SITE LOGO

Alcatel One Touch Club Dualband
*#06# показывает IMEI (International Mobile Equipment Identity) код
000000* вход в сервисное меню

TRACES - channel indicator menus (нетмонитор индицируются параметры сети)
SWOFF CODES - журнал выключений телефона
EMPTY SWOFF - очистка журнала выключений телефона
CTRL CHARDGE - контроль зарядки батареи
CHEKER - тест дисплея

Alcatel One Touch Easy Dualband
*#06# показывает IMEI (International Mobile Equipment Identity) код
000000* вход в сервисное меню

Alcatel One Touch Easy
To view IMEI (International Mobile Equipment Identity) number enter *#06#
To Enter Service Menu enter: *#000000#
To view Secret Menu type 000000 then press *
Secret Menu Appears
TRACES channel indicator menus
ARRETS - ?
VIDER ARRETS Press OK and the phone responds: This action is executed!
CTRL CHARGE It show the charger voltage and battery voltage.
DAMIER display test
This is something that I got that I have yet to decipher.
IMEI 3300 1453 1139 420
When activated with a Telstra card the Phone boots up with:
"PRODUCT CODE"
"VAL. => OK"
Then we enter 025121992 OK
"ENTER SPECIAL CODE"
**05* same as Motorola
"UNBLOCKING"
" PUK ? "
10608CC2*. These two from Vodaphone also work 906081C2* 15900807*
"UNBLOCKING"
" PIN ? "
0000*
"UNBLOCKING"
"PIN AGAIN "
0000#
It seems that I need to find out the PIN because at this point the phone reboots
Removing SP lock on Alcatel Easy
This is how to remove the SP lock on Alcatel (one touch) Easy.
(You wil need a cable, a eeprom device and some sw)
Edit the eeprom:
Address Replace with
------------- ---------------
176h FFh
177h FFh

Alcatel One Touch GUM Dualband
*#06# показывает IMEI (International Mobile Equipment Identity) код
000000* вход в сервисное меню

Alcatel One Touch MAX Dualband
#06# показывает IMEI (International Mobile Equipment Identity) код
000000* вход в сервисное меню

Alcatel One Touch View Dualband
*#06# показывает IMEI (International Mobile Equipment Identity) код
000000* вход в сервисное меню

Alcatel One Touch
Show IMEI code --- *#06#
Service/Info Mode --- *#000000#
Hidden Menu --- 000000*

[b]Alcatel One Touch Pocket[/b]
*#06# показывает IMEI (International Mobile Equipment Identity) код
000000* вход в сервисное меню
000000* cкрытая меню

Alcatel - разноеAlcatel Software Info UPDATED / NEW
Software releases
HC400 on the backside near the IMEI number is a sticker with a software release.
Alcatel have split the software releases
1.x No Cellbroadcast
5.x Cell broadcast
The newest software release of the HC 1000 is AK1 03
Alcatel HC600/800/1000 Pin-Out diagram

Alcatel HC600/800/1000 Pin-Out diagram
1 3 5 7 9 11 13 15
I I I I I I I I
O O 17
I I I I I I I I
2 4 6 8 10 12 14 16

01 Vbat_ext
02 EMMI_PAE
03 Mic
04 EMMI_OPE
05 GND
06 EXT_EMET
07 SCL_E
08 EXT_RECDIT
09 SDA_E
10 GND
11 GND
12 DC_IN (charge)
13 Speaker
14 MARCHE
15 DC_IN (charge)
16 GND
17 Antenna+internal switch (int/ext)

Сервисное меню
Для активизации сервисного меню необходимо набрать 000000*. Появятся пункты сервисного меню:
TRACES - Информация о каналах и базовых станций
SWOFF CODES - Журнал причин отключения телефона
EMPTY SWOFF - Очистака журнала отключений телефона
CHARGE CTRL - Информация об уровне зарядки батареи
CHECKER - Проверка работоспособности экрана (тест экрана типа "шахматная доска").
Меню TRACES содержит следующие пункты подменю:
NETWORK -- информация о текущем активном канале
aaa bb cc dd ee ffff, где
aaa - BCH - номер текущего активного канала (каналы с 1 по 124 - GSM 900, каналы больше 124 - GSM 1800)
bb - качество приема в условных единицах (в пределах от 1 до 63)
cc - BSIC - номер текущей базовой станции
dd ee - ?? (обычно не изменяются, у МТС 20 18, у БиЛайна 20 15)
ffff - LAC - код локальной области в шестнадцатиричной форме
RSSI -- Receive Signal Strength Indication - Уровень приемного сигнала
aaa bb - (несколько раз парами)
aaa - BCH - номер канала
bb - уровень приема в шестнадцатиричной системе (единица измерения = -0.5 dBm)
RXLEV -- Rx Level - Уровень приема
Тоже самое, что и предыдущий пункт меню, но значения bb выставляются в условных единицах (в пределах от 1 до 63)
BSIC -- Base Station Identification Code
aaaa bb - (несколько раз парами)
aaaa - BCH - номер канала
bb - номер базовой станиции
C1 -- ??
C2 -- ??
SWOFF CODES -- Журнал причин отключения телефона
46: ручное отключение (долгое нажатие на кнопку 'C')
44: запрограмированое отключение (с помощью таймера)
43: отключение из-за разрядки батарейки
10: внезапное отключение батарейки
45: ручное отключение при присоединенной зарядке
00: ???
EMPTY SWOFF -- Очистка журнала отключение телефона
CHARGE CTRL -- Информация о зарядке телефона
aa bbb ccccc ddd e.ee, боковой клавишей вниз
---- ---- ff gg hhhh jjjj, боковй клавишей вниз,
iii kkkk, где aa - Текущий источник питания, (RE - штатная батарея)
bbb - ??
ccccc - время прошедшее с момента включения телефона или изменения истояника питания (2-х минутных интервалах)
ddd - ??
e.ee - текущее напряжение питания в вольтах
ff gg - ??
hhhh - тип батареи:
NIX1 - никель-металлгидрид
jjjj - ???
iii - степень зарядки батареи в процентах
kkkk - ???
CHECKER -- Тест экрана типа "шахматная доска"

Bosch 738 and Bosch 718, Bosch COM 607 and 908
*#3262255*8378# (*#DANCALL*TEST#) to make secret Engineering menu (menu 10) appear.

10. Engineering
10.1 MS Info
10.1.1 on
10.1.2 off
10.2 Software details
10.2.1 Software version
10.2.2 EEPROM version
10.2 Test / Production details
10.3.1 Hardware data
10.3.2 Production data
10.3.3 Service data
10.3.4 Mechanical data

*#06# to display the IMEI (International Mobile Equipment Identity)
*#0000# to set the language automaticaly (Reset to english)
*#3370# to set the Enhaced Full Rate
#3370# to Reset the phone
*#9000# to enter sim lock code
*#9001# To enter the corporate code (Bosch 908)
*#9002# To enter the provider code (Bosch 908)
*#9003# to enter the network code
*#9004# to enter the subset code
*#9100# to remove the sim lock permanently
*#9101# to remove the corporate lock permanently
*#9102# to remove the provider lock permanently
*#9103# to remove the network lock permanently
*#9104# to remove the subset lock permanently

(SIM-lock is NOT the SP-lock/Service Provider lock!!)

The SIM-lock makes your phone to fusion with the SIM-card, and the phone will not accept any other SIM cards after you lock your phone! You get ten chances to type the correct code! After the tenth time your phone gets "SIM-lock permanently blocked", and you will be unable to open it !! The best thing you can do is to remove the SIM-lock permanently!!

NB. Tested on Bosh 738 phone and 607.

Bosch 909 Dual
*#06# показывает IMEI (International Mobile Equipment Identity) код
*#0000# устанавливает меню на Английский
*#3370# устанавливает Enhaced Full Rate (режим улучшающий качество звука)
#3370# выключает Enhaced Full Rate
*#9000# для ввода SIM lock кода
*#9001# для ввода corporate lock кода (Bosch 908)
*#9002# для ввода provider lock кода (Bosch 908)
*#9003# для ввода network lock кода
*#9004# для ввода subset lock кода
*#9100# для снятия SIM lock кода
*#9101# для снятия corporate lock кода
*#9102# для снятия provider lock кода
*#9103# для снятия network lock кода
*#9104# для снятия subset lock кода
*#3262255*8378# (*#DANCALL*TEST#) для открытия секретного Инженерного меню (меню 10)
10. Engineering
10.1 MS Info
10.1.1 on
10.1.2 off
10.2 Software details
10.2.1 Software version
10.2.2 EEPROM version
10.2 Test / Production details
10.3.1 Hardware data
10.3.2 Production data
10.3.3 Service data
10.3.4 Mechanical data

Bosch - разное
Bosch 608 PIN-OUTS UPDATED / NEW
Bosch bottom connector

______________
| 15 1 |
|( ) ======== |
|___16______2_|
16 GND Ground
15 EQUIP-ID Pulled low by HF, internal pullup 100k
14 AGND Analog ground
13 A-DL Analog output from phone
12 AGND Analog ground
11 A-UL Analog input to phone
10 GND Ground-this pin is checked by HF, if GND=>phone is present
09 CHG-ID Charger ID - detects type of charger
08 D-BUS Data output
07 IGNITION Sensing ignition (in car kit), internal pulldown 100k
06 HF_ENABLE HF enable output
05 V-BATT Connected directly to the MS battery. NO FUSE!
04 PA_BIAS_ON Trigger signal synchronous withr TX burst
03 I-BUS Data input (internal 100k pullup)
02 C-BUS Bi-directional serial control bus
01 VIN Input voltage - supply pin
Tips and Tricks

The 54# Tip (for Bosch 738 ..):
Type 1#, 2#........54# on the keypad (when you're not in the menu) to get the phone number used for with this key when speed dialing.

Ericsson 368
Try these Codes on your DH-368 phone:
1) Power on.
2) Press 904059 + 'MENU'
3) 'TEST SET' display ...
4) Press 'YES' will display @ then press 1 'RCL' will turn light off and you will see 'DONE'
5) Press 'YES' will display @ then press 86 'RCL' display 'DONE' also you will hear static...
You can just enter the channel number (up to 1023) by pressing
'Yes' 3 'CLR' XXXX - channel number to enter a channel directly.
You can also see the signal level on channel by pressing 3 'MENU'.
You can see the ESN number by pressing 'YES' 1 'RCL' 96 in HEX format.
6) Press 3 to exit, now you phone will power down and power up again.
You can install the phone number into the phone by pressing 923885 + 'MENU'

Ericsson 388
*#06# for checking the IMEI (International Mobile Equipment Identity)
*#0000# to reset the phones menu-language to English.
>*<<*<* for checking the firmware revision information (software release)
>*<<*<*> 1-row text strings. if pressing yes you can check the phones text programming in currently selected language. (298 entries).
>*<<*<*>> n-row text strings. if pressing yes you can check the phones text programming in currently selected language. (160 entries?)

Ericsson DH-3xx/vi
Secret Codes
923885[Menu] --- NAM programming
904060[Menu] --- Reset phone
904080[Menu] --- Title blink
904090[Menu] --- TestMode on/off
904059[Menu] - Test Set (commands)
(0..9=0..9 *=A; #=B; clr=C; menu=D; no=E; rcl=F).
press Yes, at the @ enter the command. some of the commands have parameters of different lenght. if one parameter doesnt work try another.

Ericsson SH888
*#06# показывает IMEI (International Mobile Equipment Identity) код:
>*<<*<* показывает версию ПО
>*<<*<*>>> информация о версии IR. Если нажать YES вы сможете проверить версию драйвера
The Service Provider (SP) Lock опция используемая для привязки телефона к определенной
SIM карте. При этом если вставить карту другого оператора, то телефон откажется
работать, но карта того же оператора подойдет.

Для того что бы активировать/деактивировать режим блокировки необходим специальный
секретный код который не доступен конечному пользователю

Как включить данный режим :
<**< Lock to Network? если нажать yes то у вас будет 5 попыток для ввода NCK кода.
<**<< Lock to Network subset? если нажать yes то у вас будет 5 попыток для ввода NSCK кода.
Предупреждение : Ваш телефон может быть заблокирован навечно если был 5 раз введен неправильный код.
Меню будет деактивировано, и на любые попытки ввести NCK/NSCK код вы получите "Not allowed"!.
Возможно, что переписать NCK/NSCK код получится только после полного стирания EEPROM.

Быстрый набор последнего звонка...
Если вы по каким либо причинам не хотите набирать 'Last Dialed calls menu' вы можете вместо этого использовать следующее:
сначала нажать '0' , затем '#'.

Доступ в меню без Sim карты ...
Для того что бы войти в меню без вставленной карты напечатайте **04*0000*0000*0000#
Когда на дисплее появится "Wrong Pin" (неправильный Pin код) нажмите NO и у вас
есть доступ ко всем меню: Info, Access, Settings, Calculator, Clock, Keylock On?,
Mail, Phone book.

Примечание: Если вы попробуете это на GH688 то ваш телефон может выдать Keylock
On? меню и вы должны будете вытащить батарею для того что бы включить телефон

Индикатор заряда батареи в выключенном телефоне ...
Когда телефон выключен и не заряжается вы можете посмотреть заряд батареи кратковременно
нажав на клавишу 'NO' и подождать 2 секунды . После чего индикатор будет показан
в своей обычной позиции

Ericsson T28s
*#06# показывает IMEI (International Mobile Equipment Identity) код
*#0000# устанавливает меню на Английский
*#3370# устанавливает Enhaced Full Rate (режим улучшающий качество звука)
#3370# выключает Enhaced Full Rate
*#9000# для ввода SIM lock кода
*#9001# для ввода corporate lock кода (Bosch 908)
*#9002# для ввода provider lock кода (Bosch 908)
*#9003# для ввода network lock кода
*#9004# для ввода subset lock кода
*#9100# для снятия SIM lock кода
*#9101# для снятия corporate lock кода
*#9102# для снятия provider lock кода
*#9103# для снятия network lock кода
*#9104# для снятия subset lock кода
*#3262255*8378# (*#DANCALL*TEST#) для открытия секретного Инженерного меню (меню 10)

10. Engineering
10.1 MS Info
10.1.1 on
10.1.2 off
10.2 Software details
10.2.1 Software version
10.2.2 EEPROM version
10.2 Test / Production details
10.3.1 Hardware data
10.3.2 Production data
10.3.3 Service data
10.3.4 Mechanical data

>*<<*<* - показывает номер и дату выпуска версии программирования
>*<<*<*> - выбор языка?
>*<<*<*>> - выбор языка?

Ericsson GA628
*#06# for checking the IMEI (International Mobile Equipment Identity)
*#0000# to reset the phones menu-language to English.
*#103# then YES Time and date will be shown.
>*<<*<* for checking the firmware revision information (software release)
>*<<*<*> 1-row text strings. if pressing yes you can check the phones text programming in currently selected language. (298 entries)
>*<<*<*>> n-row text strings. if pressing yes you can check the phones text programming in currently selected language. (160 entries?)
Software UPDATED / NEW
The phone should display something similar to this:
CXC125065 - Cell phone's internalproduct code.
PRG - Firmware revision - software version (date & time stamp).
970715 1515
LASTEST Version is: <990401>
Fixes: ???
Software update, how?
I have been asked a lot about how to update the software in cellular phones. The easiest thing to do is to go to the nearest Ericsson
dealer and make him do it for you. Just remember that it is supposed to be free (a receipt is requiet) so don't let him tell you anything else!
Service Provider Lock
The Service Provider (SP) Lock menu is used to lock the cell phone to the SP's SIM card. Once the cell phone is locked to a specific operator, if one inserts a SIM card from a different operator the phone will refuse to accept it! The cell phone will however accept another SIM card from the same operator. To activate/deactivate this lock one needs a special secret code that is not available to the end user. (not even to you... or is it ? in case please let me know!)
Here is how to activate the menu:
<**< Lock to Network? if pressing yes you have 5 attempts to enter NCK.
<**<< Lock to Network subset? if pressing yes you have 5 attempts to enter NSCK.
Warning: Your phone can be locked to a service provider FOREVER by doing this! If an invalid code is entered all five times, the menu will exit and be deactivated! Any further attempt to activate the NCK/NSCK lock Menu will result in the response "Not allowed"! However the NCK/NSCK lock can be recover through a direct clearing in the EEPROM.
Tips and Info Shortcut for Last Dialed call menu...
If you for some reason don't want to enter the 'Last Dialed calls menu' by using the 'YES' key you can use the following key stroke instead:
First '0' then '#'.
Bat. level indicator when turned OFF...
When the phone is turned off and the phone is not changing - the bat. level can be seen for a short period of time by pressing the 'NO' key quick once (it has to be quick!) and then wait for about 2 sec. The bat. level will now be shown in the display at its normal position.
Access menu without Sim card ...
To access to the menu in your phone without having a card inside do the following:
type **04*0000*0000*0000# When display say "Wrong Pin" press NO and you have access to the all menus: Info, Access, Settings, Calculator, Clock, Keylock On?, Mail, Phone book.
NOTE if you try this on your phone may stop at Keylock On? menu and you?ll have to take your battery out to turn the phone on again.
Alarm Clock Menu..
Go to MissedCall
Empty the list
Press the -> key for a second or two
The option Menu size turns up
Choose 'yes' and go from there.
An alarm clock turned up too but it never rang. I think this was because there is no clock in the phone. Free phone calls using the GA628..NB! This trick has only been reported working on PREPAID GSM CARDS and in some countries and with some sw versions. The prepaid GSM SIM CARD is a kind of "SIM card" which only has a sertant amount of credit on it (like a normal phonebox telecard)...
if it can be traced? - I don't know...
Well..here's the trick you dial the no. normally and press YES. While "connecting" is shown on the screen, the following procedure should be carried out:
Press CLR then 0 then # and then NO (twice) so as to switch OFF the phone.
You can then still speak on the phone while it is switched off but the SIM card does not record your calls which will lead to FREE
phone calls in some countries.. we hope!!
Another variant of the code ..
Make a Call, while the phone says Connecting type 083# (the position 83 must be empty! ), when phone says Pos Emtpy, press the NO key and turn off the phone.
If you can make the call with the phone turned off you will face a problem when you need to hang up the phone...the only way for you to do that is remove the battery...???

Ericsson GH688
*#06# for checking the IMEI (International Mobile Equipment Identity)
*#0000# to reset the phones menu-language to English.
>*<<*<* for checking the firmware revision information (software release)
>*<<*<*> 1-row text strings. if pressing yes you can check the phones text programming in currently selected language. (298 entries)
>*<<*<*>> n-row text strings. if pressing yes you can check the phones text programming in currently selected language. (160 entries?)
Software
The phone should display something similar to this:
CXC125065 - Cell phone's internalproduct code.
PRG - Firmware revision - software version (date & time stamp).
970715 1515
LASTEST Version is: <980114>
Fixes: ???
Fixes in Software version<971009>
After receiving an SMS the prompt >>Message read?<< stayed on the screen until you pressed YES or NO. This new software eliminated
this "feature" and when you receive an SMS >>Message read?<< stays on the screen only for a few seconds then it changes into an envelope.
Fixes in Software version <970905> (and Ericsson 788 - software version 970716)
The error is described as "MS unable to find HPLMN if 30 or more competitor ARFCN+s have greater signal strength than the HPLMN."
In other words:
if there are 30 or more channels belonging to other carriers which are stronger than the customer's home network, the phone will not be able to find the customer's home network.
Fixes in Software version <970715>
- The bug of the missing arrow on display when all diverting active.
- Key lock key on display turned around , like in manual. (???)
- An updated GSM operators' list.
- Better and more solid reception.
- Changing problem when turned OFF.
Software update, how?
I have been asked a lot about how to update the software in cellular phones. The easiest thing to do is to go to the nearest Ericsson dealer and make him do it for you. Just remember that it is supposed to be free (a receipt is requiet) so don't let him tell you anything else!
Service Provider Lock
The Service Provider (SP) Lock menu is used to lock the cell phone to the SP's SIM card. Once the cell phone is locked to a specific operator, if one inserts a SIM card from a different operator the phone will refuse to accept it! The cell phone will however accept another SIM card from the same operator.
To activate/deactivate this lock one needs a special secret code that is not available to the end user. (not even to you... or is it ? in case please let me know!)
Here is how to activate the menu:
<**< Lock to Network? if pressing yes you have 5 attempts to enter NCK.
<**<< Lock to Network subset? if pressing yes you have 5 attempts to enter NSCK.
Warning: Your phone can be locked to a service provider FOREVER by doing this! If an invalid code is entered all five times, the menu will exit and be deactivated! Any further attempt to activate the NCK/NSCK lock Menu will result in the response "Not allowed"! However the NCK/NSCK lock can be recover through a direct clearing in the EEPROM.
Tips and Info UPDATED / NEW
Shortcut for Last Dialed call menu...
If you for some reason don't want to enter the 'Last Dialed calls menu' by using the 'YES' key you can use the following key stroke instead: First '0' then '#'. Bat. level indicator when turned OFF...
When the gh688 is turned off and the phone is not changing - the bat. level can be seen for a short period of time by pressing the 'NO' key quick once (it has to be quick!) and then wait for about 2 sec. The bat. level will now be shown in the display at its normal position.
Access menu without Sim card ...
To access to the menu in your phone without having a card inside do the following:
type **04*0000*0000*0000# When display say "Wrong Pin" press NO and you have access to the all menus: Info, Access, Settings, Calculator, Clock, Keylock On?, Mail, Phone book.
NOTE if you try this on the GH688 your phone may stop at Keylock On? menu and you?ll have to take your battery out to turn the phone on again.
Full Network Name...
You can see the Full Network Name by doing the following:
Go to the network menu, when the phone displays the networks available (in 'Select net' and 'Edit list' menu) you can press * and you will see the full name.
Full Operator List...
You can view the full operator list by doing the following:
Go to the 'Edit list' menu under 'networks'. The phone say 'please wait' (searching for other networks). When finished, Press the < key once, then YES twice. Now the phone displays the full list. Browse through the list with the < > keys.
Monitor mod on Ericsson GH688..
How to enable net monitor on Ericson 688..(Let me know from you if your try this.. Haven't got a 688 anymore ;( )
1. Remove SIM from phone
2. Dial 112, press YES, hear something,
3. Dial 112YESNO
4. Press <(left arrow) before SETTINGS
5. Then YES, <(left arrow), then u will see NM on?
6. press YES
Free phone calls using the GH688..
NB! This trick has only been reported working on PREPAID GSM CARDS and in some countries and with some sw versions.The prepaid GSM SIM CARD is a kind of "SIM card" which only has a sertant amount of credit on it (like a normal phonebox telecard)...
if it can be traced? - I don't know...
Well..here's the trick you dial the no. normally and press YES. While "connecting" is shown on the screen, the following procedure should be carried out:
Press CLR then 0 then # and then NO (twice) so as to switch OFF the phone.
You can then still speak on the phone while it is switched off but the SIM card does not record your calls which will lead to FREE phone calls in some countries.. we hope!!
Another variant of the code ..
Make a Call, while the phone says Connecting type 083# (the position 83 must be empty! ), when phone says Pos Emtpy, press the NO key and turn off the phone. If you can make the call with the phone turned off you will face a problem when you need to hang up the phone...the only way for you to do that is remove the battery...??? (Please tell me otherwise!!)
Pin Outs
Bottom view, keyboard up, counting from the left:
01 Out Audio from Mobile Station
02 In Audio to Mobile Station
03 In External Analog Audio Accessory Sense. Connect to GND to enable external mike and speaker
04 - Audio Signal Ground, 0V reference
05 In Portable Handsfree.
06 Out Music Mute (to mute e.g. the car radio) High when calling.
07 In Flash Memory Voltage and Service Voltage. Phone enters debugmode when tied to +5V at power-up.
08 Out Logic Reference, Status On. Sources over 100mA.
09 Out Data from Mobile Station. Debug messages appear here at 112KBaud when in debug mode.
10 GND Digital Ground and DC return
11 In Data to Mobile Station
12 I/O DC positive for battery charging (in)/DC for extenal accessory powering (out)
All signals seem to be at 5V logic. Most debug messages are text. Like "CB ok!" etc. Debug messages are trailed by 0x0A, 0x0D. Power-up means removal of battery, reconnection of battery, depressure of "NO".
A portable handsfree kit is connected as follows:
Portable Handsfree (directly connected to pins 01, 02, 04):
01 Earphone: 16 Ohm
02 Microphone: <= 2 kOhm
05 to be connected to 04 (GND)

Ericsson SH888
*#06# for checking the IMEI (International Mobile Equipment Identity)
>*<<*<* for checking the firmware revision information (software release)
>*<<*<*> 1-row text strings. if pressing yes you can check the phones text programming in currently selected language.
>*<<*<*>> n-row text strings. if pressing yes you can check the phones text programming in currently selected language.
>*<<*<*>>> IR version info. if pressing yes you can check the phones IR device's driver version.
Software
The phone should display something similar to this:
CXC125131- Cell phone's internalproduct code.
PRG - Firmware revision
970715 1515 - software version (date & time stamp).
LASTEST Version is: <991022>
Older versions:
<990614>
CXC125131
PRG
990614 1714
IVER
980408 1035
PRGCXC125101
Software update, how?
I have been asked a lot about how to update the software in cellular phones. The easiest thing to do is to go to the nearest Ericsson dealer and make him do it for you. Just remember that it is supposed to be free (a receipt is requiet) so don't let him tell you anything else!
Service Provider Lock
The Service Provider (SP) Lock menu is used to lock the cell phone to the SP's SIM card. Once the cell phone is locked to a specific operator, if one inserts a SIM card from a different operator the phone will refuse to accept it! The cell phone will however accept another SIM card from the same operator. To activate/deactivate this lock one needs a special secret code that is not available to the end user. (not even to you... or is it ? in case please let me know!)
Here is how to activate the menu:
<**< Lock to Network? if pressing yes you have 5 attempts to enter NCK.
<**<< Lock to Network subset? if pressing yes you have 5 attempts to enter NSCK.
Warning: Your phone can be locked to a service provider FOREVER by doing this! If an invalid code is entered all five times, the menu will exit and be deactivated! Any further attempt to activate the NCK/NSCK lock Menu will result in the response "Not allowed"! However the NCK/NSCK lock can be recover through a direct clearing in the EEPROM.
Tips and Info
Shortcut for Last Dialed call menu...
If you for some reason don't want to enter the 'Last Dialed calls menu' by using the 'YES' key you can use the following key stroke instead: First '0' then '#'. Bat. level indicator when turned OFF...
When the gh688 is turned off and the phone is not changing - the bat. level can be seen for a short period of time by pressing the 'NO' key quick once (it has to be quick!) and then wait for about 2 sec. The bat. level will now be shown in the display at its normal position.
Access menu without Sim card ...
To access to the menu in your phone without having a card inside do the following:
type **04*0000*0000*0000# When display say "Wrong Pin" press NO and you have access to the all menus: Info, Access, Settings, Calculator, Clock, Keylock On?, Mail, Phone book.
NOTE if you try this on the SH888 your phone may stop at Keylock On? menu and you?ll have to take your battery out to turn the phone on again.

Ericsson GF768
Редактирование приветствия.
1. Войдите в Keylock меню.
2. Установите блокировку в Auto.
3. Нажмите YES затем удерживайте Левую стрелку пока не появится Greetings меню.

GF788 меню в вашем GF768 телефоне! (1)
1. Войдите в EDIT Меню и нажмите YES.
2. Нажмите число "2" затем YES.
3. В "NAME" удерживайте клавишу "2" пока не появится число "2". Нажмите YES.
4. Нажмите YES еще раз (для сохранения позиции ) затем БЫСТРОнажмите и удерживайте левую стрелку пока на дисплее не появится "SIZE".
5.Нажмите YES и выберите "Full size". Теперь у вас будет меню как и в GF788 .

GF788 меню в вашем GF768 телефоне! (2)
1.Войдите в MissedCall
2. Очистите список
3. Нажмите Правую стрелку -> на пару секунд
4. Появится SIZE меню
5. Выберете YES и выйдете от туда
Примечание . Данный код работает с версией 990122.

GF788 меню в вашем GF768 телефоне! (3)
1. Войдите и установите громкость звонка и нажмите YES.
2. Когда 'STORED' появится - удерживайте нажатой правую стрелку пока на экране не появится 'Extended Menu'
3. Выберете "Activate" в меню
Примечание . Данный код работает с версией 980910.

Ericsson GF788
*#06# for checking the IMEI (International Mobile Equipment Identity)
>*<<*<* for checking the firmware revision information (software release)
>*<<*<*> 1-row text strings. if pressing yes you can check the phones text programming in currently selected language. (298 entries)
>*<<*<*>> n-row text strings. if pressing yes you can check the phones text programming in currently selected language. (160 entries?)
Software
The phone should display something similar to this:
CXC125065 - Cell phone's internalproduct code.
PRG - Firmware revision - software version (date & time stamp).
970715 1515
LASTEST Version is: <971128>
Fixes: ???
Software update, how?
I have been asked a lot about how to update the software in cellular phones. The easiest thing to do is to go to the nearest Ericsson
dealer and make him do it for you. Just remember that it is supposed to be free (a receipt is requiet) so don't let him tell you anything else!

Service Provider Lock
The Service Provider (SP) Lock menu is used to lock the cell phone to the SP's SIM card. Once the cell phone is locked to a specific operator, if one inserts a SIM card from a different operator the phone will refuse to accept it! The cell phone will however accept another SIM card from the same operator. To activate/deactivate this lock one needs a special secret code that is not available to the end user. (not even to you... or is it ? in case please let me know!)
Here is how to activate the menu:
<**< Lock to Network? if pressing yes you have 5 attempts to enter NCK.
<**<< Lock to Network subset? if pressing yes you have 5 attempts to enter NSCK.
Warning: Your phone can be locked to a service provider FOREVER by doing this!
If an invalid code is entered all five times, the menu will exit and be deactivated! Any further attempt to activate the NCK/NSCK lock Menu will result in the response "Not allowed"! However the NCK/NSCK lock can be recover through a direct clearing in the EEPROM.

Tips and Info Shortcut for Last Dialed call menu...
If you for some reason don't want to enter the 'Last Dialed calls menu' by using the 'YES' key you can use the following key stroke instead: First '0' then '#'. Bat. level indicator when turned OFF... When the gh688 is turned off and the phone is not changing - the bat. level can be seen for a short period of time by pressing the 'NO' key quick once (it has to be quick!) and then wait for about 2 sec. The bat. level will now be shown in the display at its normal position.

Access menu without Sim card ...
To access to the menu in your phone without having a card inside do the following:
type **04*0000*0000*0000# When display say "Wrong Pin" press NO and you have access to the all menus: Info, Access, Settings, Calculator, Clock, Keylock On?, Mail, Phone book.
NOTE if you try this on the GH688 your phone may stop at Keylock On? menu and you?ll have to take your battery out to turn the phone on again.
Free phone calls using the GF788..
NB! This trick has only been reported working on PREPAID GSM CARDS and in some countries and with some sw versions.
The prepaid GSM SIM CARD is a kind of "SIM card" which only has a sertant amount of credit on it (like a normal phonebox telecard)...
if it can be traced? - I don't know...
Well..here's the trick you dial the no. normally and press YES. While "connecting" is shown on the screen, the following procedure should be carried out:
Press CLR then 0 then # and then NO (twice) so as to switch OFF the phone. You can then still speak on the phone while it is switched off but the SIM card does not record your calls which will lead to FREE phone calls in some countries.. we hope!!

Another variant of the code ..
Make a Call, while the phone says Connecting type 083# (the position 83 must be empty! ), when phone says Pos Emtpy, press the NO key and turn off the phone. If you can make the call with the phone turned off you will face a problem when you need to hang up the phone...the only way for you to do that is remove the battery...??? (Please tell me otherwise!!)
Pin Outs
Bottom view, keyboard up, counting from the left:
01 Out Audio from Mobile Station
02 In Audio to Mobile Station
03 In External Analog Audio Accessory Sense. Connect to GND to enable external mike and speaker
04 - Audio Signal Ground, 0V reference
05 In Portable Handsfree.
06 Out Music Mute (to mute e.g. the car radio) High when calling.
07 In Flash Memory Voltage and Service Voltage. Phone enters debugmode when tied to +5V at power-up.
08 Out Logic Reference, Status On. Sources over 100mA.
09 Out Data from Mobile Station. Debug messages appear here at 112KBaud when in debug mode.
10 GND Digital Ground and DC return
11 In Data to Mobile Station
12 I/O DC positive for battery charging (in)/DC for extenal accessory powering (out)
All signals seem to be at 5V logic. Most debug messages are text. Like "CB ok!" etc. Debug messages are trailed by 0x0A, 0x0D. Power-up means removal of battery, reconnection of battery, depressure of "NO".
A portable handsfree kit is connected as follows:
Portable Handsfree (directly connected to pins 01, 02, 04):
01 Earphone: 16 Ohm
02 Microphone: <= 2 kOhm
05 to be connected to 04 (GND)

Ericsson KF-768/788
Secret Codes
923885[Menu] --- NAM programming
904060[Menu] --- Reset phone
904080[Menu] --- Title blink
904090[Menu] --- TestMode on/off
904059[Menu] --- Test Set

Known commands:
(dunno what the data's say)

1F Mode Set
2F Mode Set

27 Some Data (2*param=00..99)
28 Some Data (4*param=00..FF)
38 Many Data
3A Some Data
3C Set Channel Number
(in mode 1F) (4*param=0001..1023)
3D Show RX Level
3F Reboot
4F Exit
5F Some Data (XXXXXXXXXXh)
63 Some Data (XXXX)
73 Copyright
83 Set Channel Number
(in mode 1F) (4*param=?001..?31F)
85 Speaker Off (in mode 1F)
86 Speaker On (in mode 1F)
8B Show TX Level
94 Many Data
95 Some Data (XXXXh)
96 ESN num in hex (XXh-XXXXXXh)
AA Tone (in mode 2F) (2*param=00..FF)
E2 Reset Phone
E3 Reset Phone
E4 Some Data (2*param=00..03,..,90..93)
E5 Check Screen (2*param)
E6 Some Data (2*param=00..99)
UnKnown commands:
(dunno what they do but this is what they say...)

22 Param (2*param)
29 Done (6*param)
2B Error (8*param)
2C Done (4*param)
2D Param (6*param)
2E Param
30 Error (16*param)
31 Error
32 Error
34 Error
35 Error (7*param)
37 Param (>100*param)
39 Done (4*param)
3B Done
60 Error (42*param)
62 Done (6*param)
64 Done (2*param)
65 Done (2*param)
66 Done (2*param)
69 Done (6*param)
72 Param (6*param)
74 Error (6*param)
77 Error (6*param)
78 Done (2*param)
80 Done
81 Done
82 Done
84 Done (2*param)
87 Done
88 Done
8C Done (2*param)
8D Done (4*param)
8F Done
90 Done
92 Error halts (2*param)
98 Error
9A Error
9B Error
9E Error
A0 Done (2*param)
A1 Done
A2 Done (12*param)
AB Done
AC Done
AD Done
E0 Done (4*param)
E1 Done (6*param)
E7 Error
E9 Param
EB Done (2*param)
EC Done (12*param)
ED Done
EE Done (8*param)
EF Error (2*param)

1st. Technique:

904059 Menu - Enter Test Mode
Yes 1F - Enter Mode
Yes 86 - Speaker On
Yes 83???? - Set Channel (?001..?31F)
Yes 3D - Signal Level
Yes 3F - Exi
2nd. Technique:

904059 Menu - Enter Test Mode
Yes 1F - Enter Mode
Yes 86 - Speaker On
Yes 3C???? - Set Channel (0001..1023)
Yes 3D - Signal Level
Yes 3F - Exi

(0..9=0..9 *=A; #=B; clr=C; menu=D; no=E; rcl=F).
press Yes, at the @ enter the command. some of the commands have parameters of different lenght. if one parameter doesnt work try another.

Ericsson A1018s
(UN)LOCKING YOUR ERICSSON A1018s TO SPECIFIC NETWORK : A way to (un)lock your cell phone on to the network:
1. Press : <**<
2. Then on the display appear and give you two choices: Lock to Network ? and Lock to Network subset?
3. Enter the NCK number (code is provided by the SP)
4. You have 5 attemps to do this
5. Then your cell phone will work 'only' with the network

Ericsson 218/337
To view IMEI number *#06#
To view Software Version enter -> * <- <- * <- * CLR (Use with Care)
To activate operator lock <- * * <- (This locks the phone to one carriers SIM card - Use with lots of care).
Press Yes to lock and No to notlock. You can also use the codes below to undo this function. USE AT OWN RISK
I have tested the function Lock to SP... At least on the 337 there's a submenu: Enter SPCK-code. There are 5 attempts, which is showed (05 attempts). At final attempt the phone beeps as a warning, 'this is the final try', when entering the menu... Wrong code exits the menu, so you are not stuck in something... When you have tried to enter the code (wrong) all five times, the menu is deactivated, and you'll get: 'Not allowed' when entering <-**<-
A "secret test mode" can be accessed on the GH337.
There seems to be two methods:
> * < < * > * displays software version, such as 940810 1310
> * < < * < * displays software version, such as 951024 1054
After entering this mode, the < and > keys scroll through a menu. There seems to be different menus for different versions of software.
Software version number are apparently a date and time stamp.
940810 1310 version commands:
TEXT CHECK - shows 254 messages in current language
INIT EEPROM MMI - resents NVRAM settings (User Settings).
Other, probably more recent version:
FLASH - will restart the phone, to the point of entering PIN numbers.You can't kill a 337 when pressing YES while it says "FLASH?", you must connect it to 5/12 volts first to be able to erase the flash-memory.
1-ROW TEXTS - scroll through 174 single line text messages with < and >
n-ROW-TEXTS - scroll through full-screen messages with < and >
950626 1405 version commands:
CXC (number) - The Application software's "product number". The GH337/GF337 is always "CXC 125 005"
PRG - Indication for Programming

Ericsson v3688 Dual Band
To view IMEI (International Mobile Equipment Identity) number enter *#06#
Enhanced Full Rate Codec (EFR):
To Enable EFR press [][][] 119 [] 1 [] OK.
To Disable EFR press [][][] 119 [] 0 [] OK
NOTE: Nothing appears on Screen

Motorola StarTac 130
**05* Block Code
**052* PIN2 Code

Motorola 3688 Dual Band
To view IMEI (International Mobile Equipment Identity) number enter *#06#
Enhanced Full Rate Codec (EFR):
To Enable EFR press [][][] 119 [] 1 [] OK.
To Disable EFR press [][][] 119 [] 0 [] OK

Motorola StarTac 6500
#program# Nam Editing
[fnc]**testmode[sto] Enter Test Mode

Motorola 7500, 7820
Activate RBS
(Note: pause means the * key held in until box appears)
To activate RBS type: [pause] [pause] [pause] 1 1 3 [pause] 1 [pause] [ok]
You now have to press the [MENU] and scroll to the 'Eng Field Options' function with the keys, and enable it.
De-activate RBS
To de-activate RBS type: [pause] [pause] [pause] 1 1 3 [pause] 0 [pause] [ok]
This only works with some versions of software. Please report to me what versions work and which doesn't.
These countries has been reported working:
d460: IT
6200 Flare: UK (Orange), AU
7500: IT (model: F16 HW: 5.2 SW: 2.1)
8200: ES, AU, NL, BE
8400: IT, NL
8700: AU, IT, SG, DE, ES, ZA
What's the use of RBS:
Get Distance From Base Station - Place a call, when it is answered, press [MENU] until 'Eng Field Option' is displayed, press [OK], select 'Active Cell', press [OK], press [MENU] until 'Time Adv xxx' appears, where xxx is a number. Multiply this number by 550, and the result is the distance from the RBS (Radio Base Station), in meters.
Get Signal Quality - press [MENU] until 'Eng Field Option' is displayed, press [OK], select 'Active Cell', press [OK], press [MENU] until 'C1' appears. This is the signal quality. If it becomes negative for longer than 5 seconds, a new cell is selected.

Motorola StarTac 7760
[fnc](SvcCode)(SvcCode)0[rcl]
(default SvcCode=000000) Nam Programming
74663#1[fnc][fnc] Nam1 Programming Mode
79743[fnc][fnc] Enhanced Prefered Scanning
[fnc][fnc]00**testmode[sto] Enter Test Mode
(commands)
2539[sto] A-Key

Motorola 8400, 8700
Activate RBS
(Note: pause means the * key held in until box appears)
To activate RBS type: [pause] [pause] [pause] 1 1 3 [pause] 1 [pause] [ok]
You now have to press the [MENU] and scroll to the 'Eng Field Options' function with the keys, and enable it.
De-activate RBS
To de-activate RBS type: [pause] [pause] [pause] 1 1 3 [pause] 0 [pause] [ok]
This only works with some versions of software. Please report to me what versions work and which doesn't.
These countries has been reported working:
d460: IT
6200 Flare: UK (Orange), AU
7500: IT (model: F16 HW: 5.2 SW: 2.1)
8200: ES, AU, NL, BE
8400: IT, NL
8700: AU, IT, SG, DE, ES, ZA
What's the use of RBS:
Get Distance From Base Station - Place a call, when it is answered, press [MENU] until 'Eng Field Option' is displayed, press [OK], select 'Active Cell', press [OK], press [MENU] until 'Time Adv xxx' appears, where xxx is a number. Multiply this number by 550, and the result is the distance from the RBS (Radio Base Station), in meters.
Get Signal Quality - press [MENU] until 'Eng Field Option' is displayed, press [OK], select 'Active Cell', press [OK], press [MENU] until 'C1' appears. This is the signal quality. If it becomes negative for longer than 5 seconds, a new cell is selected.

Motorola D160
**04* change pin number
**05* request unblocking code
*#06# displays phone IMEI number
USE OF "SP UNLOCK CARD":
1 plug the SP card in
2 switch the phone on
3 it will take about 10 seconds till you see "clone" in the display
4 press 03#
5 wait 10 seconds
6 shut down the phone, now you can use your Motorola with each provider and the user lock and security code will be set on factory default.
Tips and Tricks
Motorola CD 160 Tip.
Press menu and type one of these numbers and press OK:
11 = Status Review
13 = Available Networks
14 = Preferred Networks
22 = Select Keypad Tones
25 = Require SIM Card PIN
26 = Language Selection
32 = Repetitive Timer
33 = Single Alert Timer
34 = Set IN-Call Display
35 = Show Call Timers
36 = Show Call Charges
37 = Call Charge Settings
38 = Reset All Timers
43 = Reset All Timers
45 = Show Last Call
46 = Total For All Calls
47 = Lifetime Timer
51 = Change Unlock Code
52 = Master Reset
53 = Master Clear (Warning!! May result in deleting the Message Editor!!!)
54 = New Security Code
55 = Automatic Lock
63 = Battery Saving Mode
Free call tip
The trick can be done on cd160 and cd520 only:
1 Enter the phone number
2 Enter OK
3 Type *#06#
4 Press Button C
4 And finally press the button for power off.
You should now be able to talk without being billed.

Motorola d460/2500/6200
Activate RBS
(Note: pause means the * key held in until box appears)
To activate RBS type: [pause] [pause] [pause] 1 1 3 [pause] 1 [pause] [ok]
You now have to press the [MENU] and scroll to the 'Eng Field Options' function with the keys, and enable it.
De-activate RBS
To de-activate RBS type: [pause] [pause] [pause] 1 1 3 [pause] 0 [pause] [ok]
This only works with some versions of software. Please report to me what versions work and which doesn't.
These countries has been reported working:
d460: IT
6200 Flare: UK (Orange), AU
7500: IT (model: F16 HW: 5.2 SW: 2.1)
8200: ES, AU, NL, BE
8400: IT, NL
8700: AU, IT, SG, DE, ES, ZA
What's the use of RBS:
Get Distance From Base Station - Place a call, when it is answered, press [MENU] until 'Eng Field Option' is displayed, press [OK], select 'Active Cell', press [OK], press [MENU] until 'Time Adv xxx' appears, where xxx is a number. Multiply this number by 550, and the result is the distance from the RBS (Radio Base Station), in meters.
Get Signal Quality - press [MENU] until 'Eng Field Option' is displayed, press [OK], select 'Active Cell', press [OK], press [MENU] until 'C1' appears. This is the signal quality. If it becomes negative for longer than 5 seconds, a new cell is selected.

Motorola Сервисный режим AMPS/DAMPS/NAMPS телефонов
В этой статье рассматриваются некоторые малоизвестные функции AMPS/NAMPS/DAMPS телефонов от Motorola, очень вероятно, что они могут понадобиться Вам в жизни.
Заранее предупреждаем, что это сервисные настройки, и работать они могут не на всех телефонах, так что вы действуете на свой страх и риск.
Проверено на TeleTac250, Profile300e.
Итак: как сломать пароль (например Вы включаете чужой телефон, а он высвечивает Loc'd и стандартный пароль "123" не подходит):
-включаем телефон
-видим Loc'd
-жмем (FNC)-00**83786633-(STO)-# (вход в сервисный режим) - в итоге должны увидеть US' -жмем 55# - это настройки пользовательских параметров -жмем несколько раз * пока не увидим мигающие по очереди 7 и 000000, нули -это системный код который надо вводить при "легальной" смене пароля
-жмем еще раз * и видим мигающие по очереди 8 (оно нам не надо) и трехзначное число - пароль, которое нам и нужно
-теперь можно выключить телефон, а при включении набрать тот самый код из трех цифр!!!
Общий сброс телефона, может понадобиться например при продаже телефона:
-включаем телефон
- жмем (FNC)-00**83786633-(STO)-# (вход в сервисный режим) - в итоге должны увидеть US'
-давим 32# (нужно ждать пока не пикнет или не перезагрузится),
-сбрасываются все таймеры, все телефонные книги, все настройки возвращаются в состояние по умолчанию;
настройки вашего оператора ессно останутся (телефон резетится около минуты)...

Motorola 5200, 7200, 7500 Pin-Out
Motorola 5200, 7200, 7500 Pin-Out
Numbered right to left, keypad up, battery down looking
1) Gnd
2) Pos
3) True data (TD) (input)
4) Complimentary data (CD) (input)
5) Return data (RD) (output)
6) Audio gnd
7) Audio out
8) Audio in
Motorola 6200, 8200, 8400 Pin-Out
Numbered left to right, keypad up, battery down
1) Audio Ground
2) V+
3) True data (TD) (input)
4) Downlink - Complimentary data (CD) (input)
5) Uplink - Return data (RD) (output)
6) GND
7) Audio Out - on/off
8) Audio In
9) Manual Test - ???
10) Battery Feedback
11) Antenna connector
Tips and Tricks UPDATED / NEW
Motorola 920/930:
The 54# Tip:
Type 1#, 2#........54# on the keypad (when you're not in the menu) to get the phone number used for with this key when speed dialing.