*76# production number
*#9998*968# view melody for alarm
*#9998*585# Non-Volatile Memory (NVM)
*#3243948# Digital Audio Interference Off
*#32436837# Digital Audio Interference On
View our Mobile tips and Guidelines for better Handling of Mobile
phone.
SECRET PRANK
Change closed caller group (settings >security settings>user groups) to 00000 and
your phone will sound the message tone when you are near a radar speed trap.
Setting it to 500 will cause your phone 2 set off security alarms at shop exits.
Try this secret trick if you can handle the unexpected.
Note: This secret trick wont work with all phones Models.
THE DETECTIVE TRICK (Mobile Spying)
Now you can spy on anyone using your cellphone. Just do the following.
1. Activate the "Automatic Answer" in the headset profile of your cellphone and
set the ringing volume to "Mute"
2. Short-circuit the left middle and right pins on the bottom of the mobile phone
with all connections touching each other this will activate profile "Headset".
If you cant do this just keep your earphone connected to mobile.
3. Now place it under a table in a room and call it. Now you can use your phone
for checking out what people are talking about in a room. Just call on your
phone.
4. The phone receives the call without ringing and you can listen to what people
are saying.
View all Tip & Tricks about LG Nokia Samsung Motorola Sony Ericsson
BenQ-Siemens Bluejacking GSM Secrets
To check Motorola mobile or cellphones IMEI (International Mobile
Equipment Identity)
On the main screen type *#06#
Information you get from the IMEI (International Mobile Equipment Identity)
XXXXXX XX XXXXXX X
TAC FAC SNR SP
TAC = Type approval code of your motorola Mobile
FAC = Final assembly code of your cellphone
SNR = Serial number of your motorola Phone
SP = Spare
Other secret tricks for motorola mobile or cellphone
Code to lock keys. Press together *7
Note: [] (pause) means the * key held in until box appears.
Select phone line - (use this to write things below the provider name):
[] [] [] 0 0 8 [] 1 []
Add phonebook to main menu:
[] [] [] 1 0 5 [] 1 []
Add messages to main menu:
[] [] [] 1 0 7 [] 1 []
Copy SIM memory (phonebook menu):
[] [] [] 1 0 8 [] 1 []
Eng Field options (main menu):
[] [] [] 1 1 3 [] 1 []
Slow (Frequency of search menu):
[] [] [] 1 0 1 [] 1 []
Medium (Frequency of search menu):
[] [] [] 1 0 2 [] 1 []
Fast (Frequency of search menu):
[] [] [] 1 0 3 [] 1 []
Enable EFR:
[] [] [] 1 1 9 [] 1 []
Function :
[] [] [] # # # [] 1 []
Change pin:
[] [] [] 0 0 4 [] 1 []
Unblocking using the "puk" number:
[] [] [] 0 0 5 [] 1 []
You can change GSM frequencies to 900/1800 by entering the enginnering model.
Following the below steps:
enter menu and press 048263* quickly,
then you will enter the secret engineering menu under "Opcode"
input 10*0*3 for GSM 900
10*0*4 for GSM 1800
10*0*5 for GSM 1900
10*0*6 for dual band GSM 900/1800
10*0*7 for dual band GSM 850/1900
To add extra message space 4 your Motorola C350 C450 C550 or C650,
press menu button, press 048263* quickly, then on the popup menu enter 47 press
ok.
press 50 and ok.press 1 ok.press 64 ok.press 1 ok.press 186 and ok.
You will receive an extra 50 msgs memory space.Switch phone off and back on.
View our Mobile tips and Guidelines for better Handling of Mobile
phone.
SECRET PRANK
Change closed caller group (settings >security settings>user groups) to 00000 and
your phone will sound the message tone when you are near a radar speed trap.
Setting it to 500 will cause your phone 2 set off security alarms at shop exits.
Try this secret trick if you can handle the unexpected.
Note: This secret trick wont work with all phones Models.
THE DETECTIVE TRICK (Mobile Spying)
Now you can spy on anyone using your cellphone. Just do the following.
1. Activate the "Automatic Answer" in the headset profile of your cellphone and
set the ringing volume to "Mute"
2. Short-circuit the left middle and right pins on the bottom of the mobile phone
with all connections touching each other this will activate profile "Headset".
If you cant do this just keep your earphone connected to mobile.
3. Now place it under a table in a room and call it. Now you can use your phone
for checking out what people are talking about in a room. Just call on your
phone.
4. The phone receives the call without ringing and you can listen to what people
are saying.
View all Tip & Tricks about LG Nokia Samsung Motorola Sony Ericsson
BenQ-Siemens Bluejacking GSM Secrets
Bluejacking is not mobile hacking or hijacking its totaly different. Bluejacking is a
harmless prank played on people who have switched Bluetooth on their phones.
blue is taken from Bluetooth, the technology bluejacking uses.
jacking is derived from both "ajack" and "hijacking"
Even thought bluejacking does not resemble hijacking There is no accessing or
taking private data from your victim's device.
Bluejacking is totally limited to Bluetooth enabled devices.Bluetooth has a very
limited range, usually around 10 metres on mobile phones, but laptops and other
instrument with high power transmitters can reach up to 100 meters.
Bluejacking Explained
“Bluejacking” is define as sending of unsolicited messages over Bluetooth to
Bluetooth-enabled devices such as mobile phones, PDAs, Laptops, sending a contact
which typically contains a message in the name field to another bluetooth enabled
device via the OBEX protocol.
Few prople say the term “Bluejacking” originated with a user named ajack on
esato.com. Some people say that the term bluejacking comes from Bluetooth and
hijacking. While that certainly sounds logical, a bluejacker doesn't hijack anything,
he just send a contact to the recipient's device. Both parties have absolute control
over their devices, and a bluejacker will not be able to take control of your phone or
steal your personal information.
You can create a phonebook contact and write a message, eg. 'Hello, you've been
bluejacked', in the 'Name' field. Then you can search for other phones with Bluetooth
and send that phonebook contact to them. On their phone, a message will popup
saying "'Hello, you've been bluejacked' has just been received by Bluetooth" or
something along those lines. For most 'victims' they will have no idea as to how the
message appeared on their phone. So, personalised messages like 'I like your pink
top' and the startled expressions that result is where the fun really starts.
Bluejacking is quite harmless, but because bluejacked people don't know what is
happening, they think their phone is malfunctioning. Usually, a bluejacker will only
send a text message, but with modern phones it's possible to send images or sounds
as well.
But with the increase in the availability of bluetooth enabled devices, these devices
have become vulnarable to virus attacks and even complete take over of devices
through a trojan horse program.
Bluejacking Process
Go to Contacts.
• Create a new contact.
• Write the short message you want to send on the line next to 'Last name'
• Save this contact.
• Select this contact and send via Bluetooth.
• Your phone will search for devices
• All the Bluetooth devices near you will be displayed.
• Select any one you like and send.
• You have bluejacked someone.
You can also send pictures to your victim by adding them to your bluejack contact.
The best thing about this is even if the victim rejects the contact that you sent
him/her, the picture gets automatically saved in the victim's My Pictures section.
Note:
It is not that interesting after 2 or 3 trials. Its just a prank. Do NOT harass anyone
with this. Be careful at some places and with some peoples, especially in airports
where the tolerance level is very low. Also don't send threatening messages.
Technically you cannot be traced, but if the victim notices you behaving in a
suspicious way with your mobile phone in your hand, you better run for your life.
Secret Codes
SP unlock *#0003*(secret code 8 digits)#
*#06# for checking the IMEI (International Mobile Equipment Identity)
Tetris
Power on phone and enter PIN. before phone has locked onto network, F9, send own
number, hit right button, hit 9. left is 2, right is 8, rotate is 5, and drop is 4.
Monitor Mode
1. Menu
2. 9 (Phone Options)
3. 7 (Phone Status)
4. Left Display Button (left MENU key)
5. 5553756
6. HangUp Button (Red HandSet key)
Now "Monitor" should appear at the bottom of the Network Options menu. Pressing the
right Display Button when in monitor mode will show a list of the six cells with the
strongest signals. Test Mode Indicators: (* = only available when call in progress )
CH Channel Number
RX Signal Strength (dB)
N NCC (Color Code)
B BCC (Color Code)
CI Cell ID (in Hex)
C1+ how long before phone does forced hand over. (see RX and RXAM)
LAI Location Area Identity. Display Network ID code (42F010 = 240.01) and MSC
TXPWR Transmit Power (dB)
RXAM Reeceive signal strength cut-off point
TS* Time Slot Number
TA* Timing Advance. Distance from tower in Km * 2
PL* Power Level
Power Table
PL: 5 6 7 8 9 10 11 12 13 14 15
dB: 33 31 29 27 25 23 21 19 17 15 13
Watts: 2 1.3 .8 .5 .3 .2 .13 .08 .05 .03 .02
LF* C1 value with continuous transmisson from tower
LS* C1 Value with discontinuous tranmission from tower
QF* Bit Error Rate with continuous transmission from tower
QS* Bit Error Rate with discontinuous transmission from tower
BER (bit error rate) table
QF/QS register: 0 1 2 3 4 5 6 7
% of bit sent: 0.2 0.8 0.4 1.6 3.2 6.4 12.8 25.6
Tips and tricks
Nice Sunset in the display. Siemens S3 or younger
In the Telephone Book in the section own numbers, first position you have to type in
+12022243121 (Number of the Capitol in Washington DC) and save it without a name.
Then open this telephone book again do so as you like to change the number but leave the
modus without changing anything. A nice Sundown will be shown in the display.
Pin Out
1- GND
2- SB
3- POWER
4- NC
5- TX
6- RX
7- CLOCK
8- DATA
9- GND MIC
10- HF MIC
11- AUDIO
12- GND AUDIO
Secret Codes
SP unlock *#0003*(secret code 8 digits)#
*#06# for checking the IMEI (International Mobile Equipment Identity)
Tetris
Power on phone and enter PIN. before phone has locked onto network, F9,
send own number, hit right button, hit 9. left is 2, right is 8, rotate is 5, and
drop is 4.
Monitor Mode
1. Menu
2. 9 (Phone Options)
3. 7 (Phone Status)
4. Left Display Button (left MENU key)
5. 5553756
6. HangUp Button (Red HandSet key)
Now "Monitor" should appear at the bottom of the Network Options menu.
Pressing the right Display Button when in monitor mode will show a list of
the six cells with the strongest signals. Test Mode Indicators: (* = only
available when call in progress )
CH Channel Number
RX Signal Strength (dB)
N NCC (Color Code)
B BCC (Color Code)
CI Cell ID (in Hex)
C1+ how long before phone does forced hand over. (see RX and RXAM)
LAI Location Area Identity. Display Network ID code (42F010 = 240.01)
and MSC
TXPWR Transmit Power (dB)
RXAM Reeceive signal strength cut-off point
TS* Time Slot Number
TA* Timing Advance. Distance from tower in Km * 2
PL* Power Level
Power Table
PL: 5 6 7 8 9 10 11 12 13 14 15
dB: 33 31 29 27 25 23 21 19 17 15 13
Watts: 2 1.3 .8 .5 .3 .2 .13 .08 .05 .03 .02
LF* C1 value with continuous transmisson from tower
LS* C1 Value with discontinuous tranmission from tower
QF* Bit Error Rate with continuous transmission from tower
QS* Bit Error Rate with discontinuous transmission from tower
BER (bit error rate) table
QF/QS register: 0 1 2 3 4 5 6 7
% of bit sent: 0.2 0.8 0.4 1.6 3.2 6.4 12.8 25.6
Tips and tricks
Nice Sunset in the display. Siemens S3 or younger
In the Telephone Book in the section own numbers, first position you have
to type in +12022243121 (Number of the Capitol in Washington DC) and
save it without a name. Then open this telephone book again do so as you
like to change the number but leave the modus without changing anything. A
nice Sundown will be shown in the display.
Pin Out
1- GND
2- SB
3- POWER
4- NC
5- TX
6- RX
7- CLOCK
8- DATA
9- GND MIC
10- HF MIC
11- AUDIO
12- GND AUDIO
Secret Codes
SP unlock *#0003*(secret code 8 digits)#
*#06# for checking the IMEI (International Mobile Equipment Identity)
Tetris
Power on phone and enter PIN. before phone has locked onto network, F9,
send own number, hit right button, hit 9. left is 2, right is 8, rotate is 5, and
drop is 4.
Monitor Mode
1. Menu
2. 9 (Phone Options)
3. 7 (Phone Status)
4. Left Display Button (left MENU key)
5. 5553756
6. HangUp Button (Red HandSet key)
Now "Monitor" should appear at the bottom of the Network Options menu.
Pressing the right Display Button when in monitor mode will show a list of
the six cells with the strongest signals. Test Mode Indicators: (* = only
available when call in progress )
CH Channel Number
RX Signal Strength (dB)
N NCC (Color Code)
B BCC (Color Code)
CI Cell ID (in Hex)
C1+ how long before phone does forced hand over. (see RX and RXAM)
LAI Location Area Identity. Display Network ID code (42F010 = 240.01)
and MSC
TXPWR Transmit Power (dB)
RXAM Reeceive signal strength cut-off point
TS* Time Slot Number
TA* Timing Advance. Distance from tower in Km * 2
PL* Power Level
Power Table
PL: 5 6 7 8 9 10 11 12 13 14 15
dB: 33 31 29 27 25 23 21 19 17 15 13
Watts: 2 1.3 .8 .5 .3 .2 .13 .08 .05 .03 .02
LF* C1 value with continuous transmisson from tower
LS* C1 Value with discontinuous tranmission from tower
QF* Bit Error Rate with continuous transmission from tower
QS* Bit Error Rate with discontinuous transmission from tower
BER (bit error rate) table
QF/QS register: 0 1 2 3 4 5 6 7
% of bit sent: 0.2 0.8 0.4 1.6 3.2 6.4 12.8 25.6
Unlock Siemens S3(Not S3 COM)
(For advanced users only)
At addresses 0D8 to 0DD the phones code is stored. To read the code swap
nibbles stored at addresses from 0DA to 0DD. Error counter is at 0D9. To
clear the Phone Code write at addresses from 0D8 to 0DD: 00, 00, FF, FF,
FF, FF.
Siemens S3 comfort
Show IMEI code: * # 06 #
MONITOR MODE
The Siemens S3 Com series have a Monitor mode that can be activated
directly from the standard user keypad. In order to activate this mode, you
must enter the special access code currently programmed into the phone.
TO ACTIVATE MONITOR MODE
1. Turn the phone on.
2. Enter the PIN access code on press OK. (Only if is enabled).
3. Press Menu. (Left top button).
4. Press 9. (Phone Options).
5. Press 8. (Phone Status) (May be button 7 in some phones).
6. You may see your IMEI Number
7. Left Display Button (Top left MENU key).
8. 7684666
9. HangUp Button. (Red HandSet key).
Note: Monitor should appear now at the bottom of the Network Options
menu.
MONITOR MODE TOGGLE
Pressing the right Display Button when in monitor mode will toggle into 1
and 2 modes
Tips and tricks
Nice Sunset in the display. Siemens S3 or younger
In the Telephone Book in the section own numbers, first position you have
to type in +12022243121 (Number of the Capitol in Washington DC) and
save it without a name. Then open this telephone book again do so as you
like to change the number but leave the modus without changing anything. A
nice Sundown will be shown in the display.
Pin Out
1- GND
2- SB
3- POWER
4- NC
5- TX
6- RX
7- CLOCK
8- DATA
9- GND MIC
10- HF MIC
11- AUDIO
12- GND AUDIO
SIEMENS S1 / S3 / S3 COM / S4
To view the software date and else with S3 com, S4, S4Power
press with SIM removed *#06# and left softkey.
To view some other stuff with S4Power
press with SIM removed *#06# and left softkey twice.
To view the software date with S3 com, S4, S4Power
press with SIM installed menu 98 and left softkey twice.
ACTIVATE MONITOR MODE
Siemens S1/S3
Menu, 9 (Phone Options), 7 (Phone Status), Left Display Button (left
MENU key),
5553756, HangUp Button (Red HandSet key)
Siemens S3 COM/S4
Menu, 9 (Phone Options), 7 (Phone Status), Left Display Button
(left MENU key), 7684666, HangUp Button (Red HandSet key)
Note: Now Monitor should appear at the bottom of the Network Options
menu.
MONITOR MODE
Pressing the right Display Button when in monitor mode will toggle into 1
and 2 modes
Pressing the right Display Button when in monitor mode will show a
list of the six cells with the strongest signals.
Test Mode Indicators: (* = only available when call in progress )
CH Channel Number
RX Signal Strength (dB)
N NCC (Colour Code)
B BCC (Colour Code)
CI Cell ID (in Hex)
C1+ How long before phone does forced hand over.(see RX and RXAM)
LAI Location Area Identity. Display Network ID code(42F010 = 240.01)
and MSC
TXPWR Transmit Power (dB)
RXAM Receive signal strength cut-off point
TS* Time Slot Number
TA* Timing Advance. Distance from tower in Km X 2
PL* Power Level
SIEMENS S1
Here's a trick to play Tetris, also known as Klotz on a Siemens S1.
Turn the phone on. Enter PIN. Before the telephone has logged in to the
your GSM net do the following steps.
1: Choose F 9 (function settings)
2: Choose send own number and push the right button for choose.
3: Push 9
USE 2 as < and 8 as > , rotate the klotz with 5 and drop with 4.
I have just heard from one of the programmers of the phone that Tetris
was in the phone during development, but it was removed before it was
produced.
Apparantly someone has the patent on games in mobile phones and Siemens
didn't want to pay the licensing fees. It was either in Menu F-9-9 or it's not
there at all.
Secret Codes
SP unlock *#0003*(secret code 8 digits)#
*#06# for checking the IMEI (International Mobile Equipment Identity)
Resets language to automatic selection : * # 0000 # then Green button
Pin Out
1- GND
2- SB
3- POWER
4- NC
5- TX
6- RX
7- CLOCK
8- DATA
9- GND MIC
10- HF MIC
11- AUDIO
12- GND AUDIO
Alcatel HC 600 / 800 / 1000 SECRET CODES
*#06# returns IMEI number and Software Version (not HC600).
These are the pinouts for the HC600 they are the same as the
800/1000 I beleive.
1 3 5 7 9 11 13 15
I I I I I I I I
O O 17
I I I I I I I I
2 4 6 8 10 12 14 16
1 Vbat_ext 9 SDA_E
2 EMMI_PAE 10 GND
3 Mic 11 GND
4 EMMI_OPE 12 DC_IN (charge)
5 GND 13 Speaker
6 EXT_EMET 14 MARCHE
7 SCL_E 15 DC_IN (charge)
8 EXT_RECDIT 16 GND
17 Antenna+internal switch (int/ext)
Alcatel One Touch Easy
Secret Codes
To view IMEI (International Mobile Equipment Identity) number enter
*#06#
To Enter Service Menu enter: *#000000#
To view Secret Menu type 000000 then press *
Secret Menu Appears
TRACES channel indicator menus
ARRETS - ?
VIDER ARRETS Press OK and the phone responds: This action is
executed!
CTRL CHARGE It show the charger voltage and battery voltage.
DAMIER display test
The Service provider (SP) lock is used to lock the cell phone to the
SP's SIM card. Once the cell phone is locked to a specific operator,
if one inserts a SIM card from a different operator the phone will
refuse to accept it! The cell phone will however accept another SIM
card from the same operator.
Removing SP lock on Alcatel Easy
This is how to remove the SP lock on Alcatel (one touch) Easy.
(You wil need a cable, a eeprom device and some sw)
Edit the eeprom:
Address Replace with
------------- ---------------
176h FFh
177h FFh
Ericsson 218/337
To view IMEI number *#06#To view Software Version enter -> * <- <- * <- * CLR (Use with Care) To activate operator lock <- * * <- (This locks the phone to one carriers SIM card - Use with lots of care) Press Yes to lock and No to notlock. You can also use the codes below to undo this function. USE AT OWN RISK I have tested the function Lock to SP... At least on the 337 there's a submenu: Enter SPCK-code. There are 5 attempts, which is showed (05 attempts). At final attempt the phone beeps as a warning, 'this is the final try', when entering the menu... Wrong code exits the menu, so you are not stuck in something... When you have tried to enter the code (wrong) all five times, the menu is deactivated, and you'll get: 'Not allowed' when entering <-**<- A "secret test mode" can be accessed on the GH337. There seems to be two methods:> * < < * > * displays software version, such as 940810 1310
> * < < * < * displays software version, such as 951024 1054 After entering this mode, the < and > keys scroll through a menu. There
seems to be different menus for different versions of software.
Software version number are apparently a date and time stamp.
940810 1310 version commands:
TEXT CHECK - shows 254 messages in current language
INIT EEPROM MMI - resents NVRAM settings (User Settings).
Other, probably more recent version:
FLASH - will restart the phone, to the point of entering PIN numbers.You
can't kill a 337 when pressing YES while it says "FLASH?", you must
connect it to 5/12 volts first to be able to erase the flash-memory.
1-ROW TEXTS - scroll through 174 single line text messages with < and >
n-ROW-TEXTS - scroll through full-screen messages with < and >
950626 1405 version commands:
CXC (number) - The Application software's "product number". The
GH337/GF337 is always "CXC 125 005"
PRG - Indication for Programming
Programming 337
Set ComPort to 9600bps, 8 data, 1 stop, no parity.
Power on phone by pressing "NO/ENDpwr".
When performing its powerup sequence the phone will send two ">>"
(ASCII 62 decimal) characters. Within 1 second, reply to it by
sending the 4 character sequence "TP1".
(I used Procomm Plus with this script "eric.asp")
[proc main ]
[start: ]
[ ]
[ waitfor ">>" ]
[ pause 1 ]
[ transmit "TP1^M" ]
If everything went fine you should get the "OK" prompt back.
Test the TEST PROGRAM by sending the commands terminated by a :
PROG 0 (shows Test Program product number info)
PROG 1 (shows Test Program product date info)
PROG 3 (Shows Main Application product number info)
PROG D (Shows Main Application product date info)
Programming Calculator and Channel Indicator/RBS
To enable, send the following:
EEWR 047A 01
Wait for the OK prompt, power off* the phone and disconnect it from the
interface cables. Powerup and browse through the menus.
To diasable, send the following:
EEWR 047A 00
Clearing Electronic Lock
To clear the electronic lock you have to clear the EEPROM address range
045B to 0466 by sending the commands:
EEWR 045B 00
EEWR 045C 00
EEWR 045D 00
EEWR 045E 00
EEWR 045F 00
EEWR 0460 00
EEWR 0461 00
EEWR 0462 00
EEWR 0463 00
EEWR 0464 00
EEWR 0465 00
EEWR 0466 00
Disabling the Service Provider Lock
To disable send the following command:
EEWR 1587 00
To enable send the following command:
EEWR 1587 01
Experimental Commands - Use at own Risk
To dump the application software send the following:
PREA
Bank range : 00..7F
Address : 0000..BFFF
Bytestoread : 0000..BFFF
The "additional" value returned at the end are the checksum value
for the returned program memory bytes. Note, the byte-values are
always returned in format 0000 and NOT 00.
PREA FF
Returns the application checksum, takes a few seconds.
Notes on the PH 337
1. Calculator mode is NOT available on all PH sw versions.
2. Invoking Calc/RBS mode not available for GH337 sw versions below
R2A
3. SPCK attempts can be changed to 50 instead of the std 5 tries
4. The instruction LIME returns ERR but does not screw up phone
5. The instruction IMEI returns the IMEI no.
6. Pressing YES in response to FLASH? does screw up the unit.
COOL STUFF TO DO
Set ComPort to 115200bps, 8 data, 1 stop, no parity and watch all t
he phone commands on the screen and so on. Make a call and see what
happens as well as shutting down.
Pinouts
1 In Voice
2 In +5V=External Power, 0V=Battery
3 Out Ext Speak control
4 Analog GND
5 Out Voice
6 Out +5V=POWER ON, 0V=POWER OFF
7 Out Charger control
8 Digital/DC GND
9 In 0V=normal,+5V=test, +12V=test+flash
10 In Hook
11 In TTL serial in
12 Out TTL serial out
13 In 0V for aprox 1 sec = POWER ON/OFF
14 In DC Power supply
Ericsson 318/338
To view IMEI number *#06#To view Software Version enter -> * <- <- * <- * CLR (Use with Care) The Latest Software Version is under Phone Info. To fine tune sound and clean up any echos, place the 388 into the car kit HF 2600. Then close all windows, engine off and type * # * # 3. The E 388 will fine- tune itself in about a few seconds. To activate operator lock <- * * <- (This locks the phone to one carriers SIM card - Use with lots of care) Press Yes to lock and No to notlock. You can also use the codes below to undo this function. USE AT OWN RISK I have tested the function Lock to SP... At least on the 337 there's a submenu: Enter SPCK-code. There are 5 attempts, which is showed (05 attempts). At final attempt the phone beeps as a warning, 'this is the final try', when entering the menu... Wrong code exits the menu, so you are not stuck in something... When you have tried to enter the code (wrong) all five times, the menu is deactivated, and you'll get: 'Not allowed' when entering <-**<- Accessing the Service Program that is not provided with the 388. 1. Connect the 388 to Cable with RS232/TTL converter. 2. Set Comport to 9600bps, 8 data, 1 stop, no parity. 3. Power ON, wait for "2" and send "0B" to the phone. DO NOT Press ENTER. 4. R should be on screen. 5. Send TEST.BIN. (Send as a binary file) 6. 388 should answer "SP,OK". 7. R should be on screen. DO NOT write or read from the IMEI or SPCK area! If you try that you can send the phone to service at once, because you will automatically write FE or EF to EVERY cell in the EEPROM. In other words, all the calibration values for the radio is overwritten... (NOT good) Some commands in the ServiceProg: eere read from eeprom eewe write eeprom lime xxxx xxxx xxxx xxx Learn imei no. Returns Error. imei - Displays IMEI number To FlashProgram a 388: 1. Connect the 388 to Cable with RS232/TTL converter. 2. Set Comport to 9600bps, 8 data, 1 stop, no parity. 3. Power ON, wait for "2" and send "OB" to the phone. DO NOT Press ENTER. 4. R should be on screen. 5. send pre_xxx.bin to the MS. 6. You should recieve a ">".
7. send "0B" again.
8. R should be on screen
9. send prodload.bin to the MS.
10. recieve ">".
Done, I don't have the above files so please don't ask for them.
Interesting Informating (well I thought so :)
The names on the files, sj.....X45 tells you a couple of things. "sj" stands for
Sofia-Jane, thats the internal name for the model and x45 stands for "sub-
model". The 388 is called model 4/5. The latest 337 phones is called "cr",
like in Cost Reduction. They rebuilt the oscillator from a bought-in to one
built up with discrete components and that was cheaper.
Programming Channel Indicator or RBS
To enable, send the following command:
EEWR 3EE 1
Wait for the OK prompt, power off* the phone and disconnect it from the
interface cables. Powerup and browse through the menus.
To diasable, send the following command:
EEWR 3EE 0
Clearing Electronic Lock
To clear the electronic lock you have to clear the EEPROM address range
03CF to 03DA by sending the commands:
EEWR 3CF 00
EEWR 3D0 00
EEWR 3D1 00
EEWR 3D2 00
EEWR 3D3 00
EEWR 3D4 00
EEWR 3D5 00
EEWR 3D6 00
EEWR 3D7 00
EEWR 3D8 00
EEWR 3D9 00
EEWR 3DA 00
COOL STUFF TO DO
Set ComPort to 115200bps, 8 data, 1 stop, no parity and watch all the phone
commands on the screen and so on. Make a call and see what happens as
well as shutting down.
*POWER OFF
You should press the NO button a few times until Shut Down comes up on
the screen, when it does press yes and this will shut down the phone
properly.
Reading the Channel Info now that's it's enabled
|-------|-------|-------| D
| | | | I
| 1 | 2 | 3 | S
|-------|-------|-------| P
| | | | L
| 4 | 5 | 6 | A
|-------|-------|-------| Y
1. This is three different channels things depending on the phone state.
a. When the phone is idle, this shows "Bxxx". "B" stands for "Broadcast
channel" (a logic GSM channel)b. When a phonecall is in progress, this
shows "Sxxx". S stands for "Stand Alone Dedicated Control Channel"
SDCCH for short.
c. When the phoncall in up, this shows "Txxx". "T" Stands for Traffic
channel. The "xxx" thing is the channel number, 1-124.
2. This shows Rx Level. The values displayed is from 0 to 63. Rx Level is a
indicator on how good your reception is for the moment. 0 is a signal
strength of -110dBm. 63 is approx -45 to -50dBm.RXLEV is measured in
dBm in such a way that incoming signal equals -110.5+RXLEV so that a
RXLEV at 50 equals an incoming signal strenght at -50.5 dBm (plus or
minus max deviation 0.5dBm)
3. This shows the output power in dBm.
4. This shows the timeslot used for the moment. You can see it when making
a call.
5. This shows Rx Quality. Rx Quality is a measurement of how much error
correction is required to the speech. 0 indicates none and as the figure rises
you hear more pings and pongs on the speech as large parts of the frame are
missing. If you have more RxQ then 5, you are on good way to loose your
call. RxQuality reads 0-7.RXQUAL is measured by using a table wereas the
biterrorrate or BER is interesting and measured in %
RXQUAL table
0 BER < 0,2 (%) 1 0,2 < BER < 0,4 2 0,4 < BER < 0,8 3 0,8 < BER < 1,6 4 1,6 < BER < 3,2 5 3,2 < BER < 6,4 6 6,4 < BER < 12,8 (here we have lost half a burst) 7 12,8 < BER 6. This shows the timing advance. The BS tells the MS to send before it should just make sure that the MS burst is comming to the BS on the right time. The TA is measured in halfbits so the distance to the BTS can be calculated as follows=1,11*TA/2. TimingAdvance reads 0-63. Co- incidentely this tells you how far you are from the base site in 550metre chunks, up to the theoretical max of 35.2km. Pinouts 1 In Voice 2 In +5V=External Power, 0V=Battery 3 Out Ext Speak control 4 Analog GND 5 Out Voice 6 Out +5V=POWER ON, 0V=POWER OFF 7 Out Charger control 8 Digital/DC GND 9 In 0V=normal,+5V=test, +12V=test+flash 10 In Hook 11 In TTL serial in 12 Out TTL serial out 13 In 0V for aprox 1 sec = POWER ON/OFF 14 In DC Power supply Ericsson 628 To view IMEI number enter * # 0 6 # To view Software Version enter -> * <- <- * <- * To read all programmed texts enter -> * <- <- * <- * ->
To view phone network lock status enter < * * < (wait 3 sec) To fast dial press phone number pos nr and # (Example: 1 5 #) To fast dial last number press 0 # To reset main menu language to english enter * # 0 0 0 0 # To see battery level while phone is turned off quickly press and release on/off(NO button). To see Extended menus (on older versions) go to MISSED CALLS, empty directory, press and HOLD right arrow button, choose menu type To see Extended menus (on newer versions) go to READ, empty directory, press and HOLD left arrow button, choose menu type To edit phone book Turn on extended menus and choose "EditPh.Bk". Command set The following commands are recongnized by the phone.Use 9600 baud, 1 stopbit, 8 data bits, no parity. ATA Pick up phone during ring AT+GMI Manufacturer identification AT+GMO Request model Identification AT+GMR Request revision Identification AT+GMM ATDxxx; Dial number xxx ATH Hangup phone AT+CFUN=? Define levels of fuctionality in the order of power consumed AT+CFUN=0 Switches off the phone AT+CBC Query battery level Each command has to be followed by a 0x0A, 0x0D sequence, that is carriage return - line feed. These commands will be ackowledged with an 'OK' prompt. An incoming call is signalled by the string 'RING' sent by the phone at 9600b in normal mode. Portable Handsfree Unit 1 Earphone: 16 Ohm 2 Microphone: <- 2 kOhm 5 Connected to 04 (GND) Pinouts Left to right, keyboard up. 1 Audio Out 2 Audio In 3 Accessory Sense. GND to enable External Mic and Speaker (Analog) 4 Audio Signal GND. 5 Portable handsfree In. 6 Music Mute Out, High when phone is used. 7 In Flash Memory Voltage and Service Voltage, In 0V=normal,+5V=test, +12V=test+flash 8 Logic Out, Status On. Sources over 100mA 9 Data Out from Mobile Station. Debug messages appear here at 112KBaud when in debug mode. 10 Digital Ground and DC return 11 Data in 12 DC in for battery charging, DC out for accessory power Ericsson 388 *#06# for checking the IMEI (International Mobile Equipment Identity) *#0000# to reset the phones menu-language to English. >*<<*<* for checking the firmware revision information (software release) >*<<*<*> 1-row text strings. if pressing yes you can check the phones text
programming in currently selected language. (298 entries)
>*<<*<*>> n-row text strings. if pressing yes you can check the phones text
programming in currently selected language. (160 entries?)
The Service Provider (SP) Lock menu is used to lock the cell phone to the
SP's SIM card. Once the cell phone is locked to a specific operator, if one
inserts a SIM card from a different operator the phone will refuse to accept
it! The cell phone will however accept another SIM card from the same
operator.
To activate/deactivate this lock one needs a special secret code that is not
available to the end user. (not even to you... or is it ? in case please let me
know!)
<**< Lock to Network? if pressing yes you have 5 attempts to enter NCK. <**<< Lock to Network subset? if pressing yes you have 5 attempts to enter NSCK. Warning: Your phone can be locked to a service provider FOREVER by doing this! If an invalid code is entered all five times, the menu will exit and be deactivated! Any further attempt to activate the NCK/NSCK lock Menu will result in the response "Not allowed"! However the NCK/NSCK lock can be recover through a direct clearing in the EEPROM. Shortcut for Last Dialed call menu... If you for some reason don't want to enter the 'Last Dialed calls menu' by using the 'YES' key you can use the following key stroke instead: First '0' then '#'. Access menu without Sim card ... To access to the menu in your phone without having a card inside do the following: type **04*0000*0000*0000# When display say "Wrong Pin" press NO and you have access to the all menus: Info, Access, Settings, Calculator, Clock, Keylock On?, Mail, Phone book. NOTE if you try this on the GH688 your phone may stop at Keylock On? menu and you´ll have to take your battery out to turn the phone on again. Ericsson 688 To view IMEI number *#06# To view Software Version enter -> * <- <- * <- * CLR (Use with Care) To reset phone language to English *#0000# >*<<*<*> 1-row text strings. If pressing YES you can check the phones 1-
row text programming in currently selected language.
>*<<*<*>> n-row text strings. If pressing YES you can check the phones n-
row text programming in currently selected language.
Pinouts
1 = + external power supply. 7.2v @ 600mA.
2 = RS232 input (TTL)
3 = GND (digital)
4 = RS232 output (TTL)
5 = +5V output. Limited.
6 = Test. Switch phone off and provide +5V and switch back on. (set comms
at 9600, n,8,1)
7 = Mute (0 - Normal, 1 - In Call)
8 = Internal/external (0 - External Mic/Speak, 1 - Internal Mic/Speak)
9 = GND (analog)
10 = Related to Mic/Speak
11 = BF in
12 = BF out
Ericsson 768/788To view IMEI number *#06#
To view Software Version enter * -> * <- <- * <- * Service Provider Lock is * <- <- * but it is now called the ME lock. There are two options after selecting yes on another menu. These are lock to Network or lock to NetSubet. Command set The following commands are recongnized by the phone.Use 9600 baud, 1 stopbit, 8 data bits, no parity. ATA Pick up phone during ring AT+GMI Manufacturer identification AT+GMO Request model Identification AT+GMR Request revision Identification AT+GMM ATDxxx; Dial number xxx ATH Hangup phone AT+CFUN=? Define levels of fuctionality in the order of power consumed AT+CFUN=0 Switches off the phone AT+CBC Query battery level Each command has to be followed by a 0x0A, 0x0D sequence, that is carriage return - line feed. These commands will be ackowledged with an 'OK' prompt. An incoming call is signalled by the string 'RING' sent by the phone at 9600b in normal mode. Portable Handsfree Unit 1 Earphone: 16 Ohm 2 Microphone: <- 2 kOhm 5 Connected to 04 (GND) Pinouts Left to right, keyboard up. 1 Audio Out 2 Audio In 3 Accessory Sense. GND to enable External Mic and Speaker (Analog) 4 Audio Signal GND. 5 Portable handsfree In. 6 Music Mute Out, High when phone is used. 7 In Flash Memory Voltage and Service Voltage, In 0V=normal,+5V=test, +12V=test+flash 8 Logic Out, Status On. Sources over 100mA 9 Data Out from Mobile Station. Debug messages appear here at 112KBaud when in debug mode. 10 Digital Ground and DC return 11 Data in 12 DC in for battery charging, DC out for accessory power Ericsson 868/888 To view IMEI number *#06# To view Software Version enter * -> * <- <- * <- * (you also get version of InfraRed driver software and text labels) Pinouts 1 = + external power supply. 7.2v @ 600mA. 2 = RS232 input (TTL) 3 = GND (digital) 4 = RS232 output (TTL) 5 = +5V output. Limited. 6 = Test. Switch phone off and provide +5V and switch back on. (set comms at 9600, n,8,1) 7 = Mute (0 - Normal, 1 - In Call) 8 = Internal/external (0 - External Mic/Speak, 1 - Internal Mic/Speak) 9 = GND (analog) 10 = Related to Mic/Speak 11 = BF in 12 = BF out Ericsson AH 230/238 PROGRAMMINGPress and hold down FCN while entering the digits 9 8 7. You must enter the digits within ten seconds. The text "SER NUMBER" is displayed along with the telephone's electronic serial number. The number contains 11 digits, so the most significant digit is shown for one second, followed by the other 10 digits. ENTRY DISPLAY TEXT PERMISSABLE VALUE Electronic Serial # ESN Not Changeable Phone Number MIN x (where x is NAM choice) 10 digits System ID SID x (where x is NAM choice) 00000 to 32767 Press # to review MIN & SID, or END/PWR to exit the short NAM- programming mode. NB: The Number Assignment Module (NAM) is programmed through the telephone keypad. There are two NAM-programming modes available; the short and the long. The short programming mode is all that is required in most cases. The long programming mode is required if a value set by the short mode is not desired. Either mode may be used stand-alone, or the short mode can be used to set up most of the values and then the long mode can be used to make any changes desired. To enter either of the two NAM programming modes, press and hold down the FCN key while entering a specific series of digits. You must enter the digits within ten seconds. In each programming step, you can either keep the displayed setting or value, or you can change it. a. To go to the next step, without changing anything, press #. b. In some steps, you can "toggle" a setting from ON or OFF, or vice versa. To change the setting, press any numeric key. In other steps, you can replace a displayed value. To replace a value, enter the digits on the numeric keys. If you enter a wrong digit, you can erase it by pressing FCN CLR. Pressing * key restores the original value in the display. Press # to store new setting/value and go to next step. Press END/PWR in any step to leave the NAM-Programming mode. If you have changed anything in a step, you must store the setting by pressing # before pressing END/PWR. Ericsson DH368, GF768, A1018s Ericsson DH368 Try these Codes on your DH-368 phone: 1. Power on. 2. Press 904059 + 'MENU' 3. 'TEST SET' display ... 4. Press 'YES' will display @ then press 1 'RCL' will turn light off and you will see 'DONE' 5. Press 'YES' will display @ then press 86 'RCL' display 'DONE' also you will hear static... You can just enter the channel number (up to 1023) by pressing 'Yes' 3 'CLR' XXXX - channel number to enter a channel directly. You can also see the signal level on channel by pressing 3 'MENU'. You can see the ESN number by pressing 'YES' 1 'RCL' 96 in HEX format. 6. Press 3 to exit, now you phone will power down and power up again. You can install the phone number into the phone by pressing 923885 + 'MENU' Ericsson GF768 Edit Greetings Tip 1. Go to the Keylock menu. 2. Set lock to Auto. 3. Press YES then hold the left arrow untill the Greetings menu appears. GF788 menu in your GF768 phone! (1) 1. Go to the EDIT MENU and press YES. 2. Type the number "2" and press YES. 3. In "NAME" HOLD DOWN the "2" key untill the number "2" apperars. Press YES. 4. Press YES again (to save any position) then QUICKLY press and hold left arrow (<) untill "SIZE" appears in the display. 5.Press YES and choose "Full size". You now have the GF788 menu! NB. Confirmed working on version 970716 and 980318. GF788 menu in your GF768 phone! (2) 1.Go to MissedCall 2. Empty the list 3. Press the -> key for a second or two
4. The option Menu size turns up
5. Choose 'yes' and go from there
NB. Confirmed working on version 990122.
GF788 menu in your GF768 phone! (3)
1. Go and set the ring volume and press yes.
2. When 'STORED' is displayed - keep the right button -> pressed until
'Extended Menu' is displayed.
3. Select "Activate" the menus and you now have lots of extra features
NB. Confirmed working on version 980910
Ericsson A1018s
(UN)LOCKING YOUR ERICSSON A1018s TO SPECIFIC NETWORK :
A way to (un)lock your cell phone on to the network:
1. Press : <**< 2. Then on the display appear and give you two choices: Lock to Network ? and Lock to Network subset? 3. Enter the NCK number (code is provided by the SP) 4. You have 5 attemps to do this 5. Then your cell phone will work 'only' with the network Erricson WAP Mobile Phone Bug Allows Wiretapping May, 23 2001 - 09:51 Summary Erricson's WAP, Wireless Application Protocol, suffers from a security flaw that allows attackers to listen into other WAP sessions traveling on the cellular carrier wave. Details Erricson Mobile Phone allows attackers to wiretap other lines. This attack is limited, since you cannot choose which number to wiretap on, and you cannot talk at the same time that you are wiretapping a line. This vulnerability shows the lack of security of WAP as it is offered in today's cellular networks. IMPORTANT NOTE: Wiretapping is illegal. The following information is just a proof of concept that shows a potential vulnerability in Erricson's WAP implementation. How to wiretap from an Erricson Cell Phone: 1) Type 904059 2) Menu 3) Yes 4) 1 5) RCL 6) Yes 7) 8300** 8) Yes 9) 86 (Instead of the ** you can write any number you wish, except for the number 00) To stop the wiretapping: 1) Type RCL 2) 3 3) Yes Additional information The information has been provided by Pirsing, ::: m0sad team :::. Ericsson GA628 *#06# for checking the IMEI (International Mobile Equipment Identity) *#0000# to reset the phones menu-language to English. *#103# then YES Time and date will be shown. >*<<*<* for checking the firmware revision information (software release) >*<<*<*> 1-row text strings. if pressing yes you can check the phones text
programming in currently selected language. (298 entries)
>*<<*<*>> n-row text strings. if pressing yes you can check the phones text
programming in currently selected language. (160 entries?)
The Service Provider (SP) Lock
The Service Provider (SP) Lock menu is used to lock the cell phone to the
SP's SIM card. Once the cell phone is locked to a specific operator, if one
inserts a SIM card from a different operator the phone will refuse to accept
it! The cell phone will however accept another SIM card from the same
operator.
To activate/deactivate this lock one needs a special secret code that is not
available to the end user.
Here is how to activate the menu:
<**< Lock to Network? if pressing yes you have 5 attempts to enter NCK. <**<< Lock to Network subset? if pressing yes you have 5 attempts to enter NSCK. Warning: Your phone can be locked to a service provider FOREVER by doing this! If an invalid code is entered all five times, the menu will exit and be deactivated! Any further attempt to activate the NCK/NSCK lock Menu will result in the response "Not allowed"! However the NCK/NSCK lock can be recover through a direct clearing in the EEPROM. Shortcut for Last Dialed call menu If you for some reason don't want to enter the 'Last Dialed calls menu' by using the 'YES' key you can use the following key stroke instead: First '0' then '#'. Bat. level indicator when turned OFF When the phone is turned off and the phone is not changing - the bat. level can be seen for a short period of time by pressing the 'NO' key quick once (it has to be quick!) and then wait for about 2 sec. The bat. level will now be shown in the display at its normal position. Access menu without Sim card To access to the menu in your phone without having a card inside do the following: type **04*0000*0000*0000# When display say "Wrong Pin" press NO and you have access to the all menus: Info, Access, Settings, Calculator, Clock, Keylock On?, Mail, Phone book. NOTE if you try this on your phone may stop at Keylock On? menu and you´ll have to take your battery out to turn the phone on again. Alarm Clock Menu Go to MissedCall Empty the list Press the -> key for a second or two The
option Menu size turns up Choose 'yes' and go from there.
An alarm clock turned up too but it never rang. I think this was because
there is no clock in the phone.
Free phone calls using the GA628
This trick has only been reported working on PREPAID GSM CARDS and
in some countries and with some sw versions.
The prepaid GSM SIM CARD is a kind of "SIM card" which only has a
sertant amount of credit on it (like a normal phonebox telecard)... if it can be
traced? - we don't know...
Well..here's the trick you dial the no. normally and press YES. While
"connecting" is shown on the screen, the following procedure should be
carried out: Press CLR then 0 then # and then NO (twice) so as to switch
OFF the phone. You can then still speak on the phone while it is switched
off but the SIM card does not record your calls which will lead to FREE
phone calls in some countries.. we hope!!
Another variant of the code
Make a Call, while the phone says Connecting type 083# (the position 83
must be empty! ), when phone says Pos Emtpy, press the NO key and turn
off the phone.
If you can make the call with the phone turned off you will face a problem
when you need to hang up the phone...the only way for you to do that is
remove the battery...???
Ericsson GF768
To return the language back to english on the ericsson GF768, just press left
( <-- ), zero four times (0,0,0,0), and then right ( --> ).
Ericsson GH688
*#06# for checking the IMEI (International Mobile Equipment Identity)
*#0000# to reset the phones menu-language to English.
*#103# then YES Time and date will be shown.
>*<<*<* for checking the firmware revision information (software release) >*<<*<*> 1-row text strings. if pressing yes you can check the phones text
programming in currently selected language. (298 entries)
>*<<*<*>> n-row text strings. if pressing yes you can check the phones text
programming in currently selected language. (160 entries?)
The Service Provider (SP) Lock
The Service Provider (SP) Lock menu is used to lock the cell phone to the
SP's SIM card. Once the cell phone is locked to a specific operator, if one
inserts a SIM card from a different operator the phone will refuse to accept
it! The cell phone will however accept another SIM card from the same
operator.
To activate/deactivate this lock one needs a special secret code that is not
available to the end user.
Here is how to activate the menu:
<**< Lock to Network? if pressing yes you have 5 attempts to enter NCK. <**<< Lock to Network subset? if pressing yes you have 5 attempts to enter NSCK. Warning: Your phone can be locked to a service provider FOREVER by doing this! If an invalid code is entered all five times, the menu will exit and be deactivated! Any further attempt to activate the NCK/NSCK lock Menu will result in the response "Not allowed"! However the NCK/NSCK lock can be recover through a direct clearing in the EEPROM. Shortcut for Last Dialed call menu If you for some reason don't want to enter the 'Last Dialed calls menu' by using the 'YES' key you can use the following key stroke instead: First '0' then '#'. Bat. level indicator when turned OFF When the phone is turned off and the phone is not changing - the bat. level can be seen for a short period of time by pressing the 'NO' key quick once (it has to be quick!) and then wait for about 2 sec. The bat. level will now be shown in the display at its normal position. Access menu without Sim card To access to the menu in your phone without having a card inside do the following: type **04*0000*0000*0000# When display say "Wrong Pin" press NO and you have access to the all menus: Info, Access, Settings, Calculator, Clock, Keylock On?, Mail, Phone book. NOTE if you try this on your phone may stop at Keylock On? menu and you´ll have to take your battery out to turn the phone on again. Full Operator List You can view the full operator list by doing the following: Go to the 'Edit list' menu under 'networks'. The phone say 'please wait' (searching for other networks). When finished, Press the < key once, then YES twice. Now the phone displays the full list. Browse through the list with the < > keys.
Monitor mod on Ericsson GH688
How to enable net monitor on Ericson 688..
1. Remove SIM from phone
2. Dial 112, press YES, hear something
3. Dial 112YESNO 4. Press <(left arrow) before SETTINGS 5. Then YES, <(left arrow), then you will see NM on? 6. press YES Free phone calls using the GH688 This trick has only been reported working on PREPAID GSM CARDS and in some countries and with some sw versions. The prepaid GSM SIM CARD is a kind of "SIM card" which only has a sertant amount of credit on it (like a normal phonebox telecard)... if it can be traced? - we don't know... Well..here's the trick you dial the no. normally and press YES. While "connecting" is shown on the screen, the following procedure should be carried out: Press CLR then 0 then # and then NO (twice) so as to switch OFF the phone. You can then still speak on the phone while it is switched off but the SIM card does not record your calls which will lead to FREE phone calls in some countries.. we hope!! Another variant of the code Make a Call, while the phone says Connecting type 083# (the position 83 must be empty! ), when phone says Pos Emtpy, press the NO key and turn off the phone. If you can make the call with the phone turned off you will face a problem when you need to hang up the phone...the only way for you to do that is remove the battery...??? Ericsson SH888 *#06# for checking the IMEI (International Mobile Equipment Identity) >*<<*<* for checking the firmware revision information (software release) >*<<*<*> 1-row text strings. if pressing yes you can check the phones text
programming in currently selected language.
>*<<*<*>> n-row text strings. if pressing yes you can check the phones text
programming in currently selected language.
>*<<*<*>>> IR version info. if pressing yes you can check the phones IR
device's driver version.
The Service Provider (SP) Lock
The Service Provider (SP) Lock menu is used to lock the cell phone to the
SP's SIM card. Once the cell phone is locked to a specific operator, if one
inserts a SIM card from a different operator the phone will refuse to accept
it! The cell phone will however accept another SIM card from the same
operator.
To activate/deactivate this lock one needs a special secret code that is not
available to the end user.
Here is how to activate the menu:
<**< Lock to Network? if pressing yes you have 5 attempts to enter NCK. <**<< Lock to Network subset? if pressing yes you have 5 attempts to enter NSCK. Warning: Your phone can be locked to a service provider FOREVER by doing this! If an invalid code is entered all five times, the menu will exit and be deactivated! Any further attempt to activate the NCK/NSCK lock Menu will result in the response "Not allowed"! However the NCK/NSCK lock can be recover through a direct clearing in the EEPROM. Shortcut for Last Dialed call menu If you for some reason don't want to enter the 'Last Dialed calls menu' by using the 'YES' key you can use the following key stroke instead: First '0' then '#'. Bat. level indicator when turned OFF When the phone is turned off and the phone is not changing - the bat. level can be seen for a short period of time by pressing the 'NO' key quick once (it has to be quick!) and then wait for about 2 sec. The bat. level will now be shown in the display at its normal position. Access menu without Sim card To access to the menu in your phone without having a card inside do the following: type **04*0000*0000*0000# When display say "Wrong Pin" press NO and you have access to the all menus: Info, Access, Settings, Calculator, Clock, Keylock On?, Mail, Phone book. NOTE if you try this on your phone may stop at Keylock On? menu and you´ll have to take your battery out to turn the phone on again. Ericsson T10s *#06# for checking the IMEI (International Mobile Equipment Identity) >*<<*<* for checking the firmware revision information (software release) >*<<*<*>> n-row text strings. if pressing yes you can check the phones text
programming in currently selected language.
Shortcut for Last Dialed call menu
If you for some reason don't want to enter the 'Last Dialed calls menu' by
using the 'YES' key you can use the following key stroke instead: First '0'
then '#'.
Access menu without Sim card
To access to the menu in your phone without having a card inside do the
following: type **04*0000*0000*0000# When display say "Wrong Pin"
press NO and you have access to the all menus: Info, Access, Settings,
Calculator, Clock, Keylock On?, Mail, Phone book. NOTE if you try this on
your phone may stop at Keylock On? menu and you´ll have to take your
battery out to turn the phone on again. And this will not care about Phone
lock!
A way to (un)lock your cell phone on to the network(subset):
1. Press <**< 2. Then on the display appear and give you two choices: Lock to Network ? and Lock to Network subset? (Use arrow keys to select) 3. Enter the NCK number (code is provided by the SP) 4. You have 5 attemps to do this 5. Then your cell phone will work 'only' with the network Warning: The Service Provider (SP) Lock menu is used to lock the cell phone to the SP's SIM card. Once the cell phone is locked to a specific operator, if one inserts a SIM card from a different operator the phone will refuse to accept it! The cell phone will however accept another SIM card from the same operator. To activate/deactivate this lock one needs a special secret code that is not available to the end user. Your phone can be locked to a service provider FOREVER by doing this! If an invalid code is entered all five times, the menu will exit and be deactivated! Any further attempt to activate the NCK/NSCK lock Menu will result in the response "Not allowed"! However the NCK/NSCK lock can be recover through a direct clearing in the EEPROM. Ericsson T18 *#06# for checking the IMEI (International Mobile Equipment Identity) Information you get from the IMEI: XXXXXX XX XXXXXX X TAC FAC SNR SP TAC = Type approval code FAC = Final assembly code SNR = Serial number SP = Spare To access SIM-Locking menu of your phone, press: < * [CLR] < Be carefull or you may lock your phone. Ericsson T28 *#06# for checking the IMEI (International Mobile Equipment Identity) >*<<*<* for checking the firmware revision information (software release) >*<<*<*> 1-row text strings. if pressing yes you can check the phones text
programming in currently selected language.
>*<<*<*>> n-row text strings. if pressing yes you can check the phones text
programming in currently selected language.
The Service Provider (SP) Lock
The Service Provider (SP) Lock menu is used to lock the cell phone to the
SP's SIM card. Once the cell phone is locked to a specific operator, if one
inserts a SIM card from a different operator the phone will refuse to accept
it! The cell phone will however accept another SIM card from the same
operator.
To activate/deactivate this lock one needs a special secret code that is not
available to the end user.
Here is how to activate the menu:
<**< Lock to Network? if pressing yes you have 5 attempts to enter NCK. <**<< Lock to Network subset? if pressing yes you have 5 attempts to enter NSCK. Warning: Your phone can be locked to a service provider FOREVER by doing this! If an invalid code is entered all five times, the menu will exit and be deactivated! Any further attempt to activate the NCK/NSCK lock Menu will result in the response "Not allowed"! However the NCK/NSCK lock can be recover through a direct clearing in the EEPROM. Shortcut for Last Dialed call menu If you for some reason don't want to enter the 'Last Dialed calls menu' by using the 'YES' key you can use the following key stroke instead: First '0' then '#'. GSM Codes The following codes are the standard GSM codes for various network services. Most Nokia phones have easier ways to activate them through the menus. Check the guides for your model. Call Diverting All To Activate: * * 21 * NUMBER # [SEND] To Cancel: # # 21 # [SEND] To Check: * # 21 # [SEND] No Answer To Activate: * * 61 * NUMBER # [SEND] To Cancel: # # 61 # [SEND] To Check: * # 61 # [SEND] Unreachable To Activate: * * 62 * NUMBER # [SEND] To Cancel: # # 62 # [SEND] To Check: * # 62 # [SEND] Busy To Activate: * * 67 * NUMBER # [SEND] To Cancel: # # 67 # [SEND] To Check: * # 67 # [SEND] To Cancel All Call Forwarding # # 002 # [SEND] Diverting Data Calls All To Activate: * * 21 * NUMBER * 25 # [SEND] To Cancel: # # 21 # * 25 [SEND] To Check Status: * # 21 # * 25 # [SEND] No Answer To Activate: * * 61 * NUMBER * 25 # [SEND] To Cancel: # # 61 * 25 # [SEND] To Check Status: * # 61 # * 25 # [SEND] Unreachable To Activate: * * 62 * NUMBER * 25 # [SEND] To Cancel: # # 62 # * 25 # [SEND] To Check Status: * # 62 # * 25 # [SEND] Busy To Activate: * * 67 * NUMBER * 25 # [SEND] To Cancel: # # 67 # * 25 # [SEND] To Check Status: * # 67 # * 24 # [SEND] Diverting Fax Calls All To Activate: * * 21 * NUMBER * 13 #[SEND] To Cancel: # # 21 # * 13 # [SEND] To Check Status: * # 21 # * 13 # [SEND] No Answer To Activate: * * 61 * NUMBER * 13 # [SEND] To Cancel: # # 61 * 13 # [SEND] To Check Status: * # 61 # * 13 # [SEND] Unreachable To Activate: * * 62 * NUMBER * 13 # [SEND] To Cancel: # # 62 # * 13 # [SEND] To Check Status: * # 62 # * 13 # [SEND] Busy To Activate: * * 67 * NUMBER * 13 # [SEND] To Cancel: # # 67 # * 13 # [SEND] To Check Status: * # 67 # * 13 #[SEND] Call Barring Before you can activate these barring services you will need a barring code from your service provider. Call Barring can not be activated if Call Forwarding diverts are already in use. All Calls To Activate: * 330 * BARRING CODE # [SEND] To Cancel: # 330 * BARRING CODE # [SEND] To Check: * # 330 # [SEND] All Outgoing Calls To Activate: * 333 * BARRING CODE # [SEND] To Cancel: # 333 * BARRING CODE # [SEND] To Check: * # 333 # [SEND] All Incoming Calls To Activate: * 353 * BARRING CODE # [SEND] To Cancel: # 353 * BARRING CODE # [SEND] To Check: * # 353 # [SEND] All Outgoing Calls To Activate: * 33 * BARRING CODE# [SEND] To Cancel: # 33 * BARRING CODE # [SEND] To Check: * # 33 # [SEND] All Outgoing International Calls To Activate: * 331 * BARRING CODE# [SEND] To Cancel: # 331 * BARRING CODE # [SEND] To Check: * # 331 # [SEND] All Outgoing International Calls Except To Home Country To Activate: * 332 * BARRING CODE# [SEND] To Cancel: # 332 * BARRING CODE # [SEND] To Check: * # 332 # [SEND] All Incoming Calls To Activate: * 35 * BARRING CODE # [SEND] To Cancel: # 35 * BARRING CODE # [SEND] To Check: * # 35 # [SEND] All Incoming Calls When Outside Home Country To Activate: * 351 * BARRING CODE # [SEND] To Cancel: # 351 * BARRING CODE # [SEND] To Check: * # 351 # [SEND] Canceling All Call Barring # 330 * BARRING CODE # [SEND] Call Waiting To Activate: * 43 # [SEND] To Deactivate: # 43 # [SEND] To Check: * # 43 # [SEND] Calling Line Identity Outgoing To Activate: * 31 # [SEND] To Deactivate: # 31 # [SEND] To Check: * # 31 # [SEND] Incoming To Activate: * 30 # [SEND] To Deactivate: # 30 # [SEND] You can try these in case you downloaded corrupted or incompatible Java midlets or other media, which are causing problems with the phone. *2767*JAVA# Java Reset and (Deletes all Java Midlets) *2767*MEDIA# Reset Media (Deletes All Sounds and Pics) *2767*WAP# Wap Reset *2767*CUST# Reset Custom EEPR0M *2767*FULL# Reset Full EEPR0M (Caution) For example : *2767*JAVA# would be keyed in as *2767*5282# Note : Not all codes will work with SGH-C100. Other Samsung Codes *#06# IMEI code *#9998*4357# Help Menu *#9998*5282# Java menu (GRPS/CSD settings for JAVA server) *#9999#0# Monitor Mode *#9999# or *#9998*9999# Software Version *#8888# or *#9998*8888# Hardware Version *#9998*746# or *#9998*0746# or *#0746# Sim Infos *#9998*523# or *#9998*0523# or *#0523# Display Contrast *#9998*842# or *#9998*0842# or *#0842# Vibration On (until you push OK) *#9998*289# or *#9998*0289# or *#0289# Buzzer On (until you push OK) *#9998*288# or *#9998*0288# or *#0288# Battery & Field Infos *#9998*377# or *#9998*0377# Error log *#9998*778# or *#9998*0778# or *#0778# Sim Service table *#9998*782# show date and alarm clock *#8999*638# show network information *#9998*5646# change operator logo at startup *#9998*76# production number *#9998*968# view melody for alarm *#9998*585# Non-Volatile Memory (NVM) *#3243948# Digital Audio Interference Off *#32436837# Digital Audio Interference On SAMSUNG T100 SECRET CODES ============================ *#06# -> Show IMEI
*#9999# -> Show Software Version
*#0001# -> Show Serial Parameters
*2767*3855# -> Full EEPROM Reset ( THIS CODE REMOVES SP-
LOCK!!!! but also change IMEI to 447967-89-400044-0, you must use
CHGIMEI to restore it)
*2767*2878# -> Custom EEEPROM Reset
*#8999*228# -> Battery status (capacity, voltage, temperature)
*#8999*246# -> Program status
*#8999*289# -> Change Alarm Buzzer Frequency
*#8999*324# -> Debug screens
*#8999*364# -> Watchdog
*#8999*377# -> EEPROM Error Stack
*#8999*427# -> Trace Watchdog
*#8999*523# -> Change LCD contrast
*#8999*544# -> Jig detect
*#8999*636# -> Memory status
*#8999*746# -> SIM File Size
*#8999*778# -> SIM Service Table
*#8999*785# -> RTK (Run Time Kernel) errors
*#8999*786# -> Run, Last UP, Last DOWN
*#8999*837# -> Software Version
*#8999*842# -> Test Vibrator
*#8999*862# -> Vocoder Reg
*#8999*872# -> Diag
*#8999*947# -> Reset On Fatal Error
*#8999*999# -> Last/Chk
*#8999*9266# -> Yann debug screen (=Debug Screens?)
*#8999*9999# -> Software version
SAMSUNG V200 SECRET CODES
v200 Unlock Code-> *2767*7822573738#
*#9324# Netmon (press the hangup key to exit)
*#9998*JAVA# Edit GPRS/ CSD settings (S100 Only)
*#9998*Help# Help screen/ List of codes
*#9998*LOGO# Change operator Logo
*#9998*RTC# RTC Display
*#9998*Bat# Battery Status
*#9998*Buz# Turns Buzzer ON
*#9998*Vib# Turns Vibrator ON
*#9998*LCD# LCD Contrast
*#9998*9999# Softwre Version
*#9998*8888# Hardware Version
*#9998*377# NVM Error Log (?????)
*#9998*NET# SIM Network ID
*#9998*778# SIM Serv. Table
*#9998*SIM# SIM Info
*#9998*PN# Production No.
*#9998*968# Reminder Tune
*#9998*NVM# Displays Non-Volitile Memory Status
*#9999*C# ???????????????????
*#06# Displays phones I**I No.
***/// ***/// NOTE /// *** RED COLOR , they appear serious !!! Use at
own risk !!!
*#9998*2576# Forces SIM Error
*#9998*DEAD# Forces Phone Crash
*2767*MEDIA# Resets the medis on the phone (deletes all downloaded
pics/tones)
*2767*FULL# Resets the EEPRON *DANGEROUS*
*2767*CUST# Resets the Custom EEPRON
*2767*JAVA# Resets JAV downloads (deletes all downloaded midlits)
*2767*STACKRESET# Resets Stack
*2767*225RESET# ????????????????? * Dangerous *
*2767*WAP# Resets WAP Setting & Deletes Favorites
SAMSUNG A800 SECRET CODES
The universal unlock code is *2767*637# do this with out your sim in
By default, the firmware (software) for x600 only receives java
apps and other applications like stuff by serial port.
but even for it, you have to enable the serial port, which also
causes
the closing of all other ports, even the IrDA too :-( ..
well, guess what, i have very good news for you,
do you know, you can increase the sound level,
the sound level for tones, speaker fone, etc,
can be increase even then if it is at max (level 4)
you still can do it,
just follows the instructions!
**************** HERE WE GO **************
Enter the following code:
*#8999*8378#
(You'll be shown menu, then ...)
then go to:
"H/W test"
then go to:
"Audio Settings"
then go to:
"Melody Gain"
There will you see a number.
there are five (5) Melody Levels" of it.
(and currently, you are at level 1 and after
pressing the "save" button, you will move to
level 2 and so on .........................)
you have to change the values of all the levels.
and as the resultant, it will give increase the
melody sound!, your tones will more louder,
even more louder then the max. ringing volume.
the level wise numbers are: (as its my setting :-) )
Melody Level 1: 13
Melody Level 2: 17
Melody Level 3: 18
Melody Level 4: 25
Melody Level 5: 31
you even can make your own combinations of level wise
sounding numbers that can change the sound level!.
if your combination cause more louder sound level,
then mine,
then do share it with the group! ... :-)
meanwhile, try my figured-out combination!
************ CAUTION ************
if anything goes wrong,
then you can apply the master reset code,
that will NOT delete anything, ANYTHING from your
cell fone, but set each and eveything to its
default/standard setting ...
(likes, factory settings :-) )
the master reset code is:
#*7728#
#########################################
I take no responsibility of these codes are working or not,
or its effects on your cell fone
but i have tried these codes on my cell fone.
and i bet, nothing goes wrong,
but even then of my words, be carefull!,
#########################################
The code: *#8999*8378#
as i regarded it a informative code,
will tell you each and everything about your cell fone.
and in the "H/W test",
there are lot of other Audio settings,
each of them having five (5) levels,
you can change the combination, but before doing anything,
do write the defult number sequence to some place so that
you'll be then able to invert it again! .. :-) ...
#*2558# - Time ON
#*2527# - GPRS Switching Set to class {4/8/9/10}
#*4263# - Handsfree Mode: ACTIVATED
#*53696# - [Java dnload] WAPSAR mode
#*536961# - WAPSAR enable HTTP disable
#*536962# - HTTP enable WAPSAR disable
#*536963# - SERIAL enable Others disable
#*5663351# - [Phone Model] SAMSUNG SGH-X100
#*6420# - Mic off
#*6421# - Mic on
#*7632# - Sleep mode
*#8999*523# - Main LCD Brightness
*#8999*3825523# - (?) External display
*2767*3855# - Full EEPROM reset(Reset all type of locks)also you'll
lose pictures and java not melody
Remove camera sound:
On main screen type:
*#8999*8378# --> Test mode
H/W test
Audio Settings
Melody Gain
Then replace 6 by 0, it'll show 12 but it's OK
Press back until main screen
Then press key volume to minimum and let's try !!! no more sound
tip by C-Quest
*2767*688# resets the phone
Thats all!!!!!!!!!!!!!!!
Samsung X100 Tricks
#*0000#
#*0400#
#*1200# - AFC DAC Val
#*1300# - IMEI
#*1400# - IMSI
#*1700# - ( ) Command #*1700 Executed
#*1800# - ( ) Command #*1800 Executed
#*1900# - ( ) Command #*1900 Executed
#*2000# - ( ) Command #*2000 Executed
#*2100# - ( ) Command #*2100 Executed
#*2200# - ( ) Command #*2200 Executed
#*2252# - Current CAL
#*2255# -
#*2256# - Calibr.-Info
#*2282#
#*2285#
#*2286# - Databattery
#*2337# - ( ) Permanent Registration - Not Yet Implemented
#*2355#
#*2400# - ( ) Command #*2400 Executed
#*2474# - For CMD Set - DEBUGBATTERY in cihard.opt
#*2527# - GPRS Switching Set to class {4/8/9/10}
#*2558# - Time ON
#*2562#
#*2565#
#*2677# - AMR State: {None / Full Rate}
#*2679# - Copycat Feature: {ACTIVATED/DEACTIVATED}
#*2787# - CRTP {ON/OFF}
#*2834# - Audio path Mobile Normal
#*2836# - AVDDSS Management: {DEACTIVATED/ACTIVATED}
#*3230# - Trace Enable DCD disable
#*3231# - Trace disable DCD Enable
#*3232# - Current Mode {Trace enabled/DCD enabled}
#*3270# - DCS Support: {DEACTIVATED/ACTIVATED}
#*3282# - Data: {DEACTIVATED/ACTIVATED}
#*3333#
#*3353# - General Defence Code Erased
#*3370#
#*3377#
#*3476# - EGSM: {DEACTIVATED/ACTIVATED}
#*3676# - Flash Volume Formated
#*3683#
#*3737# - Some Codes
#*3777#
#*3779#
#*3825# - ( ) Command #*3825 Executed
#*3837#
#*3849#
#*3851#
#*3876#
#*3877# - Dump of SPY Trace
#*3900#
#*3940# - External looptest 9600 bps not available in SYSOL2
#*3940# - External looptest 115200 bps not available in SYSOL2
#*3941#
#*4200#
#*4263# - Handsfree Mode: ACTIVATED
#*4300#
#*4500#
#*4674# - IMSI| MCC:2 5 0 | MNC 9 2 | 10 11 91 83 50
#*4700# - Half Rate: {ACTIVATED/DEACTIVATED}
#*4760# - GSM: {ACTIVATED/DEACTIVATED}
#*4864#
#*5100#
#*5111# - ( ) Some Codes
#*5132#
#*5133# - ( ) Some Codes
#*5143#
#*5156#
#*5165#
#*5171# - ( ) Some Codes
#*5172# - ( ) Some Codes
#*5173# - ( ) Some Codes
#*5174#
#*5175#
#*5176# - ( ) Some Codes
#*5177#
#*5187# - L1C2G trace: {ACTIVATED/DEACTIVATED}
#*53696# - [Java dnload] WAPSAR mode
#*536961# - WAPSAR enable HTTP disable
#*536962# - HTTP enable WAPSAR disable
#*536963# - SERIAL enable Others disable
#*5376#
#*5400# - ( ) Command #*5400 Executed
#*5500#
#*5600#
#*566335# - [WAP model ID]
#*5663351# - [Phone Model] SAMSUNG SGH-X100
#*5663352# - [Java Model] SEC-SGHS300/1.0
#*5737425# - Java Serial
#*577699# - APN
#*5800# - ( ) Command #*5800 Executed
#*6100# - ( ) Command #*6100 Executed
#*6200#
#*6420# - Mic off
#*6421# - Mic on
#*6422# - Mic dep RXdata
#*6428# - Mic measurement
#*6700#
#*6837# - Official Software Version
#*6900#
#*7200#
#*7222# - Operation Typ: Class C GSM
#*7224# - ERROR
#*7247#
#*7252# - Operation Typ: Class B GPRS
#*7271# - Multi slot: Class 1 GPRS
#*7274# - Multi slot: Class 4 GPRS
#*7276#
#*7284# - Class B
#*7287# - GPRS Attached
#*7288# - GPRS Detached
#*7326# - Accessory: Vibrator
#*7337# - Some kind of Reset Settings
#*7352# - Some Kind of Debug Info
#*7462# - SIM phase
#*7524# - KCGPRS
#*7562# - LOCI GPRS
#*7636#
#*7639#
#*7632# - Sleep mode
#*7633#
#*7638# - RLC always open ended TBF: {ACTIVATED/DEACTIVATED}
#*7646#
#*7665#
#*7666# - SrCell Data
#*7673# - Sleep mode
#*7676# - Command #*7676 Executed
#*7683# - Sleep variable
#*7693# - Sleep deact
#*7728# - RSAV done->reset
#*7763# - SMS bearer CS {ACTIVATED/DEACTIVATED}
#*7825#
#*7828# - Midl Rl51
#*7957# - Command #*7957 Executed
#*7983# - Voltage/Freq {DEACTIVATED/ACTIVATED}
#*7986# - Voltage {DEACTIVATED/ACTIVATED}
#*8462# - Sleep time since SwitchOff
#*8465# - Time in L1
#*8466# - Old Time
#*8645#
#*9278# - Command #*9278 Executed
#*9795# - wtls key: reset
#7263867# - RAM Dump {On/Off}
#7465625*228# - Activa lock deactivated
#7465625*27*
#7465625*2827# - Auto CP lock deactivated
#7465625*28638# - Auto Network lock deactivated
#7465625*28746# - Auto SIM lock deactivated
#7465625*2877# - Auto SP lock deactivated
#7465625*28782# - Auto subset lock deactivated
#7465625*638*
#7465625*746*
#7465625*77*
#7465625*782*
#8999*324#
*#0*
*#0020# –
*#06# – IMEI
*#2255# - Call List
*#4777*8665# – GPRS
*#7465625# – Interrogate ( )
*#8377466# – Software && Hardware Versions
*#8888# – Hardware Version
*#8999*324# - ( ) Some Strange Numbers
*#8999*377# -
*#8999*3825523# - ( )
*#8999*523# - Main LCD Brightness
*#8999*636# - ( ) Another Strange Numbers
*#8999*8376363# - . HW, SW, + Some Code And Data
*#8999*8378# - . , , , HW SW
*#9999# – Software Version
=== : ===
*2767*xx927 - WAP . xx - . , xx=44: *2767*44WAP# xx=31:
*2767*31WAP#
*2767*xx667 - MMS.
.
*2767*2877368#
*2767*2878# – EEPROM ( , )
*2767*31667#
*2767*31927#
*2767*33667#
*2767*33927#
*2767*34667#
*2767*34927#
*2767*351667#
*2767*351927#
*2767*3700#
*2767*380667#
*2767*380927#
*2767*3855# - l EEPROM ( SP- !! ) IMEI 447967-89-400044-0, IMEI ( )
*2767*39667#
*2767*39927#
*2767*420667#
*2767*420927#
*2767*43667#
*2767*43927#
*2767*44667#
*2767*44927#
*2767*46667#
*2767*46927#
*2767*49667#
*2767*49927#
*2767*66335#
*2767*688# ( ) [Unlocking Code]
*2767*7100#
*2767*7300#
*2767*73738927# = *2767*RESETWAP#
*2767*7650#
*2767*7667#
*2767*7927#
*2767*8200#
*2767*927#
=== / : ===
*335#
*663867# - mm file dumped
*7465625# -
*7465625*228# - Activa lock personalized
*7465625*27*
*7465625*2827# - Auto CP lock activated
*7465625*28638# - Auto Network lock activated
*7465625*28746# - Auto SIM lock activated
*7465625*2877# - Auto SP lock activated
*7465625*28782# - Auto subset lock activated
*7465625*638*
*7465625*746
*7465625*746*
*7465625*77*
*7465625*782*
Secret Codes
*#06# -> Show IMEI
*#9999# -> Show Software Version
*#0837# -> Show Software Version (instructions)
*#0001# -> Show Serial Parameters
*#9125# -> Activates the smiley when charging.
*#9998*228# -> Battery status (capacity, voltage, temperature)
*#9998*246# -> Program status
*#9998*289# -> Change Alarm Buzzer Frequency
*#9998*324# -> Debug screens
*#9998*364# -> Watchdog
*#9998*377# -> EEPROM Error Stack - Use side keys to select values.
Cancel and ok.
*#9998*427# -> Trace Watchdog
*#9998*523# -> Change LCD contrast - Only with version G60RL01W
*#9998*544# -> Jig detect
*#9998*636# -> Memory status
*#9998*746# -> SIM File Size
*#9998*778# -> SIM Service Table
*#9998*785# -> RTK (Run Time Kernel) errors - if ok then phn is reset,
info is put in memory error. *#9998*786# -> Run, Last UP, Last DOWN
*#9998*837# -> Software Version
*#9998*842# -> Test Vibrator - Flash the screenligth during 10 seconds and
vibration activated.
*#9998*862# -> Vocoder Reg - Normal, Earphone or carkit can be selected
*#9998*872# -> Diag
*#9998*947# -> Reset On Fatal Error
*#9998*999# -> Last/Chk
*#9998*9266# -> Yann debug screen (=Debug Screens?)
*#9998*9999# -> Software version
*0001*s*f*t# -> Changes serial parameters (s=?, f=0,1, t=0,1) (incomplete)
*0002*?# -> unknown
*0003*?# -> unknown
SP-unlock SGH-600 and SGH 2100
*2767*3855# -> Full EEPROM Reset ( THIS CODE REMOVES SP-
LOCK!! )
But also changes IMEI to 447967-89-400044-0, To restore your old IMEI
use the IMEI program found on the software page.
*2767*2878# -> Custom EEEPROM Reset
These codes has been tested with version FLD_2C6 G60SB03X of Samsung
SGH-600
Secret Codes
Show Software date Following procedure will show on your phone the
software date. Remove your SIM Card, then press:
* # 06 #
and finally press:
[left softkey]
To enter Monitor Mode on Network Option menu
1. Menu 9 (Phone Options)
2. 7 (Phone Status)
3. [Left Display Button] (left MENU key)
4. 7684666
5. [HangUp Button] (Red HandSet key)
The Service provider (SP) lock is used to lock the cell phone to the SP's SIM
card. Once the cell phone is locked to a specific operator, if one inserts a
SIM card from a different operator the phone will refuse to accept it! The
cell phone will however accept another SIM card from the same operator.
Secret Codes
To view IMEI (International Mobile Equipment Identity) number enter
*#06#
Show Software version and manufact. date Following procedure will show
on your phone the software version in first row of the display and some CPU
and OS info on the second and third one. # 8377466 # (#version#)
On earlier version the above tip may not work, but you can try this one:
In the menu go to PHONE SETTINGS
Jog down to: FACTORY SETTINGS and CLICK ONCE
You will see a display "Factory Setting Yes No" . Don’t do anything with
this display, leave it as it is.
Move the main switch of the phone briefly to the right (briefly means long
enough to secure a short electric contact BUT short enough not to switch off
the phone!)
Now you key in the following sequence:
# * 0 4 Will display info about sw (?)
The Service provider (SP) lock is used to lock the cell phone to the SP's SIM
card. Once the cell phone is locked to a specific operator, if one inserts a
SIM card from a different operator the phone will refuse to accept it! The
cell phone will however accept another SIM card from the same operator.
The Service provider (SP) lock is used to lock the cell phone to the SP's SIM
card. Once the cell phone is locked to a specific operator, if one inserts a
SIM card from a different operator the phone will refuse to accept it! The
cell phone will however accept another SIM card from the same operator.
Remove SP lock (For advanced users only)
Just edit your eeprom and at the address 16b-1D8 fill this address with 00.
enter codes from normal network screen, when you press the last # it will
show the sim data, and network lock status, as for the language selecets,
when you press the last #, the phone will return to the normal network screen
using a different language
*#7465625# - display sim information (use to check eeprom editing worked)
*#0001# set language to english
47*869#08#9
- unlock code / change roaming code / ID
NOKIA SYMBIANS
*#06# Serial Number/IMEI
indicates
*#0000#
*#2820#
SW version
Bluetooth
(e.g. V3.42.1,
(BT)
16-10-03,
device
NHL-10)
address
xx# Directory quick access (xx = storage location and afterwards
lozenge
e.g.
24
#)
On/Off key -short pressing for menu for switching between profiles
Menu key - Long pressing for "task manager" - switching between active
programs
(with "C" key
programs
can
be terminated.)
Menu quick access - Over in the menu e.g. to point 3.1 arrive simply 31
enter (if the third symbol a file is opened is for these and then in it
started
the
first
Programm/Icon).
No Autostart - When switching the phone on up to the pin inquiry press
the whole time the "ABC" key (pen) - this is to ignore the
autoinitialization programs (and the MMC programs) - "safeboot".
12345 ... is according to be the standard Nokia nokia-securitycode.
0000 ... is according to be standard PIN2 at Vodafone (germany)
----------------------------------------
Caution - starting from here the codes are "dangerous"
*#7370925538#
*#Res0Wallet#
...
is
to
delete
the
code
around
the
"wallet"
Input like normal telephone number (not in wallet code inquiry windows).
NOTE! Afterwards the "wallet" is empty, can again be put on however
with
new
code.
*#7780#
-
Reset
to
original
settings
NOTE! Afterwards various "attitudes" are away - among other things
these:
Points of entrance (Provider dependent points of entrance and attitudes)
Bluetooth
Favorite
attitudes
Allocation of the two keys (beside Navi keys) in the main menue
Profiles are "neglected" (as with distribution) - still there however new
bell
SMS/MMS/E
tones,
Mail
etc.
are...
attitudes
Logos
and
spielstaende
(allegedly)
also
deleted...
Programs,
calendars
and contacts,
etc.
not
changed...
*#7370# - Soft format - resets all the telefone Memory (like Formatting
a
disk
NOTE! Battery should be full up to at least 75%, do not accomplish
during the procedure under any circumstances ! The procedure takes
some
minutes
(approx.
3-4)
Green, * 3 - Hard format: If the Mobile (only telephone memory)
formats, puts back the attitudes (see * to # 7780 #) and implements a
RESET.
NOTE! Battery should be full up to at least 75%, do not accomplish
during the procedure under any circumstances ! The procedure takes
some
minutes
(approx.
3-4)
Proceeding: Equipment switch off, keep "green key" (take off) at the
same time pressed, "*" and to "3" key and switch the equipment on (the
keys thereby keep further pressed)... to "Formatting" on the display
appears...
Identity)
On the main screen type *#06#
Information you get from the IMEI (International Mobile Equipment Identity)
XXXXXX XX XXXXXX X
TAC FAC SNR SP
TAC = Type approval code of your nokia Mobile
FAC = Final assembly code of your cellphone
SNR = Serial number of your nokia Phone
SP = Spare
Other secret tricks for Nokia mobile or cellphone
To check the phones Software revision for Nokia Mobile.
On the main screen type *#0000#
To enter in the secret menu in Nokia Phone.
On the main screen type *#92702689# [*#war0anty#]
It will take you to a secret menu where you may find some of the information
below:
1. Displays Serial Number.
2. Displays the Month and Year of Manufacture
3. Displays (if there) the date where the phone was purchased (MMYY)
4. Displays the date of the last repair - if found (0000)
5. Shows life timer of phone (time passes since last start)
To restore Factory Settings for Nokia mobile
*#7780# reset to factory settings.
Taking picture without getting noticed.
Turn on/off the "click" sound made by the camera by selecting the 'Silent' profile or
by turning warning tones on/off.
Hiding your Mobile/ Cellphone Number
Go to: Menu > Tools > Settings > Call > Send My Caller ID >
'Yes', 'No' or 'Set By Network' to follow the default settings of your home network.
It works only with very few network who provide you facility of “Private Number”
Speed Dialing From Simcard contact (not stored in mobile phonebook)
Type number followed by # then call.
Example: 1# or 2# or 21#
SECRET PRANK
Change closed caller group (settings >security settings>user groups) to 00000 and
your phone will sound the message tone when you are near a radar speed trap.
Setting it to 500 will cause your phone 2 set off security alarms at shop exits.
Try this secret trick if you can handle the unexpected.
Note: This secret trick wont work with all phones Models.
THE DETECTIVE TRICK (Mobile Spying)
Now you can spy on anyone using your cellphone. Just do the following.
1. Activate the "Automatic Answer" in the headset profile of your cellphone and
set the ringing volume to "Mute"
2. Short-circuit the left middle and right pins on the bottom of the mobile phone
with all connections touching each other this will activate profile "Headset".
If you cant do this just keep your earphone connected to mobile.
3. Now place it under a table in a room and call it. Now you can use your phone
for checking out what people are talking about in a room. Just call on your
phone.
4. The phone receives the call without ringing and you can listen to what people
are saying.
To check Samsung mobile or cellphones IMEI (International Mobile
Equipment Identity)
On the main screen type *#06#
Information you get from the IMEI (International Mobile Equipment Identity)
XXXXXX XX XXXXXX X
TAC FAC SNR SP
TAC = Type approval code of your samsung Mobile
FAC = Final assembly code of your cellphone
SNR = Serial number of your samsung Phone
SP = Spare
Other secret tricks for samsung mobile or cellphone
If you have downloaded corrupted or incompatible Java midlets or other
media,
which are causing problems with the phone, try this
*2767*JAVA# Java Reset and (Deletes all Java Midlets)
*2767*MEDIA# Reset Media (Deletes All Sounds and Pics)
*2767*WAP# Wap Reset
*2767*CUST# Reset Custom EEPR0M
*2767*FULL# Reset Full EEPR0M (Caution)
For example : *2767*JAVA# would be keyed in as *2767*5282#
Note : Not all codes will work with SGH-C100.
The master reset code is:
#*7728#
This will not delete anything from your
mobile phone, but set each and eveything to its
default/standard setting as it was on the time of purchase.
To unlock your phone put a sim from another company,
now type *#9998*3323# it will reset your phone. Push exit and then push 7,
it will reset again. Put your other sim in and it will say sim lock,
type in 00000000 then it should be unlocked. Type in *0141# then
the green call batton and it's unlocked to all networks.
This code may not work on the older phones and some of the newer phones.
If it doesn't work you will have to reset your phone without a sim in it
by typing *#2767*2878# or *#9998*3855# (not tested)
Other Samsung Codes
*#9998*4357# Help Menu
*#9998*5282# Java menu (GRPS/CSD settings for JAVA server)
*#9999#0# Monitor Mode
*#9999# or *#9998*9999# Software Version
*#8888# or *#9998*8888# Hardware Version
*#9998*746# or *#9998*0746# or *#0746# Sim Infos
*#9998*523# or *#9998*0523# or *#0523# Display Contrast
*#9998*842# or *#9998*0842# or *#0842# Vibration On (until you push OK)
*#9998*289# or *#9998*0289# or *#0289# Buzzer On (until you push OK)
*#9998*288# or *#9998*0288# or *#0288# Battery & Field Infos
*#9998*377# or *#9998*0377# Error log
*#9998*778# or *#9998*0778# or *#0778# Sim Service table
*#9998*782# show date and alarm clock
*#8999*638# show network information
*#9998*5646# change operator logo at startup
*#9998*76# production number
*#9998*968# view melody for alarm
*#9998*585# Non-Volatile Memory (NVM)
*#3243948# Digital Audio Interference Off
*#32436837# Digital Audio Interference On
View our Mobile tips and Guidelines for better Handling of Mobile
phone.
SECRET PRANK
Change closed caller group (settings >security settings>user groups) to 00000 and
your phone will sound the message tone when you are near a radar speed trap.
Setting it to 500 will cause your phone 2 set off security alarms at shop exits.
Try this secret trick if you can handle the unexpected.
Note: This secret trick wont work with all phones Models.
THE DETECTIVE TRICK (Mobile Spying)
Now you can spy on anyone using your cellphone. Just do the following.
1. Activate the "Automatic Answer" in the headset profile of your cellphone and
set the ringing volume to "Mute"
2. Short-circuit the left middle and right pins on the bottom of the mobile phone
with all connections touching each other this will activate profile "Headset".
If you cant do this just keep your earphone connected to mobile.
3. Now place it under a table in a room and call it. Now you can use your phone
for checking out what people are talking about in a room. Just call on your
phone.
4. The phone receives the call without ringing and you can listen to what people
are saying.
View all Tip & Tricks about LG Nokia Samsung Motorola Sony Ericsson
BenQ-Siemens Bluejacking GSM Secrets
To check Motorola mobile or cellphones IMEI (International Mobile
Equipment Identity)
On the main screen type *#06#
Information you get from the IMEI (International Mobile Equipment Identity)
XXXXXX XX XXXXXX X
TAC FAC SNR SP
TAC = Type approval code of your motorola Mobile
FAC = Final assembly code of your cellphone
SNR = Serial number of your motorola Phone
SP = Spare
Other secret tricks for motorola mobile or cellphone
Code to lock keys. Press together *7
Note: [] (pause) means the * key held in until box appears.
Select phone line - (use this to write things below the provider name):
[] [] [] 0 0 8 [] 1 []
Add phonebook to main menu:
[] [] [] 1 0 5 [] 1 []
Add messages to main menu:
[] [] [] 1 0 7 [] 1 []
Copy SIM memory (phonebook menu):
[] [] [] 1 0 8 [] 1 []
Eng Field options (main menu):
[] [] [] 1 1 3 [] 1 []
Slow (Frequency of search menu):
[] [] [] 1 0 1 [] 1 []
Medium (Frequency of search menu):
[] [] [] 1 0 2 [] 1 []
Fast (Frequency of search menu):
[] [] [] 1 0 3 [] 1 []
Enable EFR:
[] [] [] 1 1 9 [] 1 []
Function :
[] [] [] # # # [] 1 []
Change pin:
[] [] [] 0 0 4 [] 1 []
Unblocking using the "puk" number:
[] [] [] 0 0 5 [] 1 []
You can change GSM frequencies to 900/1800 by entering the enginnering model.
Following the below steps:
enter menu and press 048263* quickly,
then you will enter the secret engineering menu under "Opcode"
input 10*0*3 for GSM 900
10*0*4 for GSM 1800
10*0*5 for GSM 1900
10*0*6 for dual band GSM 900/1800
10*0*7 for dual band GSM 850/1900
To add extra message space 4 your Motorola C350 C450 C550 or C650,
press menu button, press 048263* quickly, then on the popup menu enter 47 press
ok.
press 50 and ok.press 1 ok.press 64 ok.press 1 ok.press 186 and ok.
You will receive an extra 50 msgs memory space.Switch phone off and back on.
View our Mobile tips and Guidelines for better Handling of Mobile
phone.
SECRET PRANK
Change closed caller group (settings >security settings>user groups) to 00000 and
your phone will sound the message tone when you are near a radar speed trap.
Setting it to 500 will cause your phone 2 set off security alarms at shop exits.
Try this secret trick if you can handle the unexpected.
Note: This secret trick wont work with all phones Models.
THE DETECTIVE TRICK (Mobile Spying)
Now you can spy on anyone using your cellphone. Just do the following.
1. Activate the "Automatic Answer" in the headset profile of your cellphone and
set the ringing volume to "Mute"
2. Short-circuit the left middle and right pins on the bottom of the mobile phone
with all connections touching each other this will activate profile "Headset".
If you cant do this just keep your earphone connected to mobile.
3. Now place it under a table in a room and call it. Now you can use your phone
for checking out what people are talking about in a room. Just call on your
phone.
4. The phone receives the call without ringing and you can listen to what people
are saying.
View all Tip & Tricks about LG Nokia Samsung Motorola Sony Ericsson
BenQ-Siemens Bluejacking GSM Secrets
Bluejacking is not mobile hacking or hijacking its totaly different. Bluejacking is a
harmless prank played on people who have switched Bluetooth on their phones.
blue is taken from Bluetooth, the technology bluejacking uses.
jacking is derived from both "ajack" and "hijacking"
Even thought bluejacking does not resemble hijacking There is no accessing or
taking private data from your victim's device.
Bluejacking is totally limited to Bluetooth enabled devices.Bluetooth has a very
limited range, usually around 10 metres on mobile phones, but laptops and other
instrument with high power transmitters can reach up to 100 meters.
Bluejacking Explained
“Bluejacking” is define as sending of unsolicited messages over Bluetooth to
Bluetooth-enabled devices such as mobile phones, PDAs, Laptops, sending a contact
which typically contains a message in the name field to another bluetooth enabled
device via the OBEX protocol.
Few prople say the term “Bluejacking” originated with a user named ajack on
esato.com. Some people say that the term bluejacking comes from Bluetooth and
hijacking. While that certainly sounds logical, a bluejacker doesn't hijack anything,
he just send a contact to the recipient's device. Both parties have absolute control
over their devices, and a bluejacker will not be able to take control of your phone or
steal your personal information.
You can create a phonebook contact and write a message, eg. 'Hello, you've been
bluejacked', in the 'Name' field. Then you can search for other phones with Bluetooth
and send that phonebook contact to them. On their phone, a message will popup
saying "'Hello, you've been bluejacked' has just been received by Bluetooth" or
something along those lines. For most 'victims' they will have no idea as to how the
message appeared on their phone. So, personalised messages like 'I like your pink
top' and the startled expressions that result is where the fun really starts.
Bluejacking is quite harmless, but because bluejacked people don't know what is
happening, they think their phone is malfunctioning. Usually, a bluejacker will only
send a text message, but with modern phones it's possible to send images or sounds
as well.
But with the increase in the availability of bluetooth enabled devices, these devices
have become vulnarable to virus attacks and even complete take over of devices
through a trojan horse program.
Bluejacking Process
Go to Contacts.
• Create a new contact.
• Write the short message you want to send on the line next to 'Last name'
• Save this contact.
• Select this contact and send via Bluetooth.
• Your phone will search for devices
• All the Bluetooth devices near you will be displayed.
• Select any one you like and send.
• You have bluejacked someone.
You can also send pictures to your victim by adding them to your bluejack contact.
The best thing about this is even if the victim rejects the contact that you sent
him/her, the picture gets automatically saved in the victim's My Pictures section.
Note:
It is not that interesting after 2 or 3 trials. Its just a prank. Do NOT harass anyone
with this. Be careful at some places and with some peoples, especially in airports
where the tolerance level is very low. Also don't send threatening messages.
Technically you cannot be traced, but if the victim notices you behaving in a
suspicious way with your mobile phone in your hand, you better run for your life.
Secret Codes
SP unlock *#0003*(secret code 8 digits)#
*#06# for checking the IMEI (International Mobile Equipment Identity)
Tetris
Power on phone and enter PIN. before phone has locked onto network, F9, send own
number, hit right button, hit 9. left is 2, right is 8, rotate is 5, and drop is 4.
Monitor Mode
1. Menu
2. 9 (Phone Options)
3. 7 (Phone Status)
4. Left Display Button (left MENU key)
5. 5553756
6. HangUp Button (Red HandSet key)
Now "Monitor" should appear at the bottom of the Network Options menu. Pressing the
right Display Button when in monitor mode will show a list of the six cells with the
strongest signals. Test Mode Indicators: (* = only available when call in progress )
CH Channel Number
RX Signal Strength (dB)
N NCC (Color Code)
B BCC (Color Code)
CI Cell ID (in Hex)
C1+ how long before phone does forced hand over. (see RX and RXAM)
LAI Location Area Identity. Display Network ID code (42F010 = 240.01) and MSC
TXPWR Transmit Power (dB)
RXAM Reeceive signal strength cut-off point
TS* Time Slot Number
TA* Timing Advance. Distance from tower in Km * 2
PL* Power Level
Power Table
PL: 5 6 7 8 9 10 11 12 13 14 15
dB: 33 31 29 27 25 23 21 19 17 15 13
Watts: 2 1.3 .8 .5 .3 .2 .13 .08 .05 .03 .02
LF* C1 value with continuous transmisson from tower
LS* C1 Value with discontinuous tranmission from tower
QF* Bit Error Rate with continuous transmission from tower
QS* Bit Error Rate with discontinuous transmission from tower
BER (bit error rate) table
QF/QS register: 0 1 2 3 4 5 6 7
% of bit sent: 0.2 0.8 0.4 1.6 3.2 6.4 12.8 25.6
Tips and tricks
Nice Sunset in the display. Siemens S3 or younger
In the Telephone Book in the section own numbers, first position you have to type in
+12022243121 (Number of the Capitol in Washington DC) and save it without a name.
Then open this telephone book again do so as you like to change the number but leave the
modus without changing anything. A nice Sundown will be shown in the display.
Pin Out
1- GND
2- SB
3- POWER
4- NC
5- TX
6- RX
7- CLOCK
8- DATA
9- GND MIC
10- HF MIC
11- AUDIO
12- GND AUDIO
Secret Codes
SP unlock *#0003*(secret code 8 digits)#
*#06# for checking the IMEI (International Mobile Equipment Identity)
Tetris
Power on phone and enter PIN. before phone has locked onto network, F9,
send own number, hit right button, hit 9. left is 2, right is 8, rotate is 5, and
drop is 4.
Monitor Mode
1. Menu
2. 9 (Phone Options)
3. 7 (Phone Status)
4. Left Display Button (left MENU key)
5. 5553756
6. HangUp Button (Red HandSet key)
Now "Monitor" should appear at the bottom of the Network Options menu.
Pressing the right Display Button when in monitor mode will show a list of
the six cells with the strongest signals. Test Mode Indicators: (* = only
available when call in progress )
CH Channel Number
RX Signal Strength (dB)
N NCC (Color Code)
B BCC (Color Code)
CI Cell ID (in Hex)
C1+ how long before phone does forced hand over. (see RX and RXAM)
LAI Location Area Identity. Display Network ID code (42F010 = 240.01)
and MSC
TXPWR Transmit Power (dB)
RXAM Reeceive signal strength cut-off point
TS* Time Slot Number
TA* Timing Advance. Distance from tower in Km * 2
PL* Power Level
Power Table
PL: 5 6 7 8 9 10 11 12 13 14 15
dB: 33 31 29 27 25 23 21 19 17 15 13
Watts: 2 1.3 .8 .5 .3 .2 .13 .08 .05 .03 .02
LF* C1 value with continuous transmisson from tower
LS* C1 Value with discontinuous tranmission from tower
QF* Bit Error Rate with continuous transmission from tower
QS* Bit Error Rate with discontinuous transmission from tower
BER (bit error rate) table
QF/QS register: 0 1 2 3 4 5 6 7
% of bit sent: 0.2 0.8 0.4 1.6 3.2 6.4 12.8 25.6
Tips and tricks
Nice Sunset in the display. Siemens S3 or younger
In the Telephone Book in the section own numbers, first position you have
to type in +12022243121 (Number of the Capitol in Washington DC) and
save it without a name. Then open this telephone book again do so as you
like to change the number but leave the modus without changing anything. A
nice Sundown will be shown in the display.
Pin Out
1- GND
2- SB
3- POWER
4- NC
5- TX
6- RX
7- CLOCK
8- DATA
9- GND MIC
10- HF MIC
11- AUDIO
12- GND AUDIO
Secret Codes
SP unlock *#0003*(secret code 8 digits)#
*#06# for checking the IMEI (International Mobile Equipment Identity)
Tetris
Power on phone and enter PIN. before phone has locked onto network, F9,
send own number, hit right button, hit 9. left is 2, right is 8, rotate is 5, and
drop is 4.
Monitor Mode
1. Menu
2. 9 (Phone Options)
3. 7 (Phone Status)
4. Left Display Button (left MENU key)
5. 5553756
6. HangUp Button (Red HandSet key)
Now "Monitor" should appear at the bottom of the Network Options menu.
Pressing the right Display Button when in monitor mode will show a list of
the six cells with the strongest signals. Test Mode Indicators: (* = only
available when call in progress )
CH Channel Number
RX Signal Strength (dB)
N NCC (Color Code)
B BCC (Color Code)
CI Cell ID (in Hex)
C1+ how long before phone does forced hand over. (see RX and RXAM)
LAI Location Area Identity. Display Network ID code (42F010 = 240.01)
and MSC
TXPWR Transmit Power (dB)
RXAM Reeceive signal strength cut-off point
TS* Time Slot Number
TA* Timing Advance. Distance from tower in Km * 2
PL* Power Level
Power Table
PL: 5 6 7 8 9 10 11 12 13 14 15
dB: 33 31 29 27 25 23 21 19 17 15 13
Watts: 2 1.3 .8 .5 .3 .2 .13 .08 .05 .03 .02
LF* C1 value with continuous transmisson from tower
LS* C1 Value with discontinuous tranmission from tower
QF* Bit Error Rate with continuous transmission from tower
QS* Bit Error Rate with discontinuous transmission from tower
BER (bit error rate) table
QF/QS register: 0 1 2 3 4 5 6 7
% of bit sent: 0.2 0.8 0.4 1.6 3.2 6.4 12.8 25.6
Unlock Siemens S3(Not S3 COM)
(For advanced users only)
At addresses 0D8 to 0DD the phones code is stored. To read the code swap
nibbles stored at addresses from 0DA to 0DD. Error counter is at 0D9. To
clear the Phone Code write at addresses from 0D8 to 0DD: 00, 00, FF, FF,
FF, FF.
Siemens S3 comfort
Show IMEI code: * # 06 #
MONITOR MODE
The Siemens S3 Com series have a Monitor mode that can be activated
directly from the standard user keypad. In order to activate this mode, you
must enter the special access code currently programmed into the phone.
TO ACTIVATE MONITOR MODE
1. Turn the phone on.
2. Enter the PIN access code on press OK. (Only if is enabled).
3. Press Menu. (Left top button).
4. Press 9. (Phone Options).
5. Press 8. (Phone Status) (May be button 7 in some phones).
6. You may see your IMEI Number
7. Left Display Button (Top left MENU key).
8. 7684666
9. HangUp Button. (Red HandSet key).
Note: Monitor should appear now at the bottom of the Network Options
menu.
MONITOR MODE TOGGLE
Pressing the right Display Button when in monitor mode will toggle into 1
and 2 modes
Tips and tricks
Nice Sunset in the display. Siemens S3 or younger
In the Telephone Book in the section own numbers, first position you have
to type in +12022243121 (Number of the Capitol in Washington DC) and
save it without a name. Then open this telephone book again do so as you
like to change the number but leave the modus without changing anything. A
nice Sundown will be shown in the display.
Pin Out
1- GND
2- SB
3- POWER
4- NC
5- TX
6- RX
7- CLOCK
8- DATA
9- GND MIC
10- HF MIC
11- AUDIO
12- GND AUDIO
SIEMENS S1 / S3 / S3 COM / S4
To view the software date and else with S3 com, S4, S4Power
press with SIM removed *#06# and left softkey.
To view some other stuff with S4Power
press with SIM removed *#06# and left softkey twice.
To view the software date with S3 com, S4, S4Power
press with SIM installed menu 98 and left softkey twice.
ACTIVATE MONITOR MODE
Siemens S1/S3
Menu, 9 (Phone Options), 7 (Phone Status), Left Display Button (left
MENU key),
5553756, HangUp Button (Red HandSet key)
Siemens S3 COM/S4
Menu, 9 (Phone Options), 7 (Phone Status), Left Display Button
(left MENU key), 7684666, HangUp Button (Red HandSet key)
Note: Now Monitor should appear at the bottom of the Network Options
menu.
MONITOR MODE
Pressing the right Display Button when in monitor mode will toggle into 1
and 2 modes
Pressing the right Display Button when in monitor mode will show a
list of the six cells with the strongest signals.
Test Mode Indicators: (* = only available when call in progress )
CH Channel Number
RX Signal Strength (dB)
N NCC (Colour Code)
B BCC (Colour Code)
CI Cell ID (in Hex)
C1+ How long before phone does forced hand over.(see RX and RXAM)
LAI Location Area Identity. Display Network ID code(42F010 = 240.01)
and MSC
TXPWR Transmit Power (dB)
RXAM Receive signal strength cut-off point
TS* Time Slot Number
TA* Timing Advance. Distance from tower in Km X 2
PL* Power Level
SIEMENS S1
Here's a trick to play Tetris, also known as Klotz on a Siemens S1.
Turn the phone on. Enter PIN. Before the telephone has logged in to the
your GSM net do the following steps.
1: Choose F 9 (function settings)
2: Choose send own number and push the right button for choose.
3: Push 9
USE 2 as < and 8 as > , rotate the klotz with 5 and drop with 4.
I have just heard from one of the programmers of the phone that Tetris
was in the phone during development, but it was removed before it was
produced.
Apparantly someone has the patent on games in mobile phones and Siemens
didn't want to pay the licensing fees. It was either in Menu F-9-9 or it's not
there at all.
Secret Codes
SP unlock *#0003*(secret code 8 digits)#
*#06# for checking the IMEI (International Mobile Equipment Identity)
Resets language to automatic selection : * # 0000 # then Green button
Pin Out
1- GND
2- SB
3- POWER
4- NC
5- TX
6- RX
7- CLOCK
8- DATA
9- GND MIC
10- HF MIC
11- AUDIO
12- GND AUDIO
Alcatel HC 600 / 800 / 1000 SECRET CODES
*#06# returns IMEI number and Software Version (not HC600).
These are the pinouts for the HC600 they are the same as the
800/1000 I beleive.
1 3 5 7 9 11 13 15
I I I I I I I I
O O 17
I I I I I I I I
2 4 6 8 10 12 14 16
1 Vbat_ext 9 SDA_E
2 EMMI_PAE 10 GND
3 Mic 11 GND
4 EMMI_OPE 12 DC_IN (charge)
5 GND 13 Speaker
6 EXT_EMET 14 MARCHE
7 SCL_E 15 DC_IN (charge)
8 EXT_RECDIT 16 GND
17 Antenna+internal switch (int/ext)
Alcatel One Touch Easy
Secret Codes
To view IMEI (International Mobile Equipment Identity) number enter
*#06#
To Enter Service Menu enter: *#000000#
To view Secret Menu type 000000 then press *
Secret Menu Appears
TRACES channel indicator menus
ARRETS - ?
VIDER ARRETS Press OK and the phone responds: This action is
executed!
CTRL CHARGE It show the charger voltage and battery voltage.
DAMIER display test
The Service provider (SP) lock is used to lock the cell phone to the
SP's SIM card. Once the cell phone is locked to a specific operator,
if one inserts a SIM card from a different operator the phone will
refuse to accept it! The cell phone will however accept another SIM
card from the same operator.
Removing SP lock on Alcatel Easy
This is how to remove the SP lock on Alcatel (one touch) Easy.
(You wil need a cable, a eeprom device and some sw)
Edit the eeprom:
Address Replace with
------------- ---------------
176h FFh
177h FFh
Ericsson 218/337
To view IMEI number *#06#To view Software Version enter -> * <- <- * <- * CLR (Use with Care) To activate operator lock <- * * <- (This locks the phone to one carriers SIM card - Use with lots of care) Press Yes to lock and No to notlock. You can also use the codes below to undo this function. USE AT OWN RISK I have tested the function Lock to SP... At least on the 337 there's a submenu: Enter SPCK-code. There are 5 attempts, which is showed (05 attempts). At final attempt the phone beeps as a warning, 'this is the final try', when entering the menu... Wrong code exits the menu, so you are not stuck in something... When you have tried to enter the code (wrong) all five times, the menu is deactivated, and you'll get: 'Not allowed' when entering <-**<- A "secret test mode" can be accessed on the GH337. There seems to be two methods:> * < < * > * displays software version, such as 940810 1310
> * < < * < * displays software version, such as 951024 1054 After entering this mode, the < and > keys scroll through a menu. There
seems to be different menus for different versions of software.
Software version number are apparently a date and time stamp.
940810 1310 version commands:
TEXT CHECK - shows 254 messages in current language
INIT EEPROM MMI - resents NVRAM settings (User Settings).
Other, probably more recent version:
FLASH - will restart the phone, to the point of entering PIN numbers.You
can't kill a 337 when pressing YES while it says "FLASH?", you must
connect it to 5/12 volts first to be able to erase the flash-memory.
1-ROW TEXTS - scroll through 174 single line text messages with < and >
n-ROW-TEXTS - scroll through full-screen messages with < and >
950626 1405 version commands:
CXC (number) - The Application software's "product number". The
GH337/GF337 is always "CXC 125 005"
PRG - Indication for Programming
Programming 337
Set ComPort to 9600bps, 8 data, 1 stop, no parity.
Power on phone by pressing "NO/ENDpwr".
When performing its powerup sequence the phone will send two ">>"
(ASCII 62 decimal) characters. Within 1 second, reply to it by
sending the 4 character sequence "TP1".
(I used Procomm Plus with this script "eric.asp")
[proc main ]
[start: ]
[ ]
[ waitfor ">>" ]
[ pause 1 ]
[ transmit "TP1^M" ]
If everything went fine you should get the "OK" prompt back.
Test the TEST PROGRAM by sending the commands terminated by a :
PROG 0 (shows Test Program product number info)
PROG 1 (shows Test Program product date info)
PROG 3 (Shows Main Application product number info)
PROG D (Shows Main Application product date info)
Programming Calculator and Channel Indicator/RBS
To enable, send the following:
EEWR 047A 01
Wait for the OK prompt, power off* the phone and disconnect it from the
interface cables. Powerup and browse through the menus.
To diasable, send the following:
EEWR 047A 00
Clearing Electronic Lock
To clear the electronic lock you have to clear the EEPROM address range
045B to 0466 by sending the commands:
EEWR 045B 00
EEWR 045C 00
EEWR 045D 00
EEWR 045E 00
EEWR 045F 00
EEWR 0460 00
EEWR 0461 00
EEWR 0462 00
EEWR 0463 00
EEWR 0464 00
EEWR 0465 00
EEWR 0466 00
Disabling the Service Provider Lock
To disable send the following command:
EEWR 1587 00
To enable send the following command:
EEWR 1587 01
Experimental Commands - Use at own Risk
To dump the application software send the following:
PREA
Bank range : 00..7F
Address : 0000..BFFF
Bytestoread : 0000..BFFF
The "additional" value returned at the end are the checksum value
for the returned program memory bytes. Note, the byte-values are
always returned in format 0000 and NOT 00.
PREA FF
Returns the application checksum, takes a few seconds.
Notes on the PH 337
1. Calculator mode is NOT available on all PH sw versions.
2. Invoking Calc/RBS mode not available for GH337 sw versions below
R2A
3. SPCK attempts can be changed to 50 instead of the std 5 tries
4. The instruction LIME returns ERR but does not screw up phone
5. The instruction IMEI returns the IMEI no.
6. Pressing YES in response to FLASH? does screw up the unit.
COOL STUFF TO DO
Set ComPort to 115200bps, 8 data, 1 stop, no parity and watch all t
he phone commands on the screen and so on. Make a call and see what
happens as well as shutting down.
Pinouts
1 In Voice
2 In +5V=External Power, 0V=Battery
3 Out Ext Speak control
4 Analog GND
5 Out Voice
6 Out +5V=POWER ON, 0V=POWER OFF
7 Out Charger control
8 Digital/DC GND
9 In 0V=normal,+5V=test, +12V=test+flash
10 In Hook
11 In TTL serial in
12 Out TTL serial out
13 In 0V for aprox 1 sec = POWER ON/OFF
14 In DC Power supply
Ericsson 318/338
To view IMEI number *#06#To view Software Version enter -> * <- <- * <- * CLR (Use with Care) The Latest Software Version is under Phone Info. To fine tune sound and clean up any echos, place the 388 into the car kit HF 2600. Then close all windows, engine off and type * # * # 3. The E 388 will fine- tune itself in about a few seconds. To activate operator lock <- * * <- (This locks the phone to one carriers SIM card - Use with lots of care) Press Yes to lock and No to notlock. You can also use the codes below to undo this function. USE AT OWN RISK I have tested the function Lock to SP... At least on the 337 there's a submenu: Enter SPCK-code. There are 5 attempts, which is showed (05 attempts). At final attempt the phone beeps as a warning, 'this is the final try', when entering the menu... Wrong code exits the menu, so you are not stuck in something... When you have tried to enter the code (wrong) all five times, the menu is deactivated, and you'll get: 'Not allowed' when entering <-**<- Accessing the Service Program that is not provided with the 388. 1. Connect the 388 to Cable with RS232/TTL converter. 2. Set Comport to 9600bps, 8 data, 1 stop, no parity. 3. Power ON, wait for "2" and send "0B" to the phone. DO NOT Press ENTER. 4. R should be on screen. 5. Send TEST.BIN. (Send as a binary file) 6. 388 should answer "SP,OK". 7. R should be on screen. DO NOT write or read from the IMEI or SPCK area! If you try that you can send the phone to service at once, because you will automatically write FE or EF to EVERY cell in the EEPROM. In other words, all the calibration values for the radio is overwritten... (NOT good) Some commands in the ServiceProg: eere read from eeprom eewe write eeprom lime xxxx xxxx xxxx xxx Learn imei no. Returns Error. imei - Displays IMEI number To FlashProgram a 388: 1. Connect the 388 to Cable with RS232/TTL converter. 2. Set Comport to 9600bps, 8 data, 1 stop, no parity. 3. Power ON, wait for "2" and send "OB" to the phone. DO NOT Press ENTER. 4. R should be on screen. 5. send pre_xxx.bin to the MS. 6. You should recieve a ">".
7. send "0B" again.
8. R should be on screen
9. send prodload.bin to the MS.
10. recieve ">".
Done, I don't have the above files so please don't ask for them.
Interesting Informating (well I thought so :)
The names on the files, sj.....X45 tells you a couple of things. "sj" stands for
Sofia-Jane, thats the internal name for the model and x45 stands for "sub-
model". The 388 is called model 4/5. The latest 337 phones is called "cr",
like in Cost Reduction. They rebuilt the oscillator from a bought-in to one
built up with discrete components and that was cheaper.
Programming Channel Indicator or RBS
To enable, send the following command:
EEWR 3EE 1
Wait for the OK prompt, power off* the phone and disconnect it from the
interface cables. Powerup and browse through the menus.
To diasable, send the following command:
EEWR 3EE 0
Clearing Electronic Lock
To clear the electronic lock you have to clear the EEPROM address range
03CF to 03DA by sending the commands:
EEWR 3CF 00
EEWR 3D0 00
EEWR 3D1 00
EEWR 3D2 00
EEWR 3D3 00
EEWR 3D4 00
EEWR 3D5 00
EEWR 3D6 00
EEWR 3D7 00
EEWR 3D8 00
EEWR 3D9 00
EEWR 3DA 00
COOL STUFF TO DO
Set ComPort to 115200bps, 8 data, 1 stop, no parity and watch all the phone
commands on the screen and so on. Make a call and see what happens as
well as shutting down.
*POWER OFF
You should press the NO button a few times until Shut Down comes up on
the screen, when it does press yes and this will shut down the phone
properly.
Reading the Channel Info now that's it's enabled
|-------|-------|-------| D
| | | | I
| 1 | 2 | 3 | S
|-------|-------|-------| P
| | | | L
| 4 | 5 | 6 | A
|-------|-------|-------| Y
1. This is three different channels things depending on the phone state.
a. When the phone is idle, this shows "Bxxx". "B" stands for "Broadcast
channel" (a logic GSM channel)b. When a phonecall is in progress, this
shows "Sxxx". S stands for "Stand Alone Dedicated Control Channel"
SDCCH for short.
c. When the phoncall in up, this shows "Txxx". "T" Stands for Traffic
channel. The "xxx" thing is the channel number, 1-124.
2. This shows Rx Level. The values displayed is from 0 to 63. Rx Level is a
indicator on how good your reception is for the moment. 0 is a signal
strength of -110dBm. 63 is approx -45 to -50dBm.RXLEV is measured in
dBm in such a way that incoming signal equals -110.5+RXLEV so that a
RXLEV at 50 equals an incoming signal strenght at -50.5 dBm (plus or
minus max deviation 0.5dBm)
3. This shows the output power in dBm.
4. This shows the timeslot used for the moment. You can see it when making
a call.
5. This shows Rx Quality. Rx Quality is a measurement of how much error
correction is required to the speech. 0 indicates none and as the figure rises
you hear more pings and pongs on the speech as large parts of the frame are
missing. If you have more RxQ then 5, you are on good way to loose your
call. RxQuality reads 0-7.RXQUAL is measured by using a table wereas the
biterrorrate or BER is interesting and measured in %
RXQUAL table
0 BER < 0,2 (%) 1 0,2 < BER < 0,4 2 0,4 < BER < 0,8 3 0,8 < BER < 1,6 4 1,6 < BER < 3,2 5 3,2 < BER < 6,4 6 6,4 < BER < 12,8 (here we have lost half a burst) 7 12,8 < BER 6. This shows the timing advance. The BS tells the MS to send before it should just make sure that the MS burst is comming to the BS on the right time. The TA is measured in halfbits so the distance to the BTS can be calculated as follows=1,11*TA/2. TimingAdvance reads 0-63. Co- incidentely this tells you how far you are from the base site in 550metre chunks, up to the theoretical max of 35.2km. Pinouts 1 In Voice 2 In +5V=External Power, 0V=Battery 3 Out Ext Speak control 4 Analog GND 5 Out Voice 6 Out +5V=POWER ON, 0V=POWER OFF 7 Out Charger control 8 Digital/DC GND 9 In 0V=normal,+5V=test, +12V=test+flash 10 In Hook 11 In TTL serial in 12 Out TTL serial out 13 In 0V for aprox 1 sec = POWER ON/OFF 14 In DC Power supply Ericsson 628 To view IMEI number enter * # 0 6 # To view Software Version enter -> * <- <- * <- * To read all programmed texts enter -> * <- <- * <- * ->
To view phone network lock status enter < * * < (wait 3 sec) To fast dial press phone number pos nr and # (Example: 1 5 #) To fast dial last number press 0 # To reset main menu language to english enter * # 0 0 0 0 # To see battery level while phone is turned off quickly press and release on/off(NO button). To see Extended menus (on older versions) go to MISSED CALLS, empty directory, press and HOLD right arrow button, choose menu type To see Extended menus (on newer versions) go to READ, empty directory, press and HOLD left arrow button, choose menu type To edit phone book Turn on extended menus and choose "EditPh.Bk". Command set The following commands are recongnized by the phone.Use 9600 baud, 1 stopbit, 8 data bits, no parity. ATA Pick up phone during ring AT+GMI Manufacturer identification AT+GMO Request model Identification AT+GMR Request revision Identification AT+GMM ATDxxx; Dial number xxx ATH Hangup phone AT+CFUN=? Define levels of fuctionality in the order of power consumed AT+CFUN=0 Switches off the phone AT+CBC Query battery level Each command has to be followed by a 0x0A, 0x0D sequence, that is carriage return - line feed. These commands will be ackowledged with an 'OK' prompt. An incoming call is signalled by the string 'RING' sent by the phone at 9600b in normal mode. Portable Handsfree Unit 1 Earphone: 16 Ohm 2 Microphone: <- 2 kOhm 5 Connected to 04 (GND) Pinouts Left to right, keyboard up. 1 Audio Out 2 Audio In 3 Accessory Sense. GND to enable External Mic and Speaker (Analog) 4 Audio Signal GND. 5 Portable handsfree In. 6 Music Mute Out, High when phone is used. 7 In Flash Memory Voltage and Service Voltage, In 0V=normal,+5V=test, +12V=test+flash 8 Logic Out, Status On. Sources over 100mA 9 Data Out from Mobile Station. Debug messages appear here at 112KBaud when in debug mode. 10 Digital Ground and DC return 11 Data in 12 DC in for battery charging, DC out for accessory power Ericsson 388 *#06# for checking the IMEI (International Mobile Equipment Identity) *#0000# to reset the phones menu-language to English. >*<<*<* for checking the firmware revision information (software release) >*<<*<*> 1-row text strings. if pressing yes you can check the phones text
programming in currently selected language. (298 entries)
>*<<*<*>> n-row text strings. if pressing yes you can check the phones text
programming in currently selected language. (160 entries?)
The Service Provider (SP) Lock menu is used to lock the cell phone to the
SP's SIM card. Once the cell phone is locked to a specific operator, if one
inserts a SIM card from a different operator the phone will refuse to accept
it! The cell phone will however accept another SIM card from the same
operator.
To activate/deactivate this lock one needs a special secret code that is not
available to the end user. (not even to you... or is it ? in case please let me
know!)
<**< Lock to Network? if pressing yes you have 5 attempts to enter NCK. <**<< Lock to Network subset? if pressing yes you have 5 attempts to enter NSCK. Warning: Your phone can be locked to a service provider FOREVER by doing this! If an invalid code is entered all five times, the menu will exit and be deactivated! Any further attempt to activate the NCK/NSCK lock Menu will result in the response "Not allowed"! However the NCK/NSCK lock can be recover through a direct clearing in the EEPROM. Shortcut for Last Dialed call menu... If you for some reason don't want to enter the 'Last Dialed calls menu' by using the 'YES' key you can use the following key stroke instead: First '0' then '#'. Access menu without Sim card ... To access to the menu in your phone without having a card inside do the following: type **04*0000*0000*0000# When display say "Wrong Pin" press NO and you have access to the all menus: Info, Access, Settings, Calculator, Clock, Keylock On?, Mail, Phone book. NOTE if you try this on the GH688 your phone may stop at Keylock On? menu and you´ll have to take your battery out to turn the phone on again. Ericsson 688 To view IMEI number *#06# To view Software Version enter -> * <- <- * <- * CLR (Use with Care) To reset phone language to English *#0000# >*<<*<*> 1-row text strings. If pressing YES you can check the phones 1-
row text programming in currently selected language.
>*<<*<*>> n-row text strings. If pressing YES you can check the phones n-
row text programming in currently selected language.
Pinouts
1 = + external power supply. 7.2v @ 600mA.
2 = RS232 input (TTL)
3 = GND (digital)
4 = RS232 output (TTL)
5 = +5V output. Limited.
6 = Test. Switch phone off and provide +5V and switch back on. (set comms
at 9600, n,8,1)
7 = Mute (0 - Normal, 1 - In Call)
8 = Internal/external (0 - External Mic/Speak, 1 - Internal Mic/Speak)
9 = GND (analog)
10 = Related to Mic/Speak
11 = BF in
12 = BF out
Ericsson 768/788To view IMEI number *#06#
To view Software Version enter * -> * <- <- * <- * Service Provider Lock is * <- <- * but it is now called the ME lock. There are two options after selecting yes on another menu. These are lock to Network or lock to NetSubet. Command set The following commands are recongnized by the phone.Use 9600 baud, 1 stopbit, 8 data bits, no parity. ATA Pick up phone during ring AT+GMI Manufacturer identification AT+GMO Request model Identification AT+GMR Request revision Identification AT+GMM ATDxxx; Dial number xxx ATH Hangup phone AT+CFUN=? Define levels of fuctionality in the order of power consumed AT+CFUN=0 Switches off the phone AT+CBC Query battery level Each command has to be followed by a 0x0A, 0x0D sequence, that is carriage return - line feed. These commands will be ackowledged with an 'OK' prompt. An incoming call is signalled by the string 'RING' sent by the phone at 9600b in normal mode. Portable Handsfree Unit 1 Earphone: 16 Ohm 2 Microphone: <- 2 kOhm 5 Connected to 04 (GND) Pinouts Left to right, keyboard up. 1 Audio Out 2 Audio In 3 Accessory Sense. GND to enable External Mic and Speaker (Analog) 4 Audio Signal GND. 5 Portable handsfree In. 6 Music Mute Out, High when phone is used. 7 In Flash Memory Voltage and Service Voltage, In 0V=normal,+5V=test, +12V=test+flash 8 Logic Out, Status On. Sources over 100mA 9 Data Out from Mobile Station. Debug messages appear here at 112KBaud when in debug mode. 10 Digital Ground and DC return 11 Data in 12 DC in for battery charging, DC out for accessory power Ericsson 868/888 To view IMEI number *#06# To view Software Version enter * -> * <- <- * <- * (you also get version of InfraRed driver software and text labels) Pinouts 1 = + external power supply. 7.2v @ 600mA. 2 = RS232 input (TTL) 3 = GND (digital) 4 = RS232 output (TTL) 5 = +5V output. Limited. 6 = Test. Switch phone off and provide +5V and switch back on. (set comms at 9600, n,8,1) 7 = Mute (0 - Normal, 1 - In Call) 8 = Internal/external (0 - External Mic/Speak, 1 - Internal Mic/Speak) 9 = GND (analog) 10 = Related to Mic/Speak 11 = BF in 12 = BF out Ericsson AH 230/238 PROGRAMMINGPress and hold down FCN while entering the digits 9 8 7. You must enter the digits within ten seconds. The text "SER NUMBER" is displayed along with the telephone's electronic serial number. The number contains 11 digits, so the most significant digit is shown for one second, followed by the other 10 digits. ENTRY DISPLAY TEXT PERMISSABLE VALUE Electronic Serial # ESN Not Changeable Phone Number MIN x (where x is NAM choice) 10 digits System ID SID x (where x is NAM choice) 00000 to 32767 Press # to review MIN & SID, or END/PWR to exit the short NAM- programming mode. NB: The Number Assignment Module (NAM) is programmed through the telephone keypad. There are two NAM-programming modes available; the short and the long. The short programming mode is all that is required in most cases. The long programming mode is required if a value set by the short mode is not desired. Either mode may be used stand-alone, or the short mode can be used to set up most of the values and then the long mode can be used to make any changes desired. To enter either of the two NAM programming modes, press and hold down the FCN key while entering a specific series of digits. You must enter the digits within ten seconds. In each programming step, you can either keep the displayed setting or value, or you can change it. a. To go to the next step, without changing anything, press #. b. In some steps, you can "toggle" a setting from ON or OFF, or vice versa. To change the setting, press any numeric key. In other steps, you can replace a displayed value. To replace a value, enter the digits on the numeric keys. If you enter a wrong digit, you can erase it by pressing FCN CLR. Pressing * key restores the original value in the display. Press # to store new setting/value and go to next step. Press END/PWR in any step to leave the NAM-Programming mode. If you have changed anything in a step, you must store the setting by pressing # before pressing END/PWR. Ericsson DH368, GF768, A1018s Ericsson DH368 Try these Codes on your DH-368 phone: 1. Power on. 2. Press 904059 + 'MENU' 3. 'TEST SET' display ... 4. Press 'YES' will display @ then press 1 'RCL' will turn light off and you will see 'DONE' 5. Press 'YES' will display @ then press 86 'RCL' display 'DONE' also you will hear static... You can just enter the channel number (up to 1023) by pressing 'Yes' 3 'CLR' XXXX - channel number to enter a channel directly. You can also see the signal level on channel by pressing 3 'MENU'. You can see the ESN number by pressing 'YES' 1 'RCL' 96 in HEX format. 6. Press 3 to exit, now you phone will power down and power up again. You can install the phone number into the phone by pressing 923885 + 'MENU' Ericsson GF768 Edit Greetings Tip 1. Go to the Keylock menu. 2. Set lock to Auto. 3. Press YES then hold the left arrow untill the Greetings menu appears. GF788 menu in your GF768 phone! (1) 1. Go to the EDIT MENU and press YES. 2. Type the number "2" and press YES. 3. In "NAME" HOLD DOWN the "2" key untill the number "2" apperars. Press YES. 4. Press YES again (to save any position) then QUICKLY press and hold left arrow (<) untill "SIZE" appears in the display. 5.Press YES and choose "Full size". You now have the GF788 menu! NB. Confirmed working on version 970716 and 980318. GF788 menu in your GF768 phone! (2) 1.Go to MissedCall 2. Empty the list 3. Press the -> key for a second or two
4. The option Menu size turns up
5. Choose 'yes' and go from there
NB. Confirmed working on version 990122.
GF788 menu in your GF768 phone! (3)
1. Go and set the ring volume and press yes.
2. When 'STORED' is displayed - keep the right button -> pressed until
'Extended Menu' is displayed.
3. Select "Activate" the menus and you now have lots of extra features
NB. Confirmed working on version 980910
Ericsson A1018s
(UN)LOCKING YOUR ERICSSON A1018s TO SPECIFIC NETWORK :
A way to (un)lock your cell phone on to the network:
1. Press : <**< 2. Then on the display appear and give you two choices: Lock to Network ? and Lock to Network subset? 3. Enter the NCK number (code is provided by the SP) 4. You have 5 attemps to do this 5. Then your cell phone will work 'only' with the network Erricson WAP Mobile Phone Bug Allows Wiretapping May, 23 2001 - 09:51 Summary Erricson's WAP, Wireless Application Protocol, suffers from a security flaw that allows attackers to listen into other WAP sessions traveling on the cellular carrier wave. Details Erricson Mobile Phone allows attackers to wiretap other lines. This attack is limited, since you cannot choose which number to wiretap on, and you cannot talk at the same time that you are wiretapping a line. This vulnerability shows the lack of security of WAP as it is offered in today's cellular networks. IMPORTANT NOTE: Wiretapping is illegal. The following information is just a proof of concept that shows a potential vulnerability in Erricson's WAP implementation. How to wiretap from an Erricson Cell Phone: 1) Type 904059 2) Menu 3) Yes 4) 1 5) RCL 6) Yes 7) 8300** 8) Yes 9) 86 (Instead of the ** you can write any number you wish, except for the number 00) To stop the wiretapping: 1) Type RCL 2) 3 3) Yes Additional information The information has been provided by Pirsing, ::: m0sad team :::. Ericsson GA628 *#06# for checking the IMEI (International Mobile Equipment Identity) *#0000# to reset the phones menu-language to English. *#103# then YES Time and date will be shown. >*<<*<* for checking the firmware revision information (software release) >*<<*<*> 1-row text strings. if pressing yes you can check the phones text
programming in currently selected language. (298 entries)
>*<<*<*>> n-row text strings. if pressing yes you can check the phones text
programming in currently selected language. (160 entries?)
The Service Provider (SP) Lock
The Service Provider (SP) Lock menu is used to lock the cell phone to the
SP's SIM card. Once the cell phone is locked to a specific operator, if one
inserts a SIM card from a different operator the phone will refuse to accept
it! The cell phone will however accept another SIM card from the same
operator.
To activate/deactivate this lock one needs a special secret code that is not
available to the end user.
Here is how to activate the menu:
<**< Lock to Network? if pressing yes you have 5 attempts to enter NCK. <**<< Lock to Network subset? if pressing yes you have 5 attempts to enter NSCK. Warning: Your phone can be locked to a service provider FOREVER by doing this! If an invalid code is entered all five times, the menu will exit and be deactivated! Any further attempt to activate the NCK/NSCK lock Menu will result in the response "Not allowed"! However the NCK/NSCK lock can be recover through a direct clearing in the EEPROM. Shortcut for Last Dialed call menu If you for some reason don't want to enter the 'Last Dialed calls menu' by using the 'YES' key you can use the following key stroke instead: First '0' then '#'. Bat. level indicator when turned OFF When the phone is turned off and the phone is not changing - the bat. level can be seen for a short period of time by pressing the 'NO' key quick once (it has to be quick!) and then wait for about 2 sec. The bat. level will now be shown in the display at its normal position. Access menu without Sim card To access to the menu in your phone without having a card inside do the following: type **04*0000*0000*0000# When display say "Wrong Pin" press NO and you have access to the all menus: Info, Access, Settings, Calculator, Clock, Keylock On?, Mail, Phone book. NOTE if you try this on your phone may stop at Keylock On? menu and you´ll have to take your battery out to turn the phone on again. Alarm Clock Menu Go to MissedCall Empty the list Press the -> key for a second or two The
option Menu size turns up Choose 'yes' and go from there.
An alarm clock turned up too but it never rang. I think this was because
there is no clock in the phone.
Free phone calls using the GA628
This trick has only been reported working on PREPAID GSM CARDS and
in some countries and with some sw versions.
The prepaid GSM SIM CARD is a kind of "SIM card" which only has a
sertant amount of credit on it (like a normal phonebox telecard)... if it can be
traced? - we don't know...
Well..here's the trick you dial the no. normally and press YES. While
"connecting" is shown on the screen, the following procedure should be
carried out: Press CLR then 0 then # and then NO (twice) so as to switch
OFF the phone. You can then still speak on the phone while it is switched
off but the SIM card does not record your calls which will lead to FREE
phone calls in some countries.. we hope!!
Another variant of the code
Make a Call, while the phone says Connecting type 083# (the position 83
must be empty! ), when phone says Pos Emtpy, press the NO key and turn
off the phone.
If you can make the call with the phone turned off you will face a problem
when you need to hang up the phone...the only way for you to do that is
remove the battery...???
Ericsson GF768
To return the language back to english on the ericsson GF768, just press left
( <-- ), zero four times (0,0,0,0), and then right ( --> ).
Ericsson GH688
*#06# for checking the IMEI (International Mobile Equipment Identity)
*#0000# to reset the phones menu-language to English.
*#103# then YES Time and date will be shown.
>*<<*<* for checking the firmware revision information (software release) >*<<*<*> 1-row text strings. if pressing yes you can check the phones text
programming in currently selected language. (298 entries)
>*<<*<*>> n-row text strings. if pressing yes you can check the phones text
programming in currently selected language. (160 entries?)
The Service Provider (SP) Lock
The Service Provider (SP) Lock menu is used to lock the cell phone to the
SP's SIM card. Once the cell phone is locked to a specific operator, if one
inserts a SIM card from a different operator the phone will refuse to accept
it! The cell phone will however accept another SIM card from the same
operator.
To activate/deactivate this lock one needs a special secret code that is not
available to the end user.
Here is how to activate the menu:
<**< Lock to Network? if pressing yes you have 5 attempts to enter NCK. <**<< Lock to Network subset? if pressing yes you have 5 attempts to enter NSCK. Warning: Your phone can be locked to a service provider FOREVER by doing this! If an invalid code is entered all five times, the menu will exit and be deactivated! Any further attempt to activate the NCK/NSCK lock Menu will result in the response "Not allowed"! However the NCK/NSCK lock can be recover through a direct clearing in the EEPROM. Shortcut for Last Dialed call menu If you for some reason don't want to enter the 'Last Dialed calls menu' by using the 'YES' key you can use the following key stroke instead: First '0' then '#'. Bat. level indicator when turned OFF When the phone is turned off and the phone is not changing - the bat. level can be seen for a short period of time by pressing the 'NO' key quick once (it has to be quick!) and then wait for about 2 sec. The bat. level will now be shown in the display at its normal position. Access menu without Sim card To access to the menu in your phone without having a card inside do the following: type **04*0000*0000*0000# When display say "Wrong Pin" press NO and you have access to the all menus: Info, Access, Settings, Calculator, Clock, Keylock On?, Mail, Phone book. NOTE if you try this on your phone may stop at Keylock On? menu and you´ll have to take your battery out to turn the phone on again. Full Operator List You can view the full operator list by doing the following: Go to the 'Edit list' menu under 'networks'. The phone say 'please wait' (searching for other networks). When finished, Press the < key once, then YES twice. Now the phone displays the full list. Browse through the list with the < > keys.
Monitor mod on Ericsson GH688
How to enable net monitor on Ericson 688..
1. Remove SIM from phone
2. Dial 112, press YES, hear something
3. Dial 112YESNO 4. Press <(left arrow) before SETTINGS 5. Then YES, <(left arrow), then you will see NM on? 6. press YES Free phone calls using the GH688 This trick has only been reported working on PREPAID GSM CARDS and in some countries and with some sw versions. The prepaid GSM SIM CARD is a kind of "SIM card" which only has a sertant amount of credit on it (like a normal phonebox telecard)... if it can be traced? - we don't know... Well..here's the trick you dial the no. normally and press YES. While "connecting" is shown on the screen, the following procedure should be carried out: Press CLR then 0 then # and then NO (twice) so as to switch OFF the phone. You can then still speak on the phone while it is switched off but the SIM card does not record your calls which will lead to FREE phone calls in some countries.. we hope!! Another variant of the code Make a Call, while the phone says Connecting type 083# (the position 83 must be empty! ), when phone says Pos Emtpy, press the NO key and turn off the phone. If you can make the call with the phone turned off you will face a problem when you need to hang up the phone...the only way for you to do that is remove the battery...??? Ericsson SH888 *#06# for checking the IMEI (International Mobile Equipment Identity) >*<<*<* for checking the firmware revision information (software release) >*<<*<*> 1-row text strings. if pressing yes you can check the phones text
programming in currently selected language.
>*<<*<*>> n-row text strings. if pressing yes you can check the phones text
programming in currently selected language.
>*<<*<*>>> IR version info. if pressing yes you can check the phones IR
device's driver version.
The Service Provider (SP) Lock
The Service Provider (SP) Lock menu is used to lock the cell phone to the
SP's SIM card. Once the cell phone is locked to a specific operator, if one
inserts a SIM card from a different operator the phone will refuse to accept
it! The cell phone will however accept another SIM card from the same
operator.
To activate/deactivate this lock one needs a special secret code that is not
available to the end user.
Here is how to activate the menu:
<**< Lock to Network? if pressing yes you have 5 attempts to enter NCK. <**<< Lock to Network subset? if pressing yes you have 5 attempts to enter NSCK. Warning: Your phone can be locked to a service provider FOREVER by doing this! If an invalid code is entered all five times, the menu will exit and be deactivated! Any further attempt to activate the NCK/NSCK lock Menu will result in the response "Not allowed"! However the NCK/NSCK lock can be recover through a direct clearing in the EEPROM. Shortcut for Last Dialed call menu If you for some reason don't want to enter the 'Last Dialed calls menu' by using the 'YES' key you can use the following key stroke instead: First '0' then '#'. Bat. level indicator when turned OFF When the phone is turned off and the phone is not changing - the bat. level can be seen for a short period of time by pressing the 'NO' key quick once (it has to be quick!) and then wait for about 2 sec. The bat. level will now be shown in the display at its normal position. Access menu without Sim card To access to the menu in your phone without having a card inside do the following: type **04*0000*0000*0000# When display say "Wrong Pin" press NO and you have access to the all menus: Info, Access, Settings, Calculator, Clock, Keylock On?, Mail, Phone book. NOTE if you try this on your phone may stop at Keylock On? menu and you´ll have to take your battery out to turn the phone on again. Ericsson T10s *#06# for checking the IMEI (International Mobile Equipment Identity) >*<<*<* for checking the firmware revision information (software release) >*<<*<*>> n-row text strings. if pressing yes you can check the phones text
programming in currently selected language.
Shortcut for Last Dialed call menu
If you for some reason don't want to enter the 'Last Dialed calls menu' by
using the 'YES' key you can use the following key stroke instead: First '0'
then '#'.
Access menu without Sim card
To access to the menu in your phone without having a card inside do the
following: type **04*0000*0000*0000# When display say "Wrong Pin"
press NO and you have access to the all menus: Info, Access, Settings,
Calculator, Clock, Keylock On?, Mail, Phone book. NOTE if you try this on
your phone may stop at Keylock On? menu and you´ll have to take your
battery out to turn the phone on again. And this will not care about Phone
lock!
A way to (un)lock your cell phone on to the network(subset):
1. Press <**< 2. Then on the display appear and give you two choices: Lock to Network ? and Lock to Network subset? (Use arrow keys to select) 3. Enter the NCK number (code is provided by the SP) 4. You have 5 attemps to do this 5. Then your cell phone will work 'only' with the network Warning: The Service Provider (SP) Lock menu is used to lock the cell phone to the SP's SIM card. Once the cell phone is locked to a specific operator, if one inserts a SIM card from a different operator the phone will refuse to accept it! The cell phone will however accept another SIM card from the same operator. To activate/deactivate this lock one needs a special secret code that is not available to the end user. Your phone can be locked to a service provider FOREVER by doing this! If an invalid code is entered all five times, the menu will exit and be deactivated! Any further attempt to activate the NCK/NSCK lock Menu will result in the response "Not allowed"! However the NCK/NSCK lock can be recover through a direct clearing in the EEPROM. Ericsson T18 *#06# for checking the IMEI (International Mobile Equipment Identity) Information you get from the IMEI: XXXXXX XX XXXXXX X TAC FAC SNR SP TAC = Type approval code FAC = Final assembly code SNR = Serial number SP = Spare To access SIM-Locking menu of your phone, press: < * [CLR] < Be carefull or you may lock your phone. Ericsson T28 *#06# for checking the IMEI (International Mobile Equipment Identity) >*<<*<* for checking the firmware revision information (software release) >*<<*<*> 1-row text strings. if pressing yes you can check the phones text
programming in currently selected language.
>*<<*<*>> n-row text strings. if pressing yes you can check the phones text
programming in currently selected language.
The Service Provider (SP) Lock
The Service Provider (SP) Lock menu is used to lock the cell phone to the
SP's SIM card. Once the cell phone is locked to a specific operator, if one
inserts a SIM card from a different operator the phone will refuse to accept
it! The cell phone will however accept another SIM card from the same
operator.
To activate/deactivate this lock one needs a special secret code that is not
available to the end user.
Here is how to activate the menu:
<**< Lock to Network? if pressing yes you have 5 attempts to enter NCK. <**<< Lock to Network subset? if pressing yes you have 5 attempts to enter NSCK. Warning: Your phone can be locked to a service provider FOREVER by doing this! If an invalid code is entered all five times, the menu will exit and be deactivated! Any further attempt to activate the NCK/NSCK lock Menu will result in the response "Not allowed"! However the NCK/NSCK lock can be recover through a direct clearing in the EEPROM. Shortcut for Last Dialed call menu If you for some reason don't want to enter the 'Last Dialed calls menu' by using the 'YES' key you can use the following key stroke instead: First '0' then '#'. GSM Codes The following codes are the standard GSM codes for various network services. Most Nokia phones have easier ways to activate them through the menus. Check the guides for your model. Call Diverting All To Activate: * * 21 * NUMBER # [SEND] To Cancel: # # 21 # [SEND] To Check: * # 21 # [SEND] No Answer To Activate: * * 61 * NUMBER # [SEND] To Cancel: # # 61 # [SEND] To Check: * # 61 # [SEND] Unreachable To Activate: * * 62 * NUMBER # [SEND] To Cancel: # # 62 # [SEND] To Check: * # 62 # [SEND] Busy To Activate: * * 67 * NUMBER # [SEND] To Cancel: # # 67 # [SEND] To Check: * # 67 # [SEND] To Cancel All Call Forwarding # # 002 # [SEND] Diverting Data Calls All To Activate: * * 21 * NUMBER * 25 # [SEND] To Cancel: # # 21 # * 25 [SEND] To Check Status: * # 21 # * 25 # [SEND] No Answer To Activate: * * 61 * NUMBER * 25 # [SEND] To Cancel: # # 61 * 25 # [SEND] To Check Status: * # 61 # * 25 # [SEND] Unreachable To Activate: * * 62 * NUMBER * 25 # [SEND] To Cancel: # # 62 # * 25 # [SEND] To Check Status: * # 62 # * 25 # [SEND] Busy To Activate: * * 67 * NUMBER * 25 # [SEND] To Cancel: # # 67 # * 25 # [SEND] To Check Status: * # 67 # * 24 # [SEND] Diverting Fax Calls All To Activate: * * 21 * NUMBER * 13 #[SEND] To Cancel: # # 21 # * 13 # [SEND] To Check Status: * # 21 # * 13 # [SEND] No Answer To Activate: * * 61 * NUMBER * 13 # [SEND] To Cancel: # # 61 * 13 # [SEND] To Check Status: * # 61 # * 13 # [SEND] Unreachable To Activate: * * 62 * NUMBER * 13 # [SEND] To Cancel: # # 62 # * 13 # [SEND] To Check Status: * # 62 # * 13 # [SEND] Busy To Activate: * * 67 * NUMBER * 13 # [SEND] To Cancel: # # 67 # * 13 # [SEND] To Check Status: * # 67 # * 13 #[SEND] Call Barring Before you can activate these barring services you will need a barring code from your service provider. Call Barring can not be activated if Call Forwarding diverts are already in use. All Calls To Activate: * 330 * BARRING CODE # [SEND] To Cancel: # 330 * BARRING CODE # [SEND] To Check: * # 330 # [SEND] All Outgoing Calls To Activate: * 333 * BARRING CODE # [SEND] To Cancel: # 333 * BARRING CODE # [SEND] To Check: * # 333 # [SEND] All Incoming Calls To Activate: * 353 * BARRING CODE # [SEND] To Cancel: # 353 * BARRING CODE # [SEND] To Check: * # 353 # [SEND] All Outgoing Calls To Activate: * 33 * BARRING CODE# [SEND] To Cancel: # 33 * BARRING CODE # [SEND] To Check: * # 33 # [SEND] All Outgoing International Calls To Activate: * 331 * BARRING CODE# [SEND] To Cancel: # 331 * BARRING CODE # [SEND] To Check: * # 331 # [SEND] All Outgoing International Calls Except To Home Country To Activate: * 332 * BARRING CODE# [SEND] To Cancel: # 332 * BARRING CODE # [SEND] To Check: * # 332 # [SEND] All Incoming Calls To Activate: * 35 * BARRING CODE # [SEND] To Cancel: # 35 * BARRING CODE # [SEND] To Check: * # 35 # [SEND] All Incoming Calls When Outside Home Country To Activate: * 351 * BARRING CODE # [SEND] To Cancel: # 351 * BARRING CODE # [SEND] To Check: * # 351 # [SEND] Canceling All Call Barring # 330 * BARRING CODE # [SEND] Call Waiting To Activate: * 43 # [SEND] To Deactivate: # 43 # [SEND] To Check: * # 43 # [SEND] Calling Line Identity Outgoing To Activate: * 31 # [SEND] To Deactivate: # 31 # [SEND] To Check: * # 31 # [SEND] Incoming To Activate: * 30 # [SEND] To Deactivate: # 30 # [SEND] You can try these in case you downloaded corrupted or incompatible Java midlets or other media, which are causing problems with the phone. *2767*JAVA# Java Reset and (Deletes all Java Midlets) *2767*MEDIA# Reset Media (Deletes All Sounds and Pics) *2767*WAP# Wap Reset *2767*CUST# Reset Custom EEPR0M *2767*FULL# Reset Full EEPR0M (Caution) For example : *2767*JAVA# would be keyed in as *2767*5282# Note : Not all codes will work with SGH-C100. Other Samsung Codes *#06# IMEI code *#9998*4357# Help Menu *#9998*5282# Java menu (GRPS/CSD settings for JAVA server) *#9999#0# Monitor Mode *#9999# or *#9998*9999# Software Version *#8888# or *#9998*8888# Hardware Version *#9998*746# or *#9998*0746# or *#0746# Sim Infos *#9998*523# or *#9998*0523# or *#0523# Display Contrast *#9998*842# or *#9998*0842# or *#0842# Vibration On (until you push OK) *#9998*289# or *#9998*0289# or *#0289# Buzzer On (until you push OK) *#9998*288# or *#9998*0288# or *#0288# Battery & Field Infos *#9998*377# or *#9998*0377# Error log *#9998*778# or *#9998*0778# or *#0778# Sim Service table *#9998*782# show date and alarm clock *#8999*638# show network information *#9998*5646# change operator logo at startup *#9998*76# production number *#9998*968# view melody for alarm *#9998*585# Non-Volatile Memory (NVM) *#3243948# Digital Audio Interference Off *#32436837# Digital Audio Interference On SAMSUNG T100 SECRET CODES ============================ *#06# -> Show IMEI
*#9999# -> Show Software Version
*#0001# -> Show Serial Parameters
*2767*3855# -> Full EEPROM Reset ( THIS CODE REMOVES SP-
LOCK!!!! but also change IMEI to 447967-89-400044-0, you must use
CHGIMEI to restore it)
*2767*2878# -> Custom EEEPROM Reset
*#8999*228# -> Battery status (capacity, voltage, temperature)
*#8999*246# -> Program status
*#8999*289# -> Change Alarm Buzzer Frequency
*#8999*324# -> Debug screens
*#8999*364# -> Watchdog
*#8999*377# -> EEPROM Error Stack
*#8999*427# -> Trace Watchdog
*#8999*523# -> Change LCD contrast
*#8999*544# -> Jig detect
*#8999*636# -> Memory status
*#8999*746# -> SIM File Size
*#8999*778# -> SIM Service Table
*#8999*785# -> RTK (Run Time Kernel) errors
*#8999*786# -> Run, Last UP, Last DOWN
*#8999*837# -> Software Version
*#8999*842# -> Test Vibrator
*#8999*862# -> Vocoder Reg
*#8999*872# -> Diag
*#8999*947# -> Reset On Fatal Error
*#8999*999# -> Last/Chk
*#8999*9266# -> Yann debug screen (=Debug Screens?)
*#8999*9999# -> Software version
SAMSUNG V200 SECRET CODES
v200 Unlock Code-> *2767*7822573738#
*#9324# Netmon (press the hangup key to exit)
*#9998*JAVA# Edit GPRS/ CSD settings (S100 Only)
*#9998*Help# Help screen/ List of codes
*#9998*LOGO# Change operator Logo
*#9998*RTC# RTC Display
*#9998*Bat# Battery Status
*#9998*Buz# Turns Buzzer ON
*#9998*Vib# Turns Vibrator ON
*#9998*LCD# LCD Contrast
*#9998*9999# Softwre Version
*#9998*8888# Hardware Version
*#9998*377# NVM Error Log (?????)
*#9998*NET# SIM Network ID
*#9998*778# SIM Serv. Table
*#9998*SIM# SIM Info
*#9998*PN# Production No.
*#9998*968# Reminder Tune
*#9998*NVM# Displays Non-Volitile Memory Status
*#9999*C# ???????????????????
*#06# Displays phones I**I No.
***/// ***/// NOTE /// *** RED COLOR , they appear serious !!! Use at
own risk !!!
*#9998*2576# Forces SIM Error
*#9998*DEAD# Forces Phone Crash
*2767*MEDIA# Resets the medis on the phone (deletes all downloaded
pics/tones)
*2767*FULL# Resets the EEPRON *DANGEROUS*
*2767*CUST# Resets the Custom EEPRON
*2767*JAVA# Resets JAV downloads (deletes all downloaded midlits)
*2767*STACKRESET# Resets Stack
*2767*225RESET# ????????????????? * Dangerous *
*2767*WAP# Resets WAP Setting & Deletes Favorites
SAMSUNG A800 SECRET CODES
The universal unlock code is *2767*637# do this with out your sim in
By default, the firmware (software) for x600 only receives java
apps and other applications like stuff by serial port.
but even for it, you have to enable the serial port, which also
causes
the closing of all other ports, even the IrDA too :-( ..
well, guess what, i have very good news for you,
do you know, you can increase the sound level,
the sound level for tones, speaker fone, etc,
can be increase even then if it is at max (level 4)
you still can do it,
just follows the instructions!
**************** HERE WE GO **************
Enter the following code:
*#8999*8378#
(You'll be shown menu, then ...)
then go to:
"H/W test"
then go to:
"Audio Settings"
then go to:
"Melody Gain"
There will you see a number.
there are five (5) Melody Levels" of it.
(and currently, you are at level 1 and after
pressing the "save" button, you will move to
level 2 and so on .........................)
you have to change the values of all the levels.
and as the resultant, it will give increase the
melody sound!, your tones will more louder,
even more louder then the max. ringing volume.
the level wise numbers are: (as its my setting :-) )
Melody Level 1: 13
Melody Level 2: 17
Melody Level 3: 18
Melody Level 4: 25
Melody Level 5: 31
you even can make your own combinations of level wise
sounding numbers that can change the sound level!.
if your combination cause more louder sound level,
then mine,
then do share it with the group! ... :-)
meanwhile, try my figured-out combination!
************ CAUTION ************
if anything goes wrong,
then you can apply the master reset code,
that will NOT delete anything, ANYTHING from your
cell fone, but set each and eveything to its
default/standard setting ...
(likes, factory settings :-) )
the master reset code is:
#*7728#
#########################################
I take no responsibility of these codes are working or not,
or its effects on your cell fone
but i have tried these codes on my cell fone.
and i bet, nothing goes wrong,
but even then of my words, be carefull!,
#########################################
The code: *#8999*8378#
as i regarded it a informative code,
will tell you each and everything about your cell fone.
and in the "H/W test",
there are lot of other Audio settings,
each of them having five (5) levels,
you can change the combination, but before doing anything,
do write the defult number sequence to some place so that
you'll be then able to invert it again! .. :-) ...
#*2558# - Time ON
#*2527# - GPRS Switching Set to class {4/8/9/10}
#*4263# - Handsfree Mode: ACTIVATED
#*53696# - [Java dnload] WAPSAR mode
#*536961# - WAPSAR enable HTTP disable
#*536962# - HTTP enable WAPSAR disable
#*536963# - SERIAL enable Others disable
#*5663351# - [Phone Model] SAMSUNG SGH-X100
#*6420# - Mic off
#*6421# - Mic on
#*7632# - Sleep mode
*#8999*523# - Main LCD Brightness
*#8999*3825523# - (?) External display
*2767*3855# - Full EEPROM reset(Reset all type of locks)also you'll
lose pictures and java not melody
Remove camera sound:
On main screen type:
*#8999*8378# --> Test mode
H/W test
Audio Settings
Melody Gain
Then replace 6 by 0, it'll show 12 but it's OK
Press back until main screen
Then press key volume to minimum and let's try !!! no more sound
tip by C-Quest
*2767*688# resets the phone
Thats all!!!!!!!!!!!!!!!
Samsung X100 Tricks
#*0000#
#*0400#
#*1200# - AFC DAC Val
#*1300# - IMEI
#*1400# - IMSI
#*1700# - ( ) Command #*1700 Executed
#*1800# - ( ) Command #*1800 Executed
#*1900# - ( ) Command #*1900 Executed
#*2000# - ( ) Command #*2000 Executed
#*2100# - ( ) Command #*2100 Executed
#*2200# - ( ) Command #*2200 Executed
#*2252# - Current CAL
#*2255# -
#*2256# - Calibr.-Info
#*2282#
#*2285#
#*2286# - Databattery
#*2337# - ( ) Permanent Registration - Not Yet Implemented
#*2355#
#*2400# - ( ) Command #*2400 Executed
#*2474# - For CMD Set - DEBUGBATTERY in cihard.opt
#*2527# - GPRS Switching Set to class {4/8/9/10}
#*2558# - Time ON
#*2562#
#*2565#
#*2677# - AMR State: {None / Full Rate}
#*2679# - Copycat Feature: {ACTIVATED/DEACTIVATED}
#*2787# - CRTP {ON/OFF}
#*2834# - Audio path Mobile Normal
#*2836# - AVDDSS Management: {DEACTIVATED/ACTIVATED}
#*3230# - Trace Enable DCD disable
#*3231# - Trace disable DCD Enable
#*3232# - Current Mode {Trace enabled/DCD enabled}
#*3270# - DCS Support: {DEACTIVATED/ACTIVATED}
#*3282# - Data: {DEACTIVATED/ACTIVATED}
#*3333#
#*3353# - General Defence Code Erased
#*3370#
#*3377#
#*3476# - EGSM: {DEACTIVATED/ACTIVATED}
#*3676# - Flash Volume Formated
#*3683#
#*3737# - Some Codes
#*3777#
#*3779#
#*3825# - ( ) Command #*3825 Executed
#*3837#
#*3849#
#*3851#
#*3876#
#*3877# - Dump of SPY Trace
#*3900#
#*3940# - External looptest 9600 bps not available in SYSOL2
#*3940# - External looptest 115200 bps not available in SYSOL2
#*3941#
#*4200#
#*4263# - Handsfree Mode: ACTIVATED
#*4300#
#*4500#
#*4674# - IMSI| MCC:2 5 0 | MNC 9 2 | 10 11 91 83 50
#*4700# - Half Rate: {ACTIVATED/DEACTIVATED}
#*4760# - GSM: {ACTIVATED/DEACTIVATED}
#*4864#
#*5100#
#*5111# - ( ) Some Codes
#*5132#
#*5133# - ( ) Some Codes
#*5143#
#*5156#
#*5165#
#*5171# - ( ) Some Codes
#*5172# - ( ) Some Codes
#*5173# - ( ) Some Codes
#*5174#
#*5175#
#*5176# - ( ) Some Codes
#*5177#
#*5187# - L1C2G trace: {ACTIVATED/DEACTIVATED}
#*53696# - [Java dnload] WAPSAR mode
#*536961# - WAPSAR enable HTTP disable
#*536962# - HTTP enable WAPSAR disable
#*536963# - SERIAL enable Others disable
#*5376#
#*5400# - ( ) Command #*5400 Executed
#*5500#
#*5600#
#*566335# - [WAP model ID]
#*5663351# - [Phone Model] SAMSUNG SGH-X100
#*5663352# - [Java Model] SEC-SGHS300/1.0
#*5737425# - Java Serial
#*577699# - APN
#*5800# - ( ) Command #*5800 Executed
#*6100# - ( ) Command #*6100 Executed
#*6200#
#*6420# - Mic off
#*6421# - Mic on
#*6422# - Mic dep RXdata
#*6428# - Mic measurement
#*6700#
#*6837# - Official Software Version
#*6900#
#*7200#
#*7222# - Operation Typ: Class C GSM
#*7224# - ERROR
#*7247#
#*7252# - Operation Typ: Class B GPRS
#*7271# - Multi slot: Class 1 GPRS
#*7274# - Multi slot: Class 4 GPRS
#*7276#
#*7284# - Class B
#*7287# - GPRS Attached
#*7288# - GPRS Detached
#*7326# - Accessory: Vibrator
#*7337# - Some kind of Reset Settings
#*7352# - Some Kind of Debug Info
#*7462# - SIM phase
#*7524# - KCGPRS
#*7562# - LOCI GPRS
#*7636#
#*7639#
#*7632# - Sleep mode
#*7633#
#*7638# - RLC always open ended TBF: {ACTIVATED/DEACTIVATED}
#*7646#
#*7665#
#*7666# - SrCell Data
#*7673# - Sleep mode
#*7676# - Command #*7676 Executed
#*7683# - Sleep variable
#*7693# - Sleep deact
#*7728# - RSAV done->reset
#*7763# - SMS bearer CS {ACTIVATED/DEACTIVATED}
#*7825#
#*7828# - Midl Rl51
#*7957# - Command #*7957 Executed
#*7983# - Voltage/Freq {DEACTIVATED/ACTIVATED}
#*7986# - Voltage {DEACTIVATED/ACTIVATED}
#*8462# - Sleep time since SwitchOff
#*8465# - Time in L1
#*8466# - Old Time
#*8645#
#*9278# - Command #*9278 Executed
#*9795# - wtls key: reset
#7263867# - RAM Dump {On/Off}
#7465625*228# - Activa lock deactivated
#7465625*27*
#7465625*2827# - Auto CP lock deactivated
#7465625*28638# - Auto Network lock deactivated
#7465625*28746# - Auto SIM lock deactivated
#7465625*2877# - Auto SP lock deactivated
#7465625*28782# - Auto subset lock deactivated
#7465625*638*
#7465625*746*
#7465625*77*
#7465625*782*
#8999*324#
*#0*
*#0020# –
*#06# – IMEI
*#2255# - Call List
*#4777*8665# – GPRS
*#7465625# – Interrogate ( )
*#8377466# – Software && Hardware Versions
*#8888# – Hardware Version
*#8999*324# - ( ) Some Strange Numbers
*#8999*377# -
*#8999*3825523# - ( )
*#8999*523# - Main LCD Brightness
*#8999*636# - ( ) Another Strange Numbers
*#8999*8376363# - . HW, SW, + Some Code And Data
*#8999*8378# - . , , , HW SW
*#9999# – Software Version
=== : ===
*2767*xx927 - WAP . xx - . , xx=44: *2767*44WAP# xx=31:
*2767*31WAP#
*2767*xx667 - MMS.
.
*2767*2877368#
*2767*2878# – EEPROM ( , )
*2767*31667#
*2767*31927#
*2767*33667#
*2767*33927#
*2767*34667#
*2767*34927#
*2767*351667#
*2767*351927#
*2767*3700#
*2767*380667#
*2767*380927#
*2767*3855# - l EEPROM ( SP- !! ) IMEI 447967-89-400044-0, IMEI ( )
*2767*39667#
*2767*39927#
*2767*420667#
*2767*420927#
*2767*43667#
*2767*43927#
*2767*44667#
*2767*44927#
*2767*46667#
*2767*46927#
*2767*49667#
*2767*49927#
*2767*66335#
*2767*688# ( ) [Unlocking Code]
*2767*7100#
*2767*7300#
*2767*73738927# = *2767*RESETWAP#
*2767*7650#
*2767*7667#
*2767*7927#
*2767*8200#
*2767*927#
=== / : ===
*335#
*663867# - mm file dumped
*7465625# -
*7465625*228# - Activa lock personalized
*7465625*27*
*7465625*2827# - Auto CP lock activated
*7465625*28638# - Auto Network lock activated
*7465625*28746# - Auto SIM lock activated
*7465625*2877# - Auto SP lock activated
*7465625*28782# - Auto subset lock activated
*7465625*638*
*7465625*746
*7465625*746*
*7465625*77*
*7465625*782*
Secret Codes
*#06# -> Show IMEI
*#9999# -> Show Software Version
*#0837# -> Show Software Version (instructions)
*#0001# -> Show Serial Parameters
*#9125# -> Activates the smiley when charging.
*#9998*228# -> Battery status (capacity, voltage, temperature)
*#9998*246# -> Program status
*#9998*289# -> Change Alarm Buzzer Frequency
*#9998*324# -> Debug screens
*#9998*364# -> Watchdog
*#9998*377# -> EEPROM Error Stack - Use side keys to select values.
Cancel and ok.
*#9998*427# -> Trace Watchdog
*#9998*523# -> Change LCD contrast - Only with version G60RL01W
*#9998*544# -> Jig detect
*#9998*636# -> Memory status
*#9998*746# -> SIM File Size
*#9998*778# -> SIM Service Table
*#9998*785# -> RTK (Run Time Kernel) errors - if ok then phn is reset,
info is put in memory error. *#9998*786# -> Run, Last UP, Last DOWN
*#9998*837# -> Software Version
*#9998*842# -> Test Vibrator - Flash the screenligth during 10 seconds and
vibration activated.
*#9998*862# -> Vocoder Reg - Normal, Earphone or carkit can be selected
*#9998*872# -> Diag
*#9998*947# -> Reset On Fatal Error
*#9998*999# -> Last/Chk
*#9998*9266# -> Yann debug screen (=Debug Screens?)
*#9998*9999# -> Software version
*0001*s*f*t# -> Changes serial parameters (s=?, f=0,1, t=0,1) (incomplete)
*0002*?# -> unknown
*0003*?# -> unknown
SP-unlock SGH-600 and SGH 2100
*2767*3855# -> Full EEPROM Reset ( THIS CODE REMOVES SP-
LOCK!! )
But also changes IMEI to 447967-89-400044-0, To restore your old IMEI
use the IMEI program found on the software page.
*2767*2878# -> Custom EEEPROM Reset
These codes has been tested with version FLD_2C6 G60SB03X of Samsung
SGH-600
Secret Codes
Show Software date Following procedure will show on your phone the
software date. Remove your SIM Card, then press:
* # 06 #
and finally press:
[left softkey]
To enter Monitor Mode on Network Option menu
1. Menu 9 (Phone Options)
2. 7 (Phone Status)
3. [Left Display Button] (left MENU key)
4. 7684666
5. [HangUp Button] (Red HandSet key)
The Service provider (SP) lock is used to lock the cell phone to the SP's SIM
card. Once the cell phone is locked to a specific operator, if one inserts a
SIM card from a different operator the phone will refuse to accept it! The
cell phone will however accept another SIM card from the same operator.
Secret Codes
To view IMEI (International Mobile Equipment Identity) number enter
*#06#
Show Software version and manufact. date Following procedure will show
on your phone the software version in first row of the display and some CPU
and OS info on the second and third one. # 8377466 # (#version#)
On earlier version the above tip may not work, but you can try this one:
In the menu go to PHONE SETTINGS
Jog down to: FACTORY SETTINGS and CLICK ONCE
You will see a display "Factory Setting Yes No" . Don’t do anything with
this display, leave it as it is.
Move the main switch of the phone briefly to the right (briefly means long
enough to secure a short electric contact BUT short enough not to switch off
the phone!)
Now you key in the following sequence:
# * 0 4 Will display info about sw (?)
The Service provider (SP) lock is used to lock the cell phone to the SP's SIM
card. Once the cell phone is locked to a specific operator, if one inserts a
SIM card from a different operator the phone will refuse to accept it! The
cell phone will however accept another SIM card from the same operator.
The Service provider (SP) lock is used to lock the cell phone to the SP's SIM
card. Once the cell phone is locked to a specific operator, if one inserts a
SIM card from a different operator the phone will refuse to accept it! The
cell phone will however accept another SIM card from the same operator.
Remove SP lock (For advanced users only)
Just edit your eeprom and at the address 16b-1D8 fill this address with 00.
enter codes from normal network screen, when you press the last # it will
show the sim data, and network lock status, as for the language selecets,
when you press the last #, the phone will return to the normal network screen
using a different language
*#7465625# - display sim information (use to check eeprom editing worked)
*#0001# set language to english
47*869#08#9
- unlock code / change roaming code / ID
NOKIA SYMBIANS
*#06# Serial Number/IMEI
indicates
*#0000#
*#2820#
SW version
Bluetooth
(e.g. V3.42.1,
(BT)
16-10-03,
device
NHL-10)
address
xx# Directory quick access (xx = storage location and afterwards
lozenge
e.g.
24
#)
On/Off key -short pressing for menu for switching between profiles
Menu key - Long pressing for "task manager" - switching between active
programs
(with "C" key
programs
can
be terminated.)
Menu quick access - Over in the menu e.g. to point 3.1 arrive simply 31
enter (if the third symbol a file is opened is for these and then in it
started
the
first
Programm/Icon).
No Autostart - When switching the phone on up to the pin inquiry press
the whole time the "ABC" key (pen) - this is to ignore the
autoinitialization programs (and the MMC programs) - "safeboot".
12345 ... is according to be the standard Nokia nokia-securitycode.
0000 ... is according to be standard PIN2 at Vodafone (germany)
----------------------------------------
Caution - starting from here the codes are "dangerous"
*#7370925538#
*#Res0Wallet#
...
is
to
delete
the
code
around
the
"wallet"
Input like normal telephone number (not in wallet code inquiry windows).
NOTE! Afterwards the "wallet" is empty, can again be put on however
with
new
code.
*#7780#
-
Reset
to
original
settings
NOTE! Afterwards various "attitudes" are away - among other things
these:
Points of entrance (Provider dependent points of entrance and attitudes)
Bluetooth
Favorite
attitudes
Allocation of the two keys (beside Navi keys) in the main menue
Profiles are "neglected" (as with distribution) - still there however new
bell
SMS/MMS/E
tones,
etc.
are...
attitudes
Logos
and
spielstaende
(allegedly)
also
deleted...
Programs,
calendars
and contacts,
etc.
not
changed...
*#7370# - Soft format - resets all the telefone Memory (like Formatting
a
disk
NOTE! Battery should be full up to at least 75%, do not accomplish
during the procedure under any circumstances ! The procedure takes
some
minutes
(approx.
3-4)
Green, * 3 - Hard format: If the Mobile (only telephone memory)
formats, puts back the attitudes (see * to # 7780 #) and implements a
RESET.
NOTE! Battery should be full up to at least 75%, do not accomplish
during the procedure under any circumstances ! The procedure takes
some
minutes
(approx.
3-4)
Proceeding: Equipment switch off, keep "green key" (take off) at the
same time pressed, "*" and to "3" key and switch the equipment on (the
keys thereby keep further pressed)... to "Formatting" on the display
appears...
No comments:
Post a Comment