[REF] How to unlock/unfreeze all SGS Models [NOW WORKS ON Vibrant 4G][Updated 4-9-11]
- Thread starter dagentooboy
- Start date
Like the new layout, but I can't stop laughing since the only perfectionist I know here that would think of that is nbs
haha agreed. The Mac unlocker 2.0 has been completed. I PMed it to you for your guide.
I have been writing your username wrong this whole time. Whoops. Well I have to go fix that now.
Finally got it working!!
For those having troubles, make sure you've got the Samsung Galaxy S USB drivers installed.
For those having troubles, make sure you've got the Samsung Galaxy S USB drivers installed.
What is happening is that every time you enter a new MCC/MNC you are telling the phone to allow another network. Another network is allowed BUT the phone is still locked. Yep, you can allow 1, 2, 3, 4... networks at the same time and all the rest will be blocked. What you have to do is to insert a SIM card from one carrier that is still not allowed. This was tested by myself..
Last edited:
One SIM unlock
Interesting experience...
I have the lock and freeze codes. I also have MCC/MNC. Used hex editor to pull all of it out of bml3 file. Also used sgux2 which returned same results. All is good so far.
My phone is the i9000m from Bell.
I only have the Bell SIM but want to unlock for when I travel.
Here is what I did.
Anyone have any thoughts?
I wish I had another SIM to try.
Interesting experience...
I have the lock and freeze codes. I also have MCC/MNC. Used hex editor to pull all of it out of bml3 file. Also used sgux2 which returned same results. All is good so far.
My phone is the i9000m from Bell.
I only have the Bell SIM but want to unlock for when I travel.
Here is what I did.
- powered down; removed Bell SIM; powered back up
- from keypad entered *7465625*638*#
- entered a MCC/MNC value for Rogers: 302720 (picked Rogers at random since it is not same as my Bell SIM, MCC/MNC for Bell is 302610)
- received a "Unlock successful" message, all is good so far.
- powered off; inserted Bell SIM; powered on
- phone worked like normal -- very puzzling as it was supposedly now locked to Rogers and has the Bell SIM in it. I tried a number of things like calling voice mail, surfing the internet -- all worked.
- also, i never got a popup at any time to enter an unlock code -- puzzling as I expected to get prompted to enter an unlock code
- tried to manually enter unlock code using #7465625*638*#, entered code at prompt and got "Unlock unsuccessful"
- reverted back to my base settings by entering *7465625*638*#, MCC/MNC 302610 and NCK, received "Unlock successful" at this point.
- phone working like normal... but not unlocked (checked using *#7475625# and says Network Lock is ON)
Anyone have any thoughts?
I wish I had another SIM to try.
No idea what went wrong. There are three things you can do though.
1. buy a cheap pay as you go SIM card or phone and put that SIM in (Find them at convenience stores)
2. Try again
3. Borrow someones SIM card
I bought one of these: http://cgi.ebay.com/ws/eBayISAPI.dll?ViewItem&item=290466611301
Now I must patiently wait for it to arrive in the mail
I picked up a Bell i9000m today and want to get it unlocked. Network Lock is the only thing on after doing *#7465625#. USB debugging is enabled. I downloaded and extracted Generate Unlock Windows.zip, ran Generate_Code.bat with the phone connected to the computer and I receive this error:
*Error: unable to find the file <.\nv_data.bin>
Can someone please advise? I'm new to android.
*Error: unable to find the file <.\nv_data.bin>
Can someone please advise? I'm new to android.
I had the same experience. Although I think the phone seemed to be unlocked because i tried two different sim and both of them worked however, when I checked the Network lock (*7465625*638*#) it says its still on. Puzzled. Any idea how to turn Network lock off? For those of you who successfully unlock their galaxy s, did you managed to check the Network lock status (*7465625*638*#)? is it still on or off?
Last edited:
If you haven't already,
Download the usb drivers for your device and
Download the Android SDK http://dl.google.com/android/android-sdk_r06-windows.zip
extract it, then move/drag the folder INSIDE the extracted folder to your C:/ drive.
Thanks for the help, I got my unlock and unfreeze codes. I entered the unlock code and received an unsuccessful message, I read earlier that this may happen so I powered off, put in my Rogers sim card and powered back on. I entered the MCC/MNC value for Rogers and it said it locked.
Now, Rogers does appear on the notification bar as a carrier and I did make two phone calls however there is no 3g data. I went into Settings / Wireless and network / Mobile networks and selected Rogers. Still no data.
Anyone else able to make calls yet not have access to data?
I bought one of these: http://cgi.ebay.com/ws/eBayISAPI.dll?ViewItem&item=290466611301
Now I must patiently wait for it to arrive in the mail
Or you could just but a 10 dollar prepaid phone or walk into your local phone store and ask for a prepaid SIM card. Fill it with a few bucks and you can get your unlock.
I figured out how to get data, you need to add a new APN in the networks settings. Google the APN settings for your carrier.
Thank you devs, I will donate accordingly.
Thank you devs, I will donate accordingly.
Similar threads
- Locked
Top Liked Posts
-
There are no posts matching your filters.
-
53Vibrant 4G/SGS 4G manual method here
PRO App also works on Vibrant 4G/SGS 4G for anyone who doesn't feel comfortable with a hex editor
Do NOT try this or any other unlock method on the SC-02B Docomo phone. Please see thread here for progress on the SC-02B
Please note the same information used to develop the app is in the guide for free... the app just makes it easier
ALL METHODS FOR NEWER PHONES REQUIRE ROOT... PLEASE GO GET ROOT ON YOUR PHONE AND THEN COME BACK.
Oh and BTW... I cannot be held responsible for anything that happens to your phone.... EVER!
Before you start... if you don't have root you WILL need it unless you are on a really old version of android 2.1 (look in Appendix A for depreciated methods)
Step 1. - Retrieve nv_data.bin file
use "adb shell" or a terminal emulator to get a terminal prompt and run the following commands
Code:su cat /efs/nv_data.bin >> /sdcard/nv_data.bin
Step 2. - Edit nv_data.bin file
mount the internal SD Card on your computer
make a backup copy of the nv_data.bin file on your computer
using your favorite HEX editor open the nv_data.bin on the sdcard
jump to address 0x181468
you should see a string like this
ff 01 00 00 00 00 46 46
there are 5 different types of locks in 5 different bytes
the FF byte should be left alone
the first byte after the FF is the network lock
the next byte is the network subset lock
the next byte is the sp lock
the next byte is the cp lock
the last byte appears to be a data lock.
the 46 46 should be left alone
Change any 0x01 to 0x00 (or 0x00 to 0x01 to lock for warranty)
It should read ff 00 00 00 00 00 46 46 for unlocked
save and close file
unmount SD Card
Step 3. - Replace nv_data.bin file
I want to say it again so no one misses it MAKE SURE YOU HAVE A BACKUP OF YOUR NV_DATA.BIN FILE BEFORE YOU CONTINUE!!!!!
use "adb shell" or a terminal emulator to get a terminal prompt and run the following commands
your phone is now unlocked... enjoyCode:su rm /efs/nv_data.bin rm /efs/nv_data.bin.md5 cat /sdcard/nv_data.bin >> /efs/nv_data.bin chmod 755 /efs/nv_data.bin chown radio.radio /efs/nv_data.bin || chown 1001.1001 /efs/nv_data.bin reboot
[OPTIONAL] Use the PRO app [OPTIONAL]
Please note that this step is ONLY here for people that are not comfortable using a Hex editor.
Search "Vibrant unlock" in the market or scan the QR code:
Install and run app
press menu
press Unlock Phone
Select phone
allow root
at this point if you get an error code make SURE you mount your internal SD card on your computer and backup the nv_data.bin.orig file that is there.
press unlock
restart and your phone is now unlocked
to lock your phone for warranty
press lock instead of unlock
restart your phone, remove root, and take your phone in for warranty
APPENDIX A (DEPRECIATED)
DOES NOT WORK ON 90% PHONES PLEASE USE THE APP
Using ADB
Make sure that Network Lock is the only thing on... go to phone and enter *#7465625#
Make sure USB debugging is enabled (Settings->Applications->Development->USB Debugging)
Using APP (Thanks ClarkeHackworth and DaGentooBoy)
ClarkHackworth's page about the app
Same thing as before if this bricks your phone sorry but we aren't responsible.
Step A.1. – Get your code
Search Samsung Galaxy S Unlock Tool in the market or scan the QR code.
Install SGS_Unlock.apk
Applications->SGS Unlock
Menu->Root Gen Codes (Root method is the most reliable method at this point)
Jump to Step A.2.
Step A.1.alternate – Get your code
For Mac Updated!!! New Script
1. Download the Samsung Galaxy S Unlocker for Mac from this here:
http://www.multiupload.com/9NEBR6FAKD
2. Mount the DMG and drag the folder onto the hard drive. DO NOT DRAG THE ICON WITH THE LOCK (the app). Once the file is finished copying continue.
3. Open the application with the lock. It should open a terminal window. Let it run for a few seconds and then it should show a screen like this:
4. Write down your unlock code
For Windows UPDATED!!! With Un-Freeze Codes
Video Guide
Download and extract the attached Generate Unlock Windows.zip.
Run Generate_Code.bat
Look for the line Network Control Key:YourCode
Save the code
Step A.2. – Enter the code
Power down your phone
Put in a SIM card from another carrier
Power up your phone
When it boots up it will ask for the unlock code that you found above
OR
NO SIM Method (Thanks RazvanG)
(Apparently this just adds another SIM to the accepted SIM list... can someone confirm?)
remove sim card
power on phone without sim
enter *7465625*638*# and relock the phone to another network other than the one u have u'r sim card (eg 22610)
power off phone
insert sim card back
power on and enter nck code extracted from .bak file
phone unlocked
Step A.3. – Flash back (IF THE CODE DIDN'T WORK)
Flash back to an older firmware (I9000XXJF7 with 513.pit worked for me on an I9000)
Now enter the unlock code you generated in Step 2.
Guide in Spanish here
Guide in Italian here
Guide in Chinese here
LEGAL NOTES (because information should be free for all):
YOU MAY NOT, BY ANY MEANS, USE THIS SOLUTION/CODE OR PART OF IT FOR COMMERCIAL PURPOSES.
DO NOT USE THIS EXTRACTION METHOD COMMERCIALLY
PLEASE give credit (and donations if you can) to
For those of you that have donated THANKS! (You know who you are... you paid for my developer account so I could post the app)
DaGentooBoy For this AWESOME guide, the free and PRO apps, finding the other unlock bits, the original mac and windows scripts, the no root cat nv_data method, the unfreeze code portion of the mac script, and a lot of troubleshooting (Paypal)
dawen, Helroz, and NWolf for discovering the hex location of the lock bit in the nv_data.bin file (donate to NWolf here)
RazvanG for pointing galaxysguy in the right direction, finding the Freeze Code location in the .bak file, the code for re-locking the phone to any network, and the solution to unlock with only one sim card (Paypal)
rbnet.it and marcopon for the cool SGUX utility for windows to extract both the Unlock and Unfreeze codes (donate to marcopon and rbnet.it Here)
nbs11 for the new mac script that makes it REALLY easy (donate here)
Bowsa2511 for the command to extract the unlock code on a Mac (Paypal here)
rhcp0112345 for finding the file and giving me (and others) a place to start (Donate here)
galaxysguy for confirming that I was looking at the right code (Paypal here)
AllGamer for starting the Bounty thread and giving the XDA devs the motivation to get started.
If you want me to extract the code for you just PM me with a link to your zipped bml3.bak or nv_data.bin file and I will send you back the code. If it works please feel free to donate via Paypal5Unlock Froyo 2.2 I9000M phone running I9000UGJK4
Just updated post with more details, I hope someone will find it more useful. As always make sure you have a backup, make a backup of your nv_data.bin BEFORE editing.
I was not able to unlock my phone Froyo 2.2 I9000M phone running I9000UGJK4 firmware by using this official thread http://xdaforums.com/showthread.php?t=761045
and after few hours of searching I found this method which worked for me from first attempt.
I give all the credits for this idea to cursor2010 from http://xdaforums.com/showpost.php?p=8656481&postcount=156
Here are the detailed steps
* Your phone must be rooted (I used SuperOneClick http://xdaforums.com/showthread.php?t=803682) to do this unlocking and busybox from market is installed
* Get the archive file from first post of this topic. The archive contains ADB software which we will use to connect to the phone.
* Turn On USB debugging Application->Settings->Application->Development
* Follow the instructions of STEP 4 from http://www.communityhosting.net/sgsunlock/i9000.html to get your nv_data.bin to your PC
Get your current nv_data.bin file from the /efs directory on your phone. This can be done with ADB. Most often, the nv_data.bin file is not readable and you will get a permission denied message. You'll need to enter the commands manually.
To do this with ADB, from the DOS command prompt you can type:
adb pull /efs/nv_data.bin
If you receive a permission denied error, you can fix it by typing the following commands from an ADB shell (type "adb shell" at the DOS command prompt) or from within a terminal on the phone:
adb shell
su
chmod 777 /efs/nv_data.bin
exit
exit
Then from the DOS command prompt:
adb pull /efs/nv_data.bin
Using Hex editor edit the file ( you can use any hex editor, http://www.logitheque.com/logiciels/windows/utilitaires/editeur_hexadecimal/telecharger/edithexa_9903.htm for example). I personally use UltraEdit.
At the offset of 180069H you will see your provider MCC and MNC codes see http://en.wikipedia.org/wiki/Mobile_Network_Code
In my case the code was 30261020404... which is Bell Canada, so I changed 610 to 720 Rogers Canada now the code is 30272020404...
Again the offset in the file is 180069H.
Save the file on the pc.
* Follow the instructions from http://xdaforums.com/showpost.php?p=8182729&postcount=107
Copy your nv_data.bin to temporary folder on your phone:
adb shell "mkdir /sdcard/efs"
adb push nv_data.bin /sdcard/efs
adb shell
su
ls -l -a /efs
If there is an nv_data.bin.md5 file in the directory, all is well. You should continue with these commands:
mv /efs/.nv_data.bak /efs/.nv_data.bakk
mv /efs/.nv_data.bak.md5 /efs/.nv_data.bakk.md5
rm /efs/nv_data.bin
rm /efs/nv_data.bin.md5
rm /efs/.nv2.bak
rm /efs/.nv2.bak.md5
busybox cp /sdcard/efs/nv_data.bin /efs/nv_data.bin
chmod 755 /efs/nv_data.bin
chown radio.radio /efs/nv_data.bin
exit
exit
if you have errors on the chown command, use
chown 1001.1001 /efs/nv_data.bin
If there was no nv_data.bin.md5 file, then something is wrong and you'll need to see other options or reflash again with a known working ROM that generates a new MD5 file when it's missing.
* Reboot the phone, it should not ask any unlock codes or anything, in my case it simply just registered on Rogers network
* Obviously you also need to program your APN settings for Rogers from http://xdaforums.com/showthread.php?t=809003 to make your 3G working. For your own provider please search forum.
I wish it would be much simpler or automated or tested on bigger variety of phones.If somebody could gather the statistics and check if this method is applicable throughout all the versions of I9000, that would be very nice.
Feel free to comment my post.2
The HEX hack is the one that works on most devices. Unfortunately the unlcok code was removed from the bin file a long time ago.21
thanks... I saw the bounty thread is updated. Feel free to link to the instructions on this thread so that they all go to one place.
