** MT-box NK updates history** 05-02-2008 - MTB NK v1_45**

[andro]

Release notes:
Bugfixes:
BB5 RPL Write – added 20seconds delay between certificate write, and serial sending of simlock and SuperDongle data. NOTE – in order for simlock sending to

succeed, phone should power on in LocalMode. If it doesn't correct your cable.

In case that phone has some problem with powering on in LocalMode, connect phone, manually power it on in LocalMode, and then choose write RPL Again, MT will

detect that Phone has valid Imei, and offer choice to skip certificate sending and do the serial sending only.

New features:
BB5 ASKs created with MTBox can be computed through GTServer. For more information see the release notes of GTSAccess 1.34 .
Added SX4 Authorization for PMM write on BB5 phones. BB5 phones have protection for writing RF(1 ) and Energy(309, 0x135 in hex) settings in eeprom. NOT

HAVING THOSE SETTINGS IN PHONE, IS KNOWN AS 'CONTACT RETAILER PROBLEM', OR 'SECURITY ERROR' IN SELF TEST. In order to write those settings phone requires an

authorization that only SX4 smart card can perform. As those cards are hard to get, we've added server support for this authorization. To authorize, connect

BB5 phone, and power it on. Press SX4 button ( located in Eeprom control page). If you have SX4 card connected to PC, MT will use it to compute the

authorization password and send it to phone. If you don't have card, MT will connect to server to compute authorization password. In order to connect to

server, you must have 'saved' valid account information for GT Server, and the account must have at least 1 credit left. The computation is FREE, your

account will not be charged. Because the authorization procedure must complete in very short time, if you have bad internet connection, you may have to try a

few times, before it is successful. Onece you've authorized phone, you may write PM settings to phone. If phone is restarted, you need to authorize again.

To restore PM of phone, after eeprom is eerased:
1.Connect phone.
2.Make sure it has serial communication ( recommend to see it responds to phone info in local mode).
3.Load the PM file ( load file, in Eeprom controls page).
4.Mark Section( resource) 308 (0x134) and press Write Selected.
5.Restart phone. Either disconnect and reconnect phone to MT, or change mode to Test.
6.Press SX4 button, and wait for it to display that authorization was successful.
7.Press Write All button.

If no error are report, then you've successful restored the PM of the phone.



With the support for PM authorization we've ensured that our clients are able to actually service BB5 phones. Now you can make complete backup of IMEI and

EEProm, change flash and restore IMEI and Eeprom with no additional charge for you.
WARNING: many of you will try to downgrade phones, by erasing the Eeprom and then restoring after phone is flashed with lower version. There is significant

risk, that phone will not accept simlock data ( 308, in hex 0x134) from higher version. So you still risk to end with damaged phone. That is why we recommend

to avoid downgrading. If this happens you have two options: restore phone back to high version, and then write PM, or compute RPL and write RPL to phone. So

if you really need to downgrade some BB5, you may have to compute RPL for it!

For those who wish to make full erase of BB5 phones, we've created 4 files.

BB5Erase_8MBrap.bin – fully erase first 8MB of RAP3 flash.
BB5Erase_16MBrap.bin - fully erase first 16MB of RAP3 flash.
BB5Erase_EE_8MBrap.bin – erase only eeprom located at the end of 8th MB
BB5Erase_EE_16MBrap.bin – erase only eeprom located at the end of first 16th MB.


!!!! VERY IMPORTANT !!!!

ALL WE KNOW FOR PROBLEMS WHIT BAD QUALITY SERVICE CABLES.

ON THIS CASE IS CRITICAL PHONE TO BE IN LOCAL OR TEST MODE after RESTART from certificate write.

so please check this link:

http://forum.gsmhosting.com/vbb/show...58&postcount=6

Problem is also 10 to 8 pin adapter cable connectors have very poor contact of GND and this come a big problem.

(we already start producing new type adapter cable)

Some times is need to push hard RG45 to adapter to be able to have any communication.

So if you not see this:

Simlock send - SUCCESSFULL!!!
SuperDongle send - SUCCESSFULL!!!

Simple check YOUR cable connection befor make any posting on forums.

BR GT

[andro]

MTB NK 1.29 release

Since other flashers started releasing patch solutions for unlocking DCT4 and BB5:

Under 'Lock SIM' button, we've added new button 'PatchSIM'.

Use it to unlock DCT4 phones, using the RSA protection.

How to:

1.

Select MCU file to be the same as the file flashed to phone.
2.

Press 'Patch SIM' – it will locate where to patch, and generate patch.

Then MT will flash the patch file. Send Unlock command. Flash original file, so phone is restored to normal.

Supported models: - all that we have tested on – 2610, 2310, 1112, 1110i and corresponding American models.


P.S. We don't like destroying good business by releasing free solutions, but since others decided to do it, we have to release it.

We've tried to make it as easy as possible to use.

Enjoy GT

Example log from successful unlocking (example phone is 2610):




Boot...

ASIC ID: 3040

DCT4

u3_2nd.fia

u3_amd.fia

84407A79D1C3D268E3E19D07C052

Configuration Info (9F):

Number of Flashes: 2

01000000: Samsung, 00EC 22E8 0000 7121, 10

02000000: NotUsed, 0000 0001 0000 0000, 0

ExtBUSC: AD7E B61A 1BBE 0BE2 7D58 6BE4 DBEE 6514

Erase[0.06 MB]...

erasing region [010B0000 to 010BFFFF]

in 0.44s

Flash[0.06 MB]...in 0.33s

* * Processed file in 9.11 seconds

Sending Unlock command ...Phone is in: Local mode

Imei: 3597710

=========== PATCH UNLOCK - OK ===========

Restoring original flash!!!

Boot...

ASIC ID: 3040

DCT4

u3_2nd.fia

u3_amd.fia

84407A79D1C3D268E3E19D07C052

Configuration Info (9F):

Number of Flashes: 2

01000000: Samsung, 00EC 22E8 0000 7121, 10

02000000: NotUsed, 0000 0001 0000 0000, 0

ExtBUSC: AD7E B61A 1BBE 0BE2 7D58 6BE4 DBEE 6514

Erase[0.06 MB]...

erasing region [010B0000 to 010BFFFF]

in 0.44s

Flash[0.06 MB]...in 0.33s

* * Processed file in 9.13 seconds

BR GT

[MicrostarGSM®]

2610 unlock bug fixed


kindly download at support area due to unable to upload small file here

[SoftMobile]

23.02.2007 - MT Box Nokia - MTB NK v1.29.5 realised


New features:

- New button 'BB5 Downgrade' – Button is located in the right-bottom corner of the application. It destroys the version control field, as described by Dejan.

How to use it:

Select flash files for the version you wish to flash the phone to.
Press 'BB5 Downgrade'.
Application will erase field, and flash phone.
No additional actions needed.
Tested on 6131, 6280.
We recommend that you backup the security field before that (0x134:1).

- Extended information, when bootinfo fails for BB5 phone. This should help diagnose what is wrong with BB5 phones.

- Improved Certificate Backup/Restore.
- Improved RPL writing for BB5 phones.
- Extended information on what certificates are read/written to phone.

- Added check whether EXE is used with correct installation. Some users copy exes to very old installations, and then have problems using the program. So this exe checks griffin.ini to see if the latest installation was used.
To hack the check, open griffin.ini, and make under '[interface_options]' write
'installation=mtb_nk_setup1_29_5.exe'. This hack is needed if you insist on NOT using the installations we publish.
- Bugfix: Autosave the checkboxes for 'BB5 308 Backup', 'BB5 IMEI Backup'

Temporary download link:
MTB NK 1.29.5 setup.exe

[MicrostarGSM®]

All DCT4+ & Asic 11 All version Unlock Fixed
Flashing Bugs Fixed



Please post Software Bugs at this link

Click Here

[SoftMobile]

MTB_NK 1.32 Release:

Bugfix on USB flashing for N95

FBUS flashing: Introducing data transfer usign TX2 line. Flash loaders 7x from Nokia,
have hardcoded option to use TX2 line for sending flash data. In order to use this,
you will need to modify your cables, and connect PIN2 from 10pin RJ of MT box to Rx2 on phone.
If u wish to use old flash loaders ( 6.50), u can check Off UseTx2Line( in automatic actions) and use your old cables.


Added button to implement old rap codes generation that was released by Dejan, button is DJ_BB5.


Because we have problem with hosting provider please download new version from temporary place.
New support area is under development and will be available for maximum 7 days.
Please accept our apologies for caused problems.


MTB NK 1.32 setup
N95 full cable scheme

[SoftMobile]

04.06.2007 - MT Box PRO

MT box Pro user manual v2.1

Test point for Nokia 3250 corected

[SoftMobile]

07.06.2007 - MT Box PRO - server side update


New phone models and software versions added to MT box PRO server side.


3110c
[V_04.91_03-04-07_RM-237_(c)_Nokia.]

5200
[V_04.71_28-02-07_RM-174_(c)_Nokia.]

5200B
[V_03.70_22-09-06_RM-181_(c)_Nokia.]
[V_03.92_13-10-06_RM-181_(c)_Nokia.]
[V_04.71_28-02-07_RM-181_(c)_Nokia.]

5300B
[V_03.92_13-10-06_RM-147_(c)_Nokia.]
[V_04.71_28-02-07_RM-147_(c)_Nokia.] - NOT TESTED

6126
[V_04.24_04-07-06_RM-126_(c)_Nokia.] - NOT TESTED
[V_05.61_14-12-06_RM-126_(c)_Nokia.] - NOT TESTED

6133
[V_04.24_04-07-06_RM-126_(c)_Nokia.] - NOT TESTED
[V_05.61_14-12-06_RM-126_(c)_Nokia.] - NOT TESTED

6136
[V_03.71.2_12-09-06_RM-199_(c)_Nokia.]

6233
[V_04.54_01-08-06_RM-145_(c)_Nokia]

6234
[V_04.54_01-08-06_RM-123_(c)_Nokia]

6280/6288
[V_06.43_30-03-07_RM-78_(c)_Nokia]

6300
[V_04.71_28-02-07_RM-217_(c)_Nokia.]
[V_04.71_28-02-07_RM-222_(c)_Nokia.]

7373
[V_04.70_24-01-07_RM-209_(c)_Nokia.]

E60
[V_1.0533.47.12_28-03-06_RM-49_(c)_Nokia.]

N91
[V_w33_06w24v4.13-09-06_RM-43_(c)_Nokia.] - MCU: RM43_V2.10.013.core


If you use MTB NK 1.32 already dont need to make any changes, all changes is on server side.

MT box Pro user manual v2.2

BR

[SoftMobile]

09.06.2007 - MT Box Nokia - MTB NK v1.33 available

Whats new:

- 6290 USB flashing fixed
- new phoenix.ini


Please download MTB NK v1.33 from secondary support area.
How to download hint is here

[MicrostarGSM®]

Mtb-nk 1.34 release notes:
Support for new USB device drivers ( local/test mode on 6110 ).
Usb flashing fixed for 5700.

TX2 error handling when flashing BB5 phones with TX2 – recommended way to flash BB5 phones over USB.

Bugffix - BB5 Unlock stability.

[SoftMobile]

27.07.2007 - MT Box Nokia - MTB NK 1.35

Whats new:

Release notes MTB_NK 1.35

* fix on PhoneInfo behaviour.
* Autochange of revision for unlocking BB5 phones. If 4 unsuccessful tryes to unlock a phone, EXE will automatically change revision and retry.
This should solve the problem with 'spansion flash' versions of 6300, 5200, 5300...
* BoxError detection before connecting to server – to avoid situations where poor contact between boxes is detected after calculating on server.


Download:

MTB NK 1.35

[MicrostarGSM®]

MTB_NK 1.36 Release:

fixed flashing for 8600, 7500.
fixed BB5 ASK2RPL read.



After Finish install the setup replace with this phoenix.ini in your MT folder


Download Here (Fixed)Full

Or Download here in 4 part

1st part 3MB

2nd part 3MB

3rd Part 3MB

Last Part 3MB

[SoftMobile]

11.09.2007 - MT Box Nokia v1.37


Whats new:


Bugfixes:

- FBUS flashing for E61i
- USB flashing for N70 and similar
- DCT4 unlocking when simlock is invalid

Changes: changed the way downgradeBB5 is done

Download:

MTB NK 1.37

[SoftMobile]

08.10.2007 - MT Box Nokia - MTB NK 1.38B

Whats new:

Release notes MTB_NK 1.38B

- fixed rpl writing N95
- fixed 6300 flashing
- fixed E61 flashing


Download:

MTB NK 1.38B

Please note:

Before install MTB NK 1.38B you need to have installed MTB NK 1.36 setup

[911GT]

16.10.2007 - MT Box Nokia - MTB NK 1.39a

Whats new:

Release notes MTB_NK 1.39a

- Added flashing if 6500,6500s,5610


Log from software:



Phone is in: Normal mode
Scanning files, please wait...
Done
Selected Highest installed version: 03.80
Model: RM-240 (6500slide )
V 03.80/10-09-07/RM-240 (c) Nokia
Production serial number C3A180175
Product code 0543754
Module code 0203327
Basic production code 0543753
Flash code
Order number
Long production SN 0
MCU SW V 03.80/10-09-07/RM-240/(c) Nokia
HW 1000
PCI
RFIC 17141714
DSP 07w15pb_07w34
LCD SHARP
PPM V 03.80/10-09-07/RM-240/(c) Nokia /I
BT MCM 2222-101B
Retu 15
Tahvo 22
Content Pack Content: i_bg/V 03.80/10-09-07/RM-240/(c) Nokia /
IMEI: 358675077777777
Using Tx2 Data line.
BB5 PM back Phone is in: Normal mode
IMEI: 358675077777777
Backup file: C:\MTBOX_NOKIA\bb5bckup\RM-240_358675077777777.pm
Processing File: rm240__03.80.mcusw
Boot...
\\?\nmwcd#vid_0421&pid_0026&if_oth#6&18f34c72&0&05 #{4f919102-4adf-11d5-882d-00b0d02fe381}
Sending UPDAPP code
Restarting device...
Pooling for device removal...
Device removed
Pooling for ADL device...
\\?\nmwcd#vid_0421&pid_0105&if_oth#6&16f7e07&4&00# {4f919102-4adf-11d5-882d-00b0d02fe381}
Erase[63.50 MB]...
erasing RAP [00000000 to 0001FFFF]
erasing RAP [00040000 to 000BFFFF]
erasing RAP [000C0000 to 0013FFFF]
erasing RAP [013C0000 to 0153FFFF]
erasing RAP [00140000 to 013BFFFF]
erasing RAP [01EC0000 to 03F9FFFF]
erasing RAP [01BC0000 to 01EBFFFF]
erasing RAP [01540000 to 01BBFFFF]
in 165.80s
Flash[19.83 MB]...in 120.31s
* * Processed file in 293.36 seconds
Processing File: rm240__03.80_ism_007.image_i
Boot...
Pooling for ADL device...
\\?\nmwcd#vid_0421&pid_0105&if_oth#6&16f7e07&4&00# {4f919102-4adf-11d5-882d-00b0d02fe381}
Erase[0.00 MB]...
in 0.34s
Flash[11.01 MB]...Content page size is 128K
in 64.42s
* * Processed file in 64.94 seconds
Processing File: rm240__03.80.ppm_i
Boot...
Pooling for ADL device...
\\?\nmwcd#vid_0421&pid_0105&if_oth#6&16f7e07&4&00# {4f919102-4adf-11d5-882d-00b0d02fe381}
Erase[0.00 MB]...
in 0.19s
Flash[5.34 MB]...in 32.84s
* * Processed file in 33.20 seconds
Restarting device...
Pooling for device removal...
Device disconnected.
* * * Phone flashing done in 6:52 minutes
Post Flash serial tunning of phone....
Pooling mode for full factory set...
V 03.80/10-09-07/RM-240 (c) Nokia
IMEI: 358675077777777
Factory Default Settings...OK



Download:

MTB NK 1.39a

Please note:

Before install MTB NK 1.39a you need to have installed MTB NK 1.36 setup