blackberry 9550 flashing problems

[blevinski]

I have tried to program this phone for mms and wap and i have tried every method i could find and still no wap and mms. i have cains to0, and two other service books remove and reload browser demean with loading service books in the between I've tried legacy mode. now I cannot dial ##000000send any more gives me cannot read data error? any ideas

[bigglou23]

Wipe the os and re-install it, then reflash it

[blevinski]

as in do a factory wipe or remove all software off the phone? thanks for the reply

[bigglou23]

Use JL Commander to wipe it, but first make sure you have the storm os to re-install.
then use this guide:

1.Get the most recent BlackBerry OS as you would do when you upgrade your BlackBerry OS.
2.Install this on your PC.
3.Connect your BlackBerry to your PC.
4.Make sure the BlackBerry Desktop Manager is NOT running.
5.Open a command line by going to: Start » Run… » enter “cmd” » HIT ENTER
6.Navigate to the Application Loader directory by entering: cd C:\Program Files\Common Files\Research In Motion\AppLoader\
7.Enter and start: Loader.exe /nojvm
8.The BlackBerry’s Java Loader will pop up.
9.Follow the instructions and install the new OS on your device.
The BlackBerry should automatically reboot at the end of the installation process and your device is back working

[blevinski]

I actual have apploader from the mfi multiloader unlocker. do I use option 5 or 4 on jlcmndr. i have never had to use this other than it policys

[blevinski]

never mind I tried them both. i guess 4 was the option now reload the os

[blevinski]

still cannot ##000000send???

[bigglou23]

hmmm, dont know what to tell you. sorry

[blevinski]

thanks any way for the help

[blevinski]

I think I figured out what I did.

[blevinski]

so I tried writing (out desperation of it not working when it works on all the other blackberry's) settings with qpst. (my recommendation do not use qpst with bb) this saposidly corrupts the spc there by not letting you access the nv items in ##000000send. so trying to figure a repair for this.

[thephoneguy913]

Try to set up the NAM and EVDO settings with CDMA workshop...and dont forget to turn the WI-FI off....I had a few Storms with the same Problem and thats the only way that works for me....I hope that helps.

[blevinski]

I found out that writing qpst corrupts the spc. looking for a fix

[blevinski]

phoneguy do you know how to fix corrupted spc??

[thephoneguy913]

Noup...unfortunately I dont know how...i wish I could find the way to do it...I have 10 or 12 Blackberry's with the same problem....

[blevinski]

found this and trying it write now: [Only registered and activated users can see links]

[blevinski]

it is on the 5th page

[blevinski]

I need the hex command for the terminal tad on cdma workshop for the storm 2 to fix this spc

[AlexFG]

I kinda had a similar problem with an older BB 8703e a while ago, it was from verizon but it wouldn't take ##000000 because the spc got corrupted somehow.
I couldn't fix it with CDMA WS, QPST or QXDM.

The only program that fixed it was uniCDMA, I just had to rewrite it and it worked perfectly afterwards. You don't have memory access on the 9550 so it might not work but just give it a shot and see how it goes.

[blevinski]

what was the memerry access to the 8703? thanks for the repply

[blevinski]

how did you rewrite with ubicdma

[blevinski]

well this is what I need but I cannot seem to get it in time.

Sometimes, your SPC gets corrupted, and instead of being 6 digits, it's 6 bytes, maybe digits, but maybe unprintable characters you can't simply type in.

For example, 000000 is represented in a hex editor, on the hex-side, as:

303030303030

Maybe you scan memory, and get your SPC, and it's represented in a hex editor, on the hex-side, as:

000030303030

How the heck can you send SPC when it's (null)(null)0000. Not exactly easy to type in the (null) character, now is it?


The solution is easy, but you need to use a tool that will let you send 303030303030 instead of 000000. Cause then you can send SPC of 000030303030, which will unlock SPC. Then use typical methods for writing SPC to 000000, and problem is fixed.

I use QMAT to send SPC using raw hex bytes. The command-prefix is '41', following by SPC, in hexascii form:

41303030303030 will send SPC "000000"

41000030303030 will send our currupted SPC "(null)(null)0000"


You can also use CDMA Workshop, terminal tab, to send raw HEX bytes to the phone. I think you'll see "41 01" in results section, if you're successful at unlocking using SPC. Then just change SPC to 000000... using CDMA Workshop, or QMAT, or QXDM, or whatever program you wish..

Then, don't use QPST again on blackberries, if it's what caused the problem in the first place...

originally posted by beezlewaxen

[excelter]

if SPC corrupted the easiest way is use CDMA workshop
Launch Cdma workshop and Connect to your blackberry port.
Go to Terminal Send Command
41 FF FF 30 30 30 30 30 30 - the result should 41 01 . . . .
if this happen it mean your blackberry already open (SPC)

Go to Security tab, Write SPC "000000"

if you use cdma workshop demo version.. use QXDM and type
nv_write sec_code {"000000"}





Go to Security, Write SPC "000000" - Wait for successful, SPC Repaired.

[EMERGENTPHOENIX]

thank you so much! qmat is the tool i've been so looking for! I'm gonna find a way to send beezlewaxen a thanks as well! If you are reading this beezelwaxin, you are a phone flashing GOD! lol

[EMERGENTPHOENIX]

update: The new version of the qmat software is called PSAS
I haven't quite figured out how to use it but have a little bit
first go to hardware forensics tab then use mobile ports
then make sure you choose the right com port
then i believe choose generic QC
then DIAG tab
I think you send the null spc to the phone through diag commands
using 41000030303030 and hit send

thats as far as I've gotten. when I hit send it says
successfully send command
but when I go to the code tab
and enter 000000 and hit change spc
it says please wait ....
still waiting lol ...

I already installed the new cdma workshop demo version a few months back
and now it won't let me install the demo version again
and I can't afford to purchase full version right now ...
thus the search for qmat ..
no success so far in writing spc after sending with psas or qmat with those or qxdm
any suggestions?

[vipersinu2]

any ideas on why using qpst, nv_write nam_lock 0 0 I get obsolete command?