j108a unlock done (steps here)

[khem]

how to unlock j108 phone without s1 signature server to be online ?

a:
you need to have setool2 v1.1285 or higher.
you need to have test sim card ( with mnc/mcc 00101 ) in phone.
you need to have memory card in phone.
you need to have valid username/password with at least 3 credits.
phone should be in working state.

procedure is complicated and definitely NOT for beginners.


1.
flash any R7EA011 firmware into phone.
fully power on phone, wait until phone setup will be completed.
this is absolute requirement.

2.
run setool2, check that valid username/password entered, then go to "j108 bypass" tab.
press "upload executor package"

insert test sim card, memory card, connect powered off phone while holding "C" button
after initial procedure, disconnect phone , power on it, wait until setup complete and power off phone again.

3.
press "upload executor extractor"

insert test sim card, memory card, connect powered off phone while holding "C" button
after initial procedure, disconnect phone , power on it, wait until setup complete

set usb connection in phone options to "file transfer" and copy from memory card "other\executor.b" to setool2\backup\%imei% .
setool2 will open that folder for you in minimized state, check taskbar.

( if your system recognize phone as MTP device, you can copy file without setting USB connection to "file transfer" )

power off phone.

4.
press "unlock phone"

insert test sim card, memory card, connect powered off phone while holding "C" button
after initial procedure, disconnect phone , power on it,

set usb connection in phone options to "other OS"
install phone MODEM drivers, if required ( dist\drivers\Modem_Drivers )
wait, until setool2 finish procedure.

after setool2 finish procedure, do not disconnect phone from cable, do not remove phone battery, until phone powers on by itself.
otherwise you need to restore secunits backup and repeat step 3 from beginning.

this is not patch unlock, phone unlock is permanent

3 credits







SIGNED MODE (USING SERVER)
CFG:100000000000
ChipID: F100, EMP protocol: 0401
PHONE DOMAIN: "RETAIL"
PHONE CID: 0081

OTP LOCKED: 1 CID: 81 PAF: 1 IMEI: 01248600681851 CERT: RED
Checking for signature ...
Waiting for calculation process ...
RESPONSE: "SUCCESS" [1038]
EXECUTOR.B NOT FOUND! DO STEP 1 AND STEP 2
Elapsed: 17 secs.
SIGNED MODE (USING SERVER)
CFG:100000000000
ChipID: F100, EMP protocol: 0401
PHONE DOMAIN: "RETAIL"
PHONE CID: 0081

OTP LOCKED: 1 CID: 81 PAF: 1 IMEI: 01248600681851 CERT: RED
LDR: 2010-03-02 18:05 1212-4656_DB3350_CS_LOADER_ACC_SDRAM_R2A096
LDR: 2010-03-02 18:06 1212-4655_DB3350_CS_LOADER_APP_SDRAM_R2A096

Insert Memory CARD into phone
Insert TEST SIM CARD into phone
POWER ON phone

After setup complete, POWER OFF phone
Then proceed to Step 2

Elapsed: 23 secs.
SIGNED MODE (USING SERVER)
CFG:100000000000
ChipID: F100, EMP protocol: 0401
PHONE DOMAIN: "RETAIL"
PHONE CID: 0081

OTP LOCKED: 1 CID: 81 PAF: 1 IMEI: 01248600681851 CERT: RED
LDR: 2010-03-02 18:05 1212-4656_DB3350_CS_LOADER_ACC_SDRAM_R2A096
LDR: 2010-03-02 18:06 1212-4655_DB3350_CS_LOADER_APP_SDRAM_R2A096

Insert Memory CARD into phone
Insert TEST SIM CARD into phone
POWER ON phone

Set "USB MODE" in phone settings to "File transfer"
Copy file from card folder other\executor.b to :
D:\Documents and Settings\kh3m\Desktop\se tool\backup\01248600681851
POWER OFF phone
Then proceed to Step 3

Elapsed: 23 secs.
SIGNED MODE (USING SERVER)
CFG:100000000000
ChipID: F100, EMP protocol: 0401
PHONE DOMAIN: "RETAIL"
PHONE CID: 0081

OTP LOCKED: 1 CID: 81 PAF: 1 IMEI: 01248600681851 CERT: RED
LDR: 2010-03-02 18:05 1212-4656_DB3350_CS_LOADER_ACC_SDRAM_R2A096
LDR: 2010-03-02 18:06 1212-4655_DB3350_CS_LOADER_APP_SDRAM_R2A096
DISCONNECT PHONE NOW
INSERT SIM CARD, FULLY TURN PHONE ON AND ATTACH AGAIN
INSTALL PHONE MODEM DRIVERS IF NEEDED

SEARCHING FOR PHONE, "STOP" TO ABORT
PHONE FOUND AT COM52
PHONE READY TO PROCEED
EXECUTOR STARTED
SEARCHING FOR PHONE, "STOP" TO ABORT
PHONE FOUND AT COM52
PHONE READY TO PROCEED.
GOT SEED: 0038E4A6
ACTIVATION COMPLETED. USERCODE RESET TO "0000"
DO NOT DISCONNECT PHONE FROM CABLE
UNTIL PHONE TURNS ON BY ITSELF
Elapsed: 304 secs.