Hack Nokia S60v5 and S60v3 Phones when HelloOX is not Working

Symbian phones are well known for their versatility for application support. Apart from just having vast application availability, there are also many modifications available to the software environment which lets you improve your phone performance and add additional features to it. But you will no be able to perform all these operations just with a newly bought Symbian. Nokia restricts users from having full access to its files which is required to implement some mods and install various applications. Hence the phone is needed to be Hacked.

Well, there are many applications that can be installed by signing them with your personal key and certificate, but some applications may simply not work by this method. Till date the simplest method known to hack symbian phones was HelloOX, which is a small application that can automatically hack your phone in few easy steps.

In recent times it is seen that many S60V5 and V3 phones became unhackable by HelloOX due to upgrade in firmware version. Users can easily find this out as HelloOx gets stuck in “Installing Root Certificates” stage. This was the situation with me having Nokia 5235. So here I will share another method to hack your phones which is actually flashing it. It sounds bit tough but believe me it is not so.

First of all I would like to thanks Dailymobile forum members Oreo27 and Xlife18 for helping me out through the whole process. Now lets take a look at the things that you need to do before flashing your Nokia Phone.

  • Your Phone model, software version and RM i.e RM- 588 in my case (*#0000#).
  • Go to Dailymobile forum register there(free registration required for posting comments) and click Here to visit the thread.

  • Search for your model and firmware version there on the first page, if you do not find it just leave a request and the thread main page will be updated within a day or sooner.
  • As you get your model and version listed in the thread, download the file(uda) and save it for later reference. If you have nokia 5235 go for same version files of Nokia 5230 and so till the RM version is same.
  • Visit the site Btusers and download the firmware version for your device selecting it by the RM version. This is an important step, select the version for your country else after flashing you may not find the appropriate language to work with. You may also find firmwares with same product ID for your region but one with 7 files and other with 8 files. You may download any one with them as they only differ in color variants. Files will be named as listed below( version will be according to your model).

RM588_0599208_12.6.092_001.vpl (4.87 kB)

RM-588_12.6.092_prd.core.C00 (89.08 MB)

RM-588_12.6.092_prd.rofs2.V22 (31.10 MB)

RM-588_12.6.092_C01_prd.rofs3.fpsx (6.16 MB)

RM588_12.6.092_006_000_U001.uda.fpsx (5.33 MB)

RM588_0599208_12.6.092_001.dcp (14.89 kB)

RM588_0599208_12.6.092_001.spr (2.37 kB)

RM588_0599208_12.6.092_001_signature.bin (1.86 kB)

  • After you have downloaded all these files 50% of work is done. Now you have to download Jaf, Pkey emulator and latest INI files. These download links can be found in the forum main post. I had tried to use phoenix also but Jaf is much easier to use and worked fine for me.
  • One thing you must note that Jaf works properly in Windows Xp, I have tried to work with it on Windows 7 but it did not work even in compatibility mode. So advance users can use Virtual Work station to install Xp or just use a friends computer with Xp on it if you are not much comfortable with Virtual Workstation. For people doing it on virtual windows, please do not minimize the virtual window and run Jaf because in doing so jaf will give error while starting. So press ALT+CTRL+ENTER to go to fullscreen then restart xp and start Jaf again.
  • As you are done with installation of Jaf, install Nokia Pc suit in xp if you have not got it and connect your phone once so that the drivers get installed.
  • Now replace the file “RM588_12.6.092_006_000_U001.uda.fpsx” with the file that was provided for your model in the forum. Just rename the file to the name given in the original firmware package and put all the files creating a folder RM-588, this will again differ according to your model RM.
  • Create folders as given c:\program files\Nokia\Phoenix\products\RM-588. This RM-588 is the one you created in the previous step.

  • Now run Jaf as instructed in the forum through the Pkey emulator, ignore any warning messages.

  • Run Jaf in BB5 as it is used for flashing S60V3 and V5 phones.
  • Tick on Manual Flash, Dead USB, remove tick from CRT 308 (else you will get IMEI back up error), then tick on use INI.

  • Ticking on use INI will bring up a window from where you can select RM for your phone.

  • After you have finished previous step click on Flash button on rght hand side, you will get a warning. At this point switch off your phone and connect it to the computer via usb cable then press ok.

  • When the application says “searching for phone” press the power button of phone for half second. Well for nokia 5235 I have noted that the pressing time is bit more. If after pressing the power button nothing happens try altering the time of pressing, I had succeeded in this step after many tries.
  • Once the Phone is found it will be automatically flashed.

As the phone is flashed and you get Done message from Jaf, open the cable and take out phone battery, then restart again. Your phone will start like the first time.

Now You need to copy these two patches to E:\Patches(i.e create Patches foder in root of memory card) and then go to Menu-> Apps-> Installed apps->RomPatcher+. When you open rompatcher+ you will find two patches i.e Install Server RP+ and Open4All RP+, double tap on them and they will be enabled and turn to green. Install Server RP+ patch is for installing unsigned applications and Open4All RP+ patch is to access phone system folders i.e c:\sys\bin. You can also download Rompatcher2.3+ and install it. Then from options add the patches to auto, this will enable you to automatically patch phone on every restart, if it do not work you can do it manually after every restart. After this your phone is totally hacked.

Note: I have tested this on Nokia 5235 and I have done the exact same things as above. If you find any trouble or difficulty in performing these steps please ask here or in the forum thread. Taking any steps without understanding may leave your phone dead forever. Go through all the comments in the forum thread to get clear understanding of problems and their solutions that other people had.

Click Here to Leave a Comment Below 66 comments
Digifuntush - July 13, 2010

Damn Excellent Guide.. will reblog it for sure.

Reply
Mehul - July 14, 2010

dont u have it for Nokia 5800 XM??

Reply
    Sourojit Nandi - July 14, 2010

    @Mehul
    Yes, it is applicable to all S60V5 and V3 handsets. Just go through the post, I have mentioned every thing. And particularly for 5800XM, yes you can hack it as well using this technique. Check out the given forum link for the version of firmware you are using.

    Reply
      romeo1231 - November 16, 2010

      Hi guys. I’m getting an error when starting
      the JAF Pkey Emulator.
      Checking Windows version …
      Windows version: Microsoft Windows XP
      Professional
      Searching for JAF install location …
      Saved winscard.dll to: C:\Program Files
      \ODEON\JAF\winscard.dll
      Saved original.dll to: C:\Program Files\ODEON
      \JAF\original.dll
      Starting JCOP emulator …
      Saved JCOP.EXE to: C:\Program Files\ODEON
      \JAF\JCOP.EXE
      JCOP emulator started succesfull on port
      8050
      Powering JCOP simulator …
      ERROR: JCSIMU_send_receive timeout
      ERROR: JCSIMU_reset_card send_receive
      failed
      ERROR: Cannot get ATR from JCOP simulator!
      Please can anybody tell me the solution for this problem i need it urgently.

      Reply
      himalay - February 25, 2011

      sir i have hacsk my nokia 5235 version 40.6.003 but when i open rompatcher it say:sys/bin/patcher*.LDD not found what should i do .sir plz reply me i m waiting for ur response

      Reply
        Sourojit Nandi - February 25, 2011

        Did you copy the 2 patch files in memory card as given in the article?

        Reply
          himalay - February 28, 2011

          yes sir i have copy both the file

          Reply
          prabhu - September 10, 2011

          where can i get jaf to hack 5230

          Reply
        Maunil - September 8, 2011

        hey can you provide me with nokia 5235 version 40.6.003 hack guide…thanks awaiting ur reply please reply soon thanks

        Reply
VASU - July 15, 2010

THANKS

Reply
kk_nokia - July 18, 2010

hi,
after selecting use ini, i selected rm-588 and press ok, the following log came,
Searching for default location of ini…
Checking path: \Products\RM-588\
Searching for JAF saved location of ini…
Checking path: C:\Program Files\Nokia\Phoenix\Products\RM-588\
No ini files found…
FILES SET FOR FLASHING:
MCU Flash file: NONE
PPM Flash file: NONE
CNT Flash file: NONE
APE Variant file: NONE

i did copied the downloaded files to C:\Program Files\Nokia\Phoenix\products\RM-588, but its unable to recognize the files, some one please help

thanks

Reply
    Sourojit Nandi - July 18, 2010

    @KK_nokia
    HI,
    Did you copy the latest INI file as given in the forum, Just download the INI file given in the forum link and replace it in JAF folder, so that it supports your phone.

    Reply
      kk_nokia - July 18, 2010

      Sourojit,
      Thanks for replying so fast. This is the forum link to download INI file right ?
      http://forum.dailymobile.se/index.php?PHPSESSID=8iskun6dif40tpv1cml3k244s0&/topic,24602.0.html
      So in that link, under 3B. JAF, its mentioned Download the latest JAF .ini and place it in the JAF installation folder, but where is the link to ini file? i cant find , it would be helpful if u provide the specific link
      thanx..

      Reply
        Sourojit Nandi - July 18, 2010

        @KK_nokia
        Here it is http://forum.dailymobile.se/index.php/topic,23054.0.html
        See it works or not. I forgot the exact INI that I used coz I did it few weeks back. If downloading INI from this thread do not work then I will upload the INI I used..
        What is your Phone model?

        Reply
          kk_nokia - July 18, 2010

          that file is not working, nokia 5230 is specified in that ini file, in the emulator when i clicked use ini, rm-588 option is coming but after that when i click OK, Searching for JAF saved location of ini…
          Checking path: C:\Program Files\Nokia\Phoenix\Products\RM-588\
          No ini files found…
          is coming,why is it not able to recognize the files? what exactly is the problem?

          thanx

          Reply
          kk_nokia - July 18, 2010

          my phone model is 5230

          Reply
          Sourojit Nandi - July 18, 2010

          @KK_nokia

          I tried to do that again, with tick only on manual flash and dead flash with CRT 308 unticked.This is what I get….

          Searching for JAF saved location of ini…
          Checking path: C:\Program Files\Nokia\Phoenix\Products\RM-588\
          Scanning ini files…
          Searching for default location of ini…
          Checking path: \Products\RM-588\
          Checking path: C:\Program Files\Nokia\Phoenix\Products\RM-588\
          FILES SET FOR FLASHING:
          MCU Flash file: C:\Program Files\Nokia\Phoenix\Products\RM-588\RM-588_12.6.092_prd.core.C00
          PPM Flash file: C:\Program Files\Nokia\Phoenix\Products\RM-588\RM-588_12.6.092_prd.rofs2.V22
          CNT Flash file: C:\Program Files\Nokia\Phoenix\Products\RM-588\RM-588_12.6.092_C01_prd.rofs3.fpsx
          APE Variant file: C:\Program Files\Nokia\Phoenix\Products\RM-588\RM588_12.6.092_006_000_U001.uda.fpsx
          Languages in ppm: English,Singapore,Indonisia,Malasia

          I uploaded my INI file at http://www.ziddu.com/download/10765672/jaf_nok4models.rar.html
          Put this in C:\Program Files\ODEON\JAF , It should work becoz i am using same settings and same steps as mentioned here. Have you replaced the .uda file ?

          If you have all steps correctly and still getting error, register in the forum and ask this question in the thread. People there are very helpful and will give you a probable solution.

          Reply
kk_nokia - July 18, 2010

@Sourojit
—————
I followed as per the tutoria.l This is what i did:-
i downloaded all the required files from btusers, replaced RM-588_20.0.005_001_000_U001.uda.fpsx with the hacked one, then copied the whole folder RM-588 under E:\backup\ppgms\nokiagames\newhacking, installed JAF.1.98.62, replaced ini file, then i ran PKEY emulator v5, now i selected as mentioned, ticked use INI, now it is able to recognize RM-588 NOKIA 5230 CABLE 5800, but when i clicked ok, No ini files found…
FILES SET FOR FLASHING:
MCU Flash file: NONE
PPM Flash file: NONE
CNT Flash file: NONE
————————-
the above message is coming. please help. I am not sure whats the problem
—————————————-

I also posted this message in dailymobile forum, hope some one will give solution, in case u find any thing plz tell… I pretty much wasted the whole day on this :(, still not able to hack..thanks for the replies and guide

Reply
    Sourojit Nandi - July 18, 2010

    @KK_nokia
    why did you copy it here “RM-588 under E:\backup\ppgms\nokiagames\newhacking”. did you copy it in “c:\program files\nokia\phoenix\products\RM-588”.
    Only difference I used PKEY emulater v4, hope this does not make any difference, you can try once with v4.

    Hey Dont say you wasted a day, but at end you will learn something. I didnt sleep for 3 days after this, as I had to do flashing 5235 with 5230 firmware and was having hell lot of problems but thankfully forum members rescued me…

    Reply
      kk_nokia - July 18, 2010

      i did copied to C:\Program Files\Nokia\Phoenix\products\RM-588, i will try with emulator v4 later, i didnt mean its a waste of time, i am just saying that i might be doing some thing wrong regarding the procedure, your article is of gr8 help..

      Reply
        Sourojit Nandi - July 18, 2010

        @KK_nokia
        Ok, If your next try fails, try reinstalling JAF, coz your JAF is failing to recognize the files. Or you can add me to your gtalk so that I can assist you during the process. I can understand how bad and impatient you must be feeling. I will try my best to help. Gtalk ID- sourojit258@gmail.com , inform me once after you add me.

        Reply
          kk_nokia - July 19, 2010

          i added your id

          Reply
    swapnil - September 27, 2010

    for ini file error
    if u have them correct
    try my method

    http://www.youtube.com/watch?v=gnwmjCSraUI

    watch this video and select your files from the firmware
    and hit the flash without checking USE INI box but uncheck CRT box
    hit flash
    rest is easy pizy…
    best luck

    Reply