Home    |  About    |    Contact  |  News    |      FAQ        Search Site    
 
 




!!! PLEASE DO NOT COPY ANY INFORMATION FROM THIS PAGE WITHOUT MY PERMISSION !!!

 
 

Updated: 06/22/07 07:36 am

Using the Alltel Monster firmware on your Verizon V3C/V3M/K1M Phone.....

NOTE: If you have a V3M or K1M that use an MEID this will NOT WORK!! and you risk turning your phone into a paperweight (to check, remove the battery, look at the label. )

PLEASE SEE THE WIKI for the Pros/Cons of using the Alltel firmware FIRST!!

Currently, Verizon V3C, V3M, and KRZR K1m MONSTER firmwares have been leaked, so if you can NOT get this working, you can flash back to the Verizon Monsters and be just like the "fresh out of the box" Verizon state.  See -> Flash from Alltel Firmware back to Verizon's Firmware.

I only have a V3C to try this on... and it works for me...    In theory, it should also work for V3M and Krzr K1M Alltel monster firmwares, BUT I can NOT personally test since I don't have those phones!!!

Please Note: This process is probably NOT 100% fool proof, there may be varying degrees of success.  For additional background, you're welcome to read -> Getting Non-Verizon Monsters working: The only thing consistent is inconsistency

Preface:  

PLEASE READ THE ENTIRE GUIDE CAREFULLY BEFORE YOU ATTEMPT THIS!!!!

THIS DOES VOID YOUR WARRANT!! And Verizon will NOT support you with the Alltel firmware on your phone!

This process uses various DANGEROUS TOOLS!!!  There is also some automation involved.  This leads to potential pit falls and problems.   Use CAUTION and BE CAREFUL when following this...

This is based upon the former write up -> Monster1.htm which is based upon the work of others...

As you can see by reading the linked threads and such.. a lot of people have worked hard to come up with this!!  Thanks to Jlbrightbill, DanFPW, cpuguy06, and the others posting in the threads....   Special Thanks to GoldMembr, without whom, none of this would be possible... and KBMAN for putting ideas in my head, and providing suggestions, feed back and valuable info!  And Thanks to Evade for the RadioComm info and the idea about using the table for backup and restore of the SEEMS!!

This work was also pulled together and refined based on discussions in the following threads...

Alltel V3C Monster -> http://www.howardforums.com/showthread.php?t=1064653
Alltel K1M Monster  -> http://www.howardforums.com/showthread.php?t=1069181
Alltel V3M Monster -> http://www.howardforums.com/showthread.php?t=1072371
MetroPCS V3C Monster -> http://www.howardforums.com/showthread.php?t=1067164

just to name a few...

Discuss this process in -> Getting Alltel V3C/V3M/K1M Monster firmwares working: A more Automated Process

NOTE: I may still have a few corrections/edits to make over the next few days/weeks??

Required...

1.  USB Cable (see the FAQ)
2.  Install the Motorola USB Modem drivers.
3.  Install and configure Motorola PST v7.25 and its drivers, along with testing its connection (Formerly known as the Prep-work section of the Seem Edit page).  (Sorry, No WAREZ links here).
4.  Install P2KSeem for V710. (To install P2KSeem for V710.. Just unzip all the files in the archive you downloaded to a folder. It does not need to be "installed." There is no "setup" program.)
5.  Alltel Firmware flash file..  (obtain from http://www.humpa.com/vzw or http://ryfiles.com/flash or Phone Encyclopedia link at phonenews.com)
6.  QPST v2.7 Build 215 or higher (sorry, no warez links here)
7.  Install and configure QPST along with its requirements
8.  Install/Configure P2KCommander along with its requirements
9.  the seems, icons, and files indicated in the sections of the WIKI which I quote below...
10. RadioComm v10.3.1 (sorry, no warez links here). NOTE: some have mentioned difficulties when using newer versions of Radiocomm
11. RadioComm v10.3.1 requires MS .Net Framework v2.  (you can use windowsupdate.microsoft.com to download)
12. BitPim
13. WinRAR by Rarlab needed to unpack .RAR files.

 

The process...

Discuss this process in -> Getting Alltel V3C/V3M/K1M Monster firmwares working: A more Automated Process

1. Backup the phone... 

Prior to completing these backups your phone must be running the Verizon Firmware... Active on your account and you have done a *228 opt 1, and *228 opt 2 on it, and the phone and all of its features must be completely working on the VERIZON Firmware!!  Failure to be in this state prior to starting will mean FAILURE in the end.

After you do a *228 opt 1 & Opt 2 on the phone you wish to convert... Activate a different phone on your account while flashing and fixing your V3C/V3M/K1M phone...

Example... I used VZW's My Account -> Activate phone, to switch to my V3C.. did *228 opt 1 & Opt 2... then used My Accont -> Activate, to switch back to my E815 while I then flashed and worked with the V3C... When all the fixes were applied and done... I switched back to the V3C being active on my account and tried it out... NOTE: I did NOT do a *228 after I switched back.

I am not sure how crucial this is, but it is something I did EACH TIME I ran through this process....

The one time I didn't.. and I left the V3C active the entire time... and when trying VZW WAP, I got "authentication failed" and Get-it-Now could not read the catalog... After about 3 hrs... data in EVDO mode started working again

For how to use Verizon's "on line ESN Swapper" to switch which phone is active on your account.. Evade has a great illustrated write up, so please see the ACTIVATE PHONE section of -> http://motorola.szczuka.org/Hollywood_VZW_Bell.html    NOTE: this will only work when switching between two EVDO phones...

NOTE: If you do NOT have another EVDO phone to activate on your account while performing the rest of the tutorial, it has been suggested to please make use of the Airplane Mode setting on the Alltel firmware once you've flashed...  On the phone... Menu -> Tools -> Air Plane Mode... set Airplane Mode = ON.  Then when you are complete with this tutorial, go back in and turn Airplane Mode OFF.

NOTE: the Air Plane Mode trick doesn't always work... so another suggested method is to leave the phone powered off after flash, then restore the seems with RadioComm, the items with PST, and the QPST Service programming...  One that is done, you can power the phone back on.  However, some of the tools will not work with the phone off.  See what luiset83 posted HERE for details.


OPTIONAL:
backup the file system... (Use BitPim to capture tree to zip file. Uncompress ZIP on PC. go folder by folder comparing PC's copy to phone's file system view in bitpim, make note of missing files/folders. Use P2KCommander and QPST to get the rest.) You many not be able to backup All files/folders this way.   This is not actually needed, but some like to do it, "just in case"....

The following are MANDATORY:
You must now backup the settings, config files, etc... which WILL BE NEEDED to restore later... 

NOTE: These files are essential to restoring your phone to a working state!  Do not proceed to flashing if you are unable to back up ANY ONE of these items!

Use Qualcomm QPST to backup service programming.....  Unplug your phone from the PC, power it off, then back on, and re-connect it to the PC.  Use the QPST Configuration program, make sure your phone is displayed/available... Select the port with your phone, then use the Start Client pull down, select Service Programming.     At the phone selection screen, your phone should be listed and highlighted, click OK.  Click the READ FROM PHONE button.  On the "Enter Service Programming Code" screen, enter 000000 (or your phones SPC), and click OK.   When the read is complete, and you see values filled in, click the SAVE TO FILE button.   The file name box will automatically be filled in as  your phone's ESN number  followed by  _SP... (example:  1A3333Ad_SP) click the Save button.   Click on the Connection pull down in QPST Service Programming, and click EXIT.   Exit the QPST Configuration program.  Unplug the phone, power it off, then back on.

Use Motorola PST to backup additional files....  Unplug your phone from the PC, power it off, then back on, and re-connect it to the PC.   Start PST Phone Programmer.  Use the File pull down, and click on NEW.  Select BREW File, and click OK.  Use the Phone pull down menu and click on READ.  When the PST Phone Programmer Progress window indicates the Read Procedure has completed successfully, (it says "It's now safe to disconnect the phone"), close that progress window.   In the PST Phone Programmer window, use the File pull down menu, and click SAVE AS...   name the file, and click save...   

Repeat the process using PST to backup each of the following...   CDMA Enhanced Roaming Indicator (ERI) File, CDMA Preferred Roaming File, Feature File, Mobile IP File (NOTE: you might get an error stating this may or may not be supported, click YES to continue, it will report Partially completed), MMS Data File, RTT Data File and RTT Browser File (NOTE: have Ver 6.x tab selected before you click READ FROM PHONE).

Repeat the process using PST to backup CDMA NAM File, but before you close the CDMA Nam file, please write down your Mobile Identification Number (MIN) and Mobile Directory Number (MDN) values. You will need these later in the guide. They can be found on Lines 3 & 4 of the NAM 1 Contents column.

NOTE: Not all of the PST backups will be used for this process, but they are good to have "just in case..."

NOTE: You do not need to exit PST, or unplug/poweroff/poweron/replug between READ operations.

 

Use RADIOCOMM to backup seems....   Download this table -> MonsterSeems-1b.NVM.  (Right Click -> Save Target As...  and make sure it doesn't end up getting a .TXT appended to it)

Unplug your phone from the PC, power it off, then back on, and re-connect it to the PC.
Start RadioComm.
If prompted about the Moto Driver Installation setup, click CANCEL. i.e. do NOT run the Moto Driver Installation...
Inside RadioComm, use the Main pulldown menu. Select MA -> CDMA1X -> 6500 Chipset Base
Use the Settings pull down menu. Select USB -> M-Link USB Driver.
In the Main RadioComm window, click on the P2K 1 tab. The PC should "beep", and you should see the Radio Detection change from a blue ciricle to a Green circle.
Use the Features pull down menu. Select NV/Seem.
In the TABLE box, click the OPEN button. Browse to the MonsterSeems.NVM file you've downloaded, select it, and click OK.
In the Action box, click the READ button.
When the read has completed, in the Table box, click the SAVE button. File name will default to your phone's ESN number. Example: A123455.
Close the seem window using the X in the upper right, then exit out of RadioComm.
Unplug the phone, press and hold the power button, the screen will blink. Then turn the phone back on.

Note: you may have to remove/re-insert the phone's battery to turn it back on.

That table file will backup EACH of the following seems...

Seem 04aa Bytes 7A Record 0001
Seem 038e Bytes 7A Record 0001
Seem 01d1 Bytes 7A Record 0001
Seem 29a0 Bytes 40 Record 0001
Seem 29c0 Bytes  7a Record 0001
Seem 2976 Bytes 40 Record 0001
Seem 2977 Bytes 40 Record 0001
Seem 2978 Bytes 40 Record 0001
Seem 2979 Bytes 40 Record 0001
Seem 2997 Bytes 20 Record 0001
Seem 299a Bytes 70 Record 0001
Seem 299b Bytes 70 Record 0001
Seem 29a1 Bytes 20 Record 0001
Seem 29a9 Bytes 40 Record 0001
Seem 29b2 Bytes 30 Record 0001
Seem 29b3 Bytes 30 Record 0001
Seem 29b6 Bytes 20 Record 0001
Seem 29ba Bytes 60 Record 0001
Seem 29bb Bytes 60 Record 0001
Seem 29bc Bytes 40 Record 0001
Seem 29be Bytes 90 Record 0001
Seem 29bd Bytes 90 Record 0001
Seem 29e9 bytes 82 Record 0001
Seem 01d2 bytes 7A Record 0001

Use BitPim to backup the following files..

/dmu/10.key

/nvm/seem/cdma_sec     NOTE: K1M users may not be able to back this file up...  in that case, seem 01D2 contains this data!

____________________________________

2. FLASH THE PHONE's FIRMWARE... (MV)

If you were unsuccessful backing up ANY of the files in section 1, please STOP and DO NOT FLASH YOUR PHONE!!!

Obtain the Alltel Monster for your phone from -> http://www.humpa.com/vzw  or http://ryfiles.com/flash

Please see the  ->  HOW TO FLASH  <- page for the latest updates/notes and FULL information.

Please do NOT do a *228 when you have the Alltel firmware on your phone.

NOTE: If you do NOT have another EVDO phone to activate on your account while performing the rest of the tutorial, it has been suggested to please make use of the Airplane Mode setting on the Alltel firmware...  On the phone... Menu -> Tools -> Air Plane Mode... set Airplane Mode = ON.

____________________________________

3. Restore the backups you created earlier...

NOTE: Please now manually backup your ALLTEL  2742 bytes 0000 record 1 seem using P2kSeem before you proceed!!!

3a.Use Qualcom QPST to Restore service programming.....  Unplug your phone from the PC, power it off, then back on, and re-connect it to the PC.  Use the QPST Configuration program, make sure your phone is displayed/available... Select the port with your phone, then use the Start Client pull down, select Service Programming.     At the phone selection screen, your phone should be listed and highlighted, click OK.  Click the LOAD FROM FILE button. Navigate,  find and select your ESN#_SP.QCN file you created earlier.  Click OPEN.   Click the WRITE TO PHONE button.    On the "Enter Service Programming Code" screen, enter 000000 (or your phones SPC), and click OK.   When the write is complete, click on the Connection pull down in QPST Service Programming, and click EXIT.   Exit the QPST Configuration program.

Unplug your phone from the PC, power it off, then back on, and re-connect it to the PC.

3b. Use Motorola PST to Restore additional files....   Start PST Phone Programmer.  Use the File pull down, and click on OPEN.  Select BREW File, and click OK. Browse for, and select your previously backed up file. Use the Phone pull down menu and click on WRITE.  When the PST Phone Programmer Progress window indicates the WRITE Procedure has completed successfully  (it says "It's now safe to disconnect the phone"), close that progress window.  

Repeat the process using PST to restore each of the following that you backed up earlier...   CDMA ERI File, MMS Data File (NOTE: Prior to writing, please change the "Album Upload Address" field to 9995551212@pix.vtext.com, where 9995551212 = your 10digit phone number, BEFORE your write to phone), and RTT Data File.

Note:  RTT Browser File will be edited/restored in a later step so do NOT do it now... 

OPTIONAL PST RESTORES:  Due to using QPST to backup/restore the Service Programming, you should not need to restore the following files at this time...   CDMA NAM File, CDMA Preferred Roaming File, Feature File, and Mobile IP File (NOTE: you might get an error stating this may or may not be supported, click YES to continue, it will report Partially completed).   If you experience problems... then restore these files.

3c. Use RADIOCOMM to restore your seems....  NOTE: this will write the 2742 Seem that was on your phone when the backup was run.. So, if you ran the backup while the VERIZON firmware was on your phone, it will restore the Verizon 2742 seem to your phone...  as such.. Please Stop now, use P2KSeem for V710 to backup your ALLTEL 2742 seem file BEFORE you use RadioComm to restore the seems. 

3c1. NOTE: V3M/K1M for EVDO Data, you must do the following before restoring.... (V3C users do not need to do this indented part!)

These steps are experimental and if successful, eliminate the need to do Section 7 below....

Earlier, you used RadioComm to backup, which created a file name that defaults to your phone's ESN number. Example: A123455.NVM

Before we restore that, V3M and Krzr k1m users should open the A123455.NVM file in notepad... (works best with WORD WRAP turned off... Format-> Word Wrap, make sure unchecked)

Look for the line that starts with M_01D2,466,0,122,... and change it to M_01D2,466,1,122,...
Look for the line that starts with M_01d1,465,1,122,... and change it to M_01d1,465,2,122,...

Now you may continue.

Start RadioComm.
If prompted about the Moto Driver Installation setup, click CANCEL. i.e. do NOT run the Moto Driver Installation...
Inside RadioComm, use the Main pulldown menu. Select MA -> CDMA1X -> 6500 Chipset Base
Use the Settings pull down menu. Select USB -> M-Link USB Driver.
In the Main RadioComm window, click on the P2K 1 tab. The PC should "beep", and you should see the Radio Detection change from a blue ciricle to a Green circle.
Use the Features pull down menu. Select NV/Seem.
In the TABLE box, click the OPEN button. Browse to the ESN .NVM file that was created in the backup steps (example: A123455.NVM) , select it, and click OK.
In the Action box, click the WRITE button.
When the WRITE has completed...
Close the seem window using the X in the upper right, then exit out of RadioComm.

Radiocomm leaves the phone in the correct mode for P2KSeem to connect, so perform the following seem edits...


3d. NOTE: V3M/K1M Only: Use P2KSeem for V710 to edit the 01D0 seem, selects the second M.IP Profile.

Fill in Seem: 01d0, Bytes (h): 7A, Record: 1
Click Load from phone.
Find Offset: 00
Check the box for Bit: 0  which sets the Hex value of the offset to 01
Click Save to Phone.

3e. Use P2KSeem for V710 to restore your ALLTEL 2742 Seem.
Restore your Alltel 2742 Seem using P2kSeem for V710, and perform the following edits...

MANDATORY
Offset 006F bit 1 - checked,   to allow VZ Navigator GPS to function.
Offset 0052, bit 2 unchecked 
Offset 005A, bit 7 checked   to Enable editing the NVM files with QPST
Offset 0062, bit 2 & 5 checked   to Enable MMS Message Delivery Notification Menu, and Enable editing of PIX servers
Offset 006A, bit 3 checked to   Enable the Menu: Security > Data Connection
Offset 0073, bit 5 & 7 unchecked 
Offset 0094, bit 7 unchecked
Offset 0023, bit 7 - checked, Enables Settings>Network>Set Mode>Scan A
Offset 0024, bit 0 - checked, Enables Settings>Network>Set Mode>Scan B
Offset 0024, bit 1 - checked, Enables Settings>Network>Set Mode>Automatic
Offset 0028, bit 2 - checked, Enables Settings>Network>Set Mode>Automatic A
Offset 0028, bit 3 - checked, Enables Settings>Network>Set Mode>Automatic B
Offset 002d, bit 0 - checked, Enables Settings>Network>Set Mode>Force Automatic A 

NOTE: default setting is Automatic B for VZW but that choice is only there on the Alltel firmware after seem edit.

Optional:
Offset 003d, bit 1 - unchecked - Disable SMS Delivery confirmation
Offset 000C, Bit 1 = checked  to "Enable scrolling through missed calls with flip closed"
Offset 0038, bit 1, 2 & 3 checked  to enable continental, classic, and attention  alerts or ring tones.
Offset 003B, bit 0 checked  to enable Moon Lite Haze alert or ring tone
offset 004B, bit 0 checked to  change the GPS icon indicator to a CrossHair instead of Satelite
Offset 0074, bit 7 checked   changes Digital indicator  icon from D to 1X
Offset 007A, bit 1 unchecked   to Switch left and right soft key choices
Offset 008D, bit 6 checked ...  Adds "time and date" and "auto redial" menus to settings>initial setup
Offset 001d, bit 3 Uncheck - Motorola Animation on Startup
Offset 0024, bit 2 Uncheck - Voice Mail on #1 speed dial
Offset 0031, bit 1 Uncheck - Motorola Animation on Shutdown - OFF
Offset 005f,  bit 7 Check – Video Quality NOTE: this setting has no use, as the video quality defaults set to HIGH
 
My PRE-EDITED ALLTEL V3C 2742 Seem (contains all the above edits except ring tones, and Moto Animation) -> 2742_0001-EDITED-NoRingTonesAdded.seem

____________________________________

4. Overwrite files...  Enable GIN appmgr, Change the GIN icons, and load custom MMA_UCP/MMA_DCP files, vCast fixes, etc.

NOTE: P2KCommmander was not intended to be used on CDMA phones, as such it can be unstable. It is suggest you exit ALL programs on your PC.  Shut Everything down that you can.   Things like Messengers (Gtalk for example), and other "helper" type applications (even "extra" mouse control panels, etc) can cause P2KCommander to hang while running these scripts!!!  Right click on anything in your system tray... if you can EXIT it, do exit!!  Disable your screen saver, do NOT let any other program steal focus!!  do NOT use your mouse, etc...

Download the appropriate ZIP file for your phone from the following....

V3C_SystemFiles.zip
V3M_SystemFiles.zip
Krzr_SystemFiles.zip

Unzip the file onto your PC.  Start either PST or MSU to get your phone into the proper mode. Use the include .P2KC script files (just double click on them) one at a time to install/update the appropriate files. (I am listing the files the files installed by each script here, so if the script hangs, you can MANUALLY place them)...

system.p2kc
Installs the following files....
/a/motorola/system/alltel_axcess_mm_a_41x41_c.gif
/a/motorola/system/alltel_axcess_mm_s_33x33_c.gif
/a/motorola/system/alltel_axcess_mm_s_15x15_c.gif
/a/motorola/system/mma_ucp
/a/motorola/system/mma_dcp
/a/brew/mod/brewappmgr/alltelappmgr.bar
/a/dmu/10.key

NOTE: Originally the 12513.p2kc and 13478.p2kc files were used to restore the vCast Video icon. Since then, a free vCast update has become available in the Get-it-Now catalog...  under... Get Going -> Featured Apps -> VCast.    Please download this FREE update instead!! However, if you are on a NationWide plan, acceessing GIN and downloading apps will cost $1.99 per MB unless you have the $15 Vcast Vpack!!!

V3C users should now see this update. Please use this FREE update to install Vcast instead of the following P2KC scripts!!

Using the following scripts may get you the vCast Video icon back, BUT the application may not have working sound.  So it is suggested to download the vCast Update from the Get-it-Now catalog instead!! Again, this will cost users on NationWide plans $1.99 per MB.

12513.p2kc  <- Not needed if you download the vCast update from GIN
Installs the following files...
/a/brew/mod/12513/catalog.bar
/a/brew/mod/12513/verizonmediaplayer.mod
/a/brew/mod/12513/verizonmediaplayer.sig
/a/brew/mod/12513/vzwresource.bar
/a/brew_preloads/12513.mif

13478.p2kc  <- Not needed if you download the vCast update from GIN
Installs the following files...
/a/brew_preloads/13478.mif
/a/brew/mod/13478/mediaasf.mod
/a/brew/mod/13478/mediaasf.sig

Exit the PC software (PST or MSU), unplug the phone, power the phone off/on...

____________________________________

5. Edit and restore RTT Browser file. 

When using the default Verizon config files, you need to create a new Web Session on your phone to handle the MMS/PIX Messaging, you may also need to edit the USER ID field of the default VZW web session.

If you are using backups from an already 100 % working Alltel flashed phone, these settings may be configured properly so do these steps just to VERIFY...   However, when using backups from Verizon firmware, these steps are Mandatory!!

Unplug your phone from the PC, power it off, then back on, and re-connect it to the PC. Start PST Phone Programmer.  Use the File pull down, and click on OPEN.  Select RTT 1x-Browser, and click OK. Browse for, and select your previously backed up file.

Click on the Version 6.x tab.

On the Proxy 1 tab, change the User ID from %m to 9995551212, where 9995551212 is your Phone Number. Note: Some have had to use their 10digit MDN or 10digit MIN as written down earlier in section 1. (NOTE: this is a step I have not had to do, but others have.)  Leave the other fields untouched.

Click -> SAMPLE SCREEN SHOT (Proxy 1)

Click on the Proxy 2 tab.

Configure the fields as follows...

Proxy Name: VZW_MMS
Homepage: http://homepage
User ID: 9995551212          (where 9995551212 is your 10 digit phone number)
Password: vzw

Under the Primary section...
Gateway: mms.vtext.com
Port: 80

Leave the other fields untouched.

Click -> SAMPLE SCREEN SHOT (Proxy 2)

If you have a Personal "free" WAP proxy, you may click on the Proxy 3 tab, and enter the appropriate fields to configure that web session now.

When you have finished, use the Phone pull down menu and click on WRITE.  When the PST Phone Programmer Progress window indicates the WRITE Procedure has completed successfully  (it says "It's now safe to disconnect the phone"), close that progress window.  Exit PST. Disconnect the phone from the PC.

On the phone...   Go Menu -> Messages -> press Options soft key. From the list, select Inbox Setup. Select MMS Message Setup.  Highlight Server Info, and press the Change soft key.  On the Current Server screen, press the Option soft key.  On the Server Info screen, select EDIT.  Verify the Server Name and Web Session Name match VZW values.   Service Name = VZW, Server Name = http://mms.vtext.com/servlets/mms,  Web Session = VZW_MMS.

(The following, copied directly from the Alltel V3C Wiki, may already be done due to the use of PST/QPST/RadioComm, but Please verify these are set properly..)
Now go to Main Menu / Settings / Security / Data Connections/ password is 000000/ 1xRTT Data. Verify that the following are set... If they are not, then change them....

User Name : XXXXXXXXXX@vzw3g.com (XXX=your TN)

Note: After you hit OK the phone might report… “Notify ALLTEL of change” just disregard !

Password : vzw

hit done

____________________________________

6. Change the phone's Default network mode.

By default, the Alltel firmware may not have a selection made for "Network -> Set Mode" however, Verizon's default is AutoMatic B.

On the phone go Menu -> Settings -> Network -> Set Mode... and make sure Automatic B is selected.

NOTE: to have the choice for Automatic B in the menu, you must have done the MANDATORY 2742 seem edits in section 3.

NOTE: due to the use of QPST and the various PST backups, this option may be correctly set, BUT you do want to verify this!

____________________________________

7. V3M and K1M users, fix EVDO Data (thanks jlbrightbill)

NOTE: if you Edited the RADIOCOMM backup file before restoring (as listed in section 3c1 above)... and your data (mms, get-it-now, wap, etc)  works in EVDO mode,  you can skip this section.

NOTE: Earlier, you used RadioComm to backup, which created a file name that defaults to your phone's ESN number. Example: A123455.NVM.  That backup file contains a copy of your 01D2 seem... While its not explicitly spelled out in the guide, the strings are just located in a slightly different spot... So open up your 01D2 seem (or the NVM Backup made by Radiocom with notepad), and you will see the same pattern as depicted in the the two SCREEN SHOTS included in part 1 below (0110 to start, 10 in between)... so you can grab the strings from there when you are doing the following steps.

Open QPST's Service Programming and load values from phone. Scroll to the M.IP tab, and select "Add". Configure the new profile as the screenshots indicate.  mip1ki4.png  and mip2bc6.png.

NOTE: tethered NAI won't stay, but it won't affect the data fixes.

The following has been slightly re-worked to fit the flow of this guide... i.e. the mentions of files that you need to backup while still on the VERIZON Firmware have been removed from this section, but added to the backup section in the beginning, and file links moved "in-line" so there is not a problem with the rapid share links going away...

NOTE: if you can't get the nvm/cdma_sec  backed up, you can use your backed up Seem 01d2.

From jlbrightbill -> http://www.howardforums.com/showpost.php?p=8511617&postcount=346

NOTE #2: Many reports have said this guide only results in working data after doing using the ESN changer to reprovision data OR calling CS to get it reprovisioned that way. Once data is working completely over 1X, move on to this next step.

1. Open your backup of cdma_sec in a hex editor, I personally use Hex Workshop, but Winhex or others will work as well. Use the instructions contained in these two images to copy your HA Shared Secret and AAA Shared Secret keys.

hasharedsecretme6.png
aaasharedsecretse5.png

Of course on your particular backup the string won't be all A's and all B's, I used them to clearly point out exactly what you're looking for.

2. Open QPST's Service Programming and select "Load from Phone"
3. Move to the MIP tab, and select the User Profile that contains your10digit#@vzw3g.com, then hit Edit
3. Select "Enter hex value" on both HA Shared Secret and AAA Shared Secret.
4. Paste the two strings you copied before into the proper location, hit OK, then write to phone. Once these are written the two fields will switch back to "Retain last value" if you read from phone again, but the strings will be written to cdma_sec so "Retain last value" means it will use them.
5. Copy 10.key  to /DMU/

EVDO data should work now.

 

____________________________________

8. Re-Activate the phone on your account.

Use Verizon's  My Account -> Activate phone, to switch back to your Razr/Krzr.   DO NOT Do a *228 like the web page says!!

For how to use Verizon's "on line ESN Swapper" to switch which phone is active on your account.. Evade has a great illustrated write up, so please see the ACTIVATE PHONE section of -> http://motorola.szczuka.org/Hollywood_VZW_Bell.html    NOTE: this will only work when switching between two EVDO phones...   DO NOT PERFORM A *228!!

If you choose to make use of the Airplane Mode setting on the Alltel firmware once you've flashed, go back in and turn it OFF...  On the phone... Menu -> Tools -> Air Plane Mode... set Airplane Mode = OFF.

9. Fix Seem 275B...

If you do a Master Reset, the 275A seem will get re-written with the PRE-EDITED values, All edits you made willbe lost. To prevent this, any seem edits you've performed on the 275A seem must be done to the 275B seem as well.

____________________________________

Discuss this in -> Getting Alltel V3C/V3M/K1M Monster firmwares working: A more Automated Process

____________________________________
 

My Final Notes.... 

Now that everything is working, Please create new QPST,  PST, RadioComm backup files (as outlined earlier)...  They can be re-used on your phone to restore FULL Functionality of the Alltel firmware!  (i.e. now the backups are done in a WORKING STATE, the restore process will put everything back, Web Sessions, MMS configuration and all!!)

There is still discussion as to whether *228 will corrupted data services when using the Alltel MONSTER firmwares.  So it is up to you..  Take a chance updating your PRL by using *228 opt 2 , or just manually update using PST from now on.

For those having problems...

Please be sure you are READING EVERY WORD OF THE GUIDE CAREFULLY... Even the fine print, colored, bold, italic prints...

DO NOT SKIM THE GUIDE AND ASSUME!!!!!!!

Some things that are apparently causing the most problems, which are not in the guide because they are "understood"....

1. This guide is NOT PERFECT.. and Human Error will always be a factor...

2. This is NOT a guide for noobies... it is not 100% word-for-word, or can be followed if you've never "hacked" a phone before type of guide...

3. reading MMS file with PST fails with message "Feature Not Supported"... Why is this not documented in the guide? Well, the Pre-Req's say you need PST v7.25, people getting this message are using 7.23 and lower!!! i.e. they are NOT READING and following what the pre-req's are!!! If Pst 7.23 worked, it would be listed as the pre-req!! (just like how QPST v2.7 build 215 is listed, rather than QPST v2.7 build 91)

4. /nvm/seem/cdma_sec may not be able to be backed up on K1M phones... BUT section 3c1 mentions a way that can get around this, If it works, you don't need to worry about the HA/AAA Shared Secret strings... if it doesn't work, section 7 does state that 01D2 seem contains these strings.... While its not explicitly spelled out in the guide, the strings are just located in a slightly different spot... open up your 01D2 seem (or the NVM Backup made by Radiocom with notepad), and you will see the same pattern as depicted in the SCREEN SHOTS in Section 7 (0110 to start, 10 in between)... so you can grab the strings from there when you are doing section 7.

____________________________________

Customization suggestions...

Remove the Alltel Startup and Shut Down graphics...
   Use BitPim (or P2KCommander) to delete the following files...
   /motorola/shared/picture/customer_closing.gif
   /motorola/shared/picture/customer_opening.gif
   Note: or you can just overwrite these with others

Remove the startup/shutdown sounds (the default Moto sounds may still play)
   Use BitPim (or P2KCommander) to delete the following files...
   /motorola/system/ui_start_dn_mono.mp_
   /motorola/system/ui_start_up_mono.mp_
   Note: or you can just overwrite these with others

Set a custom graphic on the outer LCD when the flip is open
   Use BitPim (or P2KCommander) to place a 96x80 256 color non-animated Gif89 graphic called verizon.gif in the /mobile folder... as...
   /mobile/verizon.gif
   and write this Pre-Edited 2771, record 1, 30 bytes (h) seem.. and restart the phone.
   For additional info...  see also the discussion in -> Hosed Your V3c Outside LCD Logo? I HAVE A FIX!!!!

Add additional Skins
   Download a CDMA Moto UI V3C skin like -> V3C-WM5.zip
   unzip, and use P2KCommander either via the included P2KC script,
   or manually use P2KCommander to create the folder under /mobile and
   copy all the files to it.
   Then Restart the phone (power off/on).

Removing Skins
   Always use BitPim to remove additional skin files and folders, then restart the phone.
   P2kcommander can remove the files, but it will not show you the empty folders, and those empty folders will still show as a skin choice.

Changing VERIZON WIRELESS on the internal LCD.

Unplug your phone from the PC, power it off, then back on, and re-connect it to the PC. Start PST Phone Programmer. Use the File pull down, and click on NEW. Select CDMA Enhanced Roaming Indicator (ERI) File, and click OK. Use the Phone pull down menu and click on READ. When the PST Phone Programmer Progress window indicates the Read Procedure has completed successfully, (it says "It's now safe to disconnect the phone"), close that progress window...

In the Roaming Indicator Table section... Lines 1 & 2, change the Text Displayed from VERIZON WIRELESS to anything you want displayed (up to 18 characters). Note: click on the word Verizon for the cursor to appear in the text box.

Use the Phone pull down menu and click on WRITE. When the PST Phone Programmer Progress window indicates the WRITE Procedure has completed successfully  (it says "It's now safe to disconnect the phone"), close that progress window.

Use the Phone Pull down menu and click Restart. When the PST Phone Programmer Progress window indicates the Restart Procedure has completed successfully  (it says "It's now safe to disconnect the phone"), close that progress window, and exit PST.