Almost Finished woot :):):) working on it now

ok ESN Soultion done
ive sucessfully changed esn on the PPC6700 :) haha

wrting the tutorial now

do the same as the a900 just edit the sys.esn and replace it

haha yeah
it worked
im going to be posting the drivers here in a few mins for the other people to change spc and everything

spc and esn easy

PPC6700 ESN CHANGE
First click phone on PPC6700, then type ##DIAG (##3424) talk or # again
Example
Sprint phones ##3424#
Telus Mobility ##3424 talk

Click start to start the communication
Load the modem drivers provided by me

Connect the PPC6700 in the EFS Explorer of the QPST.

[Only Registered Users Can See Links]



Enter the SPC
Navigate to the NVM folder and locate the file $SYS.ESN

[Only Registered Users Can See Links]


Right click copy the $SYS.ESN to your windows hard drive, remember where you saved it and back it up .



Next load up your hex editor I personally use xvi32 so this tutorial will be based off that hex editor. Open the file $SYS.ESN where ever you saved it to.

[Only Registered Users Can See Links]


NOTE: My ESN originally was 1A2B3C4D

We read the ESN in groups of 2, the example serious 1A 2B 3C 4D, and Checksum 1F 25 12 F1 and enter the ESN backwards

Example ESN: 1A 2B 3C 4D = 4D 3C 2B 1A

Example Checksum: 1F 25 12 F1 = F1 12 25 1F


[Only Registered Users Can See Links]



Using Inter ESN Checksum Calculator enter in your new esn and click calculate to get your checksum.

[Only Registered Users Can See Links]

ESN: 12 34 56 78 ESN to enter: 78 56 34 12
Checksum: 1F 25 12 F1 Checksum to enter: F1 12 25 1F

Save you’re newly edited $SYS.ESN load up QPST EFS Explorer navigate to NVM folder overwrite old $SYS.ESN with new $SYS.ESN

Click Stop on the screen of the phone wait for the PPC6700 to restart and your new ESN is entered 

[Only Registered Users Can See Links]

Tutorial Made by
amoamare
[Only Registered Users Can See Links]

please do not PM me asking for any kind of help with CLONEING, CHANGING ESN'S
I WILL NOT RESPOND ANYMORE...

So have you got the drivers posted somewhere?

I guess doing this in bitpim or something doesn't work, as I get a permission denied when trying to overwrite that file. I presume QPST via entering SPL code must change that? Looking forward to seeing those drivers when you're ready to post them.

Anyone get the drivers yet?

I think this guy's full of it... the esn file is locked. Let him prove it by posting his drivers.

if you want the modem drivers for this phone pm me if you would have read my other post you would have know what i said about them. I said id either post them for free or sale them. this tutorial comes with the modem drivers, ive written this up and provided it in there as well as here for REFRENCE only if you have the drivers all ready

So dont accuse me of being full of it. I've never posted anything that was bullshit.

jzdziarski:

Read the tutorial again QPST i state that at the begining
QPST ONLY
BITPIM will not work

That’s ridiculous!!! He wanted $15 for it. Anyways I found the drivers for it on another site. This was provided free so why is trying to make a buck out it. Anyways here is is.

thouse drivers are different from mine but thouse will work just fine as well.
and 15$ isnt just for the drivers should have clearified that with you 15$ dollars grants accesse to my ftp so you can get thouse drivers and what ever else you wish off there for one day
after that the login gets disabled. i have an ftp where everything is a lot easier to find.
i should have clearifiyed that with you more i was just in a hurry when i sent that message out to more then just you. That does apply to everyone

hi, good word amoamare, somebody knows as min changes to him and sid to this phone there am proford with several soft without having positive results, somebody gives a hand me please:)

this method works on some other models too, try it if u dont hav a program for a phone. yesterday i did a kyocera rave k434 nd worked like a charm.

i need driver ppc6700 for serial com--
my phone is locked..

pocket pc usb sync... driver.

hlpme... plese..

do a master reset on the phone and that will reset the lock code its real easy
just hold the two soft keys and the reset botton on the phone
!

how can do reset if cell this blocked...

help,

would this solution work, with the same carrier, with a phone that has been deemed stolen or lost

yay for QPST :)

thx for tutorial.


someone post a newer QPST please!! 2.7b215 is old news!!

It´is old solution but work 100%.

usb drivers arent working for me. these are for usb??

i have new ppc and when XP asks for usb sync drivers... the 6700 drivers provided on page 2 do not work.

Bell can't put in DIAG, ##DIAG# and ##DIAG talk not work. how can i do.

*#DIAG dial or #

Not work, but i got solution. ppc 6700 bell is ok, now I need 6600 how put in DIAG mode.

My wife bought a PPC 6700 on ebay, ad claimed it was new and ESN clear. When it got here it was obviously not new and phone was still active. She contacted the seller/owner via email and he replied that he had requested Sprint to clear the ESN and that it should happen shortly. It never happened, she then filed a complaint with Paypal and after 30 days she received a partial refund but was not requested to return the phone. At this point we would like to recoup some of our losses. Is their anyway to legally clear the ESN for the phone and use it on her active account, or at least make it sellable?

Hello,
I am currently living in asia and using a nokia 2112 CDMA phone.I really need the ppc 6700 and willing to buy it for cheap from USA.All i want to know is that could i get my nokia's ESN and SPC working on the ppc-6700 as stated above and will it work on my service provider ?

This is what is displayed on the back of my Nokia 2112 (Example):
ESN : 0xx/14459999
Code : 046789FGD45FF
ESN Hex : 21DFGH78

Please comment...

PS : I am also looking for Second Hand PPC-6700 for sale

Thankyou..

Could this method work on any other phones?

For some could, for some don't ... the only way to be sure is trying.

worked like a charm

I'm really hoping that this will work on an XV6700, because I just bought one, and I'm trying to do it without any luck so far.

thats what i changed the esn on. it was a xv6700

I tried my PPC 6600 with QPST, to do as amoamare demonstrated, but not recognized. Can anybody provide the driver for PPC 6600 if u have?
Thanks.

what do i put in spc???????????????

what do i put in spc???????????????
Use Qpst for SPC

Use Qpst for SPC

i dont get it.... can u be more specific please?
i have Qpst 2.7 and when i try to connect my ppc6700 and i try to connect the modem to view the filesystem and extract the esn.sys it says SPS 000000 and if i hit ok shows me an error saying "you entered an incorrect service prog code the phone may not respond for up to 10 seconds."

How to make ppc6600 work with QPSt? Anybody has the PPC 6600 modem driver to work with QPST?

if i can get a ppc6600 in i will be gald to try a few things to see if i can get some drivers working untill then im of no use :( sorry

I found the solution here: [Only Registered Users Can See Links]

Hi

Inter ESN Checksum Calculator for CDMA Phones

Please anyone can send me a download link for the above tool. I coundn't find on Google!

Thanks

Use unicdma, you can do the same...

Thanks for your suggestion.

Do you know unicdma (windows version) is available for download? possibly a link for download? I'm actually trying to follow amoamare's ESN change procedure on my ppc-6700. I got everything except "Inter ESN Checksum Calculator for CDMA Phones".

I would appreciate any help towards finding this software tool.

Inter ESN Checksum Calculator for CDMA Phones

Amoamare, Breaking News, Celhack,

Thank you very much for your help. Now I have all the tools needed to change ESN. I have few more doubts and if one of you can clarify me, I would really more thankful to you guys; The PPC-6700 I have is now activated on Sprint and have a working number on it which I will abandon as soon as I successfully switch the phone to my new CDMA service provider. I'm trying to use (clone?) the PPC-6700 with another CDMA carrier and wants to know (1)whether I need to do a master rest first and change the ESN? (2) According to PPC-6700 sprint user’s manual, a hard rest will bring the device to factory default. What does this means? (3) If I do this the phone looses all Sprint programming? or it will restore the device defaults and Sprint programming? (4) I think I should make sure the Sprint programming completely wiped off before I clone the phone? (5) I have MSL from Sprint but if do the hard rest this will stay or this will be replaced with UStarcom's default MSL which I think 000000?

My ultimate objective is to get the PPC-6700 work on my new CDMA service provider as a second phone. In another words, I should be able to use two phones with one single number. When I do this can I leave both phones turned on at the same time? or I can only use one phone at a time? I wonder if I keep both phones switched on, the wireless provider may detect the clone?

I would really appreciate your thoughts.

Hard reset will replace the MSL 000000 .

Cloning phones is a federal crime in the USA

A master reset isn't going to get rid of Sprint programming

luzer,

Thanks for that info. Although I bought this phone from Sprint, the phone will be used out side the United States with a foreign wireless provider. I have decided to use only one phone and therefore there is no question of clone.

Same ESN with different provider is not a problem at all

Hi All

How do I update PRL on ppc-6700? I switch the ppc-6700 from Sprint to a CDMA wireless provider. I think I have correctly programmed the phone with NAM1, Home SID/NID but when I dial out, I am getting “America Roaming Service Prompts”.

Is this because I don’t have the correct PRL or incorrect programming? Every wireless uses the same PRL? or each provider has their own exclusive PRL?

I would appreciate your input.

Thanks

Thanks a lot, worked well without any hessles, only thing was SPC which I had to find before I could change ESN. I posted procedure here

[Only Registered Users Can See Links]

can you please post the drivers im trying to get connection betwin pc and the ppc got no lock can you helpme whith this anyone....thans in advance

You didn't take the time to read this thread ... everything is already posted.

I changed the ESN on my ppc-6700 phone to the same as my a900 phone.

This makes life much easier because now both phones work and I don't need to call sprint to get them to swap esns.

However, the problem I'm finding is that I can't use EVDO data on my ppc-6700 after the ESN swap. Evdo works fine on the a900.

However 1x data works fine on the ppc-6700 so right now I used the ##778# and forced it to 1x mode all the time (CDMA instead of Automatic).

Works pretty well but I'd still like to have EVDO on the ppc-6700. Anyone know how to fix this? Thanks.

Someone please help me! I successfully changed my esn in a verizon xv6700 to the esn of another verizon phone. I activated it and updated the prl. The evdo connection works fine but when I attempt to dial out it plays the message "your phone cannot be authenticated." I checked the nam in ##778 everything looks fine. Is there something I am missing here?

bober99
You need a ESN that supports EVDO



chrisdobler
You need the aKEY off the phone with the orginal esn to use voice calls

I can't read or write pp6700 ESN , can you help me by picture .... ?thank !

I can't read or write pp6700 ESN , can you help me by picture .... ?thank !

Bos... u only try to change property
problem solve

hugi
02170551207

has anyone been successful in getting EVDO to work on the phone they cloned. I have two 6700's and on the cloned 6700 i have voice and can do messaging, however i can't get my data to work in EVDO or 1X.

I even changed my MSL to match my working 6700 and still no success.

I changed the esn of my 6700 to my overseas cdma provider. I updated the service programming on my 6700 also. Now when I make a call it says 'the Service is unable to authenticate your phone'! Any help on what to do next? I am determined to make this work.....

The answer is posted a 1,000 times on this fourm it can not authenticate because you need to program the correct A-KEY into the phone

ok i understand this now thanks.

does anyone have a copy of a-key calculator? all the links i found are dead....

if you cloning a phone you dont need to use the akey calculator just get the akey off the phone you are cloning. if you wish to have the akey calc pm and ill give you a link

The answer is posted a 1,000 times on this fourm it can not authenticate because you need to program the correct A-KEY into the phone


i don't know if your post was in reference to me or not, but regardless...

sprint doesn't use akey from what i understand. my akey is blank on one of my phones and data works just fine.

someone told me that the phones msl must match the esn to authenticate for data, however after changing the msl on the cloned phone data still does not work.

The first post wasnt in reference to you

I told you that the msl must match the esn, it does i have tested it over and over at least in my area it needs to be that way, also in my area sprint uses the akey. I just cloed a treo 700 using an LG Fusic esn and before the treo can even use the internet or data services i hate to make sure both msl matched and akey as well as esn. You CAN NOT have both phones on at the same time either.

Can someone please help me with changing the esn on my xv6700. I cannot get qpst to recognize my phone. I tried installing the drivers but it doesnt seem to work. I would appreciate any advice that someone could give me

----------------

Can someone please help me get the data working on my phone. I changed the esn but cant figure out how to get the data working.

Anyone discover a solution for XV6600? I'm using both USB and BT with QPST v2.7 build 264 and can't get the phone to be recognized.

Is there something I'm missing? Can I add something to QPST to have the phone be recognized?

Thanks,
---mark

no EVDO on changed ESN but 1x works fine?

--------------------------------------------------------------------------------

I changed the ESN on my ppc-6700 phone to the same as my a900 phone.

This makes life much easier because now both phones work and I don't need to call sprint to get them to swap esns.

However, the problem I'm finding is that I can't use EVDO data on my ppc-6700 after the ESN swap. Evdo works fine on the a900.

However 1x data works fine on the ppc-6700 so right now I used the ##778# and forced it to 1x mode all the time (CDMA instead of Automatic).

Works pretty well but I'd still like to have EVDO on the ppc-6700. Anyone know how to fix this? Thanks.


Answer.
1x will work becuause it is authenticated differently than evdo. 1x if authenticated via MIN/MDN credentials that the handset sends out to the network along with a few other things.. This info never changes.. Evdo is auth via a DMU code sent to the phone from the network. its primary purpose is to prevent fraudulent activity on the data network so that is why 1 device will work (its doing what it was designed to do).

Try powering of both devices..
then try a esn change to a different esn.
change the esn back and power on the 6700 to see if it will receive the new Dmu key. hopefully this will work. i doubt if you will be able to get both working.

Your wrong thephonephreak i have evdo working on a cloned 6700 and a900 as well.
You need to call sprint swap your esn to the 6700 so sprint thinks your using your 6700. Then clone the a900 to the 6700 with the correct ESN, MSL, AKEY.

Then type ##Data# on the a900 then go to restore. Then try to log in to power vision or on demand it should set up your phones account sometimes can take up to two hours before working..

Question,
Is there any way at all for Sprint to detect a clone handset, aside from leaving both phones on at the same time? Seems a little risky, since it looks like the penalty can be harsh.
Thanks!

HOW DO I GET THE A-KEY OFF MY PHONE? HOW DO I GET IT IF THE SCREEN IS CRACKED? HOW DO I PROGRAM THE A-KEY INTO MY NEW PRONE?IVE BEEN LOOKING AND I CANT FINE A THREAD TO ANSWER THESE QUESTIONS PLEASE HELP.:(

I got the ESN changed but now the Radio isn't enabled. It will not make any calls> can anyone explain how to enable the Radio. I've read everything,but still don't know what I'm doing wrong. Thanks for any help.

does anyone know if this solution will work on the 6800 mogul?

Hey Any Success using this Method in HTC Mogul / PPC 6700 / HTc p4000

I am eagerly waiting or Reply

I have QPST 2.7 Build 263 which support the Qualcomm MSM7500 chipset used in Mogul

????????????

Every time I've tried to re-write the ESN through QPST, it comes up with an error - that it is read only. Any advice on how to change the attribute?

thanks!

Would this work if there's no radio module? My radio module is lost. The ESN no is also not there. Any clue on how to get this right? It's PPC 6700 from UTStarcom. I'm in India with Reliance.

I followed the instructions on this thread and it works like a charm.. On the PPC6700 and on the Treo 700w and wx. Has anyone done this on a KPC650 AirCard? The file is there but I dont have another one to test....

Ok seriously. I have done everything said in this thread except the akey part.

I don't understand how I am supposed to get my akey from my other phone.

Any help here?

i have ppc6800 sprint ,i wanna load prl ,but the prb it i can not get the spc code ,i can read the phone ,and i use some memory but it not give me the code ,any one get the solution pls?

contact hpnasik forum memebr he has developed software for SPC calculations

Here you go. Use to get SPC on 6800 from sprint

i have the esn changed on a a900 from a mogul. It is verified with ##, but I cannot make outgoing callls or incoming calls. it is said i need to change msl and akey also, but i cannot find where to do that.

i now chnaged the msid and phone number and now got voice and messaging, but no data. i also cnahge msl but i can't change a-key? i am trying to clone 6800 to A900.

I think i accidentally changed my spc code is there anyway that i can change it back. XV6700

in /nvm/nvm/nvm_security contains your MSL/SPC my line 70 reads 27 53 BF what is my spc

software not a win32 valid application, can you upload it again:D

Here you go. Use to get SPC on 6800 from sprint

It is a windows mobile app. Load it on your phone then run it.

can anyone help?

Anything for the Qwest version?

i have a metro pcs utstarcom cdm7025 phone/and a sprint 6700.iam gonna be cloning the esn to be used on the 6700.as far as the guide goes,all i need is the spc from the 6700 correct?i just wasnt to sure cause this is my first time reprogramming a phone.thanks

Hello all,

I'm on Sprint now, and was considering leaving to a GSM carrier because I wanted to swap between a thin phone and my PPC-6700.

If I understand this thread, I can upgrade my PPC-6700 to a thin phone, then change the ESN of my PPC-6700 and switch between the two? Is that right?!?

That'll save me from changing carriers! I like Sprint. I have a great service plan.

Now, does the phone "need" to be a Samsung? Can I use a Sanyo Katana II or a Motorola RAZR V3m? My first choice was a Samsung A900, but I'm pretty sure that the A900 is way past it's life-cycle and Sprint doesn't have any in stock.

Yes u can

Yes I can? So, is there a limitation to what brand/type of phone I can use? I guess it'll depend if I can get the ESN from it, right?

After a bunch of PMs to some kind people, I got this all figured out. This is pretty cool! Now, I really didn't want to change my ESN. I just wanted to see if I can access the files and "see" the ESN. This was on my PPC-6700.

I also have a Samsung SP-I600. It's an older PDA flipphone with Window Mobile 2003. I assume that I can do the same thing. Does anyone know where I can find drivers for this phone?

That's odd. I was able to use find the $SYS.ESN file on my Sprint Razr V3m, but when I open it with the xvi32 program, it comes up blank? What do you use to view the $SYS.ESN file for the Motorola RAZR V3m?

That's odd. I was able to use find the $SYS.ESN file on my Sprint Razr V3m, but when I open it with the xvi32 program, it comes up blank? What do you use to view the $SYS.ESN file for the Motorola RAZR V3m?

only with dongle u can repair esn for v3m...

After a bunch of PMs to some kind people, I got this all figured out. This is pretty cool! Now, I really didn't want to change my ESN. I just wanted to see if I can access the files and "see" the ESN. This was on my PPC-6700.

I also have a Samsung SP-I600. It's an older PDA flipphone with Window Mobile 2003. I assume that I can do the same thing. Does anyone know where I can find drivers for this phone?

modem drivers are just the same as a950, the new pst lite includes these drivers. as you have a ppc6700 you know it has activesync mode.

I need help with a Samsung A900 and SP-I600 PDA phone.

I purchased an A900 off ebay with a BAD ESN. As expected, Sprint was unwilling to give the Master Lock Code, as this phone comes up "fraudulent".

I've heard that you can go in via BitPim and look up the MSL but I can't get BitPim to see the phone. After some searches on various forums, it seems that the A900 is not accessable via BitPim. Therefore, I am looking for any other solutions to dig out the MSL.

Also, I purchased a Samsung SP-I600 PDA phone (clamshell). Thought it would be fun to play with. However, the phone does not accept ##3424# to get into it, so I cant use QPST to look up the ESN.

Any solutions on this? I'm REALLY more concerned with the A900 than the I600.

Thanks!

I abandoned the I600 PDA flip phone. It wasn't going to work out for me. I finally was able to get the SPC off the A900 and got the ESN and Checksum from my 6700.

The A900 can place/receive calls. It can also send/receive TXT messages. But, like others have faced, I can't get EVDO going or get Vision working.

There is mention about an A-Key. I'm not sure what that is. I've read this thread 3 times, and it's just not informative enough. So, hopefully someone can answer some specific questions about getting Vision to work on my A900.

1. I carried over the ESN and the Checksum from the 6700 to the A900. Do I also need to carry over the SLC?

2. How do I find the A-Key from my 6700? Which of these programs do I use to find it? QPST? If someone can attach a picture, that'll be awesome.

Heck, I'm not even sure if my Sprint service here in Arizona even uses an A-Key. Anyone know that?

Thanks in advance. This thread is freakin awesome!

THIS SOLUTION WORK TOO WITH 6700 UTSTARCOM ? I TRIED TO CHANGE $SYS.ESN BUT THE PROGRAM SAYD AN ERROR OCURRED WHILE TRYING TO WRITE THE FILE nvm/$SYS.ESN TO THE PHONE

Are you trying to write directly to the file in the 6700? You should copy the file to your computer, edit it, save it, and copy it back into the phone.

only with dongle u can repair esn for v3m...

where can i purchase dongle from?

YES FIRST I READ SPC ,THEN I READ THE ESN FILE AND WITH THE VX135 I EDIT THE NEW ESN AND SAVE THEN WITH THE EFS EXPLORER I TRIED TO OVERWRITE THE SAME FILE(THE NEW ESN) AND SHOW ME THE ERROR MAYBE UTSTARCOM IS DIFERENT TO SPRINT OR VERZON I THING

I am unfamiliar with the software you are using to read your phone.

I would suggest that you actually use QPST, as shown in the tutorial. You will need Version 2.7, Build 215 for the 6700s.

Maybe the program you are using is preventing you from writing to the phone. Or, check the settings on your software and see if there is a place to "unprotect" the files on your 6700 so you can overwrite them.

Hey guys.
I've almost got this working for me. I have my 6700 all going, but all it does is connect me to a verizon operator. I'm pretty sure it's because I dont have the a-key in there. The swap is from a verizon motorla Q and I'm totaly lost on how to find the damn a-key. I know if I could just do that I'd have it going.

anyone have any ideas?

thanks!

Hey guys.
I've almost got this working for me. I have my 6700 all going, but all it does is connect me to a verizon operator. I'm pretty sure it's because I dont have the a-key in there. The swap is from a verizon motorla Q and I'm totaly lost on how to find the damn a-key. I know if I could just do that I'd have it going.

anyone have any ideas?

thanks!

I've made more progress. I'm taking ESN from Verizon Q and putting it on a Sprint 6700. There were a lot of things had I had to change to get it to work and I had to get the a-key - but I got it to where the phone itself works, but no data. I've carefully read every post in this thread but I didn't see any solution for that.

Can anyone provide some suggestions?

They a-key is used for 1x voice/1x-rtt data only.

EVDO is using another "band", to logon to it is different method. (HA-AAA password etc)

So you should be able to turn on 2 phones (one PC data card, the other phone) of the same ESN, and have the phone lock onto 1X only, and the PC data card lock onto EVDO only)

Interesting. Is there a way to get the HA-AAA username/password of the motorla Q? I see where it goes in the 6700, but I dont see how to retrieve it from the Q. (or is there some other way to get it? Like would Verizon give it to me?)

I have a Sprint PPC-6700 and have sucessfully put my ESN onto my Sprint/Samsung A900. Still no Vision Data service, but that's ok. I just use this for talking and texting.

I now see that Verizon has a Samsung SCH-u740. A nice slim profile with a dual-flip mode, allowing for a qwerty keyboard. Very nice.

I'm sure I can get in there and change the ESN, too. However, I am concerned with Verizon's proprietary software... like Vcast. It is my intention to use this phone just for calling and texting. Will this phone work?

I would assume that I will need to change a bunch of IP numbers so the texting part will work.

Would it be necessary to do a PRL update? If so, how the heck would you do that on a Verizon phone?

I have a Sprint PPC-6700 and have sucessfully put my ESN onto my Sprint/Samsung A900. Still no Vision Data service, but that's ok. I just use this for talking and texting.

I now see that Verizon has a Samsung SCH-u740. A nice slim profile with a dual-flip mode, allowing for a qwerty keyboard. Very nice.

I'm sure I can get in there and change the ESN, too. However, I am concerned with Verizon's proprietary software... like Vcast. It is my intention to use this phone just for calling and texting. Will this phone work?

I would assume that I will need to change a bunch of IP numbers so the texting part will work.

Would it be necessary to do a PRL update? If so, how the heck would you do that on a Verizon phone?

u can have vision service working on a900, just copy nvm files from an a900 that has already been vision provisioned and just change the vision username and password to your own or whatever one u want. i have used the u740 on sprint before and texting and calls work fine, all u have to do is program mdn and msid/min. u dont need a prl update cuz verizon has roaming agreement with sprint which means that verizon esns on sprint phone will work and sprint esns on verizon phone will work. right now i use the chocolate for my sprint number.

Does anyone know if this same effort could be applied to a Qwest HTC 5800 if I were to use an a900 esn?

I came across a cheap HTC Sprint PPC6800, there is a reason why, the phone have bad esn. IS there a way to change the ESN on the phone from my previous sprint phone:confused:

Kocoman, you helped me a while back with getting the prl file onto a treo 650 using cdma updater. Remember me???:o Anyway I finally got a cable from someone, but I cant overwrite the nvm files. I've been looking for two days now, and the best I've come up with is doing some seem edit. But I don't thing that's for my phone. I'm trying to use qpst. Any suggestions?

Sorry Koco... I wasn't specifically asking you about overwriting nvm. I know you don't have the phone. You had just brought it up there. I was hoping someone might know something though. :p

has anyone found a way to get evdo working on cloned phones. i am wanting to clone my krzr with 6700. but i know u must match the a-key has anyone figured this part out?

Ok cloned my metro pcs esn to my ppc6700 sprint phone but no service? Would it be the sprint software in the way?
Thanks James

Do you have the sprint ROM installed on the phone?

Inter ESN Checksum Calculator for CDMA Phones

Thinks,it work

hi there i need some help.I have a 6700 with telus.bad screen. I bought one off ebay(VERIZON) and was able to change the esn but the phone does not work. I cant make or receive calls i also copied all of the files in the nvm folder over to the new phone but still no luck.What could i be doin wrong?

PPC6700 ESN CHANGE
First click phone on PPC6700, then type ##DIAG (##3424) talk or # again
Example
Sprint phones ##3424#
Telus Mobility ##3424 talk

Click start to start the communication
Load the modem drivers provided by me

Connect the PPC6700 in the EFS Explorer of the QPST.

[Only Registered Users Can See Links]



Enter the SPC
Navigate to the NVM folder and locate the file $SYS.ESN

[Only Registered Users Can See Links]


Right click copy the $SYS.ESN to your windows hard drive, remember where you saved it and back it up .



Next load up your hex editor I personally use xvi32 so this tutorial will be based off that hex editor. Open the file $SYS.ESN where ever you saved it to.

[Only Registered Users Can See Links]


NOTE: My ESN originally was 1A2B3C4D

We read the ESN in groups of 2, the example serious 1A 2B 3C 4D, and Checksum 1F 25 12 F1 and enter the ESN backwards

Example ESN: 1A 2B 3C 4D = 4D 3C 2B 1A

Example Checksum: 1F 25 12 F1 = F1 12 25 1F


[Only Registered Users Can See Links]



Using Inter ESN Checksum Calculator enter in your new esn and click calculate to get your checksum.

[Only Registered Users Can See Links]

ESN: 12 34 56 78 ESN to enter: 78 56 34 12
Checksum: 1F 25 12 F1 Checksum to enter: F1 12 25 1F

Save you’re newly edited $SYS.ESN load up QPST EFS Explorer navigate to NVM folder overwrite old $SYS.ESN with new $SYS.ESN

Click Stop on the screen of the phone wait for the PPC6700 to restart and your new ESN is entered 

[Only Registered Users Can See Links]

Tutorial Made by
amoamare
[Only Registered Users Can See Links]

please do not PM me asking for any kind of help with CLONEING, CHANGING ESN'S
I WILL NOT RESPOND ANYMORE...


Any way to go into Diag mode for verizon 6700?
I try #*#3424
it didn't work
please help.
thanks,

Was hoping this would work for the 6800 Mogul, but it won't show up in QPST EFS Explorer. :(

I have sucessfully installed an ESN from my PPC-6700 onto my Samsung A900. I've recently switched PDA phones to a Palm Centro.

The centro has a LONG ESN. it's 18 numbers long?!? Can this be put into the A900? Would it be the same format? Backwards with every two numbers transposed?

I have sucessfully installed an ESN from my PPC-6700 onto my Samsung A900. I've recently switched PDA phones to a Palm Centro.

The centro has a LONG ESN. it's 18 numbers long?!? Can this be put into the A900? Would it be the same format? Backwards with every two numbers transposed?

the centro does not have an esn, it has a MEID...you need to go to L4G or something like that and use the converter to convert your MEID to a psuedo esn or phex/pdec esn...the pseudo esn will work like normal esn when you call and have it activated...

Any way to go into Diag mode for verizon 6700?
I try #*#3424
it didn't work
please help.
thanks,

you can try ##3424#, ##3424Talk, #*#3424#, and #*#3424Talk...these are the usual combinations of the DIAG code...one of the two prefixes with one of the two suffixes...enjoy

Was hoping this would work for the 6800 Mogul, but it won't show up in QPST EFS Explorer. :(

you can get the 6800 to connect to qpst and btipim the same as the 6700, but it does no good as the nvm folder on the mogul is locked...there is no esn solution through the normal method...

when you put the 6800 in diag mode, it will install the drivers for the modem and then as it is installing the diagnostics interface drivers it will say that it cannot find a particular file...direct it to C:\Windows\System32\Drivers...this will allow the last file to be installed and now you're golden and can do anything you want except access the nvm folder...

if anyone found this to be useful then by all means hit the thanks button...i have none...

Thanks for the info. This has been a fun site. I was able to sucessfully convert my MEID to a pESN. I found link to a great web site that does it all for you.

[Only Registered Users Can See Links]

You put in the MEID and it pumps out the DEC MEID, the pESN DEC and pESN HEX.

Pretty awesome.

The drivers listed here don't work for my Sprint PPC 6700. Anyone have links to others? I've found 3 sets like this one posted on page 2. One site even mentions to edit the .inf files, but they already have the differences in them.

Any help appreciated. Thanks,
-CC

Are you looking for the modem drivers for the 6700? They're on the CD that came with the 6700 from Sprint (or whoever your carrier is).

If you PM me with an email address I can email what I have.

I also have the PQST 2.7 Build 215, the ESN checksum software, and the vxi32.

Better yet, follow this link to download my complete ZIP file

[Only Registered Users Can See Links]

The drivers listed here don't work for my Sprint PPC 6700. Anyone have links to others? I've found 3 sets like this one posted on page 2. One site even mentions to edit the .inf files, but they already have the differences in them.

Any help appreciated. Thanks,
-CC

dude...if you need the diag drivers, you'll notice that your hardware installer looks for a file that it's not able to find...at this point you should direct it to C:\Windows\System32\Drivers and it will find what it needs...if this does not work then do a search on your pc for the file it is looking for and then direct it to where the file is located...

yeah- i use this one b/c it's the shiz and all...
i think it's a bit better than your link and has no ads!!!
no pissing contest intended...just check it out...it's pretty simple and laid out well.

[Only Registered Users Can See Links]


Thanks for the info. This has been a fun site. I was able to sucessfully convert my MEID to a pESN. I found link to a great web site that does it all for you.

[Only Registered Users Can See Links]

You put in the MEID and it pumps out the DEC MEID, the pESN DEC and pESN HEX.

Pretty awesome.

has anyone succesfully have evdo working on 6700 after cloning the esn on it? i can only get 1x.

Can anybody please tell me where to get those drivers.

Which drivers? I put up a zip file that has the common software for conversion. It's on my posting here.

[Only Registered Users Can See Links]

u can have vision service working on a900, just copy nvm files from an a900 that has already been vision provisioned and just change the vision username and password to your own or whatever one u want. i have used the u740 on sprint before and texting and calls work fine, all u have to do is program mdn and msid/min. u dont need a prl update cuz verizon has roaming agreement with sprint which means that verizon esns on sprint phone will work and sprint esns on verizon phone will work. right now i use the chocolate for my sprint number.

what if you dont have another a900 is there any other way to do this . this is the only thing im missing with my a900 everything works.

seems that you guys should start a new thread and let this one be as intended...

thnx

My PPC6700 screen went blank any help pls.

did you try a hard reset...to do this you hold both soft keys on front of phone while you press and release the reset button...follow the steps to erase all data or whatever it says...if that doesn't work, then scrap it to me for parts...LOL! :D

hello all and thank you in advance for any advice you can lend me.

i have a PCC6700, my provider is sprintpcs and i am trying to write my esn and phone number to it that is from my broken sanyo 8400.

i have succeded in getting the MSL/PSC code for it and i can get QPST to read it just fine. but when i changed the esn and the phone number and my evdo data plan information in QPST and then wrote it back to the phone the only changes that were actually made was my data plan username and information, the esn and the phone number did not change.

i tried all the programs in this thread and others including the package posted by 2ndchance with no success.

in my device manger the PCC6700 does show up under comports as the proprietary debugger or whatever its called and also as a modem for bluetooth and USB.

this is my first non-sanyo cdma phone. i have owned every sanyo produced since the 5300 and have had no trouble what so ever editing any and all information on the phones i wished, even bringing some back from the dead, so i do not consider myself a total n00bie working with cdma phones.

i also tried uniCDMA and other tools i used for my sanyo phones and nothing seems to recognize it. the only program that did give me the SPC code was one that was designed for kyocera, go figure, LOL.

also when i dial ##data# it asks for an 'unlock code' not the usual MSL/SPC code, when i type in the MSL/SPC that works with QPST it does not work???

i also did the reset where yo hold the 2 buttons on the front while you press the reset on the bottom of the phone in the hopes of resttting the lock code to 000000 butt hat to did not work.

i am really in a bind here with my sanyo 8400 really banged up and barely working so i need to get this new phone working ASAP!

sorry for the long post, i just wanted to give as much information as i could think of in the hopes that someone could recognize what i am either forgetting to do or did incorrectly.

thank you for your time everyone
disco

if the ##DATA# code is not accepting your spc, then reconnect your device to qpst and look at the field service and one time subsidy lock codes on the first tab...one of these will work...also, you can read your nvm_security file via efs explorer or bitpim and find all your codes as well...to write the esn please follow all steps and be sure to write new checksum as well and to write everything in reverse pair order...if you follow all the steps, then you'll surely be successful...

you can also try to use another app (like bitpim) to save your file, hex edit it and then write it back with bitpim...not sure if that will work, but i know that the posted way does work...just try walking through it again.

you'll want to use your ##778# command to edit the nam settings (MDN/MIN) and change your security username for data and such...

side note:
the kyocera spc tool is a bad ass little piece of simple software...it is what i used to get my spc from moto Q when they first came out...keep that around!!!

hello again,
randomwit, i did as you said and looked for clues on what i guess 'other' SPC code there could be, turns out, as i was looking through my backup .bin files from my phones i noticed that when i saved an original dump of my PPC6700 i had made with Q before i started modding it there was a 6 digit number in the name of the file!

BINGO!

so i can now access ##DATA# and ##778# thanks to you! :)

if you dont mind i have a couple questions on my next step, the ESN (i already changed everything else to my account)

1. i tried every combination of settings with phone and with bitpim, test mode you name it. bitpim will not see it much less read it? any ideas?

2. i downloaded all of the tools and nice little packs of programs everyone in this thread has been extremely KOOL in sharing, and i can get most of them to read the ESN etc, but as soon as i try to write anything everything crashes! my question is, in my experience with other cdma phones i would use UniCDMA or similar to put the phone into D-MODE. is this the step i am missing that is holding me back with this phone? if so, i already tried using UniCDMA to put the PPC6700 in D-MODE with no luck, is there another program i should be using?

once again thank you for the previous advice and thank you in advance for reading my follow up questions.

ya bro,
disco


P.S. i dont want to leave out all the other posters in this thread as well, i have read through the whole thing and using your tips is greatly healping me out, so THANK YOU friends! :)

dude...you do not need to put this phone into dm mode...you need just to do the ##DIAG# command to enable it to communicate with your apps (QPST and such)...with that, you should be good to go...if you can access the nvm with efs explorer, then you should be abole to write esn...tested and proven to work...if you are still having trouble, then try a different version or build of qpst...2.7 build 215 and also build 97 or something are both posted everywhere...

good luck...:D

kool thanks for the additions tips i will try tonight and let you know how it goes, once again thanks everyone for the help :)

disco

disco,

check your mail

thats to everyones help i have successfully cloned my 8400 to my ppc6700 phone calss work perfecet, txt messaging works perfect but i cannot connect to the web via internet explorer on the phone or through tether?

i checked my username and password and everything i swear 100x, i am using sprintpcs, if anyone else is would you mind posting all of the correct connection settings, gateway, anything you could share?

thanks guys for all the help so far!!!!

disco

also, i was wondering if anyone has the complete tech service manual for these phones i would like to try to add an RP-SMA plug for external wifi antenna? thanks

hehe sorry for all the posts, but 1 last thing, i cant get it to sync with active sync, i have the activesync green icon on the phone menu so i assume it is installed correctly and i have all the modem drivers and diag drivers etc on my laptop, it shows up as modem and as a com port? any advice?
thankss

thats to everyones help i have successfully cloned my 8400 to my ppc6700 phone calss work perfecet, txt messaging works perfect but i cannot connect to the web via internet explorer on the phone or through tether?

i checked my username and password and everything i swear 100x, i am using sprintpcs, if anyone else is would you mind posting all of the correct connection settings, gateway, anything you could share?

thanks guys for all the help so far!!!!

disco

You may to have sprint provision you data connection. If you are running a custom rom or have iota installed, you can run it from you phone menu options internet. with that you can use the client initiated nai to provision your phone for data.

Let me know if you get any info / server data settings or if you get it to work, let me know what steps you took.

goodluck,

-CC

what i dont understand is that this phone was a sprint phone but it was reported lost or something for some reason the esn wasnt valid, and i swapped all of my sprint info to it evdo included, gateways, user/pass/esn/MIN etc

what else is there?

the one thing i find confuding about these is that unlike my other evdo fone, i could open the fones browser and it connected, no matter how i try to connect on the ppc6700 it always dials #777?
is that normal?

what i dont understand is that this phone was a sprint phone but it was reported lost or something for some reason the esn wasnt valid, and i swapped all of my sprint info to it evdo included, gateways, user/pass/esn/MIN etc

what else is there?

the one thing i find confuding about these is that unlike my other evdo fone, i could open the fones browser and it connected, no matter how i try to connect on the ppc6700 it always dials #777?
is that normal?

#777 is how it makes the phone go into "data packets" mode, yes it's normal.
You may have to talk with Sprinpt Tech support to have them walk you thru the settings and provision your data connection on their system.

any advice on how to do that on a ppc6700 that now has my broken sanyo 8400 esn etc on it though?

i was hoping i could find someone here who had sprintpcs and could just share with me the generic settings, etc

...hoping...

im running out of ideas, im almost about to try the idea of flashing it to verizon and then switchin prl to sprint, i had heard that works for soem reason?

has anyone found the factory tech manuals for these fones yet or schematics or anything? i for sure want to add a wifi antenna port to it.

also i keep reading about this modem initialization string...

AT+CRM=1;AT$QCMDR=3;

where do i use this on the fone or on the laptop?
thanks

any advice on how to do that on a ppc6700 that now has my broken sanyo 8400 esn etc on it though?

i was hoping i could find someone here who had sprintpcs and could just share with me the generic settings, etc

...hoping...

im running out of ideas, im almost about to try the idea of flashing it to verizon and then switchin prl to sprint, i had heard that works for soem reason?

Nope, that will not make your internet work. It has something to do with Sprint "allowing" you to connect.. Your only option is to talk to a tech and have them walk you thru the settings. If you are using a Sprint Rom on sprint service, run IOTA and it will auto provision your NAI and make the right settings for your MIP profiles.

There is no other way around this that I know of. Burning in other carrier's roms and running their extrom .cabs will not make a difference as far as allowing you to make a data connection on Sprint.. I've tried Alltel, verizon, qwest, sprint, generic.. I've tried forcing 1X CDMA and entering #2932 web web and #932 web web to no avail.. Comes back error 1012 unable to provision at this time, try again later or call sprint and an unknown error or reason not able to connect when it tries #777.

I tried using HEX ESN @ hcm.sprintpcs.com, .net, MDN @... in the NAI settings.. Thjis returns errors 67 in addition..

Nothing, nada, zip, zilch.. so far..

also i keep reading about this modem initialization string...

AT+CRM=1;AT$QCMDR=3;

where do i use this on the fone or on the laptop?
thanks

Advanced modem settings in your DUN on the PC..

thanks for all the info, sounds like you been where i am before, lol.

i understand that sprint has to activate data service on your account for there to be any possible way to use it, but what i do not understand is since my sanyo 8400 has the power vision or whatever they call the fast plan now, lol, and it will not forward to this PCC6700.

just to verify that the system still works the same a cloned a sanyo 8100, 2 sanyo 8200, and few others with the esn and MIN from my sanyo 8400 and filled in my user/pass and then selected to do an over the air account setup or whatever you call it, and every other phone had 0 problems using the phones browser or using tethered. (except the sanyo 8400 could never get it to tether good)

to keep everyone up to speed heres a quick list of facts
--------------------------------------------------------------

- PPC6700 was always a sprint phone
- previous owner had data service
- previous owner did not do any 'hacks' to it or add/edit/del files etc
- previous owner bought PPC6700 new from sprint
- previous owner lost PPC6700 after few weeks
- previous owner got new one through insurance right away of course
- previous owner found the original PPC6700 he thought he lost a few
months later
- thats when i got it from previous owner to replace my broken Sanyo 8400

- PPC6700 now has ESN/Phone Number/Account Info/Vision user&pass
that matches exactly the broken sanyo 8400
- PPC6700 makes and receives voice service perfectly with my info on it
- PPC6700 Txt Messaging works perfectly with my info on it
- PPC6700 Bluetooth, all services are active and functioning, DUN is active
but gives connection refused by server error
- PPC6700 Internet explorer can only be used when the phone is connected to a wifi network
- PPC6700 Internet explorer trys to connect to the web through sprints vision
data service, and it can not
- PPC6700 errors out when trying to update NAI info OTA
- I tried changing my password and doing update again, still error
- * PPC6700 will never sync successfuly with Active Sync also
- I Have only edited my account information, I have not updated ROM or Windows Version etc.

my next question to you guys is what ROM version is best to use and what Windows Mobile Version, etc is best to use should I update those items? could that be my problem?

well i bored you guys enough for 1 day, of course thanks for reading and thank you guys for all the advice :)

disco

soory i forgot 1 little tid bit, clockcycle how do you call sprint tech support to get help, wont they know the esn is for my old phone? how do you approach them with questions?

thanks
disco

soory i forgot 1 little tid bit, clockcycle how do you call sprint tech support to get help, wont they know the esn is for my old phone? how do you approach them with questions?

thanks
disco

Ah sorry can't help you there as I have not the skills required to get this done either.. You must use the force within you :P

thanks for all the info, sounds like you been where i am before, lol.

i understand that sprint has to activate data service on your account for there to be any possible way to use it, but what i do not understand is since my sanyo 8400 has the power vision or whatever they call the fast plan now, lol, and it will not forward to this PCC6700.

just to verify that the system still works the same a cloned a sanyo 8100, 2 sanyo 8200, and few others with the esn and MIN from my sanyo 8400 and filled in my user/pass and then selected to do an over the air account setup or whatever you call it, and every other phone had 0 problems using the phones browser or using tethered. (except the sanyo 8400 could never get it to tether good)

to keep everyone up to speed heres a quick list of facts
--------------------------------------------------------------

- PPC6700 was always a sprint phone
- previous owner had data service
- previous owner did not do any 'hacks' to it or add/edit/del files etc
- previous owner bought PPC6700 new from sprint
- previous owner lost PPC6700 after few weeks
- previous owner got new one through insurance right away of course
- previous owner found the original PPC6700 he thought he lost a few
months later
- thats when i got it from previous owner to replace my broken Sanyo 8400

- PPC6700 now has ESN/Phone Number/Account Info/Vision user&pass
that matches exactly the broken sanyo 8400
- PPC6700 makes and receives voice service perfectly with my info on it
- PPC6700 Txt Messaging works perfectly with my info on it
- PPC6700 Bluetooth, all services are active and functioning, DUN is active
but gives connection refused by server error
- PPC6700 Internet explorer can only be used when the phone is connected to a wifi network
- PPC6700 Internet explorer trys to connect to the web through sprints vision
data service, and it can not
- PPC6700 errors out when trying to update NAI info OTA
- I tried changing my password and doing update again, still error
- * PPC6700 will never sync successfuly with Active Sync also
- I Have only edited my account information, I have not updated ROM or Windows Version etc.

my next question to you guys is what ROM version is best to use and what Windows Mobile Version, etc is best to use should I update those items? could that be my problem?

well i bored you guys enough for 1 day, of course thanks for reading and thank you guys for all the advice :)

disco

As you must know there are several other settings in the phones then what we can just read thru settings menus.. Load up QPST and go into service programming on both phones, you will find various settings there that are different and unique to each model brand phone that allows it to communicate with the carrier. Many proprietary settings that it will take alot of tinkering on your behalf to figure out.

I can tell you I have copied everything in those setting eactly from an L7c to a 6700.. You would assume the settings are exactly the same, so it shouold work.. But nope it does't. That means there are more settings elsewhere not visible or obvious to us.. for example the 6700 has a registry, in that registry you will find many settings that may need the right info to work..

Also in the EPST of the phone you find MIP default and client settings, those have to be correct as well.. I for one don't have enough technical insider info on metro's network to enter the right info..

So I am assuming that Sprint server asks what type of phone you're using to connect, it looks for all the answers that your 8x00s have set internally.. I am sure the 6700 doesn't give the response to server the same way as your 8x00 did.. So it rejects the connection.

What you need to do is talk to a tech and have them some how walk you thru each setting on the 6700 to match your 8x00 and or tell them you have a 6700 and need thier side (server) to accept your connection (thats the hard part since you will have to juggle your wording)..

Sorry I can not be of any more help, I am stuck in the same bost.. Worst.. I don't have Sprint I have boost Mobile.. which is on sprint network but without the tech support haha... DOH:eek:

another thought, your old phone 1x CDMA or EVDO?

EVDO doesn't use a password or username to connect, atleast nothing you can enter manually unless you edit using epst.. What I noticed on other peoples 6700 is that that NAI setting is empty until they run IOTA and it's provisioned for them. Then that line is filled out with;

ESN@hcm.sprintpcs.net on MIP default and USERNAME@sprintpcs.net on MIP client settings..

There is also a security option, I don't remember if those were filled out or not..

-CC

i corrected the NAI settings manually based on other peoples phones but using info, no luck, if i try a over the air update it errors out it cant connect.

o and yes my 8400 has evdo

kinda related question, i have a motorola q with alltel and was able to use qpst to get all the settings off of it, and i use qpst to change esn of my ppc6700 to that of the q and transfer all the settings too will my 6700 then work like normal as long as the q and it are never on at the same time? the 6700 was a sprint phone ive flashed to alltel, i don't have the alltel ext-roms but i can delete the sprint ones off of it. Do i need to delete the sprint cabs off the ext rom? And how do i put the a-key off my q onto my 6700? Any help would be greatly appreciated, ive learned alot by reading but some things i just couldn't find the answer to. If anyone has alltel ext rom cabs download link i'd really appreciate it..

latest update, my service was inturrupted for 6 days si i complained and got 8400 and other lines upgraded to full ev-do with PAM service for a flat fee of $7 (thats for all fones total data pack) to make up for the loss of service. they said it should take about 4 hrs for it to kick in. i have full software backups of my phones so i will be able to see what they changed to allow PAM.

maybe this is what we been waitin for

:)

well i am using the phone as modem through bluetooth to send this message so it is working. though like i stated in previous post, they gave me the service for free. if this helps out any my ip is a series of numbers (i have not figured out what they mean yet) then area6.spcsdns.net after them. i will try to dump frmware and compare to previous flashes to see if anything on the phone changed or it is simply a flag on the account that was changed. i will keep everyone posted

disco

gotta love mobile-files :)

contact hpnasik forum memebr he has developed software for SPC calculations

How? Where? Please do tell.

If so what kind of an RUIM Card Slot do I need to buy?
How to Install?
Where should I buy it from?

Please advise.

What about hpnasik software? I tried PMing him. No dice.

the spc for telecom new zealand is

482243

and heres my esn changing kit :)

[Only Registered Users Can See Links]

What about the minlock? i don´t know how to do it, i think it´s imposible

dude...if you need the diag drivers, you'll notice that your hardware installer looks for a file that it's not able to find...at this point you should direct it to C:\Windows\System32\Drivers and it will find what it needs...if this does not work then do a search on your pc for the file it is looking for and then direct it to where the file is located...

Thanks, worked for me

but none of that shows how to read/write the A-Key? CDMA workshop gives error when you try to CAVE data?

any help?

More explained Here
[Only Registered Users Can See Links]

I cant get modem to work i followed instructions but it wont connect

That’s ridiculous!!! He wanted $15 for it. Anyways I found the drivers for it on another site. This was provided free so why is trying to make a buck out it. Anyways here is is.

i nid de driver for the 6800 please

PPC6700 ESN CHANGE
First click phone on PPC6700, then type ##DIAG (##3424) talk or # again
Example
Sprint phones ##3424#
Telus Mobility ##3424 talk

Click start to start the communication
Load the modem drivers provided by me

Connect the PPC6700 in the EFS Explorer of the QPST.



Enter the SPC
Navigate to the NVM folder and locate the file $SYS.ESN

[Only Registered Users Can See Links]


Right click copy the $SYS.ESN to your windows hard drive, remember where you saved it and back it up .



Next load up your hex editor I personally use xvi32 so this tutorial will be based off that hex editor. Open the file $SYS.ESN where ever you saved it to.

[Only Registered Users Can See Links]


NOTE: My ESN originally was 1A2B3C4D

We read the ESN in groups of 2, the example serious 1A 2B 3C 4D, and Checksum 1F 25 12 F1 and enter the ESN backwards

Example ESN: 1A 2B 3C 4D = 4D 3C 2B 1A

Example Checksum: 1F 25 12 F1 = F1 12 25 1F


[Only Registered Users Can See Links]



Using Inter ESN Checksum Calculator enter in your new esn and click calculate to get your checksum.

[Only Registered Users Can See Links]

ESN: 12 34 56 78 ESN to enter: 78 56 34 12
Checksum: 1F 25 12 F1 Checksum to enter: F1 12 25 1F

Save you’re newly edited $SYS.ESN load up QPST EFS Explorer navigate to NVM folder overwrite old $SYS.ESN with new $SYS.ESN

Click Stop on the screen of the phone wait for the PPC6700 to restart and your new ESN is entered 

[Only Registered Users Can See Links]

Tutorial Made by
amoamare
[Only Registered Users Can See Links]

please do not PM me asking for any kind of help with CLONEING, CHANGING ESN'S
I WILL NOT RESPOND ANYMORE...




by DFS Sofware simply ([Only Registered Users Can See Links]) ;)

Having a little bit of trouble... Trying to clone my Verizon XV6700 to a crappy Metro PCS phone.

The only problem is my ESN on my Metro phone is 11 digits long....

The Checksum calculator only allows for 8 digits... I see the ESn in the tutorial is only 8 digits long too... Can anybody help?

Having a little bit of trouble... Trying to clone my Verizon XV6700 to a crappy Metro PCS phone.

The only problem is my ESN on my Metro phone is 11 digits long....

The Checksum calculator only allows for 8 digits... I see the ESn in the tutorial is only 8 digits long too... Can anybody help?


Please report information on versions RADIO & Win of the Verizon XV6700.
Possible you will help ([Only Registered Users Can See Links])

Please report information on versions RADIO & Win of the Verizon XV6700.
Possible you will help ([Only Registered Users Can See Links])

Windows Mobile 6.1 Professional

I found this site with very detailed instructions for flashing your PPC6700/xv6700 to Metro PCS. It includes instructions for changing your ESN and for getting on Metro Web.

Flash Your PPC6700/xv6700 to Metro PCS Metro Flash ([Only Registered Users Can See Links]) - [Only Registered Users Can See Links]

Almost Finished woot :):):) working on it now

i've read it, thanks!

When I check ESN on my XV6700 (Verizon)
Step1:
Start -> Setting -> System -> Device information

ESN here: 365950C2

Step2:
Call ->> ##778 Dial ->> In display option
ESN (HEX) : 00000000
ESN (DEC) : 00000000000


Please tell me Why there is a difference between them.

All the Metro Phones that Ive worked with all had the same SPC of 587846. I wonder why is this???

SPC (service programming code)
:)

Hi, I have successfully cloned the ESN from my activated Motorola Razr to my unactivated PPC 6700 (through Telus), but the 1x phone service doesn't work on the 6700. When cloning a phone, Is there any other settings you need to change (other then the ESN) for the cloned phone to work?

I found a website that has detailed instructions for setting up your PPC6700 to work with Metro PCS. There are several steps you need to do to get the web to work on your phone.

[Only Registered Users Can See Links]

Thanks merlin

I actually followed the instructions from that link, thats how I learned how to change the ESN. My problem is that I am cloning the phone through Telus mobility. I realize that there is some extra steps for making the Data work but I should at least be able to get a phone signal right? after I cloned my activated razr ESN to my PPC 6700 , I am not getting any phone service at all from the 6700 but my razr still works fine. When I try an dial out on my 6700 I get this message " cannot complete the call. The signal may be unavaliable or the phone number may not be valid.Verify the number and try again later" My razr and 6700 are both Telus phones, i'm sure that theres some other things i need change as well to get a signal

I had a similar problem with a Verizon phone I had cloned to Metro PCS. Turns out I had typed the ESN wrong on the phone. If the ESN or checksum is wrong, it can show no signal

I know for sure that the esn is right but mabye the checksum is wrong. I used the program inter checksum calculator for CDMA phones. When you enter your ESN number in this program , do you need to enter it backwards, in multiples of 2, to get the right check sum? Is there anyway of getting the checksum from the phone you are cloning?

checksum is easy...

just use unicdma and type the esn on the main screen...it will generate the checksum just below it...

remember that the checksum and esn have to be entered in reverse pair order:

12345678 becomes 78563412
1A2B3C4D becomes 4D3C2B1A

hahaha oh thanks guys, I reviewed my info and i had the esn entered correctly but I failed to reverse the checksum after using the inter checksum generator. It works fine now, I spent 2 days trying to find out the problem. Sometimes its the simple things

Thanks again for the advice

Do you guys know how to get the EVDO working? I read somewhere that the ESN you clone from, needs to be EVDO compatible as well, is this true?

Do you guys know how to get the EVDO working? I read somewhere that the ESN you clone from, needs to be EVDO compatible as well, is this true?

EVDO is very obscure...what network??? do you have the phone you cloned it to with you? this depends on many things...gotbagzzz has posted the steps for evdo if you have the device that has the hdr password which is a 30 character hex number...

Ya the phone I cloned is my old phone, and yes I do have it, and I know that it doesnt support EDVO, but the ppc 6700 definetely does. I am with the telus mobility network in Canada. I will try looking for that thread you recommended.

Hey randomwit

I tried looking for that thread you recommended by gotbagzz and I couldn't find it. Its the thread about getting the EVDO working after cloning. I'm new to this site and i'm finding it a bit hard to navigate, I searched and searched but no dice. Could you point me in the write direction

thanks

Thanksss.....

I've been able to get voice working, but not data. Feel free to ask me questions if you need help getting this far.

My question is - what am I failing to do to get the data part working?

I've set up the default profile with the hexesn@hcm.sprintpcs.com, & the rest as I thought it should be set up. I've set profile one as my username & pass, etc. I've copied all info from my other EVDO phone... nothing. I've talked to advanced tech support (I used ESN from a broken Sprint PPC6700) & they can't seem to figure it out either.

I know that to get a PPC working on Verizon, you may need a Private Key off a phone already on Verizon's network. Is that needed for Sprint's? If so, can I get that off any PPC, or must it be the same model as I have?

There's got to be a way to do it, if nobody else has, then please help me and we can say we were first to accomplish it. :D

have you tried reading the HDR username/pass with QXDM and writing them back with QXDM or QPST service programming??

not sure about the 6700, but on the 6800/6900 you can flash a sprint official rom and when the customizations run, ppst.exe will program the spc and the hdr username/pass for you in the pst...it does this based off the esn, so if you have change it then the correct settings should be put in place...

if that does not work, the you should read the hdr info from the broken phone and write ir to the new phone as i have stated above...

I've been able to get voice working, but not data. Feel free to ask me questions if you need help getting this far.

My question is - what am I failing to do to get the data part working?

I've set up the default profile with the hexesn@hcm.sprintpcs.com, & the rest as I thought it should be set up. I've set profile one as my username & pass, etc. I've copied all info from my other EVDO phone... nothing. I've talked to advanced tech support (I used ESN from a broken Sprint PPC6700) & they can't seem to figure it out either.

I know that to get a PPC working on Verizon, you may need a Private Key off a phone already on Verizon's network. Is that needed for Sprint's? If so, can I get that off any PPC, or must it be the same model as I have?

There's got to be a way to do it, if nobody else has, then please help me and we can say we were first to accomplish it. :D

sprint doesn't have any "special key". You will have to get the hdr user pass as stated above. Also in that section it should have a setting for "secret" and that should be set to "yes" i think.

also sometimes it takes like 4 hours, for whatever is set on sprints end, to be
reset, if tech support has been resetting things. Sometimes you can update
the settings and tech support screws around, you still have to wait... and it
works later.

[QUOTE=dannyMobile;457627]sprint doesn't have any "special key". You will have to get the hdr user pass as stated above. Also in that section it should have a setting for "secret" and that should be set to "yes" i think. ........
[QUOTE]

all of the "Shared Secret" settings should be set to "secret" (without the double quotes)...NOT to "yes"

for example: "HA Shared Secret = secret"

if you would like me to knock it out for you, there is always logmein

honestly, i would just run the latest official sprint rom for the 6700 on there...if it customizes the ppst.exe file, then all of those sttings will be put in place for you...this is the easiest and best solution that i can give you!!!

all of the "Shared Secret" settings should be set to "secret" (without the double quotes)...NOT to "yes"

for example: "HA Shared Secret = secret"

if you would like me to knock it out for you, there is always logmein

honestly, i would just run the latest official sprint rom for the 6700 on there...if it customizes the ppst.exe file, then all of those sttings will be put in place for you...this is the easiest and best solution that i can give you!!!

Thanks for the reply. I'll have to try what you've stated. I didn't have the QXDM program, so I'm trying to download that. I'll look around for how to use it, and how to get the HDR info using it (this is the info in the "Security" part of epst, right?). Problem is that the sprint PPC I have isn't functional at all. I only have a working non PPC sprint phone. Can I get the HDR info off another phone, or is that a PPC only screen? I've looked in QPST before, and I don't remember seeing any info like that for my other phones. In any case, I'll see what I can come up with, and get back with you guys. Thank you for all your help so far!

Here's more info on what I've done already:


I've already flashed the phone with Sprint's Rom, but it doesn't change any of the settings, including the banner -- still says VZW.

This is the first time I had ever tried anything like this, and I wish mobile-files.com had been my first stop, lots of good info here.

I've tried redoing Sprint's extended rom files, and that still doesn't change any of the IP addresses in the M.IP screen, the SID/NID, usernames, etc. All is as Verizon has it. When I did a hard reset using ##786#, everything including ESN went back to what Verizon had. The second time I did a hard reset, the ESN didn't change back, but everything else did. So I thought maybe I needed to re-flash it again, but I can't get back to Verizon's because of a Country ID error. I think I've found a fix for that, but I haven't tried it yet.

So, probably manually inputting the HDR info and/or getting the sprint ROM to change settings to Sprint settings, I think I might be able to get this working. Thank you again, I'll keep you posted.

Thanks for the reply. I'll have to try what you've stated. I didn't have the QXDM program, so I'm trying to download that. I'll look around for how to use it, and how to get the HDR info using it (this is the info in the "Security" part of epst, right?). Problem is that the sprint PPC I have isn't functional at all. I only have a working non PPC sprint phone. Can I get the HDR info off another phone, or is that a PPC only screen? I've looked in QPST before, and I don't remember seeing any info like that for my other phones. In any case, I'll see what I can come up with, and get back with you guys. Thank you for all your help so far! ..........

you cannot get the info from the pst menu within the ppc...that will display an hdr password, but it will not be the actual password...it will be a seies of funny little characters, while the actual password is 30 hex characters...

YOU SHOULD REALLY TRY OT RUN AN OFFICIAL SPRINT ROM!!!!!!!

this has been my primary suggestion to you and i cannot understaqnd why you wouldn't have already tried the easiest solution??????????

the ppst.exe will automatically set the hdr username and pass for you as well as the spc, which you can then get with "get spc"

just follow the suggestion!

you cannot get the info from the pst menu within the ppc...that will display an hdr password, but it will not be the actual password...it will be a seies of funny little characters, while the actual password is 30 hex characters...

YOU SHOULD REALLY TRY OT RUN AN OFFICIAL SPRINT ROM!!!!!!!

this has been my primary suggestion to you and i cannot understaqnd why you wouldn't have already tried the easiest solution??????????

the ppst.exe will automatically set the hdr username and pass for you as well as the spc, which you can then get with "get spc"

just follow the suggestion!

Sorry, that is what I am trying to do. I currently have a Sprint ROM, and either I did it wrong, or it didn't fully work as it did not fill in Sprint info in epst. I want to switch back to Verizon ROM, see if what I manually input goes back to Verizon, then put in the latest Sprint ROM again and see if that fixes it. I haven't had time to do it, I will do it this weekend. I downloaded both of them again today as I couldn't find them anywhere on my computer. This is the Sprint one: APA_SPCS_20600_303_12700_WWE_Ship.exe

Thank you for your help. I'll let you know how it went Monday.

I finally was able to reinstall the Official Sprint ROM, by using the maupgradeut_noid_132 with it. I was not able to do it any other way. The first time I installed the Sprint ROM, I didn't need to do this. This time I couldn't do it without this as I kept getting a Country ID error, and when I was able to bypass this by going into Bootloader mode, it would eventually give me an error that the phone was not connected...

In any case, this did not set the phone to Sprint settings. Even though the phone now says Sprint all over, none of the data in EPST changed to Sprint. I've done it over a few times, and soft reset & hard reset a few times over after that.

I manually set it all the same as another PPC, and now all but data worked. I copied the HDR password from within that phone into a word doc. I then copied that file over to this phone, and pasted the HDR password into it. When I did this, though, two of the characters don't copy over (there's a bunch of odd characters). However, now 1x data works!! EVDO doesn't, but it's a start.

Is QXDM the only way to get the HDR password to copy properly?

Is there any way to ensure that the Sprint ppst.exe runs properly and writes in the Sprint info? I thought of erasing all the files in the phone, then going into bootloader mode and redoing the Sprint ROM. Is it possible to erase them, and if so, how?

I'm about to give up and just put this back to Verizon and sell it off. I'd like to give it another shot first, and I appreciate all the help you guys have given me so far!

i'm not sure that the ppst.exe was built into the 6700 roms for sprint, but if it is there you should see it run when the device is customizing after you flash it...

as far as the hdr info, if you clone it to the sprint phone that works, then you may be able to read the info our of that...

you will not be able to copy the hdr password to word ot notepad if you are trying to copy the funn little characters...this is because those characters are not the actual password...the password is actually a 30 character hex string or 15 hex pairs...

that is why i say to use qxdm...it will read the password as hex pairs...you need to do a little more trial and error to figure out the qxdm part...

i'm not sure that the ppst.exe was built into the 6700 roms for sprint, but if it is there you should see it run when the device is customizing after you flash it...

as far as the hdr info, if you clone it to the sprint phone that works, then you may be able to read the info our of that...

you will not be able to copy the hdr password to word ot notepad if you are trying to copy the funn little characters...this is because those characters are not the actual password...the password is actually a 30 character hex string or 15 hex pairs...

that is why i say to use qxdm...it will read the password as hex pairs...you need to do a little more trial and error to figure out the qxdm part...

Thanks, I'll keep trying it. I can't install QXDM, it says I need IE 5 or higher even though I have IE 7. It's version 3.9.19. Is there a different version I should be trying? I'll have to try it on another computer I guess.

Well, if the problem is that ppst.exe isn't in Sprint's ROM, it's not in Verizon's either since when I flashed back to Verizon's, it didn't put the settings back to the way Verizon's should be either. There is a ppst.exe file in the phone, but I can't run it from there.

you need the QXDM 2.08..try the sortware section at [Only Registered Users Can See Links] ... it's also posted on this forum somewhere

Thanks, I'll keep trying it. I can't install QXDM, it says I need IE 5 or higher even though I have IE 7. It's version 3.9.19. Is there a different version I should be trying? I'll have to try it on another computer I guess.

Well, if the problem is that ppst.exe isn't in Sprint's ROM, it's not in Verizon's either since when I flashed back to Verizon's, it didn't put the settings back to the way Verizon's should be either. There is a ppst.exe file in the phone, but I can't run it from there.

that is why i say to use qxdm...it will read the password as hex pairs...you need to do a little more trial and error to figure out the qxdm part...

trial and error indeed! This is a bit daunting. I've tried reading the data, but I'm not getting anywhere so far, all the hex pairs are zeroes. I've tried opening QPST, reading the data, and then opening QXDM to read the HDR data there. That didn't help. I'm trying to read the data in the NV info, then HDR username under that. I comes out as all zeroes@hcm.sprintpcs.com. I'll search around and see what I can find on how to get this straightened out. If you've got any insight, please help me out. Thanks for getting me this far!

you should be reading the hdr password with the "NV Items" tool in QXDM...

it should read the password

you should be reading the hdr password with the "NV Items" tool in QXDM...

it should read the password

Alright, I'll try it again tonight. Thanks for all your help!

i successfully repaired esn and programmed into my metro, i changed the connection to metro pcs(cellular line) , and deleted the sprint connection, but everytime i try to use the internet explorer it tries to connect to the sprint pcs vision not the metro .

how can i delete the sprint connection setting forever and do nt allow to intsall itself again?

i successfully repaired esn and programmed into my metro, i changed the connection to metro pcs(cellular line) , and deleted the sprint connection, but everytime i try to use the internet explorer it tries to connect to the sprint pcs vision not the metro .

how can i delete the sprint connection setting forever and do nt allow to intsall itself again?

flash a generic or custom rom and then setup your data connection within that rom...

there are many posted at ppcgeeks.com

it can also be done on the sprint rom, but you have to delete some things from the phone...

a custom/generic rom is the best and easiest solution.

necesito usb driver para htc pcc6800 o mogul , treo 650 y blackberri cdma "driver"

gracias por su ayuda

i successfully repaired esn and programmed into my metro, i changed the connection to metro pcs(cellular line) , and deleted the sprint connection, but everytime i try to use the internet explorer it tries to connect to the sprint pcs vision not the metro .

how can i delete the sprint connection setting forever and do nt allow to intsall itself again?

well u can use custom roms to get over this problem if u are using sprint rom than u will have to replace the htc guardian file with a blank file
just create a blank txt file and name it HTC _CM_Guardian.exe.txt ,copy to your device and edit it to remove the .txt extension and copy it in your windows directory using total commander and replace the htc_cm_guardian.exe with this blank file ,now reset your device and delete sprint pcs connection and select your meto connection

also using qpst go to mip tab and make sure your ip bahaviour is set to simple ip only

so I'm getting a XV6700 and feel pretty confident that I can swap the ESN in it in no time at all. I've swapped esn's in LG VXs back and forth even with the EVDO working in both of the phones I've done in the past. I have pretty much every program needed to do this kind of stuff and the drivers and a few programs that not many have or even heard of.
What I'm wanting to do is clone my XV6700 with either my VX8000 or VX9800. Obviously I can get all the info I need off of the LG VXs to get the ESN swapped into the XV6700 and I'm pretty sure I can get all the EVDO info I need off of the LGs to get the XV6700s EVDO working.

Same old question: Has anyone gotten their EVDO working on their XV6700 clone? or any progess or advice maybe??

That’s ridiculous!!! He wanted $15 for it. Anyways I found the drivers for it on another site. This was provided free so why is trying to make a buck out it. Anyways here is is.




I am having a hard time understanding how to do this whole phone unlock thing, and am looking for someone in michigan to do it for me. i am willing to pay, but not to much or i'll do better off buying a new phone. if not interested maybee you can put me with someone who is, or even guide me step by step for the money. please reply asap

easy way , put in diag mode select com port and just use cdma workshop

works great .

of course need drivers

greetings

:(my nvm folder is lock...any recommendation pls

im tryin to clone my ppc-6700 to verizon but when ever i try to dial out it says that it cant authenticate my number, OTA works but it doesnt do anything that i can notice other than let one text message in and then it stops again someone please help

im tryin to clone my ppc-6700 to verizon but when ever i try to dial out it says that it cant authenticate my number, OTA works but it doesnt do anything that i can notice other than let one text message in and then it stops again someone please help

u need the AKEY of the verizon phone you cloned for your 6700 to work.

Tanks to the poster and who make the tutorial
and one recomendation to those are triyng to do this
always change the esn and the checksum together, because if not , the phone goes to no signal.


best regards

vertech

I have a problem with an ESN swap on my PPC 6700. I don't believe it is the normal problem. The ESN and Checksum are entered correctly but I believe the last 4 digits are incorrect. Is there any way to get the original 12 digits back. As of right now the phone will not get any signal no matter which .prl I load or what setting I use in PST. Any help would be great since my 6800 screen is cracked...I'm desperate:eek:

thank uuuuuuu

Is there anyone out there that is able to help or should I say willing to help? I PM'd and no response...read hundreds of post...searched google daily...yet there has not been anything other then the same...change the first 4 digits (in reverse order -esn) and the 2nd set of digits (in reverse order - checksum) which I have done, been there done that...now I'm just roaming and looking for a signal no matter what .PRL I use. it must has something to do with the remaining digits after the checksum. Question: Will someone be willing to pm me their $SYS.ESN file MINUS the ESN and Checksum or is that entire file specific to the phone from which it came?

First Rule . ALLWAYS SAVE A COPY!!!!!!And rename it Original !!!!!!!!!The last numbers before the checksum 89 11 7c 0a 00 END

Hi,

Someone change the ESN to my phone and now the signal level is going UP and DOWN all day long....

Someone told me that probably the guy that changed it didn't place the correct Checksum for the new ESN. Is that possible?

I'm trying to verify through the $ESN.SYS but my NVM folder is LOCKED, how can I unlocked to be able to view what my phone has???

I've been able to sucessfully do this on my Sprint PPC-6700 and Samsung A900. It was fun and mainly for educational purposes.

Now, I am curious if this can be done with LG phones on Verizon service? Has anyone attempted this with an LG phone on "any" carrier?

I've been able to sucessfully do this on my Sprint PPC-6700 and Samsung A900. It was fun and mainly for educational purposes.

Now, I am curious if this can be done with LG phones on Verizon service? Has anyone attempted this with an LG phone on "any" carrier?

I was able to do the SuperCID, but my NVM folder is still locked, how can I unlocked it?

Or how can I verify that I have the correct Checksum for my ESN??