benq AX72 unlock then dead! - GSM-Forum

frooze_angel · 06-02-2008, 06:30

benq AX72 unlock then dead!

im trying to unlock with joker but now it says HASH is FFFFFFFFFFFF
im trying to flash but still HASH is FFFFFFFFFFFFFFF..

is there any solution to solved this????

**dagos** · 06-02-2008, 16:41

Quote:

Originally Posted by frooze_angel

benq AX72 unlock then dead!

im trying to unlock with joker but now it says HASH is FFFFFFFFFFFF
im trying to flash but still HASH is FFFFFFFFFFFFFFF..

is there any solution to solved this????

...fullflash again using Joker lower version (maximum version 0324) and check only Fullflash and ReCalc Keys (disable bootcore protection).
dagos

SmartFlasher™ · 06-02-2008, 17:41

LOOK!

http://rapidshare.com/files/11958006...nt_01_0003.rar

frooze_angel · 06-03-2008, 04:19

Quote:

Originally Posted by dagos

...fullflash again using Joker lower version (maximum version 0324) and check only Fullflash and ReCalc Keys (disable bootcore protection).
dagos

do u have that flash file?

any posibility to make this error right?

frooze_angel · 06-03-2008, 04:22

Quote:

Originally Posted by dagos

...fullflash again using Joker lower version (maximum version 0324) and check only Fullflash and ReCalc Keys (disable bootcore protection).
dagos

this is the log for what u said bro..

Quote:

FullFlash file info:
FlashID: 0001/2221
SIEMENS AX72 Sw01 lg91
RealLgPack: lg91
Start...
Loading BootsModel(AX75)...
Sending StartBoot Ok.
Sending MainBoot Ok.
Com1 115200 BAUD: Ok.
Warning: HASH data error!
SIEMENS AX72 lg98 Sw01
Soft FlashID: 0001/2221
FlashID: 0001/227E-2221-2201
Flash Size: 16Mb, WriteBuffer: 32 bytes
Region(1): Blocks 128, Size 128Kb
Start EEPROM segments at addres 0x7A0000
FSN: 2EEC09E5 -> PhoneID: E509EC2E
OTP IMEI: 357402002856422
HASH: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
USE SKEY: 45919647
*#0000*12345678# - Network Lock
*#0001*12345678# - Service Provider Lock
*#0002*12345678# - Corporate Code
*#0003*12345678# - Phone Code
*#0004*12345678# - Network Subset Lock
*#0005*12345678# - Only Sim
ClearFlashSeg at 0x000000 does not answer!

frooze_angel · 06-03-2008, 04:39

Service Mode Info:

Quote:

start...
Loading Serviceboot...
Sending Serviceboot Ok.
Bfb Speed 115200 Baud - Ok.
Hwid: 249 (ax72)
Ax72 Lg98 Sw01 30.08.05 13:29:04
Imei: 357402002856422
Displayid: 54, Philips Leadis Lds183
Code(05): Otp Closed
Code(08): Bootkey Is Unknown
Code(0e): Absence Of The Reference Table On Commands
Code(10): Minimal Access To Bfb
Code(15): Complete Condition
Code(1b): Block 76 Is Not Found
Code(1d): Blocks 5121,5122,5123 Are Present
Incorrect Battery Voltage! 65534 Mv!
Securitymode: Customer

Flash Mode Check Only Flash And Recalc Skeys:

Quote:

open File "d:\all About Seimens\ax72\ax72lg98sw01_00-100_ff.bin" For Write In Flash.
Fullflash File Info:
Flashid: 0001/2221
Siemens Ax72 Sw02 Lg1
Reallgpack: Lg1
Start...
Loading Bootsmodel(ax75)...
Sending Startboot Ok.
Sending Mainboot Ok.
Com1 460800 Baud: Ok.
Warning: Hash Data Error!
Siemens Ax72 Lg98 Sw01
Soft Flashid: 0001/2221
Flashid: 0001/227e-2221-2201
Flash Size: 16mb, Writebuffer: 32 Bytes
Region(1): Blocks 128, Size 128kb
Start Eeprom Segments At Addres 0x7a0000
Fsn: 2eec09e5 -> Phoneid: E509ec2e
Otp Imei: 357402002856422
Hash: Ffffffffffffffffffffffffffffffff
Use Skey: 45919647
*#0000*12345678# - Network Lock
*#0001*12345678# - Service Provider Lock
*#0002*12345678# - Corporate Code
*#0003*12345678# - Phone Code
*#0004*12345678# - Network Subset Lock
*#0005*12345678# - Only Sim
Clearflashseg At 0x000000 Does Not Answer!

**dagos** · 06-03-2008, 16:31

Quote:

Originally Posted by frooze_angel

Service Mode Info:

Flash Mode Check Only Flash And Recalc Skeys:

...first, you need to use 115200 baudrate speed. Seccond, you need to fullflash (with lower version of Joker) included the bootcore area (I specify, check only Fullflash and ReCalc keys in the Flash menu - your phone will be flashed and unlocked after flashing process is finished). Only need to be carrefully to have checked option "Use OTP IMEI" in the Skey menu....
If you don't have the lower version of Joker, download from: http://rapidshare.com/files/118041729/Joker_all.rar

Regarding to fullflash, on http://rapidshare.com/files/11981076...F_bootcore.rar you have the fullflash file and components (Bootcore, Language pack, EEprom). You have possibility to flash all (using fullflash file) or one by one in the following order: Bootcore, EEprom, Language pack).
dagos

frooze_angel · 06-05-2008, 02:21

Quote:

...first, you need to use 115200 baudrate speed. Seccond, you need to fullflash (with lower version of Joker) included the bootcore area (I specify, check only Fullflash and ReCalc keys in the Flash menu - your phone will be flashed and unlocked after flashing process is finished). Only need to be carrefully to have checked option "Use OTP IMEI" in the Skey menu....
If you don't have the lower version of Joker, download from: http://rapidshare.com/files/118041729/Joker_all.rar

Regarding to fullflash, on http://rapidshare.com/files/11981076...F_bootcore.rar you have the fullflash file and components (Bootcore, Language pack, EEprom). You have possibility to flash all (using fullflash file) or one by one in the following order: Bootcore, EEprom, Language pack).
dagos

CLEAR explanation...

thanks, ill try this and post result after..

frooze_angel · 06-05-2008, 02:34

Quote:

Originally Posted by dagos

...first, you need to use 115200 baudrate speed. Seccond, you need to fullflash (with lower version of Joker) included the bootcore area (I specify, check only Fullflash and ReCalc keys in the Flash menu - your phone will be flashed and unlocked after flashing process is finished). Only need to be carrefully to have checked option "Use OTP IMEI" in the Skey menu....
If you don't have the lower version of Joker, download from: http://rapidshare.com/files/118041729/Joker_all.rar

Regarding to fullflash, on http://rapidshare.com/files/11981076...F_bootcore.rar you have the fullflash file and components (Bootcore, Language pack, EEprom). You have possibility to flash all (using fullflash file) or one by one in the following order: Bootcore, EEprom, Language pack).
dagos

bro, i did all u said but still error in flash...

Quote:

Fullflash File Info:
Flashid: 0001/2221
Siemens Ax72 Sw02 Lg1
Reallgpack: Lg1
Start...
Loading Bootsmodel(ax75)...
Sending Startboot Ok.
Sending Mainboot Ok.
Com1 460800 Baud: Ok.
Warning: Hash Data Error!
Siemens Ax72 Lg98 Sw01
Soft Flashid: 0001/2221
Flashid: 0001/227e-2221-2201
Flash Size: 16mb, Writebuffer: 32 Bytes
Region(1): Blocks 128, Size 128kb
Start Eeprom Segments At Addres 0x7a0000
Fsn: 2eec09e5 -> Phoneid: E509ec2e
Otp Imei: 357402002856422
Hash: Ffffffffffffffffffffffffffffffff
Use Skey: 45919647
*#0000*12345678# - Network Lock
*#0001*12345678# - Service Provider Lock
*#0002*12345678# - Corporate Code
*#0003*12345678# - Phone Code
*#0004*12345678# - Network Subset Lock
*#0005*12345678# - Only Sim
Clearflashseg At 0x000000 Does Not Answer!

**dagos** · 06-05-2008, 03:22

Quote:

Originally Posted by frooze_angel

bro, i did all u said but still error in flash...

...I don't understanding why appair "Com1 460800 Baud: Ok." in your log file. Which version of Joker you used? Try to flash only bootcore area (and disable bootcore protection)!
dagos

frooze_angel · 06-05-2008, 04:55

Quote:

Originally Posted by dagos

...I don't understanding why appair "Com1 460800 Baud: Ok." in your log file. Which version of Joker you used? Try to flash only bootcore area (and disable bootcore protection)!
dagos

i tried all version form lower to higher..

i put in 11 in baud i dont know why...

always error on hash..

**dagos** · 06-05-2008, 05:35

Quote:

Originally Posted by frooze_angel

i tried all version form lower to higher..

i put in 11 in baud i dont know why...

always error on hash..

...it is wrong, but why?
Ok, to think. Send to me which type of cable to use?
Is need to try step by step..
I thinked to suggest the other "Free" software, but SST (lower version) not recognise AX72 and to use V-Klay you need to be carrefully (exist possibility to kill your phone)

Regarding to the Joker, you need to use versions lower with Joker 0324....
Clear all logs from the Logs folder.
Try to flash only the bootcore area and uncheck all from the "Write Flash"section (ReCalk Keys and Prepared BCore). Post the new log to see.
dagos

06-02-2008, 06:30	#1 (permalink)
frooze_angel No Life Poster Join Date: Jul 2007 Location: earth Posts: 956 Member: 538815 Status: Offline Thanks: 344 Thanked 150 Times in 79 Posts	benq AX72 unlock then dead! benq AX72 unlock then dead! im trying to unlock with joker but now it says HASH is FFFFFFFFFFFF im trying to flash but still HASH is FFFFFFFFFFFFFFF.. is there any solution to solved this????

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Similar Threads
thread	Thread Starter	Forum	Replies	Last Post
Benq Siemens AX72 Unlock using Martech *GSMTube Video*	zaif_zhang@gsm	E-Gold Based Phones	1	03-24-2010 18:35
benq ax72 flash file needed..	frooze_angel	SIEM Service Tools	2	06-04-2008 15:56
benq C72 unlock and dead ???????	Gsm Lab	DreamBox	26	02-05-2007 18:14
siemens-benq ax72 help	samirr	E-Gold Based Phones	4	09-11-2006 01:16
C25 v49 unlock then dead	anhthy	x1x to x45/x50	5	03-29-2005 07:02

06-02-2008, 17:41	#3 (permalink)
SmartFlasher™ Cheater -Don't Deal with him- Join Date: Sep 2005 Location: Singapore Posts: 1,275 Member: 179474 Status: Offline Thanks: 99 Thanked 1,653 Times in 363 Posts	LOOK! http://rapidshare.com/files/11958006...nt_01_0003.rar