Like your A707 Sync but hate that it’s locked down? Not anymore!
Yes, I put up an article on digg.com a few weeks ago about finding out how to get into the test menu of the phone. I beat my head against a wall for two days trying to figure out how I could use this to my advantage for a project I’ve been working. Well, I couldn’t find much use for it. Yeah, you could change the volume of your earpiece (huge complaint on Cingular’s forums). But, what else? Well, not much.
Until I checked the USB configuration menu. What’s this Qualcomm USB thing??!
A few nights ago, I decided to start working on my A707 firmware project again. Basically, I hate the firmware loaded on this thing. I’ve already stated my complaints many times on Cingular’s forums. Here’s some of my rants about this beauty.
/Begin rant
1. Can’t delete/edit/move the ringtones that come on the phone. You suck.
2. Can’t delete/edit/move the wallpapers that come on the phone. You suck.
3. Can’t delete/edit/move the phone numbers that come on the phone. You suck.
4. You have to hold the button on the side of the phone for 3 seconds to see the clock. It’s easier to open the phone. You really suck.
5. Can’t suspend any Java applet when taking a call except for IM. Not sure I hate it but you suck anyway. (Motorola has this on many of their phones)
6. When listening to music, you can’t do ANYTHING else. Even though you have a task button just for the purpose of having multiple things going. Really pisses me off.
/End rant
I can go on and on but I won’t. Here’s the meat of the story:
I have direct access to the filesystem now.
Here’s what you do:
1. Type in #*0523* to get into the LCD menu
2. Use the right soft key or the # key to back up out of the menu.
3. At the top level menu, navigate down through the menus until you find USB configuration. Choose Qualcomm.
4. Reconnect the cable and load the drivers. I found a set of drivers named “qualcomm_usb_driver.zip”. I’ll link this later when I have time.
After installing the drivers, you have a few choices:
You can use QPST to access the phone. I haven’t made it very far here because QPST requires a SPC code to talk to the filesystem. But I have my unlock code..it’s two digits too long.
Can someone straighten me out on this???!
Play with Optiflash. With Optiflash, it is possible to backup your firmware. This is what I’m working on….
Play with Bitpim. This is a WONDERFUL program I’ve used for my Verizon phones. But the A707 isn’t supported. Choosing most of the Samsung phones will allow you to mount the phone though. Once in there, you can move/edit/delete anything you want to…
What can we get out of this? Well, here’s a few possibilities.
1. Install the #3 certificate on the phone so we can use Gmail like everybody else. Google publishes the appropriate cert, but until now there was no way to put it into the phone.
2. Upload your own apps and games across the wire now. I’m working this.
3. Delete those irritating wallpapers and ringtones. I’d suggest leaving the active wallpaper and ringtone so your phone doesn’t freak. After deleting that stuff, I HIGHLY suggest rebooting your phone. Otherwise, your phone will remind you constantly that it’s “updating” everytime you go into those folders.
4. Delete the service numbers that came on the phone. I’m not sure how to go about this yet, perhaps under the DB folders?
Finally, the holy grail. Getting the firmware. I’ll modify that bastard something stupid. Get to work!
Please digg! I want to test my server. Thanks.
I’ve been messing with Bitpim and the Qualcomm drivers most of the day. I have tried every Samsung phone listed, every com port listed and every setting I can find in the phone at least twice, but I still can’t get Bitpim to see my phone. I’ve followed your latest instructions and still no go. All I want to do is delete the locked pix from the phone. Any help would be appreciated.
Steve
I’ve been playing with this too.. installed the drivers and the phone pops up as a qualcom usb modem and diagnostic interface. installed the latest version of bitpim i could find (0.9.10-official) but couldn’t get it to see the phone.
Same as the other people. I found the menu, set it to qualcomm, computer recognizes it and I loaded the drivers, but BitPim doesn’t recognize it. Is there anything else you did that might’ve affected it? Either way thanks for the work. Good proof of concept even if it only works for you.
I hope someone can crack the firmware on the A707. I love the phone but there are several things that could be improved through firmware (I have no complaints about the hardware other than the proprietary headset connector and the difficulty in accessing the memory card). The 3-second unlock deal is the first thing that needs to be changed!
Did somebody figure out how to make the earphone louder?
Yeah, I’d like to know how to raise the volume too. Especially if I can do it for the ringtones as well as the earpiece.
Other than that, I have to wait for my data cable to get here to delete the excess kruft.
Too bad BT doesn’t cut it.
WHO CAN HELP ME TO UNFREEZE THE CELLPHONE TO USE IT FOR THE FIRST TIME, I DONT HAVE ANY ACTIVATION ON IT
I need help removing the “phone freeze” also.
How to fix the volume? Here you go:
First start with *#0002*28346#
1. You will see menu showing “Under construction”.
Press #.
2. New screen apears.:
[1] Load Params
[2] Call Config
3. Press 2.
4. New screen (in here are all the settings for call volume):
[1] RCV Rx Call Vol (that`s what we focus on)
[2] RCV Rx Drmf Vol[]
[3] RCV Codec Gain[]
[4] RCV NS-EC[]
[5] RCV Tx AGC[]
[6] RCV Rx AGC[]
[7] RCV Tx Filter[]
[8] RCV Rx Filter[]
5. Press 1 to get into RCV Rx Call Vol Settings.
6. Now starts the editting.
You should see something like this (values below are not default cause i already changed them):
0.[2] rx:0.0dB
1.[4] rx:10.0dB
2.[6] rx:25.0dB
3.[8] rx:50.0dB
4.[10] rx:100.0dB
5.[12] rx:200.0dB
6.[14] rx:255.0dB
Input Ex: 123-> 12.3dB
Last line explains almost everything.
Each line represents different volume levels. Let`s say you want to edit first line. Then you press 0. Screen on your phone should blink. Now you enter value for the level. Let`s say you want it to be 21.3dB. Type in 213 and press ok. Display should blink and you will see:
0.[2] rx:21.3dB
1.[4] rx:10.0dB
2.[6] rx:25.0dB
3.[8] rx:50.0dB
4.[10] rx:100.0dB
5.[12] rx:200.0dB
6.[14] rx:255.0dB
Input Ex: 123-> 12.3dB
That`s it. You just changed first line which means the lowest volume setting to 21.3dB. Keep playing with other settings. When you want to change second line just press 1. Then screen blinks again. Let`s say you want it to be 255dB. Type in 2550 and press OK. Screen blinks and you should see:
0.[2] rx:21.3dB
1.[4] rx:255.0dB
2.[6] rx:25.0dB
3.[8] rx:50.0dB
4.[10] rx:100.0dB
5.[12] rx:200.0dB
6.[14] rx:255.0dB
Input Ex: 123-> 12.3dB
7. Now let`s go to speakerphone.
Press # 4 times.
You should get to menu like this:
[1] Debug Screen
[2] Version/DMS Information
[3] RF Test
[4] UMTS rf nv
[5] Read gsm rf nv
[6] Write gsm rv nv
[7] Base Band
[8] Audio (that`s where we are going now)
[9] Common
8. Press 8.
You should see:
[1] RCV Config (here is the previously edited call vol. menu)
[2] EAR Config (i think in here you edit earphones vol.)
[3] SPK Config (guess what? speakerphone settings!)
[4] BTH Config (proably bluetooth headphones vol. settings)
[5] Common Config (I didn`t play with this one yet)
[6] YAMAHA (neither I did with this)
[7] Rebuild (in here you can restore factory settings)
9. Press 3 to get to speakerphone settings.
You should see:
[1] Load Params
[2] Call Config (here you have settings for speakerphone during call)
[3] AV-QTune(MP3) (i think those are settings for mp3 on speaker)
[4] AV-QSynth(MMF) (i think those are settings for mmf on speaker)
[5] AV-AMR (no clue what is this, maybe video?)
10. Press 2 to get to Call Config.
You should see:
[1] SPK Rx Call Vol (that`s what we focus on)
[2] SPK Rx Drmf Vol[]
[3] SPK Codec Gain[]
[4] SPK NS-EC[]
[5] SPK Tx AGC[]
[6] SPK Rx AGC[]
[7] SPK Tx Filter[]
[8] SPK Rx Filter[]
[9] 2G-Loud & 3G-VT[]
11. Press 1 to get to SPK Rx Call Vol.
You will get to menu with similar settings like the one where you edit regular call volume. I don`t know the best setting values for speakerphone yet, neither for earphone (eventhou I`m happy with the changes I posted before), but together at HoFo and Robdec`s site we should figure it out. There is still a lot to discover. I`m waiting for my headphones to arrive and a day off to start playing more. If anyone finds out the best settings please post them here or on Robdec`s site.
Good luck everyone and enjoy.
Google…
Google is the best search engine…
Hello. Where can i get the qualcomm_usb_driver.zip drivers for my phone? Thanks!
Does anyone know the pinout for the data cable connector/socket?
Where can I buy such a connector? If not available to buy, does a data cable from eBay have all the pins present inside the connector? I want to DIY a connector cable with the phone connector at one end and multiple connectors at the other end (USB, audio, generic wall/car charger, etc). So I can use all my existing wall/car chargers, earphones, headsets, etc, without buying a whole new set of accessories. I’m definitely going to make it, but could use some help to make the process not as intimidating. I’ll post progress and result once I get it moving, please help me out. Thanks in advance!!!
Thank you for this page. It is a godsend. This is a good phone that was ruined by marketing at the new at&t. can’t wait to see how other people hack this. I cant wait to connect it to my computer for fast 3G laptop usage via bluetooth.
YES!
Pittislt- I am already using my A707 as a bluetooth modem. I used the same dialing settings as I had previously used for my Motorola V551 phone. Username: WAP@CINGULARGPRS.COM, Password: CINGULAR1, Phone Number *99# (You might need to use *99#***1* if that doesn’t work for you) I only get around 100kb/sec at my office, but the 3G connection is spotty inside. I’ll have to run some tests outside to get a better idea.
how do i reprogram my phone with Optiflash and will i lose everything on my phone
Omar Music…
I Googled for something completely different, but found your page…and have to say thanks. nice read….
Omar hakim…
I Googled for something completely different, but found your page…and have to say thanks. nice read….
Omar Dyab…
I Googled for something completely different, but found your page…and have to say thanks. nice read….
I’m curious…after you manipulate any of the items in the diagnostic menu, a little asterik appears by the menu. Does anyone know what this is, or how to get rid of it? Does it just show you messed with that menu item? Thanks.
Nobody has posted lately about not being able to get into the phone after installing the drivers and getting the PC to recognize the phone. That’s my situation. I’m stopped dead unless somebody has figured out what the problem is.
After I get that problem solved I need to install a cerificate for my exchange server at work so I can check email. Is that even doable? Any tricks to it?
HELP!
This is a very helpful site! I was able to boost my volume on the media player, which made me quite happy!!
QUESTION!!!
My Sync is so full of preloaded junk that I’m not able to bluetooth more than 2 mp3 files to my phone at once. I would like to bluetooth the files directly to my memory card. Right now, I am sending two files at a time and then transferring them to my memory card…very time consuming! Any suggestions?
how do i reprogram my a707 to let me upload java games. cingular now at@t lol has a block to only accept via internet.
Most of the people seem to be having the same trouble as I had. How I fixed my troubles was by going to the View menu and checking “Show Filesystem” and even if your phone doesn’t say connected, you can still transfer files to and from your computer.
ipshadow how did you get your unlock code?
OK, I like the information from this site so far BUT…
on the subject of volume, what parameter controls the volume for the music playback? It won’t go on speaker phone, or the speaker phone volume is so low I can’t hear it when out doors. Yet the other volumes are great (since I changed them anyway). Anyone know how to increase the volume here?
Never mind. I found the MP3 parameter that changes the volume the way I like. I picked an even distribution between 20.0 to -20.0 and it works great. Not sure I really needed the minus values thouogh, for a speaker phone anyway, but if I use an earphone, do these values still hold? If so I’d blow my ear out at 20.0
Has anyone figured out how to get Java games (ones NOT bought from AT&T, but uploaded from PC to memory card) to work? Every .jar file I try says “Unsupported File Type”, which is bull - all the demo games are Java!
Java games need (NEED) to be downloaded to install properly… BUT, you don’t have to do it buy buying from AT&T. You can (from your computer) upload the jar file to freeWAP
http://david-pye.com/freewap/index.php
then use your phone to connect to the url and download directly to your phone. It will install properly and “so Bobs your uncle” (where did that phrase come from?) and away you go.
I’ve read all this and I’ve changed my volumes also. BUT–
has anyone figured out how to erase the wallpapers & ringtones that came with phone.
in simple terms, please reply.
not a computer geek by any means
I’m very confused, you lost me at step 1.
Where do I type in the number?
ie. 1. Type in #*0523* to get into the LCD menu
where do I type in #*0523*?
thanks
Dstallmsn-
you just type those characters. as if you are gonna call someone. just type what you see.
well, i’ve definitely typed those characters as if i were to call someone and when i press the last character the phone sits there waiting for more input. Pressing green call button isn’t the magic button, so what do you think is wrong w/what i’m doing? personally, my goal is just to have a custom text message sound rather than using the defaults or midi file. hacked firmware definitely ftw, so good luck with that. thanks to anyone, and hopefully i’m not the only one just getting stuck after press # at the end
*EDIT* excuse me, i meant * at the end. my bad
WOAH! Alright, so i’ve figured it all out. First of all the code to get into the LCD menu displayed on this site is WRONG! the code should read as follows: *#0523# — oh what a difference it makes when symbols are switched around. hopefully i’ve solved anyone else having the same problem trying to type #*0523*…
Good job figuring this out, Adam. I don’t know what to think of the original post, making such a basic mistake. Also, I tried bitpim, as suggested, but it never connected with any of the few samsung phone profiles included, in any of the USB modes (samsung, qualcomm, or pictbridge) from my Mac… and I don’t think it should matter what platform I run bitpim on. So, if anyone knows how to make bitpim really connect, that would be great info!
In the meantime, here are a bunch of codes to make the sync do lots of things, copied and pasted from:
http://www.sinkintosync.com/sync-secret-codes.html
Here is a list of Secret Codes for your Samsung A707! Use at your own risk. I have NOT verified that these work.
A707 Codes
View your phone’s file system *#0523# To scroll through this menu you push #
*#0842 # Vib test
*#1111# Software Version
*#2222# Hardware Version
*#1234# Firmware Version
*#0289 # Buz test
*#0228# battery profile
*#0523# lcd contrast (pretty good)
*#7465625# = Check the locks
#7465625*2827# - Auto CP lock deactivated
#7465625*28638# - Auto Network lock deactivated
#7465625*28746# - Auto SIM lock deactivated
#7465625*2877# - Auto SP lock deactivated
#7465625*28782# - Auto subset lock deactivated
Master Reset / Codes
*2767*3855# - FULL E2P RESET
*2767*2878# - CUSTOM E2P RESET
#*7337# - UNLOCK
*2767*688# - UNLOCK
*#0523# - CONTRAST
*#9998*523# - CONTRAST
*#8999*8378# - Service Menu
*#1111# S/W Version
*#1234# Firmware Version
*#2222# H/W Version
*#4777*8665# Power on attach (GPRS tool?)
*#232337# Bluetooth MAC Adress
*#7465625# = Check the locks (network, subset,etc)
*#0*# LCD Test
*#0228# Battery info
*#0289# Melody test
*#0782# Show the real time clock
*#0842# Vibration test
*#5002*8376263# Some info
Unlocking
*#7465625# = Check the locks
*7465625*638*Code# = Enables Network lock
#7465625*638*Code# = Disables Network lock
*7465625*782*Code# = Enables Subset lock
#7465625*782*Code# = Disables Subset lock
*7465625*77*Code# = Enables SP lock
#7465625*77*Code# = Disables SP lock
*7465625*27*Code# = Enables CP lock
#7465625*27*Code# = Disables CP lock
*7465625*746*Code# = Enables SIM lock
#7465625*746*Code# = Disables SIM lock
*7465625*228# = Activa lock ON
#7465625*228# = Activa lock OFF
*7465625*28638# = Auto Network lock ON
#7465625*28638# = Auto Network lock OFF
*7465625*28782# = Auto subset lock ON
#7465625*28782# = Auto subset lock OFF
*7465625*2877# = Auto SP lock ON
#7465625*2877# = Auto SP lock OFF
*7465625*2827# = Auto CP lock ON
#7465625*2827# = Auto CP lock OFF
*7465625*28746# = Auto SIM lock ON
#7465625*28746# = Auto SIM lock OFF LCD Test includes some speaker tests too.
Languages
If you try to access the Recent Calls from a non-English/Spanish/French language, then your phone will power cycle itself.
LANGUAGES
*#0000# - Switch to English language
*#0001# - Switch to English language
*#0030# - Switch to Greek language (90% functional) (Can’t view recent calls in this language)
*#0031# - Switch to Dutch Language (90% functional) (Can’t view recent calls in this language)
*#0032# - Switch to Dutch Language (90% functional) (Can’t view recent calls in this language)
*#0033# - Switch to French language
*#0034# - Switch to Spanish language
*#0039# - Switch to Italian language (90% functional) (Can’t view recent calls in this language)
*#0043# - Switch to German language (90% functional) (Can’t view recent calls in this language)
*#0044# - Switch to English language
*#0046# - Switch to Swedish language (10% functional) (Can’t do much. Makes calls. Can’t view recent calls)
*#0090# - Switch to unknown language (Makes calls, can’t view messages/recent calls)
*#0351# - Switch to Portuguese (85% functional) INFORMATION/TESTS
*#06# - View IMEI
*#0011# - Screen with detailed signal information.
*#0673# - MP3 Test menu MENU OPTIONS
*#30# - Caller ID is shown
*#31# - My caller ID is sent when calling
*#35# - Barring of all service/incoming calls is deactivated
*#43# - Call waiting activated
*#61# - Call forward (If no reply 30 seconds)
*#62# - Call forward (If out of reach)
*#67# - Call forward (If busy)
*#76# - “Answering number is not shown when calling”
*#77# - “My caller ID is sent when answering calls”
You all have been great, but my phone is locked and I can’t get it unlocked. I never set up a password, and I called cingular and they tried to help but there codes didn’t work! Is there anyway to unlock my phone?
this is fantastic, i will post back in a few days after i play with the volumes a bit
Just for reference, I don’t think TZIMED actually used those numbers, my highest for MP3 was only 3.5, 6 is pushing it. I am in fact about to pull it down to 5 db
I think maybe he/she just randomly wrote numbers so I would not go that high to start, 1 or 2 db is alot.
See TZIMED’s
0.[2] rx:0.0dB
1.[4] rx:10.0dB
2.[6] rx:25.0dB
3.[8] rx:50.0dB
4.[10] rx:100.0dB
5.[12] rx:200.0dB
6.[14] rx:255.0dB
See mine:
0.[2] 0.0dB
1.[4] 1.0dB
2.[6] 2.2dB
3.[8] 2.8dB
4.[10] 3.5dB
5.[12] 4.5dB
6.[14] 5.2dB
Any luck with adding #3 certificates?
I am not sure this is so str8tforward: the open file store of cer and der files is visible, as used by the browser. I am not sure Java engine uses the same store. Why I think so? The google mail certificate is already there (I compared the fingerprints), but google mail still does not work reporting a java certificate exception, which leads me to believe the java certificates are stored elsewhere. Any ideas?