View Full Version : UPDATES AND NEWS

Pages : [1] 2

02-05-2010, 08:33 AM
In this thread always will be a link to the latest beta version ...

... and, as setool2 is always in beta stage, i strongly suggest to download latest available version and post bugs/reports in the PUBLIC BETA DISCUSSIONS thread ...

please note, that any questions, NOT regarding beta version bugs/reports will be DELETED from beta version discussion forum.

CHECK LAST POST IN THIS (http://support.setool.net/showthread.php?3-UPDATES-AND-NEWS/page666) THREAD FOR RECENT VERSION AND NEWS.

02-05-2010, 08:35 AM

change - if cda field is empty, it will be filled automatically to fixed value during customize. also, customize is generic now, no any pre-installed profiles/etc.
change - further improved lg3g patching, now it is almost generic. that means, that you can select model 8330 and use unlock on new 8130/8138/8120 firmwares (no need downgrade/etc)

some other internal minor bugfixes/improvements.

02-05-2010, 08:36 AM

- bugfix - a new "generic" procedure for lg3g was reported to produce incorrect results. probably, fixed. ( i was tested it on different fw versions, but can't produces incorrect result)

please,if you find that that version incorrectly unlock your phone, please post, in beta discussion thread :

- log from setool2
- phone model and phone firmware version
- any files setool2 produce

02-05-2010, 08:36 AM

- change - added testpoint unlocking/flashing for w550. first in the world
- bugfix - fixed IMEI change to otp-default during 801 phone unlocking. first in the world
- change - added additional settings, possible support for cid54 lg3g models
- bugfix - minor bugfixes, some minor internal updates

big thanks to

- kennyli for w550 phone.
- imobile for testpoint testing and photo.
- keen_mix for sh801 phone

for now a limited number of w550 firmwares available, more to come soon.
(it is VERY hard for me to fetch out firmwares in that days )

no any special notes on w550 - just attach testpoint to ground and do your jobs. a testpoint is VERY simple.

of course, when "master lead" will come with no-tp method, it will be immediately taken and used in setool2 ...

02-05-2010, 08:36 AM

- misc bugfixes, updated loaders, added "old" sharp 703/903 "fast" unlock,etc.

02-05-2010, 08:37 AM

- misc bugfixes, epiusb flashing improved, when flash many phones at once.

02-05-2010, 08:37 AM

- added "new" sharp 703/903 flashpatch.

how to use ? suppose, we have a "new" sharp 703 or 903 at hands and we want make it say,euro. so, we flash patched firmware, after it we go to sharp tab, selecting "903/703" as model and simple pressing unlock. after it, power on phone.
must work, hehehe


i allow stupid zuko and mighty lead to embed that patch into their tools.
after all, if they can't do it themselfs (and they can't) - somebody must care about they customers , eheheh.

02-05-2010, 08:37 AM

- fixed booting of some "brown" phones

02-05-2010, 08:38 AM

- fixed w550 imei-change problem (with TP)
- added full support for no testpoint red cid49 k600/k608/v600
- added partial support for no testpoint red cid49 w550/w600
means, supported unlock,gdfs read/write,flashing of brown49 files.
special files for flashing w550 will be on support shortly.
- misc bugfixes

more to come, stay tuned

as usual, bugreports is welcomed

02-05-2010, 08:39 AM

- fixed TESTPOINT booting of cid49 phones
- fixed recovery procedure of cid49 phones
- UFS activation removed.

bugfix release... changed again some internal things, need to test for stability

02-05-2010, 08:39 AM

- unblocked some cards

users must ask Unlocker for unblocking codes.
note, that FIRST startup after entering unblocking code is about 2 minutes long - it is okay and will happen only once.

02-05-2010, 08:39 AM

- there was a sudden exits in any operations, fixed.

02-05-2010, 08:41 AM

- RED49 W550/W600 no-tp flashig finalized (all operations works now and no special flashes need. warning ! not set your cid to anything <49 - phone will require testpoint to revive.

- added all needed EROMs in EROM folder.

- script is changed almost completely.

new command:

makes a file package for transferring to other phones (so-called customizing )


new command:
writepkg: \package\on\pc

write previously backuped files back to phone


new command:

extracts all files and directories from phone to ph_out/ folder in setool2 directory


new command:

new command:

new command:

changed command:to write a file into phone filesystem now use

now, short script example with explanations:

; read gdfs block 0 unit 0x13. variable will be written as ready script.
; read gdfs block 0 unit 0x13. variable will be written in raw binary form.
; write gdfs block 2 unit 0xcbf bytes 0x31323334 (ascii 1234)
; change dir to root
; readfile sample
; readfile sample
; readfile sample
; change dir to /tpa
; show all directory and filenames
; make directory example
; write file .\cora.fps to /ifs/security/tester/test.txt
; make package from /ifs directory as pkg_your_imei.pkg in current directory
; delete file
; delete directory (can only be done after all files removed)
; write package from test.pkg
; chdir
; show all files in /ifs/security/tester
; extract all data to ph_out directory

02-05-2010, 08:41 AM

- fixed error in script command readfile. thx to gezuzz.

( readfile:/phone/dir/filename.ext not worked as intended)

- some minor improvements in internal code.

02-05-2010, 08:42 AM

- fixed IMEI change for all db2010 phones. thx to igorvod for bugreport.
- some minor improvements.

02-05-2010, 08:42 AM

- lg u8550 (cid54) tp-less flashing (unlock via developers flash 07/08/etc)
- some minor improvements for multi-phones operations.

please note, you can flash ANYTHING into u8550. but once you will flash anything with certificate OTHER THAT RED54 - you will come to dead phone and only TP will cure it.

also please note, that when software says "DAMAGED SOFTWARE, REFLASH ORIGINAL", then YOU MUST FLASH ORIGINAL UNTOUCHED U8550 RED FIRMWARE (only main file)


thanks for imobile for fast bugreport.

02-05-2010, 08:43 AM

- cid49 added in empty board, sorry, forgot about it.
- progressbar is ok now (imobile, you know what i mean )

reuploaded version, probably fixes "not-opening" problem on some systems.

02-05-2010, 08:47 AM

returned to old version of execryptor. GUI v0.91380009

- added FULL RED CID49 NO TESTPOINT support for NEW W500/W600, NEW K600/V600/K608, W900, see notes below
- updated "direct flash patching" for new sharp 703/903 firmwares
- testpoint usage allowed on sharp phones now
- testpoint usage reduced during operations
- added profiles support
- added "phone id" button (test cable, recognize phone cid,etc)
- slightly tuned ignition on ufs/com/dss - must be better
- fixed imei changing problem on w550/w600 in no-tp mode.
- some other internal modifications
- new bugs (unknown yet)

notes on REDCID49 support.

first. it must work only on non-touched (new) phones.
if phone was "tuned" with other software - no any warranty, but, generally, it should work.

during ANY operations red49 phone became unusable (dead) until you flash so-called "restoration" file or flash "main" part of phone flash.

i prepared restoration files for most versions of red49 firmwares,they resides in "rest" folder of setool2 distribution.

usage of restoration file is simple. just determine your firmware version and select corresponding restoration file in "restoration file" edit.

if your unlucky and there is no restoration file for yours version of firmware, then you must fullflash phone (WITHOUT TOUCH TO GDFS AREA), just main+fsimage+complete.

during flashing w900 phones on some (i think most) com cables, CHECK option "disable USB" - phone somehow assumes it is on usb, but it is on com

well, no more to say - go, try, cry or enjoy. preliminary beta testing shows
good percentage of success (99.9%)

some example:

q: i have red49 w550, i don't know what firmware version inside, i want it unlocked and russian.

go to semc tab.
press clear names.
select needed w550 flashfiles (main,fsimage). russian inside emea1
go to settings tab. CHECK complete. CHECK "unlock after flash". UNCHECK "revert to red.
go to semc tab, press flash
when prompted, remove and insert battery, press button "testpoint ok"
phone must be unlocked and flashed.

q: i have k600, i want to unlock it, i know that inside r2ae001 version.

select in "restoration file" edit correct restoration file.
press unlock.
when prompted, remove and insert battery, press button "testpoint ok"
phone must be unlocked and restored, means - working.


button "S" saves all files and settings for current model.
button "L" restores saved files and settings from current model.

profiles works on sharp,lg,semc tabs.
profiles common for all windows.

enjoy, friends.

as usual, my personal **** to zuko. you can steal, but you can't create.
my personal greetings to mighty lead, who defeated upcoming db2020.
hope you will at least laungh on my cid49 method and show us, how to do red49 properly.

and my personal ask to all mighty hackers - please, stay aside from setool. better hack something more interesting

02-05-2010, 08:47 AM

- fixed IMEI changing with w900
- tuned communications with comport, fixed NAK-errors (at least for me)
- added "Identify" for brown phones

02-05-2010, 08:48 AM

- fixed ufs ignition with new drivers (i tested on 3.01.04)
- fixed identify
- again tuned com routines
- disabled recovery for all red49 phones (too much users killed their phones with it)
- returned old way for w550/w600 handling

notes on db2010 red49 support. seems, new method is half-working on db2010 phones.
looks like old hw phones not work with new method. so, i returned old method .

now, there is two w550 in model selection - old and new.
try first old, then, if it will not work - try new.
if new will not work too - sorry, only tp.

we will research it further, but hey... we must use what we have, right ?

02-05-2010, 08:48 AM
GUI v0.91380012

- tuned ufs
- reverted to old comport routines (although they not perfect, they work)

02-05-2010, 08:48 AM
GUI v0.91380013

- csloader was broken when using testpoint on db2010 cid49 phones. fixed

02-05-2010, 08:48 AM
GUI v0.91380015

- comport routines changed completely. need detailed test
- added very raw locks handling. only for those who needs it.
- fixed w900 gdfs write option
- fixed brown49 handling
- fixed numerous internal bugs,some ui improvements..
- new bugs added

a note about comport ignition... reminder - if phone not begins to boot, not stop program, but disconnect cable, remove battery, insert battery and attach cable....

02-05-2010, 08:48 AM
GUI v0.91380017

just bugfix release

fixed some bugs, possible solved HT problem, some memory leaks.. nothing usual.

02-05-2010, 08:49 AM
GUI v0.91380018

- probably fixed db2010 cid49 problems (w550, error "bootloader not responds"). (note, it is not means that phones, killed by recovery can be repaired without tp with that version, it is only for those phones, which "hangs" on bootloader sequence)

- added support (experimental) for red49 k750/w800 phones. no rest files for them at moment - means you must reflash phone completely. of course, you can create own rest files, as usual.

- changed rest files behaviour . now, if "rest. file" edit is empty, program attempts to auto-search for version and auto-restore it from rest folder.

- changed EROMs for new db2010 models (to prevent phone death after change certificate)

- as usual, fighting with execryptor bugs (quits,crashes,etc)

- fixed other minor bugs.

- added new bugs (not know yet where and what )


attached rest files for k750 red49, unrar them into rest folder of setool2 distribution.

02-05-2010, 08:49 AM
GUI v0.91380019

- added, FIRST IN THE WORLD, complete support for red49 w810/z530.
no-tp, of course. so. now setool first (as usual) supports all red49 phone line.

- updated restoration files.

flashes with most recent w810 and z530 is on support.

note- if you damage your erom - that version will NOT help you for any red49 phone.

a note to universaldongle - look at my work, steal it,use it - but know - you are always no.2 on scene.

same applies to other developers, who NOT came with w810 no-tp until now.

personal "****off" to zulea, as usual.


attached rest files for z530 current firmwares.

02-05-2010, 08:49 AM
please redownload latest version from support site, because some rest files was wrong and had caused errors when flashing (phones still can be revived with fullflash)

please accept my great sorry for that mistake.

02-05-2010, 08:50 AM
GUI v0.91380020

- fixed issue with UFS "dummy battery" cable, which CAN bring to dead red49 phone (can only be resurrected by tp).
probably that fix will brings more safe red49 operations.

- slightly updated rest files.

- different not important issues.

download at support

02-05-2010, 08:50 AM
GUI v0.91380021

- CRITICAL bug fixed - db2000 red49 phones unlock was broken, which resulted constant "5 locks". fixed.
(sometimes even bad thing is good.
probably fixing that bug will help me to make lg3g red41/42 scrc fix without tp )

- updated rest files, added z530/w810/k750 gdfs in ssw format (frec folder)

02-05-2010, 08:51 AM
GUI v0.91380022

- added read files functionality for z530/w810 phones. some speedup,heheh.

- bugfixes (i not remember exact what i fix, maybe some ignition probs,maybe not)

- raw z300 support added (read codes,flash,read flash, read/write nvram).
latest flashfiles for z300 uploaded at support.
please note.
if you will write in yours z300 FULL readout from other z300 - it will go dead and only emma3 (at present) will resurrect it.
if you will write in yours z300 NVRAM from other z300 - it will became zombie too.
if you somehow manage to damage boot area (0x0++0x10000) - your phone is complete junk, can't be repaired NEVER. from my side, though, i done all possible so you CAN'T write boot.

so, you have been warned.

z300 "idea" inspired by softmobile,who part of gti team.
sorry,man, you took many of my work, my turn now.
but nobody will tell that i'm silently steal things.

lead, now you can uncomment #DEFINE Z300_GRABBED_FROM_MTBOX
and please return back id strings in 810 prodloader,hehe... angel

zulea, just **** off and die

02-05-2010, 08:51 AM
GUI v0.91380023

- readflash fixed
- some very internal problem fixed, hopefully damned exists will disappear.
- updated rest files
- added w550 gdfs in ssw format

download from support area.

02-05-2010, 08:51 AM
a k510 is appeared on emma, that means - phone is retail now.
i don't have that phone yet, but i looked at its firmwares and noticed that it is same as 810/530.
so, i think that you can use it with current setool2 version, selecting model as w810/z530.

all current flashes is on support, rest files is attached.

current version on support updated with new rest files too.

password for rest files is "****zulea"

02-05-2010, 08:52 AM
GUI v0.91380024

- added experimental support for j220/j230 phones. not tested (i have not phone ), but must work. i put only pair of flashes for test. after (not) successful tests will add all other.

- fixed incorrect work of command "readpkg","readdir" when single root directory specified.

- rest files package synched with current rest files

- edit
redownload version from support, j230 was not recognized, now must be ok.

02-05-2010, 08:52 AM
GUI v0.91380025

- fixed "readdir" command
- full support for w700 added
- from now on restoration files will be distributed separate from main distribute. that is done for cases when only main or only rest files updated.
(you need BOTH rest files package and main package)

you CAN flash w700 fw into k750.
but no single advantage and you will lose camera
even if manually replace camera driver - it still refuses to work.

02-05-2010, 08:53 AM
GUI v0.91380027

- finally j220/j230 fully working and tested (read codes/read flash/flash firmware)

02-05-2010, 08:53 AM
J230_R5J complete firmware pack uploaded on support.
tomorrow will upload complete pack for j220

02-05-2010, 08:53 AM
J230_R5H complete firmware pack uploaded on support.

02-05-2010, 08:54 AM
GUI v0.91380028

- on some systems "protection error" appears, while older versions work ok. must be fixed.
- some lowlevel tuning


last-chance bug was found and fixed.
just redownload version from support.

02-05-2010, 08:54 AM
GUI v0.91380029

- changed gui slightly - added CDA dropdown listbox. warning, cda list is saved when window closed (quit button)
- again some ll tuning.

uploaded all w600i/c flashfiles which present on emma3, rest files package updated.

02-05-2010, 08:55 AM
GUI v0.91380030

- there was a problem - if you checked "unlock after flash" and flash lg3g red41/42/54, after flash phone was dead (need to unlock with tp afterward). that issue was fixed , it works like designed now.

- internal rebuilds, preparing for db2020 unlock and flash support.


SEMC, by error, released some number (BIG) of BROWN w700 with LOCKED OTP

when flashing, that phones will produce such errors:

CSloader version:
loader startup: executed
wrong responce, break.
loader filesystem startup failed, that is fatalYOU NEED TO FLASH SPECIAL EROM from eroms\w700red_erom.ssw.cry and AFTER flashing that erom repeat complete sequence.

flashing any other EROMs will bring you to testpoint.

02-05-2010, 08:55 AM
GUI v0.91380031

- now you can really flash any CID flash file in any CID phone.
- some bugfixes

i'm going to complete rewrite setool2 on normal compiler.
prepare for many bugs and sone intresting features

02-05-2010, 08:56 AM
j220 R5k firmware uploaded on support.
j230 R5k firmware uploaded on support.

02-05-2010, 08:56 AM
k300 firmware r2ba010 added on support
k300 firmware r2bd001 added on support
k310 firmware r4da044 added on support (use model w810/z530/w300)

02-05-2010, 08:56 AM
v802 specific firmware r1aa002 added on support

02-05-2010, 08:56 AM
for fun on support added v600 firmware versions: R2AF001,R2BA019,R2K005,r2t002,r4ad004

02-05-2010, 08:57 AM
j300 firmware r2ba010,r2bd001 added on support

02-05-2010, 08:57 AM
z530 firmware R6BA030 added on support.

rest files package updated.
only new rest files attached (pwd "****zulea")

02-05-2010, 08:57 AM
k310 langpacks updated at support.

rest files attached.

pwd "****stealers"

02-05-2010, 08:57 AM
for fun k608i r2ba019 added on support.

also i collected some rare rest files. (from now - common)

password is "****stealers"

02-05-2010, 08:57 AM
w300 firmware versions r9a035,r9a036 added on support (mostly it is chinese)

rest files attached

password is "****stealers"

02-05-2010, 08:58 AM
GUI v0.91380036

- setool2 not working properly under dead os (win95/98/me) . fixed.
- added "support" for nice tool of arash (simple put his exe in directory and press E)
- red49 k600/k608/v600 support was broken. fixed.
- some cosmetic low-level fixes

02-05-2010, 08:58 AM
major firmware update for w300

new rest files attached. password is "****zulea"

customization for w300 will be updated in one hour

02-05-2010, 08:59 AM
updated customizations and firmware for k610 (operator specific)

attached forgotten rest files for w800

pwd "****zulea"

02-05-2010, 08:59 AM
z550 is emerged. looks like it is another sibley-based phone, so select w810 for it.
z550 r6ba033 firmware and customization packs uploaded at support.

rest files attached, password is "****stealers"

02-05-2010, 08:59 AM
k510 firmwares and customization files updated and sorted.
new rest files attached, pwd is "****stealers"

02-05-2010, 08:59 AM
GUI v0.91380037

- by mistake, phone repowered during complete, fixed.
- profiles now saves settings separate for every model in every window.
- some other ll test improvements...

accidently broken testpoint usage fixed, reuploaded. (gmt+3 21:32)

02-05-2010, 09:00 AM
k790 emerged on emma. that is another spawn from db2020 family, so you can use for its flashing k800 or k610 model

firmwares and customization files on support.

02-05-2010, 09:00 AM
pls if anybody encounters a errors with complete like

"failed, falling back to 115200"

using com cable as interface - redownload 037 version from support area.

02-05-2010, 09:01 AM
GUI v0.91380038

- nested directory creation during package restore was broken, fixed.

z550 firmwares and customization files updated.

new rest file attached. pwd is "****stealers"

02-05-2010, 09:02 AM
k310 firmware and customization files updated

02-05-2010, 09:02 AM
k800 firmware r1cd001,r1cf001 added
k790 firmware r1cg001 added

k790,k800 customization updated

02-05-2010, 09:02 AM
z550 major langpacks update, customization files updated too.

02-05-2010, 09:03 AM
it has been found, that all sibley-based phones has slightly different gdfs sizes, so all gdfs_in_ssw_format for k310,k510,z530,z550,w300,w810 was broken, and using them COULD bring errors when complete
( "starting gdfs:error 5" ) and when unlocking ( "error while setting up gdfs")

corrected gdfs files attached, software at support area updated.

pwd "****zulea"

a little reminder how to use gdfs_in_ssw_format for dead phone restoration (erom must be ok for it)

check ONLY complete phone, unlock after flash
semc tab:
add files: xxx_gdfs_in_ssw_format+main+fsimage
press flash
phone must be flashed, unlocked and completed

CORRECT gdfs sizes for k310,k510,z530,z550,w300,w810

start 47e00000
len 200000

i need k310 gdfs in ssw format for complete set.

02-05-2010, 09:03 AM
major langpack update for w300 firmware version r9a036

02-05-2010, 09:03 AM
GUI v0.91380039

- SEMCsec released EROM updater for db2020.
it can help with red blink and "gdfs startup error:29" on db2020 phones.
it can't help to repair damaged security units.
it only works on com/ufs cables.

how to use - settings, set USE SERVER.
semc tab - select phone model
press recovery.

erom must be upgraded and possible your problem solved.

- some fixes in com cables and db2020 booting
- card unblocking not works as intended, fixed.

thx for message, as far as i know, i'm first who received messages in official SEMC loaders

about 90% - well, you beat us with multiple RSA sign. but what you will do, when we got yours auth dongle? or one of intresting loaders ?
gti already done it, that means it is leaked and that means we will get it too, in time.

02-05-2010, 09:04 AM
GUI v0.91380040

- protector update, now setool2 must co-exist with KAV
- it has been found, that in Z530 EROM not HW protected.

Because of that,possible to revive Z530 phones with damaged erom.
How to do:

on semc tab, select z530 in model list.
press recovery.
phone will be recovered and attempt will be made to repair EROM.
most possible, you will need to reflash phone in order to get it fully working.

warning. if you select z530 and will use recovery with k310/k510/w300/w810/z550 phone - you will receive dead brick. it is only usable for current breed of Z530 phones

02-05-2010, 09:04 AM
k800 r1ed001 firmware uploaded in support area.
w810 r4db005 firmware updated

02-05-2010, 09:04 AM
k610 r1cb001 firmware updated.
k610 r1ed001 firmware uploaded.

02-05-2010, 09:04 AM
k618 r1cf001 firmwares added (look in k610 section)
k61x customizations update

02-05-2010, 09:05 AM
GUI v0.91380041

- added brown to red db2020 conversion.
how to use.
first, be sure your phone is cid49. (press identify and read "flash cid:49")
if not, go to "Empty Fill" tab, select CID49, press recovery - phone will be brown cid49
next, convert phone to red.
select correct model, select correct conversion EROM
(example - phone is k610, conversion EROM is eroms\k610_erom_cnv_brown2red.cry )
press flash.
your phone is read and ready to flash using credits system.
( because of obvious reasons filesystem read not supported for brown 2020,unlocking is not supported for brown 2020,well... only flashing possible )

- profiles auto load at startup now
- misc loaders updated
- recovery procedure for z530 updated a bit.

k790 r1ed001 firmware uploaded.
k610 r1ed001 fimrware updated.

02-05-2010, 09:06 AM
k750 r1db001 rest files added, firmware will be available tomorrow.. and semc not released full pack of k750 r1db001 , so will be available only few langpacks.

pwd is "****stealers"

rest.rar updated

02-05-2010, 09:06 AM
J220 R5N uploaded
J230 R5N uploaded
K750 R1DB001 uploaded (very few lp released by SEMC so far)
W700 R1DB001 uploaded

02-05-2010, 09:07 AM
rest files for K510 R4EA031 firmware attached.
one rest file for k750 r1da001 firmware added.

pwd is "****stealers" (when asked)

K510 R4EA031 firmware uploaded
K750 R1DA001 firmware major update
Z610 R1ED001 firmware and customization files uploaded (SEMC not released all langpacks for now)

02-05-2010, 09:07 AM
K610 IM R1ED001 firmware and customization packs uploaded

02-05-2010, 09:08 AM
GUI v0.91380042

that is very beta, main target is support "new" flash chip in z300/j220/j230.
"new flash symptom" was "empty" codes when reading and garbled flash readout, unabilty to flash.
hopefully, all of that was fixed, but need checking. support was done blindly,so ... you have been warned.
please, try "unlock" first, and only if it works try flash.
"unlock" CAN NOT kill your phone
once again, i have no response for dead phone - THAT IS TEST version.

New feature is ".vkp" support. .vkp is patches, maded by different persons to tune your phone. those who need that patches know where to get them.
Soon i will made a .vkp request thread here and will ask some famous patchers to visit that thread.
Usage simple - put .vkp file in misc. edit and press write script.
thx goes to darkmen for .vkp parser.

Sibley-based (w300/w810/k310/k510/z550) emptyboards support was flawed, fixed.
as i remember - locks were incorrectly written, should be fixed.

rest.rar updated with latest restoration files.

02-05-2010, 09:08 AM
Z610 R1ED001 firmware updated.
W850 R1ED001 firmware uploaded.

02-05-2010, 09:08 AM
Z610 R1ED001 firmware updated
K610 R1ED001 firmware updated

W810 R4EA031 rest files attached
Z530 R6DA001 rest files attached

02-05-2010, 09:09 AM
W810 R1EA031 firmware uploaded.
Z530 R6DA001 firmware uploaded.
Z610 R1ED001 firmware updated.

02-05-2010, 09:09 AM
SOME W710 R1EE001 firmware and custpacks uploaded

02-05-2010, 09:09 AM
SOME Z710 R1EF001 firmware and custpacks uploaded

02-05-2010, 09:10 AM
some w850 r1ed001 firmware and custpacks uploaded
some k310 r4ea031 firmware uploaded

02-05-2010, 09:10 AM
GUI v0.91380043

- added usercode reset for db2020 phone.
requires server credits.

how to use - two way

first way good when doing only usercode reset
- check "use server".
- select correct model
- press unlock. usercode will be resetted to 0000

second way good when flashing.

- check "use server"
- check "unlock after flash"
- check "complete phone" if you need it
- select correct model
- press flash. phone will be flashed and user code will be resetted to 0000

02-05-2010, 09:10 AM
some K800 R1EF001,R1EJ001 firmwares uploaded
some K790 R1EG001 firmwares and customization packs uploaded

02-05-2010, 09:11 AM
Z550 R6CA009 firmware uploaded
Z710 R1EF001 firmware and customization packs major update
W850 R1ED001 firmware and customization packs major update

02-05-2010, 09:11 AM
W710 R1EE001 firmware and customization packs major update
Z610 R1ED001 firmware and customization packs major update
some of Z610 R1EJ001 firmware uploaded
some of Z610 R1EL001 firmware uploaded

02-05-2010, 09:11 AM
Z525 R3K030 firmware and customization files uploaded for fun.

02-05-2010, 09:12 AM
some unusual w810 rest files attached.
some unusual w300 rest files attached.

02-05-2010, 09:12 AM
W300 R4EA031 firmware uploaded (some phones will only work with it)
W300 R9A036 firmware updated
W810 R4CE012, R4CK003, R4DB005,R4EA031 firmware updated

customizations for that models updated too, still uploading....

02-05-2010, 09:13 AM
k800 r1ed001 firmware updated
k800 r1ej001 firmware updated

02-05-2010, 09:13 AM
W850 R1ED001,R1EG001,R1EJ001,R1GA029 uploaded/updated

02-05-2010, 09:13 AM
GUI v0.91380044

interim fixup release.

- added support for z300/j220/j230 renesas flash (mfgid:1c)
- script with files references now must correctly executing from any directory
- simlock codes now random during unlocking
- countless internal tunings/fixups/preparations.
- new bugs, and i hope you help me to find them

02-05-2010, 09:13 AM
GUI v0.91380046

interim fixup release.

- cosmetic addons, like "unused" buttons disabled now when needed
- CID change lower than original and color change if OTP locked prohibited.
- critical bug fixed - on all sibley based phones, if you set "unlock after flash" and "complete phone" - gdfs startup was stalled. thx to vasilius for reporting and help in finding and eliminating bug.
- added several gdfs in bin format.
- other internal updates.
- m600/w950 support will be ready really soon....

045 version has bug with unlock, need to sleep a little sorry.

02-05-2010, 09:14 AM
Z558 R4FA013 firmware and customization files uploaded.

02-05-2010, 09:14 AM
GUI v0.91380047

interim fixup release.

- critical bug fixed - on some db2020 phones (diff hw ???) flashing was terminating with "subblock NAK" error. should be fixed.
- db2020 identify now displays all information about phone state

02-05-2010, 09:15 AM
GUI v0.91380049

some stable ( ) release and some NEW features.

- fixup for some db2020 mobiles booting (err:36 and so on)
- fixup for some sibley-based (w300/k310/k510/w300/z550/w810) flash break

- new feature. red cid49 phones (db2000/db2010) can now be flashed via USB with ENORMOUS FAST speed using usual dcu60 cable (or miniusb for k600/z800). FROM NOW NO ONE CAN SAY "my XXX box flashing faster than yours setool2" supported ONLY RED CID 49 PHONES.

there is several restrictions.
UNLOCK is working. BUT if yours gdfs is damaged (rewrited from other phone) - you REQUIRED to use com/ufs connections to repair security values.
IMEI change not working because of same reason.
EROM must be intact in order for USB flashing work.
no more restriction.

some timings:

fullflash of w810 phone - 360 seconds. (about 700 by uart)
fullflash of w900 phone - 733 seconds. (about 1400 by uart)

great thx for irritating testing goes to : vasilius, lider, sebagsm

of course - that feature will be immediately copied by other stealers.
**** them. do your own or insert my copyrights.
well. now you CAN NOT do "you own" - i was first and you are stealers

02-05-2010, 09:16 AM
GUI v0.91380050

- bugfix. somehow i broke completely red49 support for k750/z520 series. fixed. thx for reporting goes to vascoff

02-05-2010, 09:16 AM
GUI v0.91380054

- K320 SERVER support added
- FREE USERCODE READ added (press identify) - works for db2000/2010/db2012
- misc. bugfixes
- new bugs (hope not )

K320 R4EA031 firmware and customization packs uploaded.

02-05-2010, 09:16 AM
Z300A, Z300 R3Y firmwares uploaded by request.

02-05-2010, 11:16 AM

- user lock was incorrectly displayed if digit numbers uneven. fixed
- lg3g patching will be faster on SOME firmwares.

- added SERVER-based support for FLASHING, standalone support for usercode read for new SEMC smartphones
- m600/m608/w950/w958/p990.

carefully read instruction - that will help you NOT to kill expensive thing.


first, you need download needed firmware package.
add it to firmware area on smartphone tab.

check "use server" and enter your login/password.

now, you need install drivers for flashing.

for that, poweron smartphone in fw update mode.

- for p990/m600 press and hold "@" on TURNED OFF phone, then attach dcu60.
- for w950 press and hold "C" on TURNED OFF phone, then attach dcu60.

windows will ask you for a drivers. drivers in %setool2 dist%\drivers\HermioneDrivers. i attached a picture how correctly installed drivers must look in device manager.

now, you can press desired operation.

identify - to readout phone information (and userlock)
flash - to flash package.

!note. there is a checkbox named "process PDA update files" if you UNCHECK it - NO CREDIT WILL BE DEDUCTED from your account, but CDA will be UNCHANGED in phone. you got me ? ( got, lol ) yes, that is FREE FLASHING.

!note. if you flashing multiple smartphones, BE SURE THAT DRIVERS ARE INSTALLED BEFORE starting desired operation.

read gdfs - read gdfs for different things.
write gdfs - write gdfs back.

!note. if you write gdfs from other phone, say bye-bye to yours expensive pda.

well, enough.

lets flash'em.

p990 flashes will be uploaded in next day-two.

02-05-2010, 11:16 AM

- P990 chinese-based flashfiles failed on USERDATA part. fixed. (chinese flashes updated, you MUST re-download them)

- i decided to reveal some feature for PDA phones. story:
SEMC PDA phones has two revisions of chips. "new" and "old".
"new" revision has changed security system and can not be made standalone.
"old" revision has just impoved security and can be breached.

so, as small present in upcoming new year, you have now opportunity to work FULLY (rebuild security (unlocking), change IMEI, read/write gdfs, change CDA) with OLD REVISIONS of PDA (and there is a LOT OF THEM) WITHOUT SERVER.

for that, first, you need determine security type (press identify, i attached two screens with old and new security)

if security new - bad luck.
if security old - uncheck use server and do whatever you like

rest files attached, extract them to rest folder.

02-05-2010, 11:16 AM

- critical bugfix
- support was broken for all CID49 DB2000 phones. fixed. thx to duzz for report.

02-05-2010, 11:17 AM

- bugfix. sometimes (very-very rare readout in ssw format was incorrect). fixed. ( thx goes to vascoff for reporting bug )

- added csca-based unlock for NEW PDA revisions and K320 (well, you can use it for all other models, except db2020-based, but it will be waste of credits)


1. insert DCU60 (only that is supported for csca unlock) in TURNED ON PHONE
2. install drivers. included drivers for PDAs (drivers\hermione) and for K320 (drivers\k320_usb_signed_drivers)
3. turn off phone, disconnect it
4. select needed model
5. check "use server for csca unlock/flash"
6. press unlock
7. when prompted, detach phone, turn it on and insert cable
8. wait until all drivers appears
9. press testpoint ok - phone will be unlocked.


- csca-unlock only supported on .198 server
- csca-unlock will NOT cure yours phone if you wrote to it GDFS from other phone
- csca-unlock will only work stable and good on DCU60

for now price for csca-unlock 5 credits
csca-logs are rare, so they will periodically deplete, while flashing-log are still be online. i will inform about it in log-info thread

02-05-2010, 11:17 AM

- added support for DB2020 CID51 operations (flash,read/write gdfs,script,uselock reset,well, all standart operations)
- "unlock after flash" incorrectly works with sharp3g phones USB flashing. fixed.
- "unlock after flash" for lg3g+testpoint now recalc security automatically.
- misc minor bugfixes.

02-05-2010, 11:17 AM

- cosmetic - fixed error message during lg unlock.
- cosmetic - wrong chipid (connections problems) filtered now.
- addon - added workaround for white screen problem on db2010 sibley-based phones with ST flash and db2020 phones with ST flash.
note - that is not panacea. it will only help SOMETIMES. usage is very simple - just full flash white screen phone with latest fw version using 061 setool2 version.

rest files archive finally synched with latest rest files. if you already downloaded all rest files from news thread - you not need download rest archive.

02-05-2010, 11:17 AM
- otp<>gdfs imei check now supports latest pda firmware - some internal changes

02-05-2010, 11:18 AM

- sadly,but in v0.91380063 DB2020 OTP CID51 support was broken, fixed

select USB as interface. that is REQUIRED.
select K610 as phone model (or any other DB2020 model, they are same)
settings - check "use server for csca unlock/flash", "do full unlock instead of usercode reset for db2020", fill your login details.

back to semc tab, press unlock, attach phone with pressed "C" (or 2+5) buttons.

wait for signature calculation, it can took about 2 minute.
if calculation will fail, your credits will NOT be deducted.
if calculation is success, then signature will be saved in backup\%imei% folder in your setool2 directory.

next, backup will be created so you will be able to restore phone if something will go wrong (hardly believe, but who knows...)

next, you will be prompted to detach phone and turn it on. do so.
detach phone.
turn it on FULLY
phone will be on 5 locks, that is normal.
connect phone to usb.
if phone will ask you switch to phone mode - switch to phone mode.
it can ask you for drivers,if you not installed them previously.
install all drivers (links below)
be SURE that you install all drivers correctly.
press "testpoint ok"
procedure will continue,phone will be switched off and unlocked.

remember, if something will go wrong - you have a backup of security units.

cost of DB2020 unlock is 12 credits.
currently, BOTH servers are supporting DB2020 unlock

as usual, credits will NOT be recovered in case of connection failures.

it will work, if you UNCHECK option "do full unlock instead of usercode reset for db2020" and press UNLOCK.

because of recent problems with sql server on support area, i will post links to new version and phone drivers here. hosting provider are informed about probles and, hopefully, they will be solved.

02-05-2010, 11:18 AM

- it was reported, that on some rare db2020 phones you got following error

loader unlock: executed
Backup security data...
var not exists
Elapsed:22 secs.
it has been fixed.

02-05-2010, 11:18 AM

- public testing of db2020 phones reveals a error:

if you, in same window, unlocked any NOT db2020 phone and then attempting to unlock db2020 phone - you will loose 1 credit and phone will be in "red blink" state after second step. of course, backup is created, so you can restore phone back to "live state. received signature is correct too, so yours 7 creds is not wasted. such thing has been fixed in current version.

02-05-2010, 11:18 AM

- during csca unlock we now enumerate only present ports (to be more simple - stage 2 of csca unlock became faster in most cases)
- J220/J230/Z300 phones with "new" security supported (7-digits lock numbers)
- DB2020 CID51 full identify support
- DB2020 CID51 EROM upgrade
- minor bugfixes.

02-05-2010, 11:18 AM

mostly it is cosmetic release, but some intresting things added.


- added strings for several "missing" db2020 models. semc model list sorted ;)
- changed csca unlock stage 2 behaviour - it will search phone now until phone will be found or until you press stop. that must help save credits for some ppl.
- changed PDA detection. must be better and faster now. (remember : attach PDA only when you told to do so)
- changed script command "gdfsread" behaviour - now if you read several gdfs units from script, all units will go as one file named %imei%, instead of old "one file per one unit" behaviour
- setool2 will now save full session logs in directory "logs"
- updated patch-loaders from DB2010/DB2020 (white screen "solution")
- other cosmetic fixes, more info displayed sometimes,etc.
- new bugs, of course. waiting for reports to fix it ;)

02-05-2010, 11:19 AM

- profiles now correctly load settings for models when switching only tabs.
- return to old scheme cid/color detection for db2020 usb operations (some users reports that phone COLOR/CID can't be detected)
- added some models (w880,k550) so yes, yes. you must again remade profiles.
- db2020 empyboard filling supported (because i saw my "friend" on kukuruzer
takes money for that,while it is standalone process and not requires any special moves, that is unfair and i shall fix it). quick howto:
-go to empty tab
-select ANY db2020 model
-fill desired IMEI (or not fill if you have not want to write it)
-check WRITE OTP (or not check if you not want to write it)
-select CID49 (required)
-select needed brown2red erom
-press FLASH
-phone now complete retail (especially if you wrote otp) and must be serviced as any retail db2020 phone (note - NOT USE EROM UPGRADE)

02-05-2010, 11:19 AM

first, and most important news.

you are not required now to register on support or use login/password to login on support area.

all you need - download software from www.setool.net (http://www.setool.net), install drivers and press GO SUPPORT button.

- added some missed models...
- fixed some cosmetic bugs

02-05-2010, 11:19 AM

- made 5-times retry of each AT-query during csca unlock step2 (should help when phone drivers installation not finished)
- locks tab not works correctly when USB was used as selected interface
- some cosmetic fixes

02-05-2010, 11:19 AM

- changed csca unlock step1 behaviour. now, if there is ANY *.seczone files in %setool2%\backup\%imei%\ folder,step1 (erasing locks and writing signature) is skipped and step2 executing immediately. That is done to prevent credit loss if on step2 phone drivers installed incorrectly or if server connection broken on previous attempt of step2.

if you ABSOLUTELY know what are you doing - you can erase *.seczone files from %setool2%\backup\%imei% and step1 will be executed again for that phone.

- added "dummy battery" option for UFS cables with "crocodile" or otherwise called "dummy battery". if you check that option - before each phone shutdown we will execute grace delay to allow phone loader finish its work (for example, without that option you CAN get a "configuration error" on phones after flashing them using UFS and cable with dummy battery). grace period length is 5 seconds by default, but it can be changed with option "ufs_dummy_delay" in [main] section of setool2.ini (period counted in ms, so ufs_dummy_delay=5000 is 5 seconds)

- very minor ui bugfixes.

02-05-2010, 11:19 AM
Thursday, 22 March 2007

- added db2020 cid52 server support (flash,erom upg,usercode reset, network unlock (when we will restore server functionality))
- added db2012 cid51 server support ( flash,usercode reset, network unlock)
- added pnx5230 (Z310) cid51 server support (flash,usercode reset, identify NOT supported yet,network unlock (when we will restore server functionality))

- now all simlock types displayed in identify (state shown only if lock is locked)
- changed .ini file handling, so you must again rebuild settings. now settings for phones COMMON for all windows, beware. from now on settings will be intact when new models will be added.
- added new phone model names
- many internal changes,so please check for bugs.

w200 r1gb001 cid51 firmware uploaded
z310 r1jc002 cid51 firmware uploaded
k610 cid52 firmwares uploaded
k800 cid52 firmwares uploaded
w850 cid52 firmwares uploaded

db2020_firmware_in_gdfs_format added in distr.rar for completely blank boards. phones.rar updated with z310 driver for csca unlock


02-05-2010, 11:20 AM
Monday, 26 March 2007

- corrected pnx5230 (z310) CSCA handling to prevent log loss and phone "damage". once again i remind that pnx5230 using same security as db2020 and we limited now to flashing and userlock reset (until we find some way to run server)
- included cid49_51_to_cid52 conversion. better not use it... really.




K810 r1kc001 CID52 firmware and customization packs uploaded
K790 r1cc003 CID52 firmware uploaded
K790 r1cg001 CID52 firmware uploaded
K790 r1eg001 CID52 firmware uploaded
K790 r1gb001 CID52 firmware uploaded
K790 r1jc002 CID52 firmware uploaded
K790 r1jg001 CID52 firmware uploaded ( K790 customization packs updated. )

02-05-2010, 11:22 AM
Tuesday, 17 April 2007

- "err: 10" error when z530 recovery operation executed fixed.
- customization packs now parsed when selected (shows language info,etc)
- added phonebook extraction from gdfs .bin format dump (NOT SSW).
usage is simple: select .bin file into misc. files edit, gdfs will be
parsed and .vcf file will be created.
phonebook unit is courtesy of PANUA, thx to him.
- all CID>50 now assumed to be used with auth dongle, to prevent credits loss.
- identify working now on USB interface
(in some cases reduced loaders are used, warning is displayed in such case)
- some other not important fixes (bugs ? ;) )

02-05-2010, 11:22 AM
Wednesday, 9 May 2007

- added cid 49/50/51 alternative security bypass for db2012/db2020 phones.
what that means ? that means, you can unlock with flash patch
ALL cid49/50/51 DB2012/DB2020 phones.
all you need - VALID ACCOUNT WITH 1 (ONE) LOG, click here to see credits resellers
check "user server" and "use alternative security bypass",
then press desired operation.
of course, scripts is FULLY supported in THAT MODE.

02-05-2010, 11:22 AM
Saturday, 12 May 2007

- db2012 com/ufs csloader operations (i.e. "complete")
was broken on normal speeds (dcu60 interface worked ok).
that is fixed.

- a lot of users, when doing "erom upgrade"
(required to avoid err:30 on altbypass), forget to uncheck
"alt bypass" option and lose logs without result.
altbypass is ignored now when doing "recovery".

so far no other bugs were discovered.

02-05-2010, 11:22 AM
Saturday, 12 May 2007

- db2010 cid50/51 phones must work okay now
(do main+fs+custpack+unlock_after_flash combo if there is no rest files)
- more "foolproof" work with "alternative security bypass" option added
- some cosmetic things.

02-05-2010, 11:22 AM
Friday, 25 May 2007

- added PNX5230 CID52 flashing/usercode reset/network unlock
(via special server)
- added PNX5230 identify (defeated lazyness at last)
- added normal e-gate vista drivers (tested and working 100%)
- updated emptyboard support for "new security" db2012 chips
- some minor "cosmetic works"

02-05-2010, 11:22 AM
Saturday, 2 June 2007

- due multiple user requests, added REST file checking (press "identify", free)
- due same reason added auto-seczone-backup feature
(only when dcu60 used, press "identify", stored in backup\%imei%\, free)
- enhanced altbypass behaviour when using com/ufs interface.

02-05-2010, 11:23 AM
Tuesday, 19 June 2007

- added db2012 brown cid51 support
(use eroms\db2012_erom_redcid51.ssw to convert phone to retail)
- during csca unlock PDA phones will switch to "normal mode" automatically
(well, at least they should - tested on m600/p990/w950)
- "old security" pda bypass speed increased
- other minor improvements/bugfixes

02-05-2010, 11:23 AM
Tuesday, 19 June 2007

- added possibility for converting BROWN PDA phones to RED.
1. go to PDA tab.
2. select MODEL (any will do job)
3. uncheck all settings on settings tab.
4. add to firmware packages eroms\pda_ccpu_convert_red49.zip
5. press flash.
6. your brown prototype phone ready to run with latest firmware.
(thx going to arash for remote testing on his own brown PDA.)

- updated db2020 bypass loader, thus fixed bug with occasional flashing stalls, when altbypass option enabled.
- misc cosmetic works.

02-05-2010, 11:23 AM
Wednesday, 27 June 2007

-added PDA brown cid36 to red49 conversion
(use eroms\pda_ccpu_convert_red49_signed_brown36.zip)
- fixed AnyCID db2012 flashing with altbypass used
(f.e. when using cid52 flashes in cid51 phones)
- fixed brown cid49/cid51 file operations (amazing - somebody using it )
- cosmetic works

02-05-2010, 11:23 AM
Thursday, 26 July 2007

small bugfix update

- z530 "recovery" was broken,fixed.
- server error messages verbosity increased.
- some internal not important updates/fixes.

02-05-2010, 11:24 AM
Friday, 27 July 2007

setool2 v0.91380093 Code:
"thieves" release.

- added IMEI change patch for db2020 cid49/51 phones.

alas, but universalbugz released IMEI change patch for db2020, and because of that i forced to release same on setool2. of course, setool2 solution has nothing common with universalbugz way (i even not know yet how they making their patch) and developed by myself in educational purposes long-long time ago.

please be certain, that you can use IMEI patch on own phone only for educational purposes,otherwise you breaking law and blablabla.

note, that it is NOT IMEI repair (security zone repair), but PATCH. it will NOT repair red blink phones and can only be executed on 100% working phones. if you flash main (update on seus) - OLD IMEI will be restored.

patch is working on all recent DB2020 firmwares. i have no idea and can't guarantee that it will work on new firmwares.
(well, i CAN guarantee that it will NOT work ;) )

now, howto. well, you already know how, if you ever tried
(of course, for educational purposes only) IMEI change for db2000/2010 models.

in short - you have 2 ways.

first way:
1. select model, on settings check "use altbypass","use server", "allow IMEI change when unlocking","patch otp<>gdfs check in firmware"
2. on semc tab press unlock. phone will be unlocked and you will be asked for new IMEI. cost - 1 credit.

second way:
1. select model, on settings check "use altbypass","use server", "allow IMEI change when unlocking","patch otp<>gdfs check in firmware", "unlock after flash"
2. on semc tab, select main,fsimage,custpack. press flash. phone will be flashed, customized, unlocked and you will be asked for new IMEI. same, 1 credit.

02-05-2010, 11:24 AM
Saturday, 4 August 2007

- finally i got P1 phone and so - P1 support added. supported flashing,gdfs read/write,usercode read. unlocking supported via special server (read: not supported)
- by request, during flashing phone on semc tab, file in misc. edit now can be script or package.
- other bugfixes and bugs.

02-05-2010, 11:24 AM
Thursday, 16 August 2007

SEMC end release.

- added FREE db2020/pnx5230/db2012/PDA
custpack uploading/gdfs read/write/userlock operations.
you need CHECK use server (fill any login details) for it.
if you WILL CHECK "use alternative security bypass",
you WILL need credits.
note - cid49/cid51 UNLOCKING via flash patch still requires credits.

02-05-2010, 11:24 AM
Saturday, 18 August 2007

- added IMEI change via patch for cid50/51 db2012 phones. howto:
select needed model.
on settings, mark "use server","use alternative bypass",
"alllow IMEI change when unlocking","patch OTP<>GDFS check"
press UNLOCK, enter desired IMEI.
patch requires 1 credit.

note, that is FLASH PATCH, so it IMEI will change to original if you flash main part of firmware.

02-05-2010, 11:24 AM
Wednesday, 7 November 2007

- SEMC A2 phones support added.
currently supported : flashing, gdfs read/write, scripting, userlock reset.
standalone, no server needed. network unlock will be added later (via server)
RED,BROWN phone domains supported.
only DCU60 interface supported.

new script commands:
read TA unit (former gdfs), where AAAA= partition number, BBBB - unit
write TA unit (former gdfs), where AAAA= partition number, BBBB - unit,
DDDD.... data

note, that script command "readfile:" not supported by retail loader.
usually phone nicely works with dcu60 when attaching it with "C" button,
but there is some really old protos, which requires "2+5" buttons
(you should not meet such).

02-05-2010, 11:25 AM
v0.914007 James Bond Release ;)
Thursday, 8 November 2007

- fixed MAJOR bug, which prevents almost all operations from work. (unlock by patch, cid49 operations, etc).

- fixed .vkp script processing

- added "complete phone" support for a2 phones. it writing generic custpack with all languages enabled. for PROPER complete - please use "normal" custpacks.

- still more bugs ? hunt them ;)

02-05-2010, 11:25 AM
Sunday, 11 November 2007

- fixed slow phone search when doing second part of CSCA unlock
- fixed "can't open port err:006" after gdfs read
- several gui bugs fixed.
- still more bugs ? hunt them ;)


i got two reports that a2 phones after flash go to infamous 5lock state. it is some bug in semc firmwares, because to solve that "locks after flashing", you need just power circle your phone.

02-05-2010, 11:25 AM
Sunday, 18 November 2007

- gdfs commands for A2 phones was broken in script processing. fixed.
- added experimental flashing support for j110/j120/k200/k220 phones (currently works flash,flash read,eeprom read)
- added experimental k200/k220 seczone repair (simlock remover) select k200/k220 model and press unlock to execute it. note. experimental. so pretty please use eeprom backup option.
- still more bugs ? hunt them ;)

complete set of latest j110/j120/k200/k220 flashes is available on support. soon will upload "ultraquick" langpack-only packages.

02-05-2010, 11:25 AM
Thursday, 29 November 2007

- from now after first stage of cid52 security bypass user required to press "ready" to continue (will greatly helps when doing many phones at once, suggested by AlexG)

- "can't get packet props" after flashing should be fixed now (still unsure, cause can't repeat it 100% on mine phones, thx to vasilius for GREAT help during bug investigating)

- some minor bugfixes (yes, Arash, pda+ufs will be good now ;) )

hopefully next version will bring us corrected j110/j120 flashing and unlock. maybe even t250 will be supported (at least flashing/userlock reset) well, if all be well, A2 unlock by logs will be enabled too.

02-05-2010, 11:25 AM
Thursday, 6 December 2007

- added correct network unlock via patch for j110/j120 phones
(hehe, world first as far as i know ;) )

select phone model and press unlock.
power on phone, press <**<, enter any code.

if yours firmware unsupported for patch - you have two options
- read fullflash (start 0 len 3F0000), upload it to rapidshare and PM me link
- flash any firmware from support and do unlock

- ultrafast and ultrasafe userlock reset added for j1x0,k2x0 phones
(select model, press unlock)
- there is two new files in script folder
j1x0_total_reset.arm - flash it to TOTALLY reset j110/j120 phone
k2x0_total_reset.arm - flash it to TOTALLY reset k200/k220 phone
(calltime,usercode,pictures,settings,etc is reset)

- slight cosmetic changes that were requested by arash.

i will not do "unauthorized phone" repair and other eeprom errors for j110/j120 - for that use other tools - they deserving own peace of bread ;)

02-05-2010, 11:25 AM
Monday, 17 December 2007

- fixed db2020 emptyboard filling (5 locks after emptyboard fill) bug. Great sorry for that.
- many internal rebuilds to reduce memory consumption,etc. so be ready for bugs.
- minor bugfixes
- added pnx5230 cid51 unlock by patch, change IMEI,
crossflashing, complete filesystem support.
both dcu60 and com/ufs are supported, while i STRONGLY recommend DCU60
method requires 1 credit.

( that is NOT "gti" method, if someone want to start blabling. Instead,i'm sure that all "lead developers" will use my way and loaders patched by me from that release ;) )

usage very same as CID49/CID50/CID51 db2012/db2020:
- check "use server", "alternative security bypass"
(that is mandatory), then
- if want to change IMEI - check
"unlock after flash",
"patch otp<>gdfs check in firmware",
"allow to change IMEI when unlocking"
- if want to unlock - check "unlock after flash"

02-05-2010, 11:26 AM
Monday, 17 December 2007

- A2 gdfs readout was incorrect from the beginning. fixed. thx,arash.
- pair of cosmetic fixes.

02-05-2010, 11:26 AM
Tuesday, 18 December 2007

- sometimes setool2 hangs on "Starting up..." session. fixed.
thx to arash for reporting and hard testing.

- for fun added "phone branding" readout in identify.

update only (replace old exe starting from 018 version with new)

02-05-2010, 11:26 AM
Thursday, 20 December 2007

- added full a2 unlock via server.

usage is extremly same as with cid52 db2012/cid2 pnx5230/cid53 P1:
select phone model
on options, check "use server","do full unlock"
enter yours username/password
back to a2 tab
press unlock
request placed in queue, wait some time (up to 72 hours), retry.
follow program instructions (power on phone, install modem drivers,etc)

- misc bugfixes

02-05-2010, 11:26 AM
Tuesday, 1 January 2008

- added support for Locosto-based SEMC ODM models: at present it is T250,Z320. supported both HS (red) and GP (brown) models, interfaces: com/ufs only

present features: flashing, flash read, userlock reset, network unlock (z320 is NOT rebooting after unlock :D ) TA (eeprom) backup auto-creating after each phone boot. be warned: booting of locosto-based phones is tricky process - perhaps, you will need to disconnect/connect cable/battery several times before phone will start booting. BE WARNED: always select correct model: z320 for z320 phones, t250 for t250 phones Keep TA backups ! if you somehow damage TA area and have no backup - you have dead phone

- fixed rare bug with "old security" pda phones (appears in 021 version)
- some gui changes/fixes/addons
- perhaps, added some bugs ;) so please test and report issues.

02-05-2010, 11:26 AM
Saturday, 26 January 2008

- modified locosto hs bypass algo, should be better now
(previous algo sometimes producing "romboot not answering" error)
- added flash manufactured output for j110/j120/k200/k220 phones.
- operator digit was swapped in identify output.

02-05-2010, 11:27 AM
Saturday, 15 March 2008


- fixed cid52 OTP writing, was broken eons ego.
- added DB2020 emptyboards eroms, which are safe to use with EROM upgrade.
- pnx5230 support was broken, should be fixed, reports are welcome.
- changed usb support, perhaps will be better,perhaps not.
public testing will show results.
- some internal changes/bugs/bugfixes/etc

02-05-2010, 11:27 AM
Tuesday, 11 March 2008

- usb multi-flashing was broken, fixed
- added separate cda handling for each model.
cda.ini format
- misc gui changes

02-05-2010, 11:27 AM
Friday, 21 March 2008

- added db2020 cid53 standalone flashing/usercode reset.
network unlock will work only via csca+signature servers.

02-05-2010, 11:27 AM
Friday, 9 May 2008

- added free,standalone,no testpoint, no additional expensive "tp cables"
alternative bypass method for following chipsets:
db201x cid52, db2020 cid52/cid53, pnx5230 cid52/cid53
all you need - is cheap TEST SIM CARD (or OPERATOR card)
please, see all details about that method in THAT FAQ post.
- fixed gdfs write problem in db201x brown phones
- added support for loader inside phone
(for QUICK patch/etc operations using new alternative bypass method)
for that, run "executor" in phone (menu->games), then check in settings
"use preloader security bypass" and then do desired operation.
- misc other bugfixes, maybe some bugs, check and report.

02-05-2010, 11:46 AM
Monday, 29 December 2008

- csca unlock was broken, fixed

02-05-2010, 11:46 AM
Monday, 26 January 2009

- officially approved support for sagem a2 cid185,cid186 phones. die,kukuruzer (and other "developers") stealers (all you can do is steal and use ready stolen thing) a BIG thanks going to tayeb_am for cid185 support testing.
- added ECC mode selection for A2 phones. "mode 0" required for phone,damaged by kukuruzer (and other "things") for normal firmwares "mode 1" is required.
- fixed many minor and major bugs.
- added many minor bugs ;) maybe not ;)

02-05-2010, 11:46 AM
Saturday, 31 January 2009

- fixed "lg ku580" unlock bug (after unlock phone hangs on "lg logo" and repair flash was needed)
- some minor gui enhancements

02-05-2010, 11:47 AM
Thursday, 12 February 2009

- "gnd"-type testpoint was broken,fixed (thx to aamir zia for report)
- a2 loaders updated to current version
- bypass packages updated
- some minor not important changes

02-05-2010, 11:47 AM
Friday, 20 February 2009

- pda support was broken,fixed
- fixed fs operations for pnx5230 on serial interfaces
- added timer for new-type testpoints processing
- minor gui fixes/addons

02-05-2010, 11:47 AM
Monday, 4 May 2009

- updated model list
- updated bypass packages
- added support for db3200 cid49,cid51,cid52 alternative security bypass
- added support for db3200,db3210 cid53 flashing,gdfs operations,etc
- added support for db3200,db3210 cid53 unlocking
(via signature server, at the moment 2 credits required)
1. select phone model
2. mark "signed mode", "do full unlock instead usercode reset"
3. press "unlock/repair"

- added CORRECT PDA ACPU EROM recovery support for all PDA.
1. select correct PDA model
2. find corresponding EROM in dist\eroms\, add it to firmware area
3. select correct com/ufs port
4. press recovery
5. connect turned off phone
6. reflash phone via USB with normal firmware
- added script support for S1 phones in signed mode (trim area operations)
- added security units auto backup for S1 phones in signed mode
- few minor bugs fixed/added
- few gui enhancements

02-05-2010, 11:47 AM
Thursday, 14 May 2009

- fixed phonebook extraction for some old models
- by accident db3200 cid49,51,52 alternative bypass was broken,fixed
- bug with horizontal scrolling fixed (hopefully)

02-05-2010, 11:47 AM
Saturday, 30 May 2009

- model list updated
- signed mode A2 loaders updated to latest versions
- some not important bugfixes

02-05-2010, 11:48 AM
Thursday, 11 June 2009

- timeout for A2 flashing increased, that fixed error
"can't get NET header" on some models in the end of filesystem flashing
- unsigned mode A2 loaders updated to latest versions
- some not important bugfixes

Download v0.915038 (http://rapidshare.com/files/242523156/v0.915038.rar)

02-05-2010, 11:48 AM
Thursday, 23 July 2009

- signed mode S1 loaders updated to support latest AID versions
- some not important bugfixes and addons

Download v0.915039 (http://rapidshare.com/files/259398363/v0.915039.rar)

02-05-2010, 11:48 AM
Friday, 28 August 2009

- fixed csca activation for a2 phones

Download Here (http://rapidshare.com/files/272419975/v0.915040.rar)

02-05-2010, 11:49 AM

- added RESET mode for db200x,db201x,db2020 phones. after such operation phone will became developer (brown) state. you can do anything with phone (write gdfs, unlock,etc) while phone in that state.

you can find all details in FAQ

- as side effect, pda emptyboard fill now enabled.

- added PATCH unlock for S1 phones (new security, old security, etc) notice, that phones must have NOT TAMPERED security zone. you can find all details in FAQ

please note, that it is PATCH unlock and after fullflash phone will be locked again.

same thing applies to possible incorrect operation - just flash phone.

- as side effect, added possibility to flash unsigned firmware in any S1 phone. that allow users to repair phones with damaged trim area. that require s1 signature server, hopefully it will be online one day.

that is very-very beta software.
s1 patch unlock should be tested throughly.
we tested t303,t250,t280,r300,w302 but not other models,though they
should be supported just fine.

because of that, during short beta testing period price for s1 security bypass, db200x,db201x,db2020 reset operation will be ZERO credits.

after short beta testing period we will setup corresponding price.

Download v0.915043.rar (http://rapidshare.com/files/276649398/v0.915043.rar)

02-05-2010, 11:49 AM
Friday, 11 September 2009

- fixed EROM UPGRADE feature for db2020 phones.
it will be active when no settings set and RECOVERY pressed. thx to arash for reporting.

- fixed s1 flash readout in .ssw mode, thx to kokoka for discovering.

02-05-2010, 11:50 AM
Saturday, 12 September 2009

- fixed brown db201x handling.

Download v0.915045 (http://rapidshare.com/files/279116109/v0.915045.rar)

02-05-2010, 11:50 AM
Saturday, 19 September 2009

- added alternative security bypass for semc a2 cid53 phones.
that allow you to repair completely dead a2 cid53 phones:
- destroyed trim area
- foreign gdfs
- damaged semcboot

please note, that alternative security bypass for a2 cid53 IS NOT free and NOT STANDALONE (check prices for details)

please note, that if you will execute alternative bypass mode for a2 cid53 in order to unlock/flash/etc - you will lose device key and drm functions possible will be damaged.

usage of a2 cid53 alternative security bypass exactly same as for a2 cid49/52 and explained in details in FAQ.

Download v0.915050 (http://rapidshare.com/files/282034557/v0.915050.rar)

02-05-2010, 11:51 AM
Monday, 28 September 2009

- added full support for upcoming semc db3350 phones. as there are no phones on market, we can not test it, so support for db3350 marked as HIGHLY EXPERIMENTAL.

flashing/gdfs/filesystem operations should work flawlessly. full unlock via signature and "alternative bypass mode" SHOULD work too, but that things are absolutely not tested, so MAKE GDFS BACKUP before doing full unlock and only touch alternative security bypass if you absolutely crazy ;) in any case, if phone will be killed - i will repair it for sure... well, you have been warned.

please note, that alternative security bypass for a2 db3350 cid53 IS NOT free and NOT STANDALONE (check prices for details)

please note, that if you will execute alternative bypass mode for a2 cid53 in order to unlock/flash/etc - you will lose device key and drm functions possible will be damaged.

- in some VERY RARE cases lg db3200 phones became completely dead after unlock attempt or unlock/flashing procedure failed in start. that should be fixed now, at least i received many good reports.

Download v0.915051 (http://rapidshare.com/files/285904875/v0.915051.rar)

02-05-2010, 11:52 AM
Thursday, 8 October 2009

- tested,fixed and apporved support for db3350 phones, thx to imobile
as my "dear friends" used to say: world first, genuine,blablabla,etc.
anyway, i'm sure everything works now for db3350 -
- full signature unlock
- altbypass mode
- flashing,filesystem,gdfs,trim area operations.

- regarding a2 cid53 phones:
use full signature unlock for FULLY GENUINE unlock.
it is fast and furious (tm)
use alternative bypass mode for completely damaged phones.
it is slower, but can fix any software problem.

in next 2-3 days i will release next version, which will not damage
device key in a2 cid53 phones when using alternative bypass mode.
(need to arrange reset station upgrade, that require some time)

in any way, i strongly recommend to use full signature unlock for
a1/a2 phones - it is absolutely genuine and can not tamper anything.

v0.915052 (http://rapidshare.com/files/290120386/v0.915052.rar)

02-05-2010, 11:52 AM
Friday, 9 October 2009

- a2 cid53 alternative bypass will not damage device key anymore. because of that one more phone restart required, but who cares ?

- "unlock during flash" enabled for s1 phone patch unlock

- some not important fixups, thx to imobile for bugreports.

Download v0.915053 (http://rapidshare.com/files/290546841/v0.915053.rar)

02-05-2010, 11:52 AM
Friday, 6 November 2009

- added full support for s1_open PDA phones (satio).
big thanks to: cowboy, hardstone, shadowman,kris.sg for testing, arash for logo.


in order to boot satio you MUST check "signed mode" read flash requires "signed mode" and "alternative bypass" checked. satio omap nand flash starts at 8000000

to execute network unlock/repair - check both "signed mode" and "perform full unlock" then press unlock

to reset user code - check only signed mode and press unlock if "unlock after flash" checked - user code will be reset after flashing.

to flash satio you must add zip package to firmware area. do not unzip it !!!! just add.

- added possibility of generating new password for account.

Download v0.915056 (http://rapidshare.com/files/303506505/v0.915056.rar)

02-05-2010, 11:53 AM
Tuesday, 1 December 2009

- added support for repair dead db3200-based lg phones (gt505,etc)

if /sys partition damaged
(you CAN'T read gdfs, eraseSecData errors)
add to firmware area gt505_syspart_fix.ssw
press flash
unlock phone
fullflash phone

if /drm partition damaged
(phone blinks on lg logo after /sys repair and you CAN read gdfs)
add to firmware area gt505_drm_fix.ssw
press flash
unlock phone
fullflash phone

- added support for repair semc a2 phones with flash cid>otp cid
check "use signed mode",
"use alternative security bypass",
"use preloader security bypass"
press unlock
credits consumption same as a2 cid53 unlock feature.

Download V0.915057 (http://rapidshare.com/files/315167869/v0.915057.rar)

02-10-2010, 05:05 PM

- added support for repair erom on semc new security locosto,neptune phones.

1. select correct model
2. on settings check "signed mode"
3. add erom to firmware tab.

if you have neptune based phone: 1207-7713_EROM_S1_NEPTUN_HS_SEMC_SIMLOCK_R7A024.sin
if you have locosto based phone, then select situable from:

4.press recovery

procedure require internet connection and paid: locosto based - 1 credit, neptune based - 2 credits.

- added support for high speed usb flashing. flashing speed of semc a2 phones will be twice as usual.
- some bugs fixed, one was very important

Download V0.915058 (http://)

02-11-2010, 12:42 PM

- broken db200x PDA support, fixed
- broken alternative bypass support, fixed

Download V0.915059 (http://rapidshare.com/files/349127844/v0.915059.rar)

02-11-2010, 04:21 PM
i need to post few words about high speed flashing.

1. not all a2 phones support it, you will get errors: 3ee,3ed. in that case just disable high speed usb flashing on a2 tab.
2. you need to attach phone to usb 2.0 capable controller.
3. you need to use high quality usb cable, dcu60 is NOT recommended (but can work). dcu65 IS recommended.

02-12-2010, 08:50 PM

- broken calypso lite support, fixed
- broken cid16,29,36 support, fixed
- further fixes for alternative bypass support

important information.

in order to use latest update and further versions, users must install latest semc usb flash driver, at least version

you can find semc usb flash driver setup package in

Download V0.915060 (http://rapidshare.com/files/351638185/v0.915060.rar.html)

02-24-2010, 05:02 PM

- added support for S1 AID04 neptune-based phones.
there is no alternative security bypass for such phones, so only full network unlock supported.
- added support for A2 CID80.
there is no alternative security bypass for such phones, so only full network unlock supported.
- few bugfixes.

Download v0.915061 (http://rapidshare.com/files/355352110/v0.915061.rar)

02-25-2010, 11:51 AM

- broken pnx5230 support,fixed
- solved "starting up..." hang issue when user installed usbflash drivers, but not connected any phone yet.

Download v0.915062 (http://rapidshare.com/files/359950545/v0.915062.rar)

03-10-2010, 11:15 AM
from today, price for reset operation and alternative security bypass for

db2001,db2012,db2020,db3150,db3200,db3210,db3350 phones are equal to zero.
For using this service - you must have valid SEtool account with above 1 credit.

standalone version can be released soon.

03-12-2010, 01:23 PM
v1.0 FINAL

- added standalone support for reset operation, alternative security bypass for next chipsets:

supported s1 aid 0001,0002,0003.
supported a1/a2 cid 16,29,36,49,50,51,52,53

s1 omap
s1 locosto
s1 neptune
db 200x
db 201x
db 2020
db 3150
db 3200
db 3210
db 3350

Download v1.0 FINAL (http://rapidshare.com/files/362385057/v1.0.rar)

Some users on different forums misunderstood information about update. I will confirm one more time, you do not need any activation to use v1.0 FINAL. It is free for all SEtool users.
Activation only required for FUTURE releases.

03-12-2010, 01:37 PM
Dear Setool Customers,
Please read carefully this major news announcement.

We (setool team) have proven that we are the best team in Sony Ericsson arena. We did many many updates for free and all years not asked for any additional payment. In last version we made for free may be the most HOT update from start. All function for s1 locosto, s1 neptune, db200x, db201x, db2020, db3150, db3200, db3210, db3350 are now working as a standalone. No internet connection or server required.

New time is coming, SEMC improve security and make new cid80 phones. We believe it is fair to ask customer a small payment to continue subscription for excellent setool support. This is necessary in order to invest in new test phones/handsets/sources/servers/staff etc to make all this support possible. Please be sure, we thought this hard and long time to make sure that it is fair and will not burden our loyal customer much.

Upgrade cost will be - 20 SEtool credits. Most of users have credits so can use it for license purchase. Users who have not valid account have to buy it from any autorised dealer listed here (http://support.setool.net/showthread.php?21-WHERE-TO-BUY-SETOOL-AND-SETOOL-CREDITS.-LIST-OF-RESELLERS.).

Upgrade procedure will include remote upgrade of card applet and card activation with license. It will allow you to work with sw versions greater than v1.0 and use new support site. Current file support will also work for current version users. Laser will come out with explanation of upgrade procedure in days ahead. We will try to make this upgrade as easy as possible.

Thank you for understanding and for your continuous support.

03-12-2010, 03:22 PM
please take notice, that credits consumption on server for standalone supported phones restored!!!

i noticed that some AV can generate false alarms on version 1.0.
eiter add setool2g.exe to exceptions or download new executable (http://rapidshare.com/files/362435805/Setool2g.zip)

03-13-2010, 07:26 PM
v1.01 FINAL

- fixed a2 cid80 support

Download v1.01 FINAL (http://rapidshare.com/share/8029F0C522A7D81421334A2134F96C6D)

please note, that it is LAST version for non-activated setool2 users.
support area will not be available for them, though users able to use setool2 server credits to unlock some new phones.

03-29-2010, 10:23 AM

- added preliminary support for a2 cid26 phones (s5320 at the moment)
at the moment, network unlock possible by flashing special firmware from support
samsung s5320 should be connected with "9+#" pressed in order to enter boot mode.
all other functions supported without notable exceptions.

- added a2 db3150,db3200,db3210 emptyboard fill support.
you need special cable in order to successfully write OTP chip, +7.5v should be applied to DCIO (charger pin, pin 12)

Download v1.02 (http://rapidshare.com/files/369479447/v1.02.rar)

activation required in order to use that update.
just unpack 1.02.rar in existing setool2 directory
( setool2.ini not included in dist anymore, so your password/username will not be overwritten)
and run activator.exe.
i strongly advice users to run only activator.exe which included in v1.02 archive or from that LINK (http://rapidshare.com/files/369481181/Activator.zip).

activation cost 20 credits.

activation will assure that you will be able to use latest setool2 updates and use new support area.
old support area will be frozen, no new flash files will be uploaded on it. also, old support area will be terminated in that year

thanks for your support.

03-29-2010, 06:57 PM

- broken db2000,db2010 red cid49 support unsigned mode, fixed.

Rapidshare Link (http://rapidshare.com/files/369646826/v1.03.rar)

04-07-2010, 02:59 PM
please NOT try to flash samsung m5650 or any other emp-based samsung model with s5320 selected - you will damaged phone.
please wait for setool2 update, where that version will be listed in models.

04-12-2010, 12:09 PM

- added support for samsung m5650 phone.
it is absolutely necessary to select correct model, otherwise phone will be trashed.
always add main part of firmware first when flashing.
- added unlock codes calculation for samsung s5320,m5650 phones.
select correct model, check signed mode, press unlock.
it is absolutely necessary to select correct model, otherwise nothing good will be done.
thx to zoio,GeniuSShadoW for testing.
- a2 emptyboard fill procedure now works as intended
- fixed support for unlock a2 cid80 phones, when signature server offline
- fixed few minor bugs
- updated drivers

Rapidshare Link (http://rapidshare.com/files/375182145/v1.04.rar)

04-13-2010, 04:13 PM

- some newer ODM firmwares were not parsed properly, fixed
- few cosmetic fixes

Rapidshare Link (http://rapidshare.com/files/378465492/v1.05.rar)

05-17-2010, 11:04 AM

- added support for qsd8250-based semc phones (x10 at the moment).
flashing,gesture lock reset,trim area read/write is standalone and free
please note, high quality usb cable required to work with x10.
network unlock is server-based and paid.
x10 network unlock disabled for public at the moment.

- added support for a2 cid81 phones.
flashing,user lock reset,gdfs area read/write is standalone and free
network unlock is server-based and paid.

- few cosmetic fixes

Rapidshare Link (http://rapidshare.com/files/388407599/v1.06.rar)

05-18-2010, 01:12 PM

- fatal flashing bug fixed.
odm phones, pda phones was affected.
greatly sorry for inconveniences.

- memory consumption decreased while flashing x10 phones.

Rapidshare Link (http://rapidshare.com/files/388750093/v1.07.rar)

05-26-2010, 06:52 PM
please do not attempt to unlock lg gt400 phone by selected lg db3200-based model - it will kill your phone.
please wait until setool2 will officially support lg gt400 unlock.
flashing should be safe, though (by selecting any lg db3200-based model)

beside that, if anyone willing to send me working locked gt400, please contact with unlocker.
of course, not for free, but not for 1000 eur,please.

06-14-2010, 01:09 PM

- x10mini support added.
yes, network unlock still unavailable for public.
do not ask us for special x10-enabled accounts - they not exists.

- different bugfixes

Rapidshare Link (http://rapidshare.com/files/400339602/v1.08.rar.html)

06-23-2010, 04:56 PM

- increased server communication timeouts, can help in case of timeout errors
- different cosmetic bugfixes

Rapidshare Link (http://rapidshare.com/files/402293166/v1.081.rar.html)

07-17-2010, 02:01 PM

- lg gt40x phones unlock/repair/flash functionality now works as intended, check FAQ for details
- no need to reflash after unlock some specific lg db3200-based phones from now on
- lg db3200-based phones now can utilize full USB2.0 speed
- further decreased memory usage during flashing of x1-alike phones
- different cosmetic bugfixes

Rapidshare Link (http://rapidshare.com/files/407582179/v1.084.rar.html)

07-20-2010, 06:08 PM

- updated a2 loaders
- updated s1 loaders
- different cosmetic bugfixes

Rapidshare Link (http://rapidshare.com/files/408627100/v1.085.rar.html)

08-23-2010, 12:41 PM

- added support for w100_spiro, network unlock is disabled at the moment
- updated model list
- different bugfixes

Rapidshare Link (http://rapidshare.com/files/415452507/v1.086.rar.html)

08-30-2010, 12:21 PM

- samsung m5650 support was broken from ~1.08x version, fixed.

Rapidshare Link (http://rapidshare.com/files/416129059/v1.087.rar.html)

09-04-2010, 12:16 AM

added unlock code request for w100 mobiles - and that is just start.

- we need special 12-digit serial number, NOT IMEI
- that special number can be readout during identify procedure for w100, starting from 1.088 version
- put 12-digit serial number in serial field on locks tab, press "request" button. if serial can be found, you will receive codes.
- cost of successful request - 1 credits.

fixed very rare "auth error" problem
few cosmetic fixes

Rapidshare Link (http://rapidshare.com/files/416926076/v1.088.rar.html)

09-09-2010, 11:53 AM

- lg u8550 operations were broken from some version,fixed
- few cosmetic fixes

Rapidshare Link (http://rapidshare.com/files/420785596/v1.089.rar.html)

10-04-2010, 04:03 PM

- w100 unlock by codes made simple - now you just need to check signed mode, altbypass and press unlock.
- few cosmetic fixes,few minor functionality improvements

Rapidshare Link (http://rapidshare.com/files/423088138/v1.09.rar)

11-05-2010, 03:49 PM
From this moment price for unlocking db2000/2010/2020, a2 and omap 3430 aid1/2/3 phones has increased from 1 to 2 credits.

To see latest credits consumption check this link (http://support.setool.net/showthread.php?16-CREDITS-CONSUMPTION).

11-05-2010, 07:14 PM
please, check s1 auth server before you attempting to unlock

- u1,u5,u8 phones with aid 4
- j108 cedar phone

if s1 auth server offline, you will not be able to unlock that phones and will lose 2 credits.
do not attempt to unlock j108 cedar phone using csca way - it will not work and you will lose 2 credits.

actually, it will not be complete loss. when s1 auth server will be online, no credits will be needed to finish unlock procedure for that "wasted credits" phones.

11-18-2010, 02:46 PM
Due to current market situation price for unlocking with SEtool server highly increased.

Check latest credits consumption table here:

12-05-2010, 10:25 AM
due to upcoming holidays we decreased full unlock,unlock via codes credits consumption for ODM phones:

- locosto-based S1 phones (ODM phones) 4 credits
- STEricsson-based S1 phones (w100,w150...) 4 credits
- neptune-based S1 phones (ODM phones) 4 credits
that is temporary, of course.

as usual,latest credits consumption table can be found in FAQ (http://support.setool.net/showthread.php?16-CREDITS-CONSUMPTION&p=204&viewfull=1#post204)

12-19-2010, 06:31 PM

- updated loaders for few phone models
- general bugfixes
- few minor interface improvements

Rapidshare Link (http://rapidshare.com/files/439790962/v1.10.rar)

12-21-2010, 02:29 PM
for unknown reason ( cognac? ) a small typo was left in code, thus rendering message "phone not supported in that mode" during semc a2 unlock in altbypass mode.
that is pure cosmetic bug and can be ignored,
however, v1.10 was re-uploaded with that typo removed.
sorry for inconveniences.

01-04-2011, 06:42 PM

- ancient bug (from very start of s1 patch unlock )with patch unlock of z250 was fixed.
- updated loaders for few phone models
- few minor internal changed

Rapidshare Link (http://rapidshare.com/files/440795722/v1.101.rar)

01-05-2011, 06:06 PM

- flashing of DB200x-based PDA was broken in v1.01, fixed

Rapidshare Link (http://rapidshare.com/files/441291680/v1.102.rar)

01-11-2011, 07:42 PM

- CCPU reset procedure could fail on some DB200X-based PDA phones, fixed.
- A2 loaders for SEMC phones updated to current versions

Rapidshare Link (http://rapidshare.com/files/442034541/v1.103.rar)

01-14-2011, 12:21 AM
it is not 100% confirmed, but looks like samsung released some new batch of m5650-like phones.
they can't be serviced at the moment.
to safely test if phone new batch or old batch, perform read flash procedure with start 0 len 10000 - if you will get error

[readflash] err: [008E] at: [00000000]

then you have new batch.

if someone has access to samsung service site and can get latest downloader for m5650 phone, fell free to contact me.

01-22-2011, 08:02 PM

- fixed script processing for SEMC A2 phones with damaged filesystem

Rapidshare Link (http://rapidshare.com/files/444839146/v1.104.rar)

01-31-2011, 10:00 AM

today we enabled s1 v2 signatures for public in testing mode.
check credit consumtion table (http://support.setool.net/showthread.php?16-CREDITS-CONSUMPTION&p=204&viewfull=1#post204) for prices.

that means, setool2 users with sufficient credits amount can unlock from network x10,e10,e15,m1,u20,w100,w150 phones, despite of codes attempt counter.
because of price, i'm strongly recommend to use unlock via codes for w100,w150 phones

02-08-2011, 08:59 PM
sorry to say, but e10,e15,u20,x10 full signature unlock disabled for unknown time, maybe forever.

04-24-2011, 06:54 PM

- added support for qc8255-based semc phones (arc,neo,play) ( network unlock, flashing, trim area operations )

Rapidshare Link (https://rapidshare.com/files/459028349/v1.105.rar)

04-25-2011, 02:41 PM

- generic customization for A1,A2 phones, custpack info was broken, fixed
- old batch of smartcards was ignored, fixed

Rapidshare Link (https://rapidshare.com/files/1982644644/v1.106.rar)

06-09-2011, 01:55 PM

- gemalto TOP cards supported from now on
- SmartCard update required to use that and following setool2 versions

Rapidshare Link (https://rapidshare.com/files/2253450241/v1.107.rar)

07-11-2011, 05:08 PM

- finally sorted all issues with samsung cid26 emp-based phones.
- added x10i,x10a,so-01b unlock using alternative security bypass. check FAQ (http://support.setool.net/showthread.php?15-HOW-TO-WORK-WITH-SEMC-PDA-PHONES&p=61524&viewfull=1#post61524) post for all details.
during promo period, cost is 0 ( zero ) credits. Promo period can be extended to forever.
- support area can only be accessed from now on by using setool2 >= v1.1094
- fixed many minor and major bugs.


RapidShare Link (https://rapidshare.com/files/573768306/v1.1094.rar)

07-13-2011, 01:42 PM
be content to know, that we plan to finish promo period for x10i,x10a altbypass unlock at monday, 18.07.2011.
after that, price for x10i,x10a altbypass unlock will be 4 credits.

if "evil competitors" will do stupid steps, promo will be extended.

07-27-2011, 08:41 AM

- added e10,e15,e16,u20 unlock using alternative security bypass. check FAQ (http://support.setool.net/showthread.php?15-HOW-TO-WORK-WITH-SEMC-PDA-PHONES&p=61524&viewfull=1#post61524) post for all details.
procedure require internet access and paid.


RapidShare Link (https://rapidshare.com/files/3246771165/v1.1099.rar)

08-07-2011, 08:31 PM

- added lt15,mt15,r800 (and other semc models based on MSM8255) unlock using alternative security bypass.
check FAQ (http://support.setool.net/showthread.php?15-HOW-TO-WORK-WITH-SEMC-PDA-PHONES&p=61524&viewfull=1#post61524) post for all details.
procedure require internet access and paid.
- added pnx4910-based phones support (ck15_txt_pro at the moment).
supported all standard operations, network unlock, as usual, will only work when s1 signature server will work.
- fixed ancient bug with lg3g testpoint operations ;)


RapidShare Link (https://rapidshare.com/files/140739436/v1.1101.rar)

08-07-2011, 08:38 PM
important news:

LGTool (http://www.lgtool.net) now absolutely free for all setool2 users, who activated their cards.
just press "activate lg" in updater ( use updater/updater as login/password )

08-09-2011, 12:57 PM
we changed credits consumption.
please check new (http://support.setool.net/showthread.php?16-CREDITS-CONSUMPTION&p=204&viewfull=1#post204)credits consumption table.

08-15-2011, 09:31 PM

- added network unlock by alternative security bypass for 8655-based phones (IS07,IS11S).
Thanks to "Jhemzz" for testing.

- added semcboot recovery for 8x55-based phones.

how to do:
select phone model, check "signed mode", "alternative security bypass", press "recovery"

- lg3g support was broken for cid17 phones, fixed.
- added lg3g support for brown cid41,cid42 phones ;) better late, than never ;)


RapidShare Link (https://rapidshare.com/files/649112558/v1.1104.rar)

08-21-2011, 06:12 PM

- improved semcboot recovery for 8x55-based phones.
- implemented script operations, format trim area operations, dump flash operations for 8x55 phones using
alternative security bypass method. That allow fix phones with damaged trim area and many other interesting features.
- simplified 8x55-based phones unlock, now need connect phone one time only.


RapidShare Link (https://rapidshare.com/files/983692499/v1.1106.rar)

08-22-2011, 01:33 PM
please redownload v1.1106 from support area or from rapidshare link (https://rapidshare.com/files/983692499/v1.1106.rar) : due to hurry, 8x55 unlock was broken.

sorry for inconveniences.

08-23-2011, 12:02 PM

- again improved recovery for 8x55-based phones.
recovery of phones with totally damaged both semcboot and trim area properly supported now.

RapidShare Link (https://rapidshare.com/files/3976186321/v1.1107.rar)

09-13-2011, 12:24 PM

- from now on, unlock by altbypass method for qsd8250,msm7227 phones will also "unlock" semcboot.
- qsd8250,msm7227 phones with "unlocked" bootloader can flash custom firmwares now
- added few models to model list, so users don't get confused
- different bugfixes, some are important.

RapidShare Link (https://rapidshare.com/files/1225148744/v1.1108.rar)

09-24-2011, 05:21 PM

As there is too much "blocked" setool2 GEMALTO TOP cards,we investigated issue and found problem.

due to errors in controller firmware
( or due to incompatibility between smartcard/controller firmware/motherboard usb controller )
all smartcard readers i know, which are based on CY7C63001 are failed to send long data packet to/from smartcard.
it happens on some systems only, it can happen not immediately, but on "affected" system it happens always, earlier or later.

due to that, smartcard will receive WRONG command and SETOOL2 WILL BE "BLOCKED".

i can not find ANY solution to that problem, other than NOT using Cypress CY7C63001-based readers with setool2 cards.

here is few pictures of AFFECTED readers:
1481 1482

you can also identify such reader by smartcard reader name and driver name:

if you will use that readers, your setool2 smartcard WILL BE BLOCKED - and i will unblock such card ONLY ONCE.

my strong recommendation is use omnikey-based readers, like that:
1484 1485
they are working 100% on any system.

of course, usage of latest setool2 version (https://rapidshare.com/files/1225148744/v1.1108.rar) is ABSOLUTE requirement.

10-25-2011, 12:35 PM

- added altbypass support for xperia arc_s model, in other words, phones with 8255T chipset fully supported.
- added resurrection support for s1 qualcomm-based phones with totally damaged security zone.
resurrection procedure will be described in FAQ later,
however, in short it is standard "recovery+write gdfs+unlocking" chain.

7227,8250-based phones require special uart cables ( pinout included in docs ),
however it is highly recommended to use special GPG cables (http://www.gpgindustries.com/news/2011/10/25/gpgindustries-proudly-present-qualcomm-resurrection-cables-featuring-setool-box/)
8x55-based phones does not require any special cables.

as side effect, imei change possible now for s1 qualcomm-based phones.
for 7227,8250-based phones need select COM as interface, options are:
( signed mode, altbypass mode, do full unlock, allow to change imei when unlocking, use testpoint (gnd type) )
for 8x50-based phones need select USB as interface, options are:
( signed mode, altbypass mode, do full unlock, allow to change imei when unlocking )

cost of imei change 5 credits, please take in mind, that if you change imei, phone need to be unlocked,
so add another 5 credits for unlock procedure.
if you have calculated signature for some imei, then you can save 5 credits for unlocking ;)

- added few models to model list, so users don't get confused
- different bugfixes

RapidShare Link (https://rapidshare.com/files/633667618/v1.12.rar)

10-26-2011, 12:35 PM

- resurrection procedure will now work for totally erased s1 qualcomm-based phones
FAQ now have (http://support.setool.net/showthread.php?15-HOW-TO-WORK-WITH-SEMC-PDA-PHONES&p=70745&viewfull=1#post70745) resurrection procedure example.

- forgot to post, that starting from v1.12 setool2 will check for faulty cypress-based reader and refuse to run,
if setool2 smartcard installed in such reader.
There is no any workaround.
Use omnikey-based reader or other normal reader.

RapidShare Link (https://rapidshare.com/files/3823921236/v1.1201.rar)

10-27-2011, 04:13 PM
extremely important message !!!

seems most of lately produced msm7227-based phones have chipset with FIXED security hole, which used to altbypass unlock.
( that is not 100% confirmed, we only have few reports, however better be warned )
such phones will DIE after successful unlock procedure.
such dead phones CAN NOT be recovered. ( perhaps, jtag can fix that, perhaps, qualcomm fixed jtag security hole too )

there is NO WAY to determine if phone has fixed chipset or chipset with security hole.

the ONLY safe way is to use unlock by resurrection cables.
if phone can be connected and booted by resurrection cables, phone is safe to unlock.
if phone can not be booted by resurrection cables, phone has fixed chipset and could not be unlocked.

you have been warned.
get and use resurrection cables.


e16 phone with manufacture date 11w38 affected, i think we should care about phones which produced after 11w26

11-05-2011, 11:50 AM

- no testpoint altbypass unlock procedure will work now for msm7227-based phones,which using MCUs with fixed security bug.
resurrection cables will NOT work for MCUs with fixed security bug. Because of this,
phones, which are already dead should be recovered using jtag box, which can write ORIGINAL semc boot.
big thanks for help and testing to electrolandgsm.
- switch to usb interface was broken for DB200x phones, fixed.
- added few models to list, so users can use profiles for them.

RapidShare Link (https://rapidshare.com/files/2972131181/v1.1202.rar)

12-09-2011, 04:21 PM

- testpoint altbypass method will work now for msm7227-based phones,which using MCUs with fixed security bug.
that means, resurrection cables will work for MCUs with fixed security bug.
- fixed problem with FOTA upgrade for msm8x55-based phones, unlocked by altbypass

RapidShare Link (https://rapidshare.com/files/4019376576/v1.1203.rar)

12-24-2011, 07:52 PM
بِسْمِ اللّهِ الرَّحْمنِ الرَّحِيمِ

Starting from 25.12.2011 cost of unlock procedure, using alternative security bypass for semc phones,
based on msm7227,qsd8250,qsd8x55 chipsets will be 0 ( zero ) credits.

Such terms will be in effect until another announcement.

01-02-2012, 08:05 PM
Holidays ended, time to work.

Starting from 03.01.2012 cost of unlock procedure, using alternative security bypass for semc phones,
based on msm7227,qsd8250,qsd8x55 chipsets will be 2 ( two ) credits.

we will watch closely on market situation with semc qualcomm solution and react correspondingly.

03-29-2012, 11:14 AM

- fixed "dead phone after unlock" for some latest j20 phones.
- x10 with android firmware 2.3.3 supported for altbypass unlock
- msm8x60 sony phones supported ( lt26,lt28,is12s,so-03d ). Standard operations supported - flash,trim area read/write.
Network unlock only supported using s1 signature server, which is offline for us.
- added support for one interesting activation.

RapidShare Link (https://rapidshare.com/files/1861530869/v1.1204.rar)

04-04-2012, 12:49 PM
smartcard update released for v1.1204 software.

after smartcard update, setool2 no more require internet connection or any credits to service any qualcomm-based semc phone,
which supported for altbypass method.
that means, you can unlock,repair, rebuild hwconfig for free, without any internet connection.

all settings and procedures are same as usual, but internet connection no more required, if card is updated.

semc qualcomm-based phones, which supported by altbypass, are:

WT18,LT15a,LT15at,LT15i,E15a,E15i,MT15a,MT15i,WT18 i,Z1i,
IS07,IS11S,ST18a,ST18i,MK16a,MK16i,ST17a,ST17i,SK1 7a,SK17i,X10a,X10i
E10a,E10i,E16a,E16i,WT19a,WT19i,LT18a,LT18i,R800a, R800at,R800i,R800x

update is paid, cost 20 setool2 credits.
it is DOES NOT matter, if card was already activated or updated to work with >1.107 version.

LGTool will be activated and uploaded automatically during process.
( can use standalone LGTool functions till version 2.0, from version 2.0 LGTool should be activated separately )

for update procedure please read that thread. (http://support.setool.net/showthread.php?27629-Setool2-Card-Update-Information-TroubleShooting-READ-FIRST-POST)

04-16-2012, 11:07 PM
quick fix for android 4 firmware for old xperia phones
just paste updated executable (http://depositfiles.com/files/3ffagj5nu)to v1.1204 folder

04-19-2012, 11:10 AM

- fixed m1_aspen flashing
- fixed flashing of ICS firmwares for 8x55 phones
- removed java-based altbypass method for all a1 phones,except pnx5230-based phones.
- reset-based unlock method is now standard altbypass unlock method for a1 phones.
you can not use usb as interface for altbypass unlock on db2000,db2010-based phones anymore.
you do not need restoration files,bypass files ( still need them for pnx5230-based phone ).
and ... altbypass unlock is much quicker and quite "one-buttoned" now ;)
- added x1 unlock via codes, all you need - enter IMEI on locks tab and press "request". Cost is 1 credit.

due to major core rewrite, some bugs can appear in a1 phone service patterns, despite i checked all supported phones in different modes.
if you will find problems, feel free to report them on forum.

RapidShare Link (https://rapidshare.com/files/1594295972/v1.1280.rar)

04-21-2012, 01:14 PM
db2020 brown phones support was broken by accident.
pnx5230 brown phones support added.

quickfix integrated in v1.1280 version,please reupload distributive.

please note, that there NO NEED to use RESET operation for unlock anymore - use it ONLY when GDFS area totally trashed.
for any A1 unlock cases, just check signed mode +altbypass and press unlock/repair.

04-27-2012, 06:12 PM

- added quite complex, but working procedure to unlock last SEMC A2 phone, j108 cedar from network locks.
beginners, stay away from this procedure.
other users, welcome to faq for details. (http://support.setool.net/showthread.php?10-HOW-TO-WORK-WITH-A2-BASED-PHONES&p=83068&viewfull=1#post83068)
- STE U8500 sony phones supported ( lt22,mt26,st25 ). Standard operations supported - flash,trim area read/write.
Network unlock only supported using s1 signature server, which is offline for us.
STE U8500 support was done blindly, should work, but need to be tested.

RapidShare Link (https://rapidshare.com/files/1539792287/v1.1286.rar)

05-24-2012, 06:28 PM

- fixed unlock problems with some sharp 3g phones.
- added secunits backup during j108 bypass procedure
- misc cosmetic changes

RapidShare Link (https://rapidshare.com/files/3369306822/v1.1287.rar)

06-16-2012, 08:28 AM

- fixed recovery procedure for totally erased x10 phones
- fixed ESN recovery for corresponding phones

RapidShare Link (https://rapidshare.com/files/3281628988/v1.1288.rar)

06-18-2012, 11:44 AM
unbelievable : s1 signature server working ... well, should work from 8:00am gmt+8 till 8:00pm gmt+8
so grab your phones and unlock them while server online ;)

prices are expensive, though ;(

06-23-2012, 04:55 PM

- fixed android-based unlock, daemon not started on some systems
- fixed credits loss issue, when user unlocking s1_open phone and s1 server became busy in the middle of process

RapidShare Link (https://rapidshare.com/files/576952031/v1.1289.rar)

06-29-2012, 03:58 PM
as expected, s1 server down, lets say, it is down forever.
sorry, that is not depends on us, we can not do anything.

08-02-2012, 07:59 AM

- added support for msm8960 phones. ( network unlock require s1 server to be online )

RapidShare Link (https://)

08-03-2012, 09:13 PM

- msm7227,qsd8250 altbypass unlock using USB was broken somehow. fixed. greatly sorry.
- backup folder will be created now for j108 bypass during step 2, no need to make identify before procedure now.
- pnx5230 altbypass unlock could kill some phones ( theoretically ). fixed.

RapidShare Link (https://rapidshare.com/files/2123074912/v1.1291.rar)

08-08-2012, 05:47 PM

- added support for msm7225A phones. ( network unlock require s1 server to be online )

RapidShare Link (https://rapidshare.com/files/472350858/v1.1292.rar)

11-24-2012, 11:07 AM

- added support for msm7227A phones. ( network unlock require s1 server to be online )
- highly reduced memory usage when flashing s1 phones
- some small bugfixes

RapidShare Link (https://rapidshare.com/files/1788322377/v1.1293.rar)

12-05-2012, 10:45 PM

- critical bug fixed : some firmware files for old s1 phones was not accepted
- added s1v2 lock information
- some small fixes

RapidShare Link (http://rapidshare.com/files/2062979980/v1.1294.rar)

12-23-2012, 06:18 PM

During last week of 2012 year we lowered cost of UNLIMITED, STANDALONE activation for 2010,2011 qualcomm-based sony mobiles down to just 10 credits.

For cost of 3 pints of Guiness beer, you can repair imei of supported qualcomm-based sony phones, unlock them and fix them from total brick FOREVER, using simple, easy, tested and truly genuine solution.

plus, you getting lgtool applet absolutely free
( can use standalone lgtool functions till version 2.0, from version 2.0 lgtool should be activated separately )

12-24-2012, 12:10 AM

- critical bug fixed : hwconfig can't be written during altbypass repair operation
- some small fixes

RapidShare Link (http://rapidshare.com/files/78880932/v1.1295.rar)

03-19-2013, 10:45 AM

- added support for apq8064-based phones ( network unlock requires s1 server to be online )
- some loaders updated
- small fixes

RapidShare Link (http://rapidshare.com/files/1511798443/v1.1296.rar)

04-11-2013, 08:51 PM

- few PDA models added to list
- some loaders updated
- small fixes

RapidShare Link (http://rapidshare.com/files/2223586518/v1.1297.rar)

04-22-2013, 02:32 PM
setool2 support area moved to new server.

For a moment, DNS records are not updated and in order to access support area you should do modifications to your system's HOST file.

Go to %windir%\system32\drivers\etc folder and open "hosts" file using any text editor, like notepad.
Add to the end of file next strings : files.setool.net setool.net

take note, that you need to run editor with administrator right and disable antivirus in order to successfully edit hosts file.

DNS records will be updated as soon as it possible, unfortunately, this is not depends on me.