WM6.1-Kaiser Radio Only-1.65.17.10

[haam1978]

You probably meant to say: "if you incorrectly flashed jocky's patched radio then yeah, ...". That version was an early test only for guys who already had installed 1.65.17.10. Of course it was patched correctly :D

So now for the morons who can't read and flashed that early test version not intended to be used by you (http://forum.xda-developers.com/showpost.php?p=2143520&postcount=90), e.g. Sebastiii and russianspy4, you can easily flash another radio by following these steps:
1. enter tri color bootloader mode
2. connect with MTTY, press enter, you should see "Cmd>"
3. type "rtask a" (w/o the quotes)
4. type "mw 90d4a8 1 e1a00000" (w/o the quotes and note that you won't see what you typed and the command does not return anything).
5. type "retuoR" (w/o the quotes)
6. close MTTY
7. deactivate "allow usb connections" in activesync
8. disconnect and reconnect USB
9. flash any radio u like (except 1.65.17.10)

can anyone explain what does it mean ( connect with MTTY ) ?

i tried to do this command ( rtask a ) from the command prompt of the windows and this is what i got

http://img364.imageshack.us/img364/1409/25779834ou7.jpg

i installed the patched version of the radio and my phone is not security unlocked
and iam using windows vista
we need someone genius to explain and guid us simply

[ericmcintire]

I'm free :-) Thanks I'll send a donation tonight

[millerhe1]

ok, that's nk.exe's job, it can be edited. if you want help with that, point me to the OS image that you want edited.

yeah the lines of code have been identified in the radio... if you are security unlocked it goes straight to flashing the new radio image, if you aren't, it simply exits the flashing function with an error code.
(they put in a retarded unnecessary check too, but that doesn't change the above summary)

That explains the freeze at 13% on the flash and then restarting again.

[KaiserVideoDriver]

can anyone explain what does it mean ( connect with MTTY ) ?

i tried to do this command ( rtask a ) from the command prompt of the windows and this is what i got

http://img364.imageshack.us/img364/1409/25779834ou7.jpg

i installed the patched version of the radio and my phone is not security unlocked
and iam using windows vista
we need someone genius to explain and guid us simply


dude, seriously :eek::confused::(

for starter, mtty is a program that you run on desktop, that mtty program will connect to kaiser and open up a command prompt, but not quite a DOS prompt, then you type the commands in there

[haam1978]

dude, seriously :eek::confused::(

for starter, mtty is a program that you run on desktop, that mtty program will connect to kaiser and open up a command prompt, but not quite a DOS prompt, then you type the commands in there

ok thanks for explaining .i downloaded it and iam trying it now

[Sebastiii]

Hi, i have made the following, and when i flashed another radio, no change always the damm hell radio lol.

You probably meant to say: "if you incorrectly flashed jocky's patched radio then yeah, ...". That version was an early test only for guys who already had installed 1.65.17.10. Of course it was patched correctly :D

So now for the morons who can't read and flashed that early test version not intended to be used by you (http://forum.xda-developers.com/showpost.php?p=2143520&postcount=90), e.g. Sebastiii and russianspy4, you can easily flash another radio by following these steps:
1. enter tri color bootloader mode
2. connect with MTTY, press enter, you should see "Cmd>"
3. type "rtask a" (w/o the quotes)
4. type "mw 90d4a8 1 e1a00000" (w/o the quotes and note that you won't see what you typed and the command does not return anything).
5. type "retuoR" (w/o the quotes)
6. close MTTY
7. deactivate "allow usb connections" in activesync
8. disconnect and reconnect USB
9. flash any radio u like (except 1.65.17.10)

[ericmcintire]

Hi, i have made the following, and when i flashed another radio, no change always the damm hell radio lol.

hey man... read post 491.. that will fix your radio.

[Sebastiii]

hey man... read post 491.. that will fix your radio.

Yep :) thx i try too, so all done to :

10. close MTTY
11. disconnect and reconnect USB

But for this, the soft freeze even in activesync enable or disable.
12. Start from Step 2 of the Kaiser CID/SIM Unlocker
13. Follow the steps provided by the application


i re try :)

I flash another radio for ex : NIKI_Radio_Only_1.58.21.23 all done.
After the device restart and i use :
12. Start from Step 2 of the Kaiser CID/SIM Unlocker (active sync enable)

I have all working good thx you :)

[OmaniMan]

Hi, i have made the following, and when i flashed another radio, no change always the damm hell radio lol.

and me too ! ..
Still no change ! ..

[haam1978]

i need some help here
i found the program mtty and i tried it but i got this window and i tried to write the commands but it looks like i miss something
http://img48.imageshack.us/img48/6938/11mm8.jpg

can anyone guid me what should i do please?

[JimmyMcGee]

i need some help here
i found the program mtty and i tried it but i got this window and i tried to write the commands but it looks like i miss something
http://img48.imageshack.us/img48/6938/11mm8.jpg

can anyone guid me what should i do please?

Umm Plug in your Phone via USB and Kill the ActiveSync Process?

[haam1978]

i did i put the phone in the bootloader mood and i unistaled active sync totaly
then what ?
typing the commands ?
i did but after that the program doesnt give any reaction and when i exit it asks to save the file

like that
http://img48.imageshack.us/img48/8122/95848223ji8.jpg

here's a screenshoot of my bootloader maybe it explains something
http://img224.imageshack.us/img224/1964/14052008188wj4.jpg

[millerhe1]

Hey Jocky! I believe it worked, although it took a different combination of actions.

Here is what worked for me:
1. deactivate "allow usb connections" in activesync
2. kill wcescomm.exe
3. enter tri color bootloader mode
4. connect to usb
5. connect with MTTY, press enter, you should see "Cmd>"
6. type "rtask a" (w/o the quotes)
7. type "mw 90d4a8 1 e1a00000" (w/o the quotes and note that you won't see what you typed and the command does not return anything).
8. type "mb 90d4a8", if you get the following return in the first line then proceed to step 9:

0090D4A0: - 00 00 A0 E1 94 09 9D E5 | ........

9. type "retuoR" (w/o the quotes)
10. close MTTY
11. disconnect and reconnect USB
12. Start from Step 2 of the Kaiser CID/SIM Unlocker (http://forum.xda-developers.com/showthread.php?t=375583)
13. Follow the steps provided by the application

Remember... this will only work if you have the Jocky Patched 1.65.17.10 installed!

Thanks again Jocky... Will try to install Laurentius' rom to verify =)

Update: Successfully installed Laurentius V4 My Favourite and the radio included in the package... Man this has been quite a learning experience. THANKS GUYS!


On the mw and mb commands I get invalid command any ideas? And the 0090D4A0 give ivalid command as well. also tried moron fix as well.( IGNORE THIS POST FOUND THE REASON !!!!!)

[vanbovene]

i did i put the phone in the bootloader mood and i unistaled active sync totaly
then what ?
typing the commands ?
i did but after that the program doesnt give any reaction and when i exit it asks to save the file

like that
http://img48.imageshack.us/img48/8122/95848223ji8.jpg

here's a screenshoot of my bootloader maybe it explains something
http://img224.imageshack.us/img224/1964/14052008188wj4.jpg

Once you enter MTTY make sure you select USB from the same drop down box that lists COM1, etc. then click OK. It will bring up the empty window. then first hit the "enter" key. That will bring up the "cmd>"

BTW I have the original... guess I'll have to live with it at least for a while longer :(

[haam1978]

this is the problem , when i select the usb it gives an error message like this
http://img153.imageshack.us/img153/791/72193928hz2.jpg

here i tried to choose usb but the only choice that doesn't give the error message was com3 otherwise i see this message
http://img153.imageshack.us/img153/8104/25907527jw9.jpg

and then i get this blank windows and if i hit enter it doesn't make any reaction

http://img153.imageshack.us/img153/192/73248438ru8.jpg

iam sure i miss something but i don't know what is it

[conwick3]

From a laymans perspective this is all very confusing. Unfortunately this layman knows enough to stuff up his kaiser... but not enough to follow the instructions posted on here to get rid of the radio from hell.

[OmaniMan]

Finally ..
I have upgraded the Radio to the Latest version :p by following the post 491.

Note :
The best way to follow these steps is to use Windows XP ..
Not Vista

Because MTTY is not working fine with Vista ..

[haam1978]

Finally ..
I have upgraded the Radio to the Latest version :p by following the post 491.

Note :
The best way to follow these steps is to use Windows XP ..
Not Vista

Because MTTY is not working fine with Vista ..

ok that is very important and it explains why i couldn't get it works
thank you and congratulations

[DaveShaw]

Finally ..
I have upgraded the Radio to the Latest version :p by following the post 491.

Note :
The best way to follow these steps is to use Windows XP ..
Not Vista

Because MTTY is not working fine with Vista ..

Not sure if this will help or not, not been a vista person myself (thank god) :D
http://forum.xda-developers.com/showthread.php?t=291588

Ta
Dave

[sakajati]

... as for a *working* patched radio... we've already got that done, cmonex will release shortly... naturally it's only useful if you haven't already ****ed yourself but want to try this new radio.

That's me, never had the chance to **** myself.

... still too lazy to upload the proper patch, but just take the radio only NBH (this ATT 1.65.17 crap) in a hexeditor, go to 0x1f8bc1, you should see the bytes DD E5 there, change them to A0 E3, save, flash. this should then allow you to reflash even if not security unlocked prior to flashing it.
makes the radio bootloader (OEMSBL, not AMSS) think it is sec unlocked by only changing 2 bytes ;)

disclaimer: do that patch properly or you're ****ed.

but of course if you had already flashed unpatched 1.65.17 then no good

Yup I have patched this crap following your instruction, and I can confirm that it really works! I have tested my self by reflashing other radios. Great job guys!!:D

Here's the proper patch of radio 1.65.17.10: http://www.sendspace.com/file/90a9ms

[Mare of Earth]

*looks at thread wistfully, wishing she had installed the patched version instead of the whole ROM*
No MTTY commands to change the unpatched radio into the patched radioyet, ne?
I am just glad that all of ya'll working on this are smarter than me. :)

Mare

[levinchiu]

mtty input
-----------------------------------------
rtask a

help
------------------------

output

------------------------
Cmd>rtask a
POWER OFF PMIC VREG_USB : SUCCESS!
C VREG_USB : SUCCESS!
Invalid command : help
---------------------


may update other radio??

but i can not update other radio!!

[levinchiu]

And i have upgraded 1.65.17.10-patched

mtty input : mw 90d4a8 1 e1a00000

---------------------
mtty output : Invalid command : mw


here's a screenshoot of my bootloader maybe it explains something

KAIS1*0 MFG
SPL-1.0.OliPof
CPLD-8

[conwick3]

Instructions only apply to those who installed my patched version (http://forum.xda-developers.com/showpost.php?p=2143520&postcount=90) and who didn't have 1.65.17.10 installed before they flashed my patched version. You obviously don't belong to that group.
:(
what group do we belong to? the numb skulls united group? the group that can have any radio that we want so long as it is 1.65.17.10? :(

[conwick3]

Thankfully I haven't bricked the thing but I'm beginning to feel like a bit of a prick...:( Does that count?

[cmonex]

Finally ..
I have upgraded the Radio to the Latest version :p by following the post 491.

Note :
The best way to follow these steps is to use Windows XP ..
Not Vista

Because MTTY is not working fine with Vista ..


search for mtty0513_test.exe in my posts, i posted it a few weeks ago, and it is compatible with vista.

[cmonex]

You probably meant to say: "if you incorrectly flashed jocky's patched radio then yeah, ...". That version was an early test only for guys who already had installed 1.65.17.10. Of course it was patched correctly :D

9. flash any radio u like (except 1.65.17.10)

ahh, that explains. i was really confused as to why this would have been posted. thanks :)
I see mw trick works though ;)


as for 9), lol, sure that can be flashed if they use the patch i posted here

[cmonex]

That's me, never had the chance to **** myself.



Yup I have patched this crap following your instruction, and I can confirm that it really works! I have tested my self by reflashing other radios. Great job guys!!:D

Here's the proper patch of radio 1.65.17.10: http://www.sendspace.com/file/90a9ms


yeah sure it works :) thanks for testing & uploading it.

[lordsoft]

I can't run the program.

The application failed to initialize properly (0xc0000135). Click on OK to terminate the application.

Windows XP - SP3

Any ideas?

[ericmcintire]

FYI I have vista and I got it to work just fine... make SURE before you plug your usb in to your phone you go to "Start"' and type "services" right click and disable BOTH windows mobile services. Then plug your phone back into your computer. this will allow you to run MTTY on it.

[SoberGuy]

I can't run the program.

The application failed to initialize properly (0xc0000135). Click on OK to terminate the application.

Windows XP - SP3

Any ideas?
That error, and its solution, is somewhere either in the 53 previous pages of this thread, or in another thread in this very forum. Copy 0xc0000135 and paste it in the nifty little search box, along with something like mtty. I'd be shocked if you can't find a solution.

[conwick3]

*looks at thread wistfully, wishing she had installed the patched version instead of the whole ROM*
No MTTY commands to change the unpatched radio into the patched radioyet, ne?
I am just glad that all of ya'll working on this are smarter than me. :)

MareAgreed, +1:D

[haam1978]

FYI I have vista and I got it to work just fine... make SURE before you plug your usb in to your phone you go to "Start"' and type "services" right click and disable BOTH windows mobile services. Then plug your phone back into your computer. this will allow you to run MTTY on it.

:):):)
perfect i greet you a great greeting
you are great it's now working with me on vista
here's my screenshoot


http://img217.imageshack.us/img217/1297/33736614zb7.jpg

what else should we do ?
can anyone tell us what's the next step ?

[lordsoft]

That error, and its solution, is somewhere either in the 53 previous pages of this thread, or in another thread in this very forum. Copy 0xc0000135 and paste it in the nifty little search box, along with something like mtty. I'd be shocked if you can't find a solution.

OK - that solved.
I have
rtask a
help
Invalid command: help
For a help screen, ask JockyW :D or h

but I can't flash patched radio step 2

[lordsoft]

For those who are *not* security unlocked *and* installed 1.65.17.10, try to flash the patched 1.65.17.10 here:
http://rapidshare.com/files/109884045/Kaiser_Radio-1.65.17.10-patched.zip.html

Enter bootloader mode and enter "rtask a", then type "help" (this is not echoed to screen) and let me know if you see this:
Invalid command : help
For a help screen, ask JockyW :D or h

If this is confirmed I can easily patch it again and code a security unlocker to jailbreak your kaiser :)

Yes, PLEASE jockyw2001.
I flash patched radio (step 2), but step 3 say that I haven't patched radio.

[qqrydza]

I flashed Kaiser_Radio-1.65.17.10-patched and I have problem:

Cmd>rtask a
POWER OFF PMIC VREG_USB : SUCCESS!
C VREG_USB : SUCCESS!
Invalid command : help


what do I have to make?
ask you about answer



(Sorry for my english...this is translator)

[RoozbehDream]

i saw a rom in HTC usa for tilt but i can'f find anything about the radio 1..62.502.0. maybe i'm not good at searching but is ther apossibility that you can change the radio from hell to this one?
http://www.htc.com/us/FAQ_Detail.aspx?p_id=67&act=sd
http://member.america.htc.com/download/Software/RUU_Kaiser_CINGULAR_WWE_1.62.502.0_radio_sign_22.4 5.88.07_1.27.14.09R2_Ship.exe

[loser]

I have tried the steps at least 10 times without any success. Before everyone jumps up on me for being n00b- I have done this several times before for my Universal/Hermes and now Kaiser. But does not seem to work even after using mtty....:( I get all the messages as expected, have the jocky/cmonex patched 1.65.17.10 but still cannot change the radio. Note that I am not security unlocked. Am I missing something in the mtty patching steps? are the commnads case sensitive? do we type in exactly as shown? also the steps does not indicate whether to restore activesync connections before flashing the desired radio...So right now I am still with 1.65.17.10. Any help will be appreciated...

[ATnTdude]

I have tried the steps at least 10 times without any success. Before everyone jumps up on me for being n00b- I have done this several times before for my Universal/Hermes and now Kaiser. But does not seem to work even after using mtty....:( I get all the messages as expected, have the jocky/cmonex patched 1.65.17.10 but still cannot change the radio. Note that I am not security unlocked. Am I missing something in the mtty patching steps? are the commnads case sensitive? do we type in exactly as shown? also the steps does not indicate whether to restore activesync connections before flashing the desired radio...So right now I am still with 1.65.17.10. Any help will be appreciated...

Type exactly as in the instructions. Make sure to include the spaces. I made mine case sensitive, but there was only 1 upper case letter so that may have been a typo. I was able to flash off to the radio that security unlocks me, so I took NO chances. :D

[loser]

My mtty operation goes fine with the output response message as expected:

0090D4A0: - 00 00 A0 E1 94 09 9D E5 |


However the subsequent operation of

9.type "retuoR" (w/o the quotes)
10. close MTTY
11. disconnect and reconnect USB
12. Start from Step 2 of the Kaiser CID/SIM Unlocker
13. Follow the steps provided by the application

That is the step 12 is my question-I guess we have to enable activesync for olipro's Kaiser Unlocker to run. This is not mentioned here.
I could run the Unloacker without any issue but cannot change the radio- tried with 1.64/1.65.29/1.27- nothing seems to work....

[MegaHz]

hi,
i run the procedure and worked just fine, i was able to change my rom.

Thanks a lot guys.

[loser]

Another quick question do I have to upgrade with a Radio included ROM package to confirm? or only stripped radio will work fine? I have been trying stripped radio and its not working....What are the ROM+Radio packages are known to work after the unlocking?

[pepela]

i also run the procedure and worked just fine, i was able to change my rom to.

can i "SECURITY UNLOCK" my phone now?

greetz, pepela

[haam1978]

we need jockyw2001 to be here and answer those quistions

[russianspy4]

My mtty operation goes fine with the output response message as expected:

0090D4A0: - 00 00 A0 E1 94 09 9D E5 |


However the subsequent operation of

9.type "retuoR" (w/o the quotes)
10. close MTTY
11. disconnect and reconnect USB
12. Start from Step 2 of the Kaiser CID/SIM Unlocker
13. Follow the steps provided by the application

That is the step 12 is my question-I guess we have to enable activesync for olipro's Kaiser Unlocker to run. This is not mentioned here.
I could run the Unloacker without any issue but cannot change the radio- tried with 1.64/1.65.29/1.27- nothing seems to work....

Do not enable active sync... it will connect! You will however need active sync after the new radio is installed so that you can security unlock.

Follow the steps, make sure you type everything correctly, with case sensitivity and you should be fine. XP seems to work better for people so try another computer if all else fails.

[russianspy4]

Another quick question do I have to upgrade with a Radio included ROM package to confirm? or only stripped radio will work fine? I have been trying stripped radio and its not working....What are the ROM+Radio packages are known to work after the unlocking?

You can use either a radio or ROM+Radio package... what worked for me was trying to install the radio needed by the CID Unlocker as soon as I could. If you follow the steps correctly you will be able to install anything you wish.

Make sure to Security Unlock after you get rid of the radio from hell so that you dont get stuck in the same situation again!

[loser]

Thanks russianspy4 - I am at work will try this once I am back home.

I have tried this with activesync enabled and rebooting the phone after getting the
0090D4A0: - 00 00 A0 E1 94 09 9D E5 | message . It did not work for me.

Will try without enabling activesync and then running olipro's unlocker step 2. Do we need to run Step 3 also in olipro's tool?

[russianspy4]

Thanks russianspy4 - I am at work will try this once I am back home.

I have tried this with activesync enabled and rebooting the phone after getting the
0090D4A0: - 00 00 A0 E1 94 09 9D E5 | message . It did not work for me.

Will try without enabling activesync and then running olipro's unlocker step 2. Do we need to run Step 3 also in olipro's tool?

After getting the correct 0090D4A0: - 00 00 A0 E1 94 09 9D E5 | message and following through with the other commands DO NOT RESET THE PHONE OR ACTIVATE ACTIVE SYNC, I believe the changes you make in MTTY get cleared if you reboot. Just follow the steps, close MTTY, unplug then replug the usb cable and flash. After you get another radio in you can do anything you want... I would suggest following through and unlocking.

[lordsoft]

OK - it work :)))))

Great job!!!!

Now my problem was that I copy from browser and paste command in mtty.
Just type and everything is work.

Cheers.
:D:D

[JimmyMcGee]

Another quick question do I have to upgrade with a Radio included ROM package to confirm? or only stripped radio will work fine? I have been trying stripped radio and its not working....What are the ROM+Radio packages are known to work after the unlocking?

The 1.65.xx.xx Series of Radios need ROM explicitly made for them. They don't work like the other Radios out there. Most chef will tell you if their version works with the 1.65.xx.xx or not.

[GSLEON3]

i saw a rom in HTC usa for tilt but i can'f find anything about the radio 1..62.502.0. maybe i'm not good at searching but is ther apossibility that you can change the radio from hell to this one?
http://www.htc.com/us/FAQ_Detail.aspx?p_id=67&act=sd
http://member.america.htc.com/download/Software/RUU_Kaiser_CINGULAR_WWE_1.62.502.0_radio_sign_22.4 5.88.07_1.27.14.09R2_Ship.exe

Dude, That's a rom version, 1.62.502.0, not radio. & it's WM6.0 at that, so it's a 1.27.xx.xx radio version.

Well, I'm back to my original thought, that we'll have to "Brick" the device to get this radio off. Need to invoke an error that'll throw us into Dload.

Unless someone can help me unlock the NVM structure folder. If I can get the NVM unlocked, I can patch together a back up that can be restored via QPST possibly, a lot of work though as it'll need to be individualized to each user. So far I can get a complete back up, but I cannot get it to write altered data back to the locked nvm.

ANy clue on unlocking nvm???

[RoozbehDream]

Dude, That's a rom version, 1.62.502.0, not radio. & it's WM6.0 at that, so it's a 1.27.xx.xx radio version.

Well, I'm back to my original thought, that we'll have to "Brick" the device to get this radio off. Need to invoke an error that'll throw us into Dload.

Unless someone can help me unlock the NVM structure folder. If I can get the NVM unlocked, I can patch together a back up that can be restored via QPST possibly, a lot of work though as it'll need to be individualized to each user. So far I can get a complete back up, but I cannot get it to write altered data back to the locked nvm.

ANy clue on unlocking nvm???

Oops!!!! Sorry. my bad!!! i wish you luck man. this F**king Radio is killing me!

[RoozbehDream]

Well, I'm back to my original thought, that we'll have to "Brick" the device to get this radio off. Need to invoke an error that'll throw us into Dload.

Unless someone can help me unlock the NVM structure folder. If I can get the NVM unlocked, I can patch together a back up that can be restored via QPST possibly, a lot of work though as it'll need to be individualized to each user. So far I can get a complete back up, but I cannot get it to write altered data back to the locked nvm.

ANy clue on unlocking nvm???
hi. thanks for your effort, i want to ask you somthing. this may seem stupid but , how much chance do we have to get rid of this radio?

[saman2184]

:confused:Hey Jocky! I believe it worked, although it took a different combination of actions.

Here is what worked for me:
1. deactivate "allow usb connections" in activesync
2. kill wcescomm.exe
3. enter tri color bootloader mode
4. connect to usb
5. connect with MTTY, press enter, you should see "Cmd>"
6. type "rtask a" (w/o the quotes)
7. type "mw 90d4a8 1 e1a00000" (w/o the quotes and note that you won't see what you typed and the command does not return anything).
8. type "mb 90d4a8", if you get the following return in the first line then proceed to step 9:

0090D4A0: - 00 00 A0 E1 94 09 9D E5 | ........

9. type "retuoR" (w/o the quotes)
10. close MTTY
11. disconnect and reconnect USB
12. Start from Step 2 of the Kaiser CID/SIM Unlocker (http://forum.xda-developers.com/showthread.php?t=375583)
13. Follow the steps provided by the application

Remember... this will only work if you have the Jocky Patched 1.65.17.10 installed!

Thanks again Jocky... Will try to install Laurentius' rom to verify =)

Update: Successfully installed Laurentius V4 My Favourite and the radio included in the package... Man this has been quite a learning experience. THANKS GUYS!

pls help me
after type rtask and ,,, what i do?
(w/o the quotes)?
i don't work after type ...pls help me:confused:

[wilsonkaliyati]

:):):)
perfect i greet you a great greeting
you are great it's now working with me on vista
here's my screenshoot


http://img217.imageshack.us/img217/1297/33736614zb7.jpg

what else should we do ?
can anyone tell us what's the next step ?

i had the same problem you had in the very beggining. can you tell me step by step how you fixed your problem please.

[loser]

Russianspy et al - thank you so much for your help. I got my radio unlocked form the "radio from hell"- first thing I did after that is to get it security unlocked and then moved to radio 1.65.20.29 radio without hitch. It worked like a charm. Thanks once again everyone.

[haam1978]

Im having the same exact problem you did in the beginning. can you please help me step by step how you fixed you problem

with pleasure

you need to use this version i attached for you
and go to start menue and type services and then kill the two processes for windows mobile
and when you open the program make sure to choose usb port
try it out and i hope you sucsses

[jkim0121]

Hey, Bro.
Could you write down what you did step by step to get out of the hell? If it is the right way, Donations will fall on top of your head. thanks,


Russianspy et al - thank you so much for your help. I got my radio unlocked form the "radio from hell"- first thing I did after that is to get it security unlocked and then moved to radio 1.65.20.29 radio without hitch. It worked like a charm. Thanks once again everyone.

[russianspy4]

Hey, Bro.
Could you write down what you did step by step to get out of the hell? If it is the right way, Donations will fall on top of your head. thanks,

Read post 491 of this thread and the pages before and after it. It should provide you with enough information to get rid of the hell radio if you installed Jocky's patched version.

[jkim0121]

I would like to say jocky's patch is not the one called "Radio from the hell." It's a modified version from the original sticky radio. When we say "Radio from the hell," it is the original ****ing AT&T radio which cannot be removed without prior security unlock.

Read post 491 of this thread and the pages before and after it. It should provide you with enough information to get rid of the hell radio if you installed Jocky's patched version.

[SH4YD33]

Russianspy et al - thank you so much for your help. I got my radio unlocked form the "radio from hell"- first thing I did after that is to get it security unlocked and then moved to radio 1.65.20.29 radio without hitch. It worked like a charm. Thanks once again everyone.

I think he flashed the patched radio.

[russianspy4]

I would like to say jocky's patch is not the one called "Radio from the hell." It's a modified version from the original sticky radio. When we say "Radio from the hell," it is the original ****ing AT&T radio which cannot be removed without prior security unlock.

Simmer down, no need to get upset. Whether its the original "Radio from Hell" or a modified version, it is still a bitch to remove causing a lot of us noobs quite a "Hellish" time.

If you don't like my post then provide a little constructive criticism... and possibly something to help the person I was replying to.

Edit: Btw my posts have only applied to the patched radio, I tried to make it clear but as you all know something always gets lost along the way.

[russianspy4]

I think he flashed the patched radio.

Yeah, it seems so... I think this thread has gotten a little confusing since both the original and the patched radio appeared here.

[jkim0121]

No.No.No.
Your post is very informative. I like it.
I am very pissed off because my tilt doesn't release the radio from the ****ing hell. Except this, everything is OK. Phone works fine. Camera works fine. I am not pointing somebody, except the moderator of the radio.


Simmer down, no need to get upset. Whether its the original "Radio from Hell" or a modified version, it is still a bitch to remove causing a lot of us noobs quite a "Hellish" time.

If you don't like my post then provide a little constructive criticism... and possibly something to help the person I was replying to.

Edit: Btw my posts have only applied to the patched radio, I tried to make it clear but as you all know something always gets lost along the way.

[conwick3]

So what's the status regarding a solution to removing this bitch of a radio in any event???!!! Nice of at&t to release such a horrid thing...:mad: (even it wasn't intentional...)

[GSLEON3]

So what's the status regarding a solution to removing this bitch of a radio in any event???!!! Nice of at&t to release such a horrid thing...:mad: (even it wasn't intentional...)

The status is I'm looking at one approach, but am stuck because I cannot seem to get the nvm unlocked.

Jocky is also currently looking for a way to disable the KB or LCD causing the device to initiate safety procedures & default into DLOAD. Currently he's stuck too.

The only thing stopping us from changing it is not being able to get into DLOAD. This radio uinlike ALL others defaults to DIAG instead of DLAOD with the GO2AMSS command.

[Mare of Earth]

Would taking it apart and putting it back together with the LCD unplugged or similar work?

[conwick3]

The status is I'm looking at one approach, but am stuck because I cannot seem to get the nvm unlocked.

Jocky is also currently looking for a way to disable the KB or LCD causing the device to initiate safety procedures & default into DLOAD. Currently he's stuck too.

The only thing stopping us from changing it is not being able to get into DLOAD. This radio uinlike ALL others defaults to DIAG instead of DLAOD with the GO2AMSS command.So you haven't given up?:D Sweet... Your efforts are appreciated...

[cotu1961]

The status is I'm looking at one approach, but am stuck because I cannot seem to get the nvm unlocked.

Jocky is also currently looking for a way to disable the KB or LCD causing the device to initiate safety procedures & default into DLOAD. Currently he's stuck too.

The only thing stopping us from changing it is not being able to get into DLOAD. This radio uinlike ALL others defaults to DIAG instead of DLAOD with the GO2AMSS command.

...about 17 pages ago, it is not possible to "unlock" a hardware lock unless you JTAG the thing. You could take the unit apart and pull out the keyboard flex tape; that may cause the MPU to barf and go into fault mode, but you cannot get the NVRAM (nvm in your twisted world) "unlocked". Period.

I am still working on a fix (yup, I got the short end of the stick, too) but thus far I haven't found a way to do it via USB. My QXDM license is expired and QPST is pretty useless for the purpose, so I can't get out of this paper bag and it pisses me off.

But what pisses me off even more is that jackoff2001 and gsleon3 are still not owning up to the fact they're just stroking. Instead, jackoff actually calls people morons for flashing his abortion of a patch as if it were their fault. Grow some hair on your pelotas, dude! Only Olipro and cmonex are actually being upfront about all this.

I will entertain any constructive suggestion, irrespective of the consequences. If anyone has a block diagram or schematics for the unit, or the datasheet for the 72XX please let me know. At this point I'm willing to fry this turd.

[scotchua]

...about 17 pages ago, it is not possible to "unlock" a hardware lock unless you JTAG the thing. You could take the unit apart and pull out the keyboard flex tape; that may cause the MPU to barf and go into fault mode, but you cannot get the NVRAM (nvm in your twisted world) "unlocked". Period.

I am still working on a fix (yup, I got the short end of the stick, too) but thus far I haven't found a way to do it via USB. My QXDM license is expired and QPST is pretty useless for the purpose, so I can't get out of this paper bag and it pisses me off.

But what pisses me off even more is that jackoff2001 and gsleon3 are still not owning up to the fact they're just stroking. Instead, jackoff actually calls people morons for flashing his abortion of a patch as if it were their fault. Grow some hair on your pelotas, dude! Only Olipro and cmonex are actually being upfront about all this.

I will entertain any constructive suggestion, irrespective of the consequences. If anyone has a block diagram or schematics for the unit, or the datasheet for the 72XX please let me know. At this point I'm willing to fry this turd.

Feel better now that you got that off your chest?

[cotu1961]

Feel better now that you got that off your chest?

...thank you.

[jockyw2001]

Instead, jackoff actually calls people morons for flashing his abortion of a patch as if it were their fault. Grow some hair on your pelotas, dude!
Seems you can't read either :D

[jockyw2001]

BREAKING NEWS !!!

I am nearly 100% sure I found an easy solution to jailbreak 1.65.17.10 :)
Of course it needs to be tested. I have sent a PM to AllTheWay to test this carefully with me.

[RoozbehDream]

BREAKING NEWS !!!

I am nearly 100% sure I found an easy solution to jailbreak 1.65.17.10 :)
Of course it needs to be tested. I have sent a PM to AllTheWay to test this carefully with me.
keep going man! keep going!i'm not a religious man but belive me .. i'm gonna pray! unfortunatly i can't donate in from iran!!!:(

[Valvarin]

I am still working on a fix (yup, I got the short end of the stick, too) but thus far I haven't found a way to do it via USB. My QXDM license is expired and QPST is pretty useless for the purpose, so I can't get out of this paper bag and it pisses me off.

hmm. u only have to patch the license.txt file in the QXDM\bin folder:cool:

[cotu1961]

hmm. u only have to patch the license.txt file in the QXDM\bin folder:cool:

...it's a shared license and I don't own it :( Thanks for the comeback, though.

(edit)
Can you get me a local file, or do you know where I can get it? Thanks.

[cotu1961]

Seems you can't read either :D

...but I can read...

#1 (before it was edited)
Originally Posted by SH4YD33
***WARNING***
Originally, Users have discovered that we cannot downgrade the radio after flashing. There is a patched version below that will allow you to flash other radios after flashing this radio.

!!THIS RADIO HAS BEEN PATCHED AND IS WORKING FINE. THANKS TO (jockyw2001)!!
Download HERE:
http://rapidshare.com/files/11211169...10-patched.zip

*** crickets ***

#173
Originally Posted by jockyw2001
I'm working on a general purpose unbricker and security unlocker. Eta hopefully within a week or two.

#212
Originally Posted by jockyw2001
I can prolly fix all of them incl the ones locked in 1.65.17.10

#408
Originally Posted by Olipro
me and cmonex just poked at the patched radio... and frankly it's a total ****up, I'm not entirely sure how this was expected to work at all in the first place... it is EXTREMELY trivial to patch this radio to allow flashing again.

#409
Originally Posted by cmonex
as for the jocky patched radio of this ATT crap, it is no good because it only patches the commands not the real secu flag query function.
god, why was this patched radio posted at all i dont know.

#477
Originally Posted by jockyw2001
Quote:

Originally Posted by cmonex
if you flashed jocky's incorrectly patched radio then yeah, ...

You probably meant to say: "if you incorrectly flashed jocky's patched radio then yeah, ...". That version was an early test only for guys who already had installed 1.65.17.10. Of course it was patched correctly

So now for the morons who can't read and flashed that early test version not intended to be used by you, e.g. Sebastiii and russianspy4, you can easily flash another radio by following these steps

(There were one or two more trivial ones, but I snipped them in the interest of conservation.)

I've been following the forums for quite some time and you do good work, but you screwed this one up. Have the balls to own up to it instead of calling people morons, dude.

[conwick3]

BREAKING NEWS !!!

I am nearly 100% sure I found an easy solution to jailbreak 1.65.17.10 :)
Of course it needs to be tested. I have sent a PM to AllTheWay to test this carefully with me.Good man!!!!:D

[cotu1961]

BREAKING NEWS !!!

I am nearly 100% sure I found an easy solution to jailbreak 1.65.17.10 :)
Of course it needs to be tested. I have sent a PM to AllTheWay to test this carefully with me.

...I retract my previous rant...:o

[burn1out]

BREAKING NEWS !!!

I am nearly 100% sure I found an easy solution to jailbreak 1.65.17.10 :)
Of course it needs to be tested. I have sent a PM to AllTheWay to test this carefully with me.

When you or whoever does, another paypal donation standing by.

If no fix, I'm buying another one....

[scotchua]

BREAKING NEWS !!!

I am nearly 100% sure I found an easy solution to jailbreak 1.65.17.10 :)
Of course it needs to be tested. I have sent a PM to AllTheWay to test this carefully with me.

Looks like we might have a winner? This is shaping up to be a very good day.

[ugoff]

Dammit, I just bought another one last night!

[shogunmark]

BREAKING NEWS !!!

I am nearly 100% sure I found an easy solution to jailbreak 1.65.17.10 :)
Of course it needs to be tested. I have sent a PM to AllTheWay to test this carefully with me.

i have a spare to brick :D be more than happy to give it a shot!

[AllTheWay]

...about 17 pages ago, it is not possible to "unlock" a hardware lock unless you JTAG the thing. You could take the unit apart and pull out the keyboard flex tape; that may cause the MPU to barf and go into fault mode, but you cannot get the NVRAM (nvm in your twisted world) "unlocked". Period.

I am still working on a fix (yup, I got the short end of the stick, too) but thus far I haven't found a way to do it via USB. My QXDM license is expired and QPST is pretty useless for the purpose, so I can't get out of this paper bag and it pisses me off.

But what pisses me off even more is that jackoff2001 and gsleon3 are still not owning up to the fact they're just stroking. Instead, jackoff actually calls people morons for flashing his abortion of a patch as if it were their fault. Grow some hair on your pelotas, dude! Only Olipro and cmonex are actually being upfront about all this.

I will entertain any constructive suggestion, irrespective of the consequences. If anyone has a block diagram or schematics for the unit, or the datasheet for the 72XX please let me know. At this point I'm willing to fry this turd.

Wow attacking two users who have done so much for the entire community. No doubt you have some knowledge about mobile phones but coming on here and insulting other users for trying to help people is just plain rude. If I were I would find the newest pool, tie a 200 pound weight around your feet because no doubt you are over 300 pounds, and see how long you can hold your breathe for.

BREAKING NEWS !!!

I am nearly 100% sure I found an easy solution to jailbreak 1.65.17.10 :)
Of course it needs to be tested. I have sent a PM to AllTheWay to test this carefully with me.

Let me know when you want me to test out your theory.

MSN: alltheway7@hotmail.com

[austinsnyc]

Any progress or anything anyone here can do I am sure there are more than 1 or 2 people that wouldn't mind helping you test your idea! Please keep us up to date! Many people have this page on Auto-refresh! :) Great Work!

[cotu1961]

Wow attacking two users who have done so much for the entire community. No doubt you have some knowledge about mobile phones but coming on here and insulting other users for trying to help people is just plain rude. If I were I would find the newest pool, tie a 200 pound weight around your feet because no doubt you are over 300 pounds, and see how long you can hold your breathe for.

...former swimmer and water polo player. Can hold my breathe (sic) for about two and a half minutes, since you asked.

If you had been reading the thread you might have learned a thing or two, especially about a certain "patch" that started this mess and someone's kind words to me in post #385. But all this was behind us already; where have you been?

I have a brick and QPST. If anyone want to try something, I'm all ears.

[scotchua]

...former swimmer and water polo player. Can hold my breathe (sic) for about two and a half minutes, since you asked.

If you had been reading the thread you might have learned a thing or two, especially about a certain "patch" that started this mess and someone's kind words to me in post #385. But all this was behind us already; where have you been?

I have a brick and QPST. If anyone want to try something, I'm all ears.

I think his point is that in the grand scheme of things here you have contributed very little, and really went after a couple of people who have contributed a lot. In circumstances like that it seems like one of those situations where if you didn't have anything useful to say you probably should have just kept your mouth shut, especially since not more than 1 day after you went on your little tantrum one of those very people you took the liberty of putting down so aggressively may have found a solution to a problem that you obviously were unable to fix yourself. I'm sure i'm not alone in the opinion that the little rant was the kind of thing you point to and say "this is a great example of why i wise man once said 'better to be silent and be thought a fool than to open your mouth and remove all doubt." Not that i'm implying that you are an idiot as your technical knowledge obviously exceeds my own; however, i am pointing out that i believe that you acted as such, and that perhaps you should have show the level of passion and sincerity in withdrawing your remarks as you did when you made them.

[cotu1961]

I think... {snip, the rest is superfluous}

... you are well-intended but a bit misled. If you want to advocate for someone get your facts straight: your hero Mr. jockyw2001 replied to my first post with the words "bullshit mate". No explanation, just "bullshit". So far and in spite of several such dramatic announcements, he has provided no solution to the problem he helped create by posting an incorrectly patched radio; instead he called people morons for believing that he knew what he was doing and flashing his abortion (as I did). I for one haven't claimed any particular expertise but openly shared the little I know without condescendence towards "noobs" or anyone else. My signature is not insulting to anyone here, my intentions of helping by any means clearly stated. Please read post #577 as it may explain a few things.

Personally I consider this matter closed and I will not respond to any more posts of this ilk as they are a nuisance to both the group and myself. When a solution is finally found (by jocky or anyone else) we will see who had the right idea.

My offer still stands: brick and QPST available. Any takers?

[JimmyMcGee]

I believe DMX said it best in his hit song, "Up in Here."
~"Y'all gonna make me act a fool, up in here, up in here. Y'all gonna make me lose my cool, up in here, up in here."

Quit your bickering. We are all here for the same reason. Please keep your personally attacks on each other out of this thread. Thank You.

Anyhow, Anyone have an update? ATW?

[scotchua]

I believe DMX said it best in his hit song, "Up in Here."
~"Y'all gonna make me act a fool, up in here, up in here. Y'all gonna make me lose my cool, up in here, up in here."

Quit your bickering. We are all here for the same reason. Please keep your personally attacks on each other out of this thread. Thank You.

Anyhow, Anyone have an update? ATW?

Well i had a great many things left to say, but you're right and i'll take your advice. The suspense is killing me a little...oh to be free to...well flash whatever radio i want...

[conwick3]

In any event every piece of software posted on here comes with a warning to the end user exempting the writer from any responsibility, end of story...

If you're inclined to ignore this warning then you should live with the consequences.

As far as I can ascertain Jocky's 1.65.17.10 radio with his patch is not an issue.

It's the original at&t rom with radio 1.65.17.10 which is proving sticky, hardly the fault of any cooks on this forum. That bug has come from the factory so I'm not sure why the aggro directed at jackoff and gsleon...:)

[AllTheWay]

...former swimmer and water polo player. Can hold my breathe (sic) for about two and a half minutes, since you asked.

If you had been reading the thread you might have learned a thing or two, especially about a certain "patch" that started this mess and someone's kind words to me in post #385. But all this was behind us already; where have you been?

I have a brick and QPST. If anyone want to try something, I'm all ears.

So you didn't heed the warning of this 1.65.17.10 radio? Where have you been? This radio was staying locked on numerous devices and yet you and other people flashed it. I tried to warn everybody about this radio. For all reports about this radio it didn't make any vast difference in comparison to other 1.65.XX.XX or 1.58.XX.XX WM6.1 radio's.

I do feel that bad that others are stuck with this radio, but coming on here and bashing somebody who could have made an honest mistake is far from par what this forum is about.

You say you are the one to solve it, I'm all ears! Put your money where you mouth is?

Now I say we put this nonsense and utter banter to rest and find a solution to this radio.

I think his point is that in the grand scheme of things here you have contributed very little, and really went after a couple of people who have contributed a lot. In circumstances like that it seems like one of those situations where if you didn't have anything useful to say you probably should have just kept your mouth shut, especially since not more than 1 day after you went on your little tantrum one of those very people you took the liberty of putting down so aggressively may have found a solution to a problem that you obviously were unable to fix yourself. I'm sure i'm not alone in the opinion that the little rant was the kind of thing you point to and say "this is a great example of why i wise man once said 'better to be silent and be thought a fool than to open your mouth and remove all doubt." Not that i'm implying that you are an idiot as your technical knowledge obviously exceeds my own; however, i am pointing out that i believe that you acted as such, and that perhaps you should have show the level of passion and sincerity in withdrawing your remarks as you did when you made them.


Well put ;)

[conwick3]

so tell us the good news then!!!!:)

[jockyw2001]

I haven't been able to contact AllTheWay yet, but I will post the solution in an hour or so in a new thread "Cannot update Radio from Hell 1.65.17.10 : Solved with FrankenKaiser".

[jyavenard]

...
Personally I consider this matter closed and I will not respond to any more posts of this ilk as they are a nuisance to both the group and myself. When a solution is finally found (by jocky or anyone else) we will see who had the right idea.

My offer still stands: brick and QPST available. Any takers?

What have you do so far that is of value to this community ? nothing.

You arrive on your high horses, full off theory and technical talks...

So please do one thing useful for once: piss off.

PS: one additional note, really no one gives a shit that you're a waterpolo player

[cotu1961]

So you didn't heed the warning of this 1.65.17.10 radio?

...just like you I never had the chance. The warning you posted was for the original radio (thanks), but I flashed jocky's original "patched" version as a precaution. In post #577 I quote from the original post #1 and there is no warning about the patch. Thus I ended up in hell.

As for my own efforts: believe me I have tried, but I am not familiar with this chipset so it's a blind shot. (In my own work we use a different device, still HTC.) It sems QC pulled the datasheets off their site, maybe due to the lawsuit. I have QPST and a few other standard tools and I've tried everything via USB and serial with the known outcome. But to all my trouble jocky replied with "bullshit" and called me (and others) a moron for trusting him! Now that wasn't very nice, was it? Of course, should he find a solution, I will buy him and all who helped a frosy one. There is little that beer can't solve, eh ;)

[FoUmY]

Hello.
What is the solution for launch the bootloader ?
I don't have USB choice for USB on MTTY. Ihave just COM1 and COM 2 :(
THx.

[scotchua]

Hello.
What is the solution for launch the bootloader ?
I don't have USB choice for USB on MTTY. Ihave just COM1 and COM 2 :(
THx.

wrong thread buddy

[id242]

Hello.
What is the solution for launch the bootloader ?
I don't have USB choice for USB on MTTY. Ihave just COM1 and COM 2 :(
THx.

Assuming that you are referring to post #491 ( http://forum.xda-developers.com/showthread.php?p=2196952#post2196952 )
To put in to bootloader mode, press the hard-reset button at the bottom of your Tilt. When black screen comes up, press and hold the camera button until the rainbow screen is displayed.

...proceeding through the rest of the directions in #491, you should see the USB option available in the MTTY dropdown once you rerun that app.

[AllTheWay]

I haven't been able to contact AllTheWay yet, but I will post the solution in an hour or so in a new thread "Cannot update Radio from Hell 1.65.17.10 : Solved with FrankenKaiser".

Jocky,

Sorry about not being able to contact you in time but glad you are helping other users with the problem. I will test it out on my phone that I have as of yet not shipped back to see if it works.

Nice job my friend :)

[htcfan2008]

My first post :). I've been lurking and learning a lot here, thanks to the efforts of so many contributors, so may I make a small contribution? Since jocky and friends already fixed the problem maybe someone should close this thread before that idiot cotu1961 wakes up again :eek:? Just a thought ;)

[cmonex]

...just like you I never had the chance. The warning you posted was for the original radio (thanks), but I flashed jocky's original "patched" version as a precaution.


then you can solve the problem, using the steps described in this thread. the patch in that version unlocks the commands, but doesn't make the radio security unlocked, that's why it still can't flash another radio. however commands such as mw work, because the patch jocky did allows that. mw reads and write memory, so the radio bootloader can patch itself to be unlocked and then flash a radio. just follow the steps described a few pages earlier.

but if you somehow happen to have the non patched version, then jocky released a version that works even on that. see his thread :)


...about 17 pages ago, it is not possible to "unlock" a hardware lock unless you JTAG the thing.

but it isn't a hardware lock, that's our luck!

[kyphur]

Agreed, Jocky has figured this out.. See this thread (http://http://forum.xda-developers.com/showthread.php?t=393337).

Closing this thread as it's done.