MW 3020 Sim locked without SIM - GSM-Forum

Gr8SightMan · 03-22-2009, 07:47

I get with infinion

Quote:

Field0: 08 3A 05 08 30 25 22 79 86
present locklevel = 0x01

Code for locklevel 0x40: 28827412-22
Field 5374: 02 22

Code for locklevel 0x00: 39485557-40
Field 5374: 02 04
================================================
For repair:
Field 251: EB 5A 2D DC
Field 252: EB 4F 14 F9 83 80 83 5A DC 9E 74 A5 20 0F 02
Field 253: EB 4F 14 F9 83 80 83 5A 2A 3A C7 A5
================================================
For MW Phones only: The WAP-Lock
Field 5709 (no restriction - WAP locklevel 0xFF): 66 A8 CA B6
Field 5709 ( restricted - WAP locklevel 0x00): 99 11 94 EE

What to do Next?

stonesuk · 03-25-2009, 01:20

OLD phone

Post phoneID from infinion

Gr8SightMan · 03-26-2009, 06:30

here it is.

Quote:

Your PhoneID is: 5F 44 E0 95 2C 9D
Your PhoneID is: 5F 44 E0 95 2C 9D

Plz be slower since i am not familar with old sagems.

thanks.

vozice_09 · 03-27-2009, 08:26

Phone Info
MODEL: MW 3020
IMEI: 35080035222976-8

Lock and unlock codes
Code for level 01: 39403559-19 (new field 251: eadd0f4f)
Code for level 05: 40020386-78 (new field 251: ee8a4396)
Code for level 41: 28565399-48 (new field 251: aa43572c)
Code for level 00: 39485557-40 (new field 251: eb5a2ddc) - unlock code
Code for level 40: 28827412-22 (new field 251: abd323e6) - unlock code

100% working unlock
All locks levels set to 00 or no restrictions
Field 191 and 251: EB5A2DDC (00 + 3 bytes checksum)
Field 252: EB4F14F98380835ADC9E74A5200F02 (0000000000000000000000 + 4 bytes checksum)
Field 253: EB4F14F98380835A2A3AC7A5 (0000000000000000 + 4 bytes checksum)
Field 5709: 66A8CAB6 (FF + 3 bytes checksum)

List of protected fields
5251 - 16128
5252 - 16129
5253 - 16140
5254 - 16141
5255 - 16177
5256 - 16178
5257 - 185
5258 - 227
5259 - 268
5260 - 5120
5261 - 5798
5262 - 995
Checksum: 0000000000000000
Checksumed fields list: 16128, 16129, 16140, 16141, 16177, 16178, 185, 227, 268, 5120, 5798, 995

vozice_09 · 03-27-2009, 08:38

FOUND PROBLEM:
field 16177 (SIM toolkit) have value 3F B3 FF FF 7F 00 00 5F 00 but checksum in 5255 have after decrypt 3F B3 FF FF 7F 00 00 5F 03. Easy solution is set 16177 to 3F B3 FF FF 7F 00 00 5F 03 and restart phone. Other checksums are OK. If you have after restart still SIM Locked - make new eeprom backup and post here.

Gr8SightMan · 03-28-2009, 09:10

Quote:

Originally Posted by vozice_09

FOUND PROBLEM:
field 16177 (SIM toolkit) have value 3F B3 FF FF 7F 00 00 5F 00 but checksum in 5255 have after decrypt 3F B3 FF FF 7F 00 00 5F 03. Easy solution is set 16177 to 3F B3 FF FF 7F 00 00 5F 03 and restart phone. Other checksums are OK. If you have after restart still SIM Locked - make new eeprom backup and post here.

i am having this error
when editing eeprom field
one more thing phone goes auto off after time being.

thanks .

Gr8SightMan · 03-28-2009, 09:33

bro field 16177 is already 100% samilar with what u suggested

eep is attached check it.

abdoune · 03-28-2009, 13:23

What about field 5709 :
Field 5709 (4 bytes) A5 92 74 FA
Try to edit as first post :
For MW Phones only: The WAP-Lock
Field 5709 (no restriction - WAP locklevel 0xFF): 66 A8 CA B6
Salam

abdoune · 03-28-2009, 13:24

What about field 5709 :
Field 5709 (4 bytes) A5 92 74 FA
Try to edit as first post :
For MW Phones only: The WAP-Lock
Field 5709 (no restriction - WAP locklevel 0xFF): 66 A8 CA B6
Salam

vozice_09 · 03-28-2009, 19:07

Gr8SightMan - strange - 16177 isn't protected for writing.. can you use any other software for edit eeprom?

Abdoune - 5709 dave after decrypt value 3C - its normal... main problem is in 16177

stonesuk · 03-29-2009, 12:30

Quote:

Originally Posted by Gr8SightMan

i am having this error
when editing eeprom field
one more thing phone goes auto off after time being.

thanks .

Check baud rate/comport setting in Sagem Dr..

Gr8SightMan · 03-29-2009, 14:36

Quote:

Originally Posted by vozice_09

Gr8SightMan - strange - 16177 isn't protected for writing.. can you use any other software for edit eeprom?

Abdoune - 5709 dave after decrypt value 3C - its normal... main problem is in 16177

i got sagemws135 & sagemdr_14c_plus to edit eeprom
with sagemdr_14c_plus and all baudrates same result always fail to send command.

to be frank i don't know the method to edit eeprom specific filed with sagemws135 soft.

Bro if u got any diffrent soft to edit eeprom plz upload
or should we give up?

vozice_09 · 03-29-2009, 15:46

Quote:

Originally Posted by Gr8SightMan

i got sagemws135 & sagemdr_14c_plus to edit eeprom
with sagemdr_14c_plus and all baudrates same result always fail to send command.

before using sagemdoctor launch astu.exe and make log - it set baudrate in phone to 19200. after it strat sagem doctor, choose com port, set speed to 19200 and zou can edit without problems

Gr8SightMan · 03-30-2009, 05:31

Quote:

Originally Posted by vozice_09

before using sagemdoctor launch astu.exe and make log - it set baudrate in phone to 19200. after it strat sagem doctor, choose com port, set speed to 19200 and zou can edit without problems

thanks Brother u rocks
although it was a old cheap phone but it was good experience to deal with old sagem.
thanks and credit goes to all u guys

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
MW 3020 Sim locked without SIM	GSM SNIPER	Infineon C16X M51 & ARM7 M52 BASED	13	07-25-2009 11:43
3020 sim locked without sim	::gsmcoder::	Sagem Hardware Repair Area	4	11-01-2008 23:02
Sagem MW 3020 sim lock without sim	Windziarz	Infineon C16X M51 & ARM7 M52 BASED	5	02-22-2005 00:35
Sagem my 3020 sim locked without sim	asmax1	Infineon C16X M51 & ARM7 M52 BASED	1	02-08-2004 01:17
Mw 3020 "sim Verrou",, Without Sim,???	SALNAI	Infineon C16X M51 & ARM7 M52 BASED	5	12-18-2003 22:28

03-25-2009, 01:20	#2 (permalink)
stonesuk No Life Poster Join Date: May 2003 Location: UK Posts: 2,404 Member: 28558 Status: Offline Thanks Meter: 21	OLD phone Post phoneID from infinion

03-27-2009, 08:26	#4 (permalink)
vozice_09 No Life Poster Join Date: Jul 2002 Location: Czech Republic Age: 45 Posts: 505 Member: 13439 Status: Offline Thanks Meter: 14	Phone Info MODEL: MW 3020 IMEI: 35080035222976-8 Lock and unlock codes Code for level 01: 39403559-19 (new field 251: eadd0f4f) Code for level 05: 40020386-78 (new field 251: ee8a4396) Code for level 41: 28565399-48 (new field 251: aa43572c) Code for level 00: 39485557-40 (new field 251: eb5a2ddc) - unlock code Code for level 40: 28827412-22 (new field 251: abd323e6) - unlock code 100% working unlock All locks levels set to 00 or no restrictions Field 191 and 251: EB5A2DDC (00 + 3 bytes checksum) Field 252: EB4F14F98380835ADC9E74A5200F02 (0000000000000000000000 + 4 bytes checksum) Field 253: EB4F14F98380835A2A3AC7A5 (0000000000000000 + 4 bytes checksum) Field 5709: 66A8CAB6 (FF + 3 bytes checksum) List of protected fields 5251 - 16128 5252 - 16129 5253 - 16140 5254 - 16141 5255 - 16177 5256 - 16178 5257 - 185 5258 - 227 5259 - 268 5260 - 5120 5261 - 5798 5262 - 995 Checksum: 0000000000000000 Checksumed fields list: 16128, 16129, 16140, 16141, 16177, 16178, 185, 227, 268, 5120, 5798, 995

03-27-2009, 08:38	#5 (permalink)
vozice_09 No Life Poster Join Date: Jul 2002 Location: Czech Republic Age: 45 Posts: 505 Member: 13439 Status: Offline Thanks Meter: 14	FOUND PROBLEM: field 16177 (SIM toolkit) have value 3F B3 FF FF 7F 00 00 5F 00 but checksum in 5255 have after decrypt 3F B3 FF FF 7F 00 00 5F 03. Easy solution is set 16177 to 3F B3 FF FF 7F 00 00 5F 03 and restart phone. Other checksums are OK. If you have after restart still SIM Locked - make new eeprom backup and post here.

03-28-2009, 13:23	#8 (permalink)
abdoune No Life Poster Join Date: Feb 2004 Location: Algeria Posts: 2,305 Member: 56090 Status: Offline Thanks Meter: 162	What about field 5709 : Field 5709 (4 bytes) A5 92 74 FA Try to edit as first post : For MW Phones only: The WAP-Lock Field 5709 (no restriction - WAP locklevel 0xFF): 66 A8 CA B6 Salam

03-28-2009, 13:24	#9 (permalink)
abdoune No Life Poster Join Date: Feb 2004 Location: Algeria Posts: 2,305 Member: 56090 Status: Offline Thanks Meter: 162	What about field 5709 : Field 5709 (4 bytes) A5 92 74 FA Try to edit as first post : For MW Phones only: The WAP-Lock Field 5709 (no restriction - WAP locklevel 0xFF): 66 A8 CA B6 Salam

03-28-2009, 19:07	#10 (permalink)
vozice_09 No Life Poster Join Date: Jul 2002 Location: Czech Republic Age: 45 Posts: 505 Member: 13439 Status: Offline Thanks Meter: 14	Gr8SightMan - strange - 16177 isn't protected for writing.. can you use any other software for edit eeprom? Abdoune - 5709 dave after decrypt value 3C - its normal... main problem is in 16177