w850 totally dead , now red blink

[renzox]

hi i receive a w850 totally dead, even dont blink red at all, dreambox read info well, then i write a gdfs that download it rom HERE:

User selected phone W850 using Test Point boot mode
Turn OFF the phone.
Connect the phone to DreamBox cable.
Boot Responce = 5A
Processor ID = 99000301FFFFFFFF (DB2020 / DB2030)
NOR Flash ID = 2019
OTP Status = LOCKED
OTP IMEI = 352826-01-347179-4
OTP CID = 49
EROM Color = 4 : RED
EROM CID = 52
Hint : Now the probe might be disconnected
Processing ...
Flash Chip : ST M58PR512J
Flash Chip ID : 88190020
Generating GDFS...
Writing GDFS...
Done.

Then i flash phone with corresponding firmware:


User selected phone W850 using Normal boot mode
1) Turn OFF the phone.
2) Connect the phone to DreamBox cable.
Boot Responce = 5A
Processor ID = 99000301FFFFFFFF (DB2020 / DB2030)
NOR Flash ID = 2019
OTP Status = LOCKED
OTP IMEI = 352826-01-347179-4
OTP CID = 49
EROM Color = 4 : RED
EROM CID = 52
Sending Main Firmware Certificate ... OK.
Writing Main Firmware Blocks Finished.
Sending File System Certificate ... OK.
Writing File System Blocks Finished.

Done.

Now phone red blink, but dont power on at all, what is the correct procedure to repair gdfs?, im already know how to do the tp, but im confused with procedure on software, im new user of dreambox.
thanks in advance, its a great great great tool, good luck dbteam and i hope you can help me with this .

Best regards

[XTS3000]

User selected phone W850 using Test Point boot mode
Turn OFF the phone.
Connect the phone to DreamBox cable.
Boot Responce = 5A
Processor ID = 99000301FFFFFFFF (DB2020 / DB2030)
NOR Flash ID = 2019
OTP Status = LOCKED
OTP IMEI = 352826-01-347179-4
OTP CID = 49
EROM Color = 4 : RED
EROM CID = 52
Hint : Now the probe might be disconnected
Processing ...
Flash Chip : ST M58PR512J
Flash Chip ID : 88190020
Generating GDFS... WHAT GDFS U WRITE?
Writing GDFS...Done.

WHERE IS STAGE 2 PROCEDURE??

YR PROCEDURE MUST BE LIKE THIS.

EX:

- Security Bypass------------------------------------------------------------
User selected phone K800 using Test Point boot mode
Stage 1 started
1) Turn OFF the phone.
2) Connect the phone to DreamBox cable.
Boot Responce = 5A
Processor ID = 99000301FFFFFFFF (DB2020 / DB2030)
NOR Flash ID = 897E
OTP Status = LOCKED
OTP IMEI = 351708-01-NOT SHOW-5
OTP CID = 49
EROM Color = 4 : RED
EROM CID = 52
Hint : Now the probe might be disconnected
Processing ...
Stage 1 completed succesfully
Stage 2 start
Hint : Now the probe might be disconnected
Processing...
Entering Security Bypass mode ... 1) Turn OFF the phone.
2) Connect the phone to DreamBox cable.
Boot Responce = 5A
Processor ID = 99000301FFFFFFFF (DB2020 / DB2030)
Sending Application ...
NOR Flash ID = 897E
OTP Status = LOCKED
OTP IMEI = 351708-01-NOT SHOW-5
OTP CID = 49
EROM Color = 4 : RED
EROM CID = 52
Baseband Chip ID = 9900
Phone ID = 2180DC5D15D09986
Finalizing ...
Stage 2 completed succesfully
Done.
--- Loading GDFS file----------------------------------------------------------
Loading "C:\DVD_COLLECTION\Dream Box\GDFS\K800_gdfs.dmap"...
Done.

--- Write GDFS-----------------------------------------------------------------
User selected phone K800 using Security Bypass boot mode
1) Turn OFF the phone.
2) Connect the phone to DreamBox cable.
Boot Responce = 5A
Processor ID = 99000301FFFFFFFF (DB2020 / DB2030)
Sending Application ...
NOR Flash ID = 897E
OTP Status = LOCKED
OTP IMEI = 351708-01-NOT SHOW-5
OTP CID = 49
EROM Color = 4 : RED
EROM CID = 52
Baseband Chip ID = 9900
Phone ID = 2180DC5D15D09986
Flash Chip : Intel 48F50xxM0Y0
Flash Chip ID : 887E0089
Generating GDFS...
Writing GDFS...
Done.

--- Unlock and Repair----------------------------------------------------------
User selected phone K800 using BypassSecurity boot mode
1) Turn OFF the phone.
2) Connect the phone to DreamBox cable.
Boot Responce = 5A
Processor ID = 99000301FFFFFFFF (DB2020 / DB2030)
Sending Application ...
NOR Flash ID = 897E
OTP Status = LOCKED
OTP IMEI = 351708-01-NOT SHOW-5
OTP CID = 49
EROM Color = 4 : RED
EROM CID = 52
Baseband Chip ID = 9900
Phone ID = 2180DC5D15D09986
Reading GDFS...
Testing security ...
GDFS 0013 Hash Failed
GDFS 0006 Hash Failed
GDFS 000E Hash Failed
GDFS 001C Hash Failed
Unlocking ...
Testing security ...
GDFS 0013 Hash OK
GDFS 0006 Hash OK
GDFS 000E Hash OK
GDFS 001C Hash OK
Generating GDFS...
Writing GDFS...
Done.

IF STILL RED BLINK U MAY CHECK FLEX , UI BOARD AND MAIN BOARD CONNECTOR.


BR,

[renzox]

Do i need flash phone after gdfs repair process?

thanks and best regards

[GSM Dream]

Hello!
Try to repair phone by fullflash.

[renzox]

i achieve to pass the 1st stage with easy tp and normal variant 1 , but second stage always failed i try all variants, im confused with image from support, its not same side on 2nd stage, please please somebody could send me and image of correct place for tp 2nd stage.

here the image the yellow circles where i achieve the 1st stage , and pink circles where i found 2nd stage variants but all of them failed time out detected:



this are my flash chip


2 nd stage variant 1:



2 nd stage variant 2:




it say that 2 variants are on side 3. but i see a lot of differences between the 2.


B.R

[kevin168]

check again for TP conection sir..


br,
kevin168

[renzox]

hi kevin, nice to see you here hehehe, i try the 2 variants accoding to picture and always give that timeout error, please somebody know where is easy tp for 2nd stage or the most effective tp and give me the exact position ????.

B.R

[luzer]

OTP CID = 49

1. Check EROM version ... if 011 just needed an EROM upgrade
2. Check hardware, this particular model has known issues with the flex