[Tutorial] Unlock VZW Razr M/M HD (XT907/XT926) for U.S. Carriers *CDMA WS METHOD*

Search This thread

gtmaster303

Senior Member
Oct 19, 2010
1,556
417
Will this hack survive rom flashes?
Read through the first 30 or so posts but didn't find anything...
 

cellzealot

Senior Member
Jan 4, 2008
1,314
815
Philadelphia, PA
This hack is in the radio NVM and is only affected or reverted by flashing a new radio or an OTA update that includes a radio image.

ROMs per se, are just /system and /boot partitions so they don't overwrite anything in the radio.
They can affect performance and function of the radio services due to build.prop modifications and other /system components like apns_conf.xml, but the hack itself is not affected.
 
  • Like
Reactions: gtmaster303

brandogg

Senior Member
Jul 27, 2008
673
86
Thanks a lot, just tried this with CDMA Workshop demo, worked perfectly the first time!
 

dragonhart6505

Senior Member
Jun 20, 2010
832
311
Reading, PA
wow...really sorry i havent kept up with this thread. most of my attention was drawn to the Razr M forum. but i am glad to see so many people getting it to work. glad i could provide a useful service guys ^_^
 

Renarudo

Senior Member
Jan 3, 2009
68
4
Queens, NY
I can receive texts, but I am unable to send. Tried switching APNs, putting it on GSM only, and a bunch of other stuff..

I'm now flashing an XT925 ROM
 

jjmai

Senior Member
Sep 10, 2008
89
4
Found a CDMA WS (4.6MB rar file) on the web, but my antivirus scan says it has trojan.
Any ideas? How large should the tool be?
 

FastidiousAble

New member
Feb 5, 2014
3
0
Suck It Verizon is Right

THIS WORKS WITH THE LATEST UPDATE!!!! THANK YOU dreamliner2012 FOR RUNNING IT THROUGH AND CLARIFYING!

THE ORIGINAL METHODS STILL WORK FOR ANYONE WHO WANTS TO USE RADIOCOMM AND DFS INSTEAD!

ALL CREDITS TO CELLZEALOT'S THREAD AND ARNOLD SNARB'S POST

GIVE THEM YOUR PROPER THANKS!!!

this was done with stock bootloader, rom, no root, official EVERYTHING

video tutorial HERE
heres the quick rundown -
1: get the Motorola QC Diagnostics driver to install. hard with Win7 x64, but be diligent it does work.
2: boot your XT907/XT926 into BP Tools mode (Vol Up and Down + Power, scroll down to BP Tools hit Vol Up)
3: connect to your computer *duh*
4: open CDMA WS 2.7 or higher (google)
5: connect to your COM Port and press CONNECT
6: click the SECURITY tab and enter 000000 as SPC and click SEND
7: click the MAIN tab and click READ *dunno if you need to but I did for safe measure*
8: click the MEMORY tab and select READ under NV ITEMS. dismiss the SPC prompt
9: First Item to read is 8322. Last Item to read is 8323. click SAVE and name the .txt file whatever you want, just remember where you put it
10: open the .txt file you just saved and under 8322 you will see 01 00 00 00 00 etc. change 01 to 00 and save the .txt file. DONT CHANGE 8323!!!
11: back in CDMA WS click WRITE under NV ITEMS. dismiss the SPC prompt again
12: find the .txt file you just edited and click OK
13: reboot the phone and put in your preferred Sim
14: in Settings go to More... under Wireless Networks and change your Network Mode to GSM/UMTS
15: SUCK IT VERIZON :cool:

happy days ahead for all!

don't forget that THANKS button :victory:

***DISCLAIMER***
NOT RESPONSIBLE FOR YOUR LACK OF ABILITY TO FOLLOW SIMPLE DIRECTIONS RESULTING IN A BRICKED DEVICE!

originally posted this in the Motorola Droid RAZR M Q&A section but as I had originally used an XT926 to make this tutorial I thought I had better put this here >_<

---from cellzealot on how to load Win7 x64 drivers---



TWO more Verizon Droid HDs bite the dust the dust by taking a breath of fresh air compliments of the US GSM crowd.
 

levikoehn

Member
Dec 12, 2012
7
0
I was wondering if this would work with windows 8, also if I wanna just unlock my phone so I can flash custom ROMs an don't want to switch to GSM do I need to follow step 13 an 14? Sorry if this is a dumb question thanks in advance

Sent from my DROID RAZR HD using Tapatalk
 

dragonhart6505

Senior Member
Jun 20, 2010
832
311
Reading, PA
I was wondering if this would work with windows 8, also if I wanna just unlock my phone so I can flash custom ROMs an don't want to switch to GSM do I need to follow step 13 an 14? Sorry if this is a dumb question thanks in advance

Sent from my DROID RAZR HD using Tapatalk

the most important part about this is the driver. so long as you get the appropriate driver to install for windows 8 and CDMA WS is compatible your good to go.

also this has nothing to do with unlocking the bootloader if thats what your asking. this is ONLY for unlocking the GSM.

if you have the updated bootloader, your probably screwed on that front anyway
 
Last edited:
  • Like
Reactions: levikoehn

levikoehn

Member
Dec 12, 2012
7
0
OK I understand, ya I wanna unlock the Bootloader. Do you think I will happen ever? I know there are several bounty rewards up.....guess I'll have to go back to my xt907 I'm sad

Sent from my DROID RAZR HD using Tapatalk
 

gtmaster303

Senior Member
Oct 19, 2010
1,556
417
I'm using this phone on AT&T and it works fine most of the time, but when I try streaming YouTube videos on data alone, it doesn't always connect. It gives me a button saying to retry which I have to hit a few times before the video starts playing. What's the deal?

Sent from my Droid RAZR M
 

dragonhart6505

Senior Member
Jun 20, 2010
832
311
Reading, PA
I'm using this phone on AT&T and it works fine most of the time, but when I try streaming YouTube videos on data alone, it doesn't always connect. It gives me a button saying to retry which I have to hit a few times before the video starts playing. What's the deal?

Sent from my Droid RAZR M

Not sure. I'm not entirely sure that your issue is due to the unlock. Sounds like a Play Services problem. I get that all the time on my other devices.

Short fix:
Wipe cache/data on all Google Apps (Store, Services, YT, Gmail, Movies, Books, Games, TTY...whatever is Google related), wipe cache/dalvik cache in recovery/safestrap (if applicable) and retry.
 

gtmaster303

Senior Member
Oct 19, 2010
1,556
417
Not sure. I'm not entirely sure that your issue is due to the unlock. Sounds like a Play Services problem. I get that all the time on my other devices.

Short fix:
Wipe cache/data on all Google Apps (Store, Services, YT, Gmail, Movies, Books, Games, TTY...whatever is Google related), wipe cache/dalvik cache in recovery/safestrap (if applicable) and retry.

Do I need to wipe them all or can I do just YouTube? Because everything else works fine
EDIT: went ahead and wiped them all. Still having problems...

Sent from my Droid RAZR M
 
Last edited:

XBlackChaosX

Senior Member
Oct 30, 2011
497
169
New York
OnePlus 7 Pro
I have a Razr Maxx HD and i just connected my phone to tmobile but for some reason i'm only getting edge speeds and not 4g or even 3g. I'm running the latest weekly build of slimkat for xt925.
 

s_u_n

Senior Member
Nov 6, 2012
476
37
Pune
Droid Maxx NVRAM

THIS WORKS WITH THE LATEST UPDATE!!!! THANK YOU dreamliner2012 FOR RUNNING IT THROUGH AND CLARIFYING!


I am looking for an unlock procedure for Droid Maxx XT1080M.
Verizon has locked the GSM radio (not tried CDMA) - basically it is some form of SIM lock where only Verizon SIM will work.
I tried three SIMs so far and managed to get data working on two of them with APN settings.
But voice does not work at all (I get No service).

If I make the changes (edits), can I roll back to the old values in case it did not work?

Remember I am using XT1080M.
 

Top Liked Posts

  • There are no posts matching your filters.
  • 28
    THIS WORKS WITH THE LATEST UPDATE!!!! THANK YOU dreamliner2012 FOR RUNNING IT THROUGH AND CLARIFYING!

    THE ORIGINAL METHODS STILL WORK FOR ANYONE WHO WANTS TO USE RADIOCOMM AND DFS INSTEAD!

    ALL CREDITS TO CELLZEALOT'S THREAD AND ARNOLD SNARB'S POST

    GIVE THEM YOUR PROPER THANKS!!!

    this was done with stock bootloader, rom, no root, official EVERYTHING

    video tutorial HERE
    heres the quick rundown -
    1: get the Motorola QC Diagnostics driver to install. hard with Win7 x64, but be diligent it does work.
    2: boot your XT907/XT926 into BP Tools mode (Vol Up and Down + Power, scroll down to BP Tools hit Vol Up)
    3: connect to your computer *duh*
    4: open CDMA WS 2.7 or higher (google)
    5: connect to your COM Port and press CONNECT
    6: click the SECURITY tab and enter 000000 as SPC and click SEND
    7: click the MAIN tab and click READ *dunno if you need to but I did for safe measure*
    8: click the MEMORY tab and select READ under NV ITEMS. dismiss the SPC prompt
    9: First Item to read is 8322. Last Item to read is 8323. click SAVE and name the .txt file whatever you want, just remember where you put it
    10: open the .txt file you just saved and under 8322 you will see 01 00 00 00 00 etc. change 01 to 00 and save the .txt file. DONT CHANGE 8323!!!
    11: back in CDMA WS click WRITE under NV ITEMS. dismiss the SPC prompt again
    12: find the .txt file you just edited and click OK
    13: reboot the phone and put in your preferred Sim
    14: in Settings go to More... under Wireless Networks and change your Network Mode to GSM/UMTS
    15: SUCK IT VERIZON :cool:

    happy days ahead for all!

    don't forget that THANKS button :victory:

    ***DISCLAIMER***
    NOT RESPONSIBLE FOR YOUR LACK OF ABILITY TO FOLLOW SIMPLE DIRECTIONS RESULTING IN A BRICKED DEVICE!

    originally posted this in the Motorola Droid RAZR M Q&A section but as I had originally used an XT926 to make this tutorial I thought I had better put this here >_<

    ---from cellzealot on how to load Win7 x64 drivers---

    Here is a screenshot of Device Manager on my PC on WIN7 64 bit with the latest 6.2 Motorola USB drivers and my XT907 connected in BP Tools mode with all of the interfaces highlighted.
    There are 3 modems, 1 network device and 1 COM port that should be present and installed.
    The 6.2 driver set has signed versions for these device interfaces so no force loading should be required and they should install automatically when the phone is connected in BP Tools mode with USB debugging enabled.

    Make note of the port number assigned to the COM Port as that is the port you will use for CDMA WS or DFS or any other QC based NV access tool.




    The QC Interface is the Motorola QC Diag Port.

    Right click and choose Update Drivers then choose Do not load drivers automatically. Allow me to choose from a list of available devices.

    Scroll down to Ports: COM/LPT and then Motorola and then Motorola QC Diag Port.

    It will warn about unsigned drivers, just click Install anyway and it will load the driver and show up with a COM port number assigned.

    Use that COM port for CDMA WS to edit the NV.

    If you continue to have problems, I suggest reflashing the firmware or just the modem and fsg.mbn in fastboot, and starting over.
    3
    I have done this hack on several RAZR HDs in the past week, and for best results:

    First READ 8322, change from 01 to 00,
    Then WRITE 8322, and WRITE 8322 again.
    Wait five minutes, then reboot.

    At first, I was reverting to to 01 constantly. Following these steps exactly worked well.
    2
    Just a notice:

    There's Stargo's command line utility unlock-us-gsm newly included in CM12 builds for xt907, xt926 and xt897.

    All you have to do to unlock US GSM with it is:
    Code:
    su
    unlock-us-gsm
    in terminal emulator app or adb shell.

    http://review.cyanogenmod.org/89520
    http://review.cyanogenmod.org/90141
    1
    ALL CREDITS TO CELLZEALOT'S THREAD AND ARNOLD SNARB'S POST

    GIVE THEM YOUR PROPER THANKS!!!

    this was done with stock bootloader, rom, no root, official EVERYTHING

    video tutorial HERE
    heres the quick rundown -
    1: get the Motorola QC Diagnostics driver to install. hard with Win7 x64, but be diligent it does work.
    2: boot your XT907/XT926 into BP Tools mode (Vol Up and Down + Power, scroll down to BP Tools hit Vol Up)
    3: connect to your computer *duh*
    4: open CDMA WS 2.7 or higher (google)
    5: connect to your COM Port and press CONNECT
    6: click the SECURITY tab and enter 000000 as SPC and click SEND
    7: click the MAIN tab and click READ *dunno if you need to but I did for safe measure*
    8: click the MEMORY tab and select READ under NV ITEMS. dismiss the SPC prompt
    9: First Item to read is 8322. Last Item to read is 8323. click SAVE and name the .txt file whatever you want, just remember where you put it
    10: open the .txt file you just saved and under 8322 you will see 01 00 00 00 00 etc. change 01 to 00 and save the .txt file. DONT CHANGE 8323!!!
    11: back in CDMA WS click WRITE under NV ITEMS. dismiss the SPC prompt again
    12: find the .txt file you just edited and click OK
    13: reboot the phone and put in your preferred Sim
    14: in Settings go to More... under Wireless Networks and change your Network Mode to GSM/UMTS
    15: SUCK IT VERIZON :cool:

    happy days ahead for all!

    don't forget that THANKS button :victory:

    ***DISCLAIMER***
    NOT RESPONSIBLE FOR YOUR LACK OF ABILITY TO FOLLOW SIMPLE DIRECTIONS RESULTING IN A BRICKED DEVICE!

    originally posted this in the Motorola Droid RAZR M Q&A section but as I had originally used an XT926 to make this tutorial I thought I had better put this here >_<

    I NEED CONFIRMATION FROM ANYONE WITH AN XT907 ON THE LATEST UPDATE TO CONFIRM WHETHER OR NOT THIS STILL WORKS!! PLEASE LET ME KNOW SO I CAN UPDATE THE OP ACCORDINGLY!

    If you do this can you use the phone on Verizon still or do you need to revert the changes?

    sent from my xt926 RAZR maxx hd
    1
    Nope the GPS is not working. Would I be able to pickup GPS over Wifi with it set to device only?

    I will flash back into CM12.1 and unlock the GSM again and see if the phone works, if so I may try and delete them again but in CM12.1.

    It takes some time to get GPS signal lock, use GPS Status & toolbox to donwload AGPS data and see satellites.