Database Info

[GUIDE] HTC EVO on MetroPCS!!

Alrights guys, don't know if anyone has posted a tut for this yet but I finally got this EVO up and going with web. I don't know who the original poster of this was but it sure rocks!!
So Lets Begin First you will need the following Items
1. Cdma-Workshop (Any Build) i will not post.....hint....Search
2. Qpst v2.7 build 323 (I have attached this)
3. Htc Hero DIAG Drivers (I Have Attached This)
4. Htc Sync (Its On The Link At The Bottom)
5. BetterCut or Anycut ( I have made a link for...Anycut)
Ok Now that we have the Files Lets Start Flashing
1. Press ##DIAG# (##3424) on your phone You will see a screen Pop Up Thats Normal
2. Now plug The phone up to the computer and it will try and find the drivers but it will fail or ask you to locate the drivers manually so make sure you remember where you unzipped the files
3. Once you have that setup Go to Cdma-Workshop Go To the port the phone is on and Read From the Phone and go to the Security Tab.....and On the Spc Section Read The lock Code and write it to back to the phone so it says unlocked Then make the code 000000 and rewrite the code so it says sucess.
4. Now Close Cdma-Workshop and Open QPST Configuration Click On The Ports Tab and Add New Port ( Make Sure Show Serial and Usb/QC Diag Ports Only is Unchecked) and Add The Port Of Your Hero.
5.Highlight Your Port and Click Start Client and Start Service programming and Press Read From Phone The SPC should be all 0's so click on the M.I.P. Tab and Change The Mobile IP Behavior To Simple Ip. Edit The M.I.P. Profiles at the Top. Your NAI and Tethered NAI should be ([email protected] or [email protected])
6. Next Click On The PPP Config Tab and Click the UM Button your user id should be ([email protected] or [email protected]) and the password and tethered NAI should be metropcs or cricket Do the Same For the AN Button and press Write to Phone It should Give You a Error But Dont Worry About It
7. Press ##DATA# (##3282#) And Setup your Data for your phone and press menu and Commit So your phone Will Reboot
8. Install BetterCut or AnyCut on your phone and open it Press New ShortCut And Go To Activity It make take a couple of minutes for it to appear but when it Does Go down to Proxy Setting and Click It. It Will Ask for a Name make it whatever you want to. It should say shortcut created sucessfully. Go to your Home Screen and it should be somewhere on there press it and Edit it For Cricket It should be HostNAME: wap.mycricket.com And Port Should be 8080 and for Metropcs HostName: wap.metropcs.net and Port Should Be 3128.
**Forgot who originally posted this, but its not my solution, enjoy**
Drivers:
http://rapidshare.com/files/34424222...AG_Drivers.zip
htc sync:
http://rapidshare.com/files/345204153/HTCSync.exe
anycut:
http://rapidshare.com/files/345202329/any.RAR
QPST:
http://rapidshare.com/files/343520454/qpst_2.7_348.rar
QPST pass is: cdma-king.com

hmm..interesting read..although I don't want to be on MetroPCS but another coolness to add for Evo

What about verizon?
How about flashing the evo to verizon? To us that have I/O evo our screw it should I just move to sprint

chumba8 said:
How about flashing the evo to verizon? To us that have I/O evo our screw it should I just move to sprint
Click to expand...
Click to collapse
+1
I would like to know that too

If you really want it on verizon you could ask an authorized verizon retailer to basically do this same thing for you. they love signing people up this way as they get to pocket the normal phone subsidy ($250 on the evo).

does 3g work?

metro 3g...

doesnt metro pcs use sprint towers?

bobdude5 said:
doesnt metro pcs use sprint towers?
Click to expand...
Click to collapse
Believe that is boost mobile

Well you can pretty much get Verizon coverage from that other thread using Altell's towers. Too bad ping gets raised, but hell... way better signal and speedtests

killac93 said:
Alrights guys, don't know if anyone has posted a tut for this yet but I finally got this EVO up and going with web. I don't know who the original poster of this was but it sure rocks!!
So Lets Begin First you will need the following Items
1. Cdma-Workshop (Any Build) i will not post.....hint....Search
2. Qpst v2.7 build 323 (I have attached this)
3. Htc Hero DIAG Drivers (I Have Attached This)
4. Htc Sync (Its On The Link At The Bottom)
5. BetterCut or Anycut ( I have made a link for...Anycut)
Ok Now that we have the Files Lets Start Flashing
1. Press ##DIAG# (##3424) on your phone You will see a screen Pop Up Thats Normal
2. Now plug The phone up to the computer and it will try and find the drivers but it will fail or ask you to locate the drivers manually so make sure you remember where you unzipped the files
3. Once you have that setup Go to Cdma-Workshop Go To the port the phone is on and Read From the Phone and go to the Security Tab.....and On the Spc Section Read The lock Code and write it to back to the phone so it says unlocked Then make the code 000000 and rewrite the code so it says sucess.
4. Now Close Cdma-Workshop and Open QPST Configuration Click On The Ports Tab and Add New Port ( Make Sure Show Serial and Usb/QC Diag Ports Only is Unchecked) and Add The Port Of Your Hero.
5.Highlight Your Port and Click Start Client and Start Service programming and Press Read From Phone The SPC should be all 0's so click on the M.I.P. Tab and Change The Mobile IP Behavior To Simple Ip. Edit The M.I.P. Profiles at the Top. Your NAI and Tethered NAI should be ([email protected] or [email protected])
6. Next Click On The PPP Config Tab and Click the UM Button your user id should be ([email protected] or [email protected]) and the password and tethered NAI should be metropcs or cricket Do the Same For the AN Button and press Write to Phone It should Give You a Error But Dont Worry About It
7. Press ##DATA# (##3282#) And Setup your Data for your phone and press menu and Commit So your phone Will Reboot
8. Install BetterCut or AnyCut on your phone and open it Press New ShortCut And Go To Activity It make take a couple of minutes for it to appear but when it Does Go down to Proxy Setting and Click It. It Will Ask for a Name make it whatever you want to. It should say shortcut created sucessfully. Go to your Home Screen and it should be somewhere on there press it and Edit it For Cricket It should be HostNAME: wap.mycricket.com And Port Should be 8080 and for Metropcs HostName: wap.metropcs.net and Port Should Be 3128.
**Forgot who originally posted this, but its not my solution, enjoy**
Drivers:
http://rapidshare.com/files/34424222...AG_Drivers.zip
htc sync:
http://rapidshare.com/files/345204153/HTCSync.exe
anycut:
http://rapidshare.com/files/345202329/any.RAR
QPST:
http://rapidshare.com/files/343520454/qpst_2.7_348.rar
QPST pass is: cdma-king.com
Click to expand...
Click to collapse
Congratulations buddy!
Thanks a hell of a lot for giving us this how to guide. I really appreciate it
Just had 3 questions:
1) Are you getting 3g data in Atlanta or is it just Edge?
2) What plan did you sign up for at MetroPCS?
3) If you decide you don't like MetroPCS, how do you reverse this process back to Sprint service?
Thanks again for figuring this out

jigglywiggly said:
Too bad ping gets raised, but hell... way better signal and speedtests
Click to expand...
Click to collapse
that probably depends on the tower coverage for the specific geographical location ...
i see the directions mention HTC Hero a few times. has anybody confirmed this works on the EVO?

Lol, I just spent all night trying to figure this out and you have made it very easy. Thanks. The Diag Drivers link doesn't work but I am sure we could find it somewhere else.
I do have one question. Do you still need to have a Metro PCS dealer add the ESN to their network?

hack-a-lak said:
Lol, I just spent all night trying to figure this out and you have made it very easy. Thanks. The Diag Drivers link doesn't work but I am sure we could find it somewhere else.
I do have one question. Do you still need to have a Metro PCS dealer add the ESN to their network?
Click to expand...
Click to collapse
Yes the ESN needs to be added to Metro's inventory. I had them add it and wallaahhh!

What works and what doesn't?
Can you list what works and what does not? I'm particularly curious about a stable 3G.

SYNTHAXXX said:
Can you list what works and what does not? I'm particularly curious about a stable 3G.
Click to expand...
Click to collapse
Right now talk, text and web are working. Still working on MMS. However I had great 3G reception here in Hotlanta.

killac93 said:
Right now talk, text and web are working. Still working on MMS. However I had great 3G reception here in Hotlanta.
Click to expand...
Click to collapse
I see... so for $50/mo (contract free) I can get the the same things that Sprint is offering me for $80/mo. When you minus the extra cost to buy the phone full retail $449 vs $199 on contract you actually saving about $570 over a two year period...
Hard choice

3G unstable
I have tried many configurations and no matter what I do, it seems that the "mobile network" connection is not stable. It will go out periodically and say "connection failed" or "turning on". Can you verify that you are not having this issue?
Also, this obviously does not bypass the WAP proxy which is used by Cricket. This means that other protocols, such as those used in navigation software and YouTube, are going to be blocked by the proxy server. Does anyone know a way around this?

SYNTHAXXX said:
I have tried many configurations and no matter what I do, it seems that the "mobile network" connection is not stable. It will go out periodically and say "connection failed" or "turning on". Can you verify that you are not having this issue?
Also, this obviously does not bypass the WAP proxy which is used by Cricket. This means that other protocols, such as those used in navigation software and YouTube, are going to be blocked by the proxy server. Does anyone know a way around this?
Click to expand...
Click to collapse
google around for the droid eris cricket tutorial. that has the proper method to set it up, and it works on all other cdma htc android phones.
i believe it is posted on howardfourms under the cricket section.

I myself was wondering if it was the same because I flashed my evo to cricket the same way just off of flashing know how....going to try and see if the Eris method matches what needs to be done to the evo and will report back

Flashing your HTC EVO Shift [GUIDE]

Tools Needed:
all can be googled and downloaded
- QPST 2.7 build 359
- QXDM 03.09.19
- CDMA WS 2.7 (ATTACHED)
- HTC Diag Drivers (ATTACHED)
Connect the phone via USB
On the phone dial ##3424# to enter DIAG mode
Install drivers if needed (on some systems it will find all the right drivers BUT the HTC Diag driver. For me I had to manually force it to take the x64 driver in Windows 7. Once you add the driver it functions perfectly.)
Open device manager and look for the device under "Modems" -> HTC USB Modem
Double click on HTC USB modem and go to the "modem" tab and note the COM port.
Open QPST Configuration
Click on "Ports" tab
If the port you wrote down is not here click "Add New Port"
Uncheck "Show Serial and USB/QC Diagnostic ports only" and your port should appear on the list.
Highlight it and click "ok" to add.
Close QPST
**** You have now established a connection with your device ****
Open CDMA WS 2.7
Under COM Settings (AT Mode) select your COM port for your device, leave baud rate at 115200
Click "Connect"
Click "Read" (This is not necessary but I do it to ensure I have a good connection to the device. The "read" output will display the phone information in the fields on the left. If you don’t see this information populate you have not established a connection with the device and need to verify your COM port settings and try again.)
Click the "Security" Tab
Under SPC make sure it is set to "Default (nv_read)" and click "Read"
It will display your SPC in the empty box. WRITE THIS DOWN for later!
Click on "SPC" button and click on "Send"
If you have done everything correctly you will get a popup that says "SPC is correct. Phone Unlocked."
Click "ok"
Close CDMA Workshop
------------------------------------------------------------------​
Open QXDM
Under "Options" on the main menu click "Communications.."
Set "Target Port" to your COM port for your device.
Click "Ok"
Click "View" on the main menu, navigate to New -> Common -> Command Output (this will open a black command prompt window in QXDM.)
in the "Command" text field at the bottom of QXDM type "RequestNVItemRead meid" and press enter.
Your MEID string will be displayed as fallows, copy this to notepad with your ESN.
22:25:40.971 meid = 0x00A10000053179FF
Minimize QXDM, we are done with it for a while.
Preparing your MEID and ESN values and flipping them
In Notepad take your ESN and MEID values and strip them of the 0x00's as follows:
MEID = 0x00A10000053179FF
Change to = A10000053179FF
Now flip the values as shown and add a space between every two values:
MEID Original = A10000053179FF
MEID Flipped = FF 79 31 05 00 00 A1
ESN Original = 81380CRA
ESN Flipped = RA 0C 38 81
Zeroing out your ESN and MEID values in QXDM
At this point if you followed the instruction QXDM should be minimized and still connected to your phone. Your phone should still be SPC unlocked and there should have been NO reboots in the entire process. If you did get a reboot you will need to rescan your memory addresses as they change when the phone is rebooted.
Maximize QXDM
Go to the file menu and select "View -> New -> Common -> Memory Viewer"
Change the drop down box next to "Rows" from 8 to 16
Now carefully copy a MEID or ESN address from your saved notepad file to the "Address" field and press enter. Example: 0x108D8FE0
Find your FLIPPED ESN or MEID address in the string and change ONLY those values to 00 (zero's)
DO NOT CHANGE ANYTHING ELSE EVEN IF IT IS CLOSE OR OFF BY EVEN ONE DIGIT!!!! (You may permanently damage your phone!)
Once you change the MEID or ESN to zero click "Write" The values will change from red to blackindicating they have been written.
Do this for all the rest of your MEID and ESN values
(LOCATIONS CAN BE FOUND IN .ZIP ATTACHMENT BELOW)
Verifying you have Zero'd out your MEID and ESN
Bring the Command Output Window back to the front.
In the Command field at the bottom type "RequestNVItemRead meid" it should display:
22:25:40.971 DIAG TX item:
22:25:40.971 meid = 0x0000000000000000
22:25:40.971 DIAG RX item:
22:25:40.971 meid = 0x0000000000000000
If your MEID is zero'd out proceed to step 4.
If your MEID is not zero'd out. Don’t bother proceeding to ESN you MUST zero out your MEID before you can change your ESN.
* If your MEID did not zero out and you used all the address locations you could possibly find by scanning I highly suggest going through the forums and trying all the MEID addresses people have submitted. I will also include a master list of all the ones I can find at the bottom of this post.
In the Command field at the bottom type "RequestNVItemRead esn" it should display:
23:39:40.442 DIAG TX item:
23:39:40.442 esn = 0x00000000
23:39:40.442 DIAG RX item:
23:39:40.442 esn = 0x00000000
Now hold power button on Evo Shift and select Airplane Mode.
Disconnect QXDM by clicking comunications tab then ports. Change the port to DISCONNECTED.
DO NOT CLOSE QXDM!
Go back to QPST Configuration and click on port your phone is on. Then click Disable to disable the port.
Now restart your phone but DO NOT unplug it from usb cable.
When it comes back on dial ##3424#
Verifying your MEID is now Zero'd out after reboot
Go to QPST Configuration and enable the port your phone is on.
Go to QXDM and click comunications tab, then ports.
Change the Disconnected to the port your phone is on.
In the Command field at the bottom type "RequestNVItemRead meid" it should be zero'd out.
In the Command field at the bottom type "RequestNVItemRead esn" it will have reverted to the original ESN.
This is expected!
Now go back into "Memory Viewer" and zero out all the ESN addresses again.
Once you have zero'd out all the ESN addresses verify the ESN is zero'd out by typing
"RequestNVItemRead esn" into the command field with the command prompt brought to the front.
Regardless of if the ESN is completely zero'd out or not proceed to the next step. This is how you uncover the hidden ESN memory entries and any locatons that may have changed from the reboot!
*Do Not disconnect the phone or reboot it!
Try to write your MEID by using the following command "RequestNVItemWrite meid
0x00A100000XXXXXXX" (Replace A100000XXXXXXX with your Boost MEID HEX)
If it succeeds it will show:
00:11:53.415 DIAG TX item:
00:11:53.415 meid = 0x00A100000XXXXXX
00:11:53.415 DIAG RX item:
00:11:53.415 meid = 0x00A100000XXXXXX
Changing your MDN and MSID
Now that your phone has been repaired you need to update your MDN and MSID to reconnect to the network for voice and text messages.
Turn on the Phone
Dial ##[your MSL]# to allow you to enter EPST. Your MSL should not have changed
from the one you noted earlier before the MEID repair but If it did go to the steps above on how to find your MSL with CDMA WS 2.7
Chose "Edit Mode"
Edit your Mobile Directory Number (MDN) and enter the one for your wireless network
Click "Ok"
Edit your MSID and enter the one for your wireless network
Click "Ok"
Press the "Menu" key and select "Commit Modifications" and the phone will reboot.
Once rebooted try to dial out and send yourself a text message!
LET ME KNOW IF THIS WORKED FOR YOU! THANKS!

Thank you for this guide. I was stuck in the ESN & MEID Zeroing out process but after i read your guide my eyes opened!
Thanks.

Just like Djmanjol I was stuck at the same spot but the MEID locations was a godsend.

3g access
Anyone able to get 3g access with this?
I am having trouble with that part...service 67 error.

cant write MEID
is driving me crazy
it reads 000000
but i cant write it
WTF

What does it say when you try to write it?
Also, I am not 100% sure, but i think your phone needs to be unlocked with shiftRR.
More details and I am sure people will be able to help you.

spooky187 said:
What does it say when you try to write it?
Also, I am not 100% sure, but i think your phone needs to be unlocked with shiftRR.
More details and I am sure people will be able to help you.
Click to expand...
Click to collapse
I finally resolved with a qmat script through revskills then qxdm
Sent from my PG86100 using XDA App

ok iam stuck can sum 1 please helpme?
ok when i enter my esn or meid in the address bar in QXDM and push enter ,insted of showing me my esn or meid revesed so i could zero them out it reboots my shift can any body help me =(

mazer2322 said:
ok iam stuck can sum 1 please helpme?
ok when i enter my esn or meid in the address bar in QXDM and push enter ,insted of showing me my esn or meid revesed so i could zero them out it reboots my shift can any body help me =(
Click to expand...
Click to collapse
Try rooting and s off the phone then google evo shift qmat script meid repair and find the radio and qmat script run the script through revskills after it runs you will be able to run requestnvitemwrite meid in qxdm and write your ESN once written reboot phone write min and phone num to phone press ##768# press menu reset and let it do over the air activation to turn your 3g on you should be set
Sent from my PG86100 using XDA App

how do i scan for more esn/meid locations i went through all the one in the file ( ESN_MEID_LOCATIONS. txt) i only found like 4 esn and 4 meid
---------- Post added at 11:08 PM ---------- Previous post was at 10:48 PM ----------
Zarboz said:
Try rooting and s off the phone then google evo shift qmat script meid repair and find the radio and qmat script run the script through revskills after it runs you will be able to run requestnvitemwrite meid in qxdm and write your ESN once written reboot phone write min and phone num to phone press ##768# press menu reset and let it do over the air activation to turn your 3g on you should be set
Sent from my PG86100 using XDA App
Click to expand...
Click to collapse
can u show me step by step, or is ther a guide on how to do this?

Zarboz said:
Try rooting and s off the phone then google evo shift qmat script meid repair and find the radio and qmat script run the script through revskills after it runs you will be able to run requestnvitemwrite meid in qxdm and write your ESN once written reboot phone write min and phone num to phone press ##768# press menu reset and let it do over the air activation to turn your 3g on you should be set
Click to expand...
Click to collapse
mazer2322 said:
can u show me step by step, or is ther a guide on how to do this?
Click to expand...
Click to collapse
You should be able to find several guides in XDA developers for rooting the EVO Shift. I have an EVO but not a Shift, so links to the guides that I use may not be applicable. Search in here for Root EVO Shift S-off or something similar. If not satisfied, please respond and I will post a link that I used, but it may not be 100% applicable.
---------- Post added at 02:31 PM ---------- Previous post was at 01:43 PM ----------
For my HTC EVO 4G (radio 2.15.00.0808), I will need different memory addresses. I think I know how to find the ESN addresses, but don't understand how to scan for the MEID addresses. Can someone offer an explanation?
[edit] Nevermind. I think I have the answer here.[/edit]

I have been thinking of giving this a shot, but not sure if what I want to do is possible, or legal.
I have an active crappy Samsung Android phone, but want to activate a Shift that Sprint says has a bad ESN. Can I use the good ESN from the Samsung on the Shift and will the phone work like it is supposed to? Or is what I am thinking of trying going to get me in trouble?

WonkyMcSwifty said:
I have been thinking of giving this a shot, but not sure if what I want to do is possible, or legal.
I have an active crappy Samsung Android phone, but want to activate a Shift that Sprint says has a bad ESN. Can I use the good ESN from the Samsung on the Shift and will the phone work like it is supposed to? Or is what I am thinking of trying going to get me in trouble?
Click to expand...
Click to collapse
You just can't operate both devices with same same meid at the sane time that's fraud
Sent from my HTC Glacier using XDA App

Just flash the phone with the radio I included with the qmat script
Moritzio said:
You should be able to find several guides in XDA developers for rooting the EVO Shift. I have an EVO but not a Shift, so links to the guides that I use may not be applicable. Search in here for Root EVO Shift S-off or something similar. If not satisfied, please respond and I will post a link that I used, but it may not be 100% applicable.
---------- Post added at 02:31 PM ---------- Previous post was at 01:43 PM ----------
For my HTC EVO 4G (radio 2.15.00.0808), I will need different memory addresses. I think I know how to find the ESN addresses, but don't understand how to scan for the MEID addresses. Can someone offer an explanation?
[edit] Nevermind. I think I have the answer here.[/edit]
Click to expand...
Click to collapse
Sent from my HTC Glacier using XDA App

Thanks but I have the EVO 4G, not the EVO Shift. With the radio you included, will it use the same addresses? Guess I can check the addresses and verify that myself.
Zarboz said:
Just flash the phone with the radio I included with the qmat script
Click to expand...
Click to collapse

Moritzio said:
Thanks but I have the EVO 4G, not the EVO Shift. With the radio you included, will it use the same addresses? Guess I can check the addresses and verify that myself.
Click to expand...
Click to collapse
I have qmat files for the 4g
Sent from my HTC Glacier using XDA App

Thanks for your response, Zarboz.
I found the archive, EV0 4G QMAT.rar, right?
I also have the radios, but do I use both radios? I suspect I only need the 2.05.00.06.10 radio.
However, after more seaching and reading, I discovered the QMAT script method does not work on EVO 4G hardware 0004. I guess I will be forced to use the long method.

Moritzio said:
Thanks for your response, Zarboz.
I found the archive, EV0 4G QMAT.rar, right?
I also have the radios, but do I use both radios? I suspect I only need the 2.05.00.06.10 radio.
However, after more seaching and reading, I discovered the QMAT script method does not work on EVO 4G hardware 0004. I guess I will be forced to use the long method.
Click to expand...
Click to collapse
Sucks man its a pain
Sent from my HTC Glacier using XDA App

Zarboz said:
You just can't operate both devices with same same meid at the sane time that's fraud
Sent from my HTC Glacier using XDA App
Click to expand...
Click to collapse
Thanks. I do not plan on using the other phone at all while using the Shift. Now to see if I feel I can make it through the directions to do this properly without messing anything up.

WonkyMcSwifty said:
Thanks. I do not plan on using the other phone at all while using the Shift. Now to see if I feel I can make it through the directions to do this properly without messing anything up.
Click to expand...
Click to collapse
Pm me if you need help always happy to help fellow members
Sent from my HTC Glacier using XDA App

HTC Thunderbolt FULL FLASH WITH 3G

Note to admins: Please move this thread to the thunderbolt section, as a new member I can only post in this section.
No one was sharing this technique, only trying to sell it.... I work in the cell phone/tech industry too (hxxp://benjamincomputerrepair.com) but if someone is competent enough to do it on their own, why not let them instead of being a jew?
note to admins: THIS IS NOT INSTRUCTIONS ON MEID CLONING, this specificly tells you to use noones meid except your own so this is not considered cloning by any means!!!!!
First of all, be sure to write value "01" to NV ITEM 0855 (I used DFS CDMATOOL) on both modems to enable QPST.)
Follow the directions in this post to change your MEID to the 9900 MEID that appears on your 9k modem (in nv_only mode, NOT the A100 meid in ruim mode). I used DFS's write button (after zeroing out and rebooting) instead of the "requestnvitemwrite meid 0x00#####" method. This post describes the A0XXXX MEID for some reason, but I used my 9900 meid.
POST#29426 in the Full Flash thunderbolt thread
How to Full Flash Htc Thunderbolt (Almost)!!!!!
You can skip the QXDM part and just use DFS to write 0 as your meid first, then write 9900 MEID (from your 9k modem) to the phone's normal diag port.
Also, DO NOT use any MEID other than one already found on your phone, or else it is a FEDERAL CRIME. No, im not joking, its call cloning and its VERY illegal.
amft from cricketusers.com said:
If you connect to the 9K diag port in CDMA WS 3.5+ and read you should get an actual MEID, this can then be used as the MEID on the account.
I would suggest doing this before the Data settings above.
The problem comes in because the Thunderbolt has two radios (hence the two ports) and the 1X and/or Voice radio only has an IMEI.
If you use QPST EFS Explorer you can add a directory named 'opensesamedoor' and it will unlock the NVM folder, this allows you to copy NV item 0 and 1943 to your desktop (drag & drop) and then delete them from the phone.
Use a hex editor to edit the two files changing any numbers or letters to zeros. After editing the files you can right click in the folder and add them back from the computer.
After a manual reboot, open QXDM and type 'RequestNvItemRead Meid' if it shows zeros type 'RequestNvItemWrite Meid 0x00XXXX' <-your Meid.
Reboot manually and your Thunderbolt should have it's actual Meid under the About Phone menu.....
I'm not responsible for any damages to your device.
I haven't tried the conversion method but I'm sure it works too.
Click to expand...
Click to collapse
Then dial *#*#4636#*#* and set your mode to CDMA/LTE EvDo auto (settings may vary for different roms/people), and under wireless and networks, your mode to CDMA Only and roaming to Automatic.
I'm using 45722.prl
You must set your APN's correctly! And to remove Verizon's restrictions on your APNs, I deleted "mandatoryapnlist.txt" in the EFS, I also deleted the LTE folders in my EFS.
BE SURE TO WRITE ALL SETTINGS TO BOTH MODEMS, and put your 9k modem in HDR mode, and the normal modem in CDMA IS2000 mode.
(use
cdmatool.com
DFS CDMATOOL and QPST EFS Browser (google "QPST 355 mediafire" without quotes to find a direct link to QPST (should be first result)
From there you follow the any normal flashing tutorial, except for the changes I mentioned above.
I AM NOT RESPONSIBLE IF YOU F*CK YOUR SH*T UP, OK?! FOR ALL I KNOW YOU MIGHT BRICK YOUR SH*T BUT YOU BETTER NOT BLAME ME.
edit: I know your MEID may have appeared the same/similar before, but for some reason doing this stops your 9k meid from switching.....
Heres a little treat, MR2.5 MDM9K Patched for 3g, I patched it myself with a hex editor, but credits go to either some chinese dude who posted this fix or the guy who posted this in the thunderbolt thread at cricketusers.
http://benjamincomputerrepair.com/adminuploads/PATCHED MDM9K PG05IMG.zip
If this guide helped you flash your HTC Thunderbolt with 3g, if you want to help me out you can click this link to donate to my business:
https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=2UYFHRQTANPEL

Bump. Move this to the thunderbolt section already....
Sent from my BAMF HTC Thunderbolt using tapatalk

I have been able to get 3g and calls and text working but call will drop and are breaking up. I was only able to get the nvm folder unlocked on the regular diagnostic modem with the a000 meid but not the 9k modem with the 9900 meid and was wanting to know if thats why my phone is acting the way it is.
I have tried using cdma auto prl and cdma- lte/evdo auto but still doesnt help. When I bought the phone it didn't come with a sim but had a few around and I have to have them in in order to make a call but the signal keeps droping in and out and very choppy. In order to unlock the 9k modem do I have to have the original sim? Any help would be awesome cause I am stumped right now and out of options

Help 3g
hi guys ive followed the guide but not getting 3g yet, can you guys help me out with this, also i have unlocked the nv folder. any help would be really apreciate it
Thanks in advanced

I have a tremendous brain cramp. After days of toiling, I am stuck trying to get 3g to work. I have 1x. No idea what I'm doing wrong. Can anyone help me?

[Q] Boost Evo 3D 3g slow speeds! Heeeeeelp!!!!!

Ok I have a Evo 3D flashed to boost. I did it myself. Heres exactly how I flashed it:
1. Activated Incognito Donor and let the prl update.
2. Heres where Im kind of confused. I'm using CDMA Workshop 3.8.3 and qpst and qxdm. I read the nv items. I was told it should take a little while to read them. Mine dont. Takes like 10 seconds to read 465, and 466 and 1 second for 1192,1194. For my range I put 465-1194. Is that what I'm doing wrong? When I read 465-465 it reads very fast. Lastly if I read 465- the numbers already there which is 65535 it gets t0 %76 and says phones does not answer. Does it everytime even when I restart the incognito a million times.
3. I read Nams 1 and 2.
4. Read meid and obtained the SPC Code.
5. I studied profiles 0 and 1 tot he T.
6. Obtained the aa and aaa keys. for profile 1 is the aaa keys 12 digits or 6. That also confused me in the guide.
Evo:
1. **Repaired MEID**
2. Wrote NV Items 465,466,1192,1194. I wrote the NV items that took 15 seconds.
3. Wrote SPC code
4. I didnt write the nam files i just did the ##786# reset then wrote the spc code again and restarted phone and let it activate then canceled the PRL update.
5. Wrote the aa and aaa keys to profiles 0 and 1.
6. fully activated and stuck on 1x data speeds. Im on a stock rom (but even on a 4g evo rooted even tried multiple roms im still on 1x.)
Ive tried some methods such as change the proxy ip to 0.0.0.0 then http proxy port to 0. Didnt help at all.
Also tried going into EVDO and changing it from Automatic to CDMA Only. Still on 1x.
PLEASE HELP IVE BEEN LOOKING FOR ANSWERS FOR MONTHS AND NOTHING!!!! THANKS SO MUCH!

[Q][NS4G] Trouble w/ switching from boost to sprint

Hello I have looked everywhere online and in these forums to try to fix this but nothing has worked. My issue is that I have a Samsung Nexus s 4g that was on sprint then was flashed to Boost but it never activated because we cancelled the line. That was some time ago, now I am trying to use the same phone on the ting service which uses sprint towers. Here is what I have tried so far.
Ting asked for the MEID DEC and they activated the line with a phone number, MSL and MSID. I used QPST to change the phone number and the MSID.
I also tried changing the PRL but im not sure which one works best for my phone. I need help with this to?
I then went ahead and flashed the stock rom onto my phone and that didn't work.
I also used DFS to try to change the ESN (hex and Dec) and MEID (hex and dec) using numbers from whiteRabbit but everytime I write I get a CPS_ERROR BAD_SECURITY_MODE. BTW when I read the MEID the DEC is different from what is in the back of the battery case. I think if I can rewrite these number I can activate my line but I get that error I mentioned.
I then Downloaded QXDM and tried these codes using my esn and meid hex:
mode offline-d
spc 000000
RequestNVItemRead scm
RequestNVItemWrite scm 0x3a
RequestNVItemWrite esn 0xXXXXXXXX (Your (p)ESN from WhiteRabbit)
RequestNVItemWrite meid 0xA00000XXXXXXXX (Your MEID Hex from WhiteRabbit)
RequestNVItemRead esn
no luck.
Thats all I have tried. What do I need to do to get my phone back to sprint so that I can use Ting service? Please reply any help will be greatly appreciated.