[REF] Easiest way to SIM unlock your Elf/Elfin even if it's "MCC+MNC = None"
First of all, sorry for my bad english...
Here goes the best way I found to unlock all Elf/Elfin, even those with the deadly "MCC+MNC=None" (wich is my elfin).
I saw some people say that when flashed with "Elf_Elfin_2.11.0.0_MFG_ModuleBuild" the phone it's not SIM locked anymore, but after reflashing with another rom it got locked again.
I tried that myself and it was true, I flashed "Elf_Elfin_2.11.0.0_MFG_ModuleBuild", then flashed other rom (with only the OS part) over it and bam, was locked again.
So the locking part should be in the OS. After looking over the system files, I found two files (SIMLock.exe and SIMLock.exe.0416.MUI [my OS was BR Portuguese]) and thought "here is the locking problem" (because "Elf_Elfin_2.11.0.0_MFG_ModuleBuild" don't have those files in the system folder!). Then I deleted those files and it wasn't SIM locked anymore... but it didn't find any networks.
So I serached a little more (google is your best friend in times like this) an discovered that the file rilgsm.dll is responsible for the network... It starts and calls SIMLock.exe, if SIMLock.exe returns a valid SIMcard, then rilgsm.dll starts the network service.
So that's the diference between "Elf_Elfin_2.11.0.0_MFG_ModuleBuild" and the other roms, its rilgsm.dll don't have the part that calls to SIMLock.exe, it just starts the network service based on the SIM card you have inserted.
So I just took that dll from that test rom and copied over another rom and it worked like a charm!
Enough talking, here's what you gotta do to SIM unlock your Elf/Elfin (no matter what rom you have):
You will need this file (unlocked "rilgsm.dll")
- Extract the file you just downloaded to a temporary folder.
- Turn on your mobile WITHOUT the SIM Card.
- Connect your Elf to your PC (activesync).
- Find the files "rilgsm.dll", "SIMLock.exe" and "SIMLock.exe.0***.MUI" (the *** depends on the language of your OS) on the windows folder of your mobile and make a bakup of them (in case you want to SIM lock it again).
- Copy the extracted "rilgsm.dll" over the one on the windows folder (say yes when it asks to replace the file).
- Delete both "SIMLock.exe" and "SIMLock.exe.0***.MUI".
- Turn off your mobile.
- Insert any SIM Card (that didn't work before) and turn your mobile on again and enjoy your newly unlocked ELFin!
If you intend to flash some other rom, just copy the dll again and it's ready to go.
Hope this helps.
Great find!!!
For Rogers users who are using the regular stock ROM, it is probably a good idea for them to use the regular free unlocking method because rilgsm.dll is responsible for Rogers Name Display. Other than that, I hope it works well for everyone else!!!
Anyone else tried this?
yes, I have, did not work. phone does not have simlock.exe or simlock.exe.xxxx.mui on windows folder, and just replacing rilgsm.dll does not affect carrier lock. when inserting sim card from other operators, it still asks for subsidy code.
Tested phone is:
ELF010050
BSTAR502
IPL: 2.24.0002
SPL: 2.26.0000pof
99HEH077-00
Operator Tim Brazil
ps.: I tried as well when phone was with stock rom, and was the same thing.
br
Good idea!!
I haven't tried your procedure but I also know that OS contained in "unbricker rom" (test only rom) do SIM unlocking, so I believe this will work . I will try it soon in my free time. Thanks!!!
I'll try to reflash my elfin tomorrow and do some other tests with it, to see if there are any problems with some specific roms.
My elfin:
ELF010050
BSTAR502
IPL 2.24.0002
SPL 2.24.0000
99HEH077-00
Claro Brazil
I'll post something more tomorrow.
Sorry for the lack of testing before posting (newbie yet).
i would feel better by patching or replacing the simlock.exe file instead of changing the dll.
zerostuff, why don't you add a poll to this thread to see if it works for most people?
Thank you for the idea dsixda.
I sent the .exes and .dlls to a friend of mine and asked asked him if he can find the locking part in those files (because i'm just a normal user and don't know anything about hex editing and stuf).
And I'm still testing some roms on my elfin to see if I can find a working and a non-working way to unlock it (so far, all the roms are working).
thinking of buying a htc elf
hi all im thinking of buying a htc elf but its locked to orange is it easy to unlock and get rid of the orange start up logo .
would you give me step by step guide on how to do it ?
thanks in advance
As you can see, some is easy to unlock others no solution yet...
@ zerostuff
elfin ELF010050 BSTAR502 from Vivo Brazil, had the simlock.exe and simlock0416.exe.mui . I replaced those files with and small clock app, and replaced rilgsm.dll , and did not worked (error 'unavailable file', and then hang) . So, I deleted the simlock.* , and phone got into menu, but no signal.
indeed, this is a way to go, but still need improvements.
@ chester-lad-2009
search board, there are many topics regarding that. this topic is not for that discussion.
br
zerostuff said:
- Delete both "SIMLock.exe" and "SIMLock.exe.0***.MUI".
Click to expand...
Click to collapse
hi, i use onyx 4.43 rom and when i try to delete a message tell me "could not delete. i try in windows and in my elfin too using total comander and sktools. how can delete this files?
I've try on my HTC Touch 3450 (PT) substitute the file and i can't! And i can't found these 2 files...
Using Total Commander
First we move the rilgsm.dll to windows folder, then delete the two files SIMLock.exe & SIMLock.exe.0***.mui, and ignore the Warning! Could not delete 1 file(s)...
Then reboot the ELFin and it´s done....loooooool... No need to put codes...
Just doing those steps, it´s done the SIM_Unlock
Strange??? i don´t know, but work´s
Note: Tested with One PT ELF and One ELFin BRS, worked fine!!!
Great post works like a charm!
i needed to use another explorer since my original rom dont let me move or copy windows folder file!
i used WinFileCE.exe to do the trick , but it worked !
1 more thing , is it possible to cook a rom with this files inside!? because if i hard reset the phone it relocks it self by this method!!
These two files they realy removed???
I cant' remove this two files because the cellphone is using them, how can i stop process's on Windows Mobile?
Using TC I was able to copy rilgsm.dll to \Windows. But simlock.* are a different story and I wasn't able to delete them.
Anyway, using this version of rilgsm causes the phone connection to die: it cannot be set on from Comm Manager. And then after some time, Comm Manager throws two or three errors.
It's an HTC Touch from Claro, Argentina. The ROM is http://forum.xda-developers.com/showthread.php?t=442391
Code:
Touch version : Elfin
Device ID : ELF010150
CID : BSTAR301
IPL : 2.24.0002
SPL : 3.07.cmonex
ROM Version : 3.07.720.03
ExtROM Version : None
Operator Version: None
AKU Version : 1.2.7
Page Pool : 12 MB
RAM Size : 128 MB
ROM Size : 256 MB
Model No. : ELF0100
Part Number : 99HEH129-00
MCC+MNC : Not found
Any information you guys want or some tests that could be run in the device, just tell me.
Cheers.
Not worked Efl 3450 ( 64/128)
The idea was great, but not worked with Efl 3450 ( 64/128)...
My device was patched (IPL 2.27/SPL 2.28 cmonex) and Rom ELVES ROM V5.0 - CE OS 5.2.2021.
No files found in windows dir "SIMLock.exe" and "SIMLock.exe.0***.MUI", so i just copy this file (unlocked "rilgsm.dll") to windows dir and i did a soft reset.
Result: deviced hanged.. new soft reset: boot ok, but no radio ( even trying to turning on manually), just wi-fi working..(nice to make calls from skype )
I don't have any clues about how to bypass simlock..
Any help will be appreciate.
Cheers
RILGSM.dll is not locked/unlocked
The thing is, that file controls GSM<-->PDA radio functions. As you took RILGSM from a "test" rom (is unlocked one)
When u sim unlock a device, it doesnt overwrite RILGSM with "unlocked" properties
The solution will be rewrite a RILGSM.dll file, and write a SIMLOCK.exe file with spoof properties to make think device is unlocked
I have xda orbit II installs android to sd card (micro sd 2GB) and I have a problem.
Log:
Code:
Welcome to vogue Linux
mkdir: cannot create directory '/dev' : File exists
Waiting for SD card
[2.929218] mmc1: Command timeout
[2.930000] mmc1: Command timeout
[2.930000] mmc1: Command timeout
[2.930000] mmc1: Command timeout
[2.930000] SD init
[2.950236] mmc_sd_init_card: Delay 250ms
[3.219813] clk_set_rate 21:25000000
[3.222071] set sd clock - 0 1
[3.331438] mmc1: host does not support reading read
-only switch. assuming write-enable.
[3.340055] SD init Retry
[3.344550] mmc1: new SD card at address 1234
[3.351350] mmcblk0: mmcl:1234 SA02G 1921024KiB
[3.356410] mmcblk0: pl <p5 p6 p7>
GSM phone found
Running on fsck on the SD card
dosfsck 3.0.1 23 nov 2008 Fat32 LFN
Logical sector size is zero
mount: mounting /dev/block/mmcblk0 on /sdcard failed
: Invalid argument
Failed
Failed to mount the SD card. Cannot continue.
/bin/sh: can't acces tty: job control turned off
what the problem was??
how to install Android on polaris step by step?
R: 1.59.46.12
G: 25.89.30.08w
D: 3kostas244 wm 6.5
misiekk167 said:
mount: mounting /dev/block/mmcblk0 on /sdcard failed
: Invalid argument
Failed
Failed to mount the SD card. Cannot continue.
/bin/sh: can't acces tty: job control turned off [/CODE]
what the problem was??
how to install Android on polaris step by step?
R: 1.59.46.12
G: 25.89.30.08w
D: 3kostas244 wm 6.5
Click to expand...
Click to collapse
If you use haret nomorootfs...you have not done all install steps
if you are in the install menu..you must answer all questions (like really install and format...etc) with yes (and no fear...this will not format the card)
with kind regards...Alex
hmm had to install it some times too, until it worked.
Using Warm Donut rls5 i had the problem that after first install it stayed in the green start screen with the android. i usally wait 10minutes and then reset, next boot it works fine. If i reset earlier the next boot has many errors
I think its a good idea to give windows a few minutes too before launching haret
---------
Hey Alex i have some questions:
I read that u are using Warm donut rls5 and got your camera working.
Im quite new to android but how do i get camera working? wifi is okay with the fix...
I dont know what the dzo .. nbh´s are doing. normally i use a nbh to flash a rom, but before i havent testet it i wont flash full android.
Maby you can tell me ^^ havent found a clue here yet.
How to use dzo nbh with sd adroid(nomorootfs)
dertester123 said:
hmm had to install it some times too, until it worked.
Using Warm Donut rls5 i had the problem that after first install it stayed in the green start screen with the android. i usally wait 10minutes and then reset, next boot it works fine. If i reset earlier the next boot has many errors
I think its a good idea to give windows a few minutes too before launching haret
---------
Hey Alex i have some questions:
I read that u are using Warm donut rls5 and got your camera working.
Im quite new to android but how do i get camera working? wifi is okay with the fix...
I dont know what the dzo .. nbh´s are doing. normally i use a nbh to flash a rom, but before i havent testet it i wont flash full android.
Maby you can tell me ^^ havent found a clue here yet.
How to use dzo nbh with sd adroid(nomorootfs)
Click to expand...
Click to collapse
yes it´s good to wait 1..2 times before booting
and yes....i have used warm´s donut from haret (current i try warms eclair..camera don´t work..because eclair but it have bluetooth exchange...and also i give a new try to incubus sense build [also 1.6] )
And i use the files that SuperJMN posted...and camera (stock) and also fx camera or camera pro..run´s good...for picture...video don´t work
i run it from haret (nomorootfs)...because i need my phone..current i have only this...but i try android from time to time and i must say...wow great developmet....much better than last year...
thanks to all developers
if you want boot it with nand and flash...use the files that l1q1d post it in his signature from the: Working android setups thread...i think
with kind regards...
Ah thank you (as usual a good answer)
I think i edited my post, because i found the problem at my side ;D
----
Currently using your rom, but now android is working fine. I think the marketplace is the best!! I think it will be hard for windows to stay alive.. in terms of development speed and usability..
thx
My brother done a funky think on his X500. He tried to update his OS but he used a OS from M900. I told him that he might have "killed" the device, but still I'm trying to give him a hand, hope someone out there can help me as well.
The idea is:
- I've downloaded 6 original eten x500 rom
- I've changed the "magic bytes" using a hex editor - XVI32
- I found in this forum how to update the ROM using the SD or USB method
- I folowed the metod and on both on them I have the next message:
"bootloader programmed ok
knight progtamed ok
eboot programmed ok"
and after aprox 10 seconds i have the next message: "OS program not complete" and the device stops
If I do a reset I have a blank screen.
I have talked with some people to help me, they said that one of the reasons for this problem is that trying to flash a 90MB rom on a 128 MB ROM (a normal x500 file is 60 MB) and the file being to big it over write a vital part of rom. If I try to flash an original rom, the part overwriten first time won't be changed and still remains damaged. A solution would be writing the whole rom, not just the OS. But I couldn't find a method to load the ROM image and a image of the original ROM, the whole 128MB.
Any response is welcome.
Thanks in advance.
I want to restore a backup after i played with some ROMS, but WP7C is giving me Error 8000ffff
on the console i see:
05.11.11 00:07:43 [0x0-0x4e04e].com.microsoft.Windows-Phone-7-Connector[1641] 2011-11-05 00:07:43.010 NOTE [A0ABA540] Sync 0-1-1-0.0545
05.11.11 00:08:03 [0x0-0x4e04e].com.microsoft.Windows-Phone-7-Connector[1641] 2011-11-05 00:08:03.325 ERRR [B0103000] DU Error: restore transfer operation async status = failed
05.11.11 00:08:03 [0x0-0x4e04e].com.microsoft.Windows-Phone-7-Connector[1641] 2011-11-05 00:08:03.325 ERRR [B0103000] Async Op Status Error opCode 00000009 status 00000003 percentage 255 moduleid 00000005 errorCode 8000ffff
does anyone know how to force a restore on mac?
or how to restore the "Data.xx.dat" with Zune, as the mac does not create the accompanying hash files
Same problem here with my Lumia 800 on a MBP. Have you been able to solve this problem?
Well if you've been playing with ROMs, it's most likely because the ROM on the backup is different than on the phone and they aren't compatible. I think this is why custom ROMs don't have cab updateability, of which backups are cabs. As far as I know, there isn't a solution =/
Good luck though!
Hmm thanks, well I didn't update my phone before I tried to restore it though... Anyway having a "clean" installation isn't so bad once in a while..
Hi everyone,
it' my first messagg over here but i read you all the times, it's the most powerful forum i've ever heard, But now, I need you because I have a problem with my phone.
Well, some weeks ago I installed on my device Nexus S Europe (model version, I9023 i think) a custom rom called Nexus Beam, faboulus let's say, ICS, battery drain , never had problem...but a day all the processes started to crash, system.android.process, system.android.markert, etc ...let's say: all the processes, so i thought: "reboot" , it has always been so useful. Not this time...i rebooted the phone and again after 2-3 housrs of usage, the same crashes.
So i decided to put on it the latest MIUI rom (2.3.30)...everything was wonderful, everything was so speedy that "wowww" but again...2-3 hours of usage the same error messages...rebooted again, and..."Google" text for ever!!
SO agaia, deleted EVERYTHING from my sd card, i've done all the kind of formatting thing proposed by cwm (data, system, boot, cache), then tryed to flash an older version on MIUI with Gingerbread. Same stuff! after one hourse the same errors and now i really don't know what to do.
I've tried everytinhg but i'm always on the Google texct while the system is trying to reboot. Tried also with fastboot but it doesn't recognize the device.
Please, can you give me some suggestions?"! I'm really, resperate!!
Just for knowledge, attached here you can find the error i got for all the applications installed on my device. It's always the same, and change only the name of the app:
app_vercode:15
device_model:crespo
build_version:2.3.30
condition:1
processName:com.android.calendar
pid:3280
uid:10006
tag:null
shortMsg:android.database.sqlite.SQLiteException
longMsg:android.database.sqlite.SQLiteException: attempt to write a readonly database
stackTrace:java.lang.RuntimeException: An error occured while executing doInBackground()
at android.os.AsyncTask$3.done(AsyncTask.java:278)
at java.util.concurrent.FutureTask$Sync.innerSetExcep tion(FutureTask.java:273)
at java.util.concurrent.FutureTask.setException(Futur eTask.java:124)
at java.util.concurrent.FutureTask$Sync.innerRun(Futu reTask.java:307)
at java.util.concurrent.FutureTask.run(FutureTask.jav a:137)
at java.util.concurrent.ThreadPoolExecutor.runWorker( ThreadPoolExecutor.java:1076)
at java.util.concurrent.ThreadPoolExecutor$Worker.run (ThreadPoolExecutor.java:569)
at java.lang.Thread.run(Thread.java:856)
Caused by: android.database.sqlite.SQLiteException: attempt to write a readonly database
at android.database.DatabaseUtils.readExceptionFromPa rcel(DatabaseUtils.java:179)
at android.database.DatabaseUtils.readExceptionFromPa rcel(DatabaseUtils.java:135)
at android.content.ContentProviderProxy.query(Content ProviderNative.java:358)
at android.content.ContentResolver.query(ContentResol ver.java:311)
at android.content.CursorLoader.loadInBackground(Curs orLoader.java:56)
at android.content.CursorLoader.loadInBackground(Curs orLoader.java:42)
at android.content.AsyncTaskLoader.onLoadInBackground (AsyncTaskLoader.java:255)
at android.content.AsyncTaskLoader$LoadTask.doInBackg round(AsyncTaskLoader.java:66)
at android.content.AsyncTaskLoader$LoadTask.doInBackg round(AsyncTaskLoader.java:55)
at android.os.AsyncTask$2.call(AsyncTask.java:264)
at java.util.concurrent.FutureTask$Sync.innerRun(Futu reTask.java:305)
It would be really great if you could help me!
Thank you so much and happy easter to everyone!