Downgrade BB5 phone with USB JAF ( patched ) SUCCESSFUL!!!

**threat** · 24-08-2009, 04:59 PM

Downgrade BB5 phone with USB JAF ( patched ) SUCCESSFUL!!!

okay, so you need JAF patched (JAF BOX not required) and a USB (DKU-2 etc.) data cable and of course a BB5 phone :D
NOTE:: not all BB5 phones support downgrading

Following phones have been tested for downgrade
- 6680 all firmwares
- N81 v21.0.010 downgrade to V10
- 5610 XP Music all firmwares
- 6500S all firmwares
- 6120C all firmwares
- N82 V20.0.062 to lower version
- 6300 all firmwares
- 6120c 6.51 to 6.01 and 5.11
- many more which i haven't tested

JAF 1.98.62 (with PKEY emulator)::
[Only registered and activated users can see links. ]

it is recommended to download your required firmware by NAVIFIRM tool, it downloads from directly NOKIA servers, so you get a guaranteed good firmware

NAVIFIRM::
file attached

NOTE:: the firmware downloaded with above tool will be in the form of a folder with few files in it, put that folder at C:\Program Files\Nokia\Phoenix\Products\ if any of these folders do not exist, make them.

just run the JAF through the PKEY emulator (see picture below)

and adjust the settings as shown in the picture below, after you tick the use INI box, it will present a list (select your mobile) OR it will automatically choose the proper files for flashing.
NOTE:: it is recommended that the phone be in normal mode (with SIM inserted)

below is the JAF log for a successful BB5 downgrade i did on 6680

Code:

JAF version 1.98.62
Detected PKEY: 9000A653
Card life counter: 99.99%
P-key nokia module version 01.02
FBUS INTERFACE NOT CONNECTED!!!
USB Cable Driver version: 7.1.17.0
Changing mode...Done!
FILES SET FOR FLASHING:
MCU Flash file: NONE
PPM Flash file: NONE
CNT Flash file: NONE
APE Variant file: NONE
Searching for JAF saved location of ini...
Checking path: C:\Program Files\Nokia\Phoenix\Products\RM-36\

Searching for default location of ini...
Checking path: \Products\RM-36\
Searching for JAF saved location of ini...
Checking path: C:\Program Files\Nokia\Phoenix\Products\RM-36\
Scanning ini files...
Searching for default location of ini...
Checking path: \Products\RM-36\
Checking path: C:\Program Files\Nokia\Phoenix\Products\RM-36\
FILES SET FOR FLASHING:
MCU Flash file: C:\Program Files\Nokia\Phoenix\Products\RM-36\rm36_5.050407_b5.c0r
PPM Flash file: C:\Program Files\Nokia\Phoenix\Products\RM-36\RM36_5.050407_B5.v30
CNT Flash file: NONE
APE Variant file: NONE
Languages in ppm: English,French,Arabic
Backing up CRT...
Detected P-KEY: 9000A653
P-key nokia module version 01.02
Init usb communication...
Reading IMEI...
C:\Program Files\ODEON\JAF\ProgData\358358008071896_CRT_backup_2043248.pm
Done!
Backup CRT OK!
Preparing for downgrade...
Detected P-KEY: 9000A653
P-key nokia module version 01.02
Init usb communication...
Phone ready for downgrade!
Detected P-KEY: 9000A653
P-key nokia module version 01.02
Init usb communication...
Searching for phone...Found
Reading SW version...04wk47_m_v14.2.1 
Reading battery value...4136 mV
Init usb flashing...
Reading flashid... Error getting flash id...
Backing up CRT...
Detected P-KEY: 9000A653
P-key nokia module version 01.02
Init usb communication...
Reading IMEI...
C:\Program Files\ODEON\JAF\ProgData\358358008071896_CRT_backup_2045248.pm
Done!
Backup CRT OK!
Preparing for downgrade...
Detected P-KEY: 9000A653
P-key nokia module version 01.02
Init usb communication...
Phone ready for downgrade!
Detected P-KEY: 9000A653
P-key nokia module version 01.02
Init usb communication...
Searching for phone...Found
Reading SW version...04wk47_m_v14.2.1 
Reading battery value...4130 mV
Init usb flashing...
Reading flashid... Error getting flash id...
Backing up CRT...
Detected P-KEY: 9000A653
P-key nokia module version 01.02
Init usb communication...
Reading IMEI...
C:\Program Files\ODEON\JAF\ProgData\358358008071896_CRT_backup_2047248.pm
Done!
Backup CRT OK!
Preparing for downgrade...
Detected P-KEY: 9000A653
P-key nokia module version 01.02
Init usb communication...
Phone ready for downgrade!
Detected P-KEY: 9000A653
P-key nokia module version 01.02
Init usb communication...
Searching for phone...Found
Reading SW version...04wk47_m_v14.2.1 
Reading battery value...4127 mV
Init usb flashing...
Reading flashid... 
CMT: 225000EC <=> SAMSUNG (SEC) -> K8S6415ETB
APE: 003500EC <=> SAMSUNG (SEC) -> K5E5657ACB
Verifing ADL communication... Status byte 2
Scanning selected flash files...
ADL -> Loader: C:\Program Files\ODEON\JAF\Flash\ADLREVC00.adl
ADL -> Sending loader...
Loader sent...
ADL -> Loader: C:\Program Files\ODEON\JAF\Flash\ADLREVA00.adl
ADL -> Sending loader...
Waiting for the phone to boot...
Searching for phone...
Status byte: 0300
Phone is in flash mode...
CMT blocks: 300, APE blocks: 1022
Erasing cmt...
Processing C:\Program Files\Nokia\Phoenix\Products\RM-36\rm36_5.050407_b5.c0r...
Erasing cmt zone 00000000 - 00509139 ... Erase result: 0000
Erasing cmt zone 006A0000 - 006BFFFF ... Erase result: 0000
Erasing cmt zone 006DF000 - 006EFFFF ... Erase result: 0000
Erasing cmt zone 00700000 - 007EFFFF ... Erase result: 0000
Processing C:\Program Files\Nokia\Phoenix\Products\RM-36\RM36_5.050407_B5.v30...
Send CMT CFG...
Writing cmt...
Processing C:\Program Files\Nokia\Phoenix\Products\RM-36\rm36_5.050407_b5.c0r...
Sending CMT HASH for NOLO
Sending CMT HASH for KEYS
Sending CMT HASH for PRIMAPP
Sending CMT HASH for DSP0
Sending CMT HASH for MCUSW
Sending CMT HASH for PASUBTOC
cmt->PAPUB_CERTIFICATE_DATA_BB5 block detected, sending... 
cmt->PAPUB keys already sent...
cmt->PAPUB keys already sent...
cmt->PAPUB keys already sent...
Processing C:\Program Files\Nokia\Phoenix\Products\RM-36\RM36_5.050407_B5.v30...
Erasing ape...
Selecting APE flash...
Processing C:\Program Files\Nokia\Phoenix\Products\RM-36\rm36_5.050407_b5.c0r...
Erasing ape zone 00000000 - 0000FFFF ... Erase result: 0000
Erasing ape zone 00010000 - 0001FFFF ... Erase result: 0000
Erasing ape zone 00020000 - 000203FF ... Erase result: 0000
Erasing ape zone 00050000 - 01F5BFFF ... Erase result: 0000
Processing C:\Program Files\Nokia\Phoenix\Products\RM-36\RM36_5.050407_B5.v30...
Erasing ape zone 01060000 - 01F5BFFF ... Erase result: 0000
Send APE CFG...

Writing ape...
Processing C:\Program Files\Nokia\Phoenix\Products\RM-36\rm36_5.050407_b5.c0r...
Sending APE HASH for KEYS
Sending APE HASH for X-LOADER
Sending APE HASH for PRIMAPP
Sending APE HASH for SOS+LOADER
Sending APE HASH for SOS+XZIP
Sending APE HASH for PASUBTOC
ape->PAPUB_CERTIFICATE_DATA_BB5 block detected, sending... 
ape->PAPUB keys already sent...
ape->PAPUB keys already sent...
ape->PAPUB keys already sent...
ape->PAPUB keys already sent...
ape->PAPUB keys already sent...
Sending APE HASH for SOS*CORE
Processing C:\Program Files\Nokia\Phoenix\Products\RM-36\RM36_5.050407_B5.v30...
Rebooting...
Finishing APE session...
Finishing CMT session...
Restarting CMT...
Restarting APE...
Pooling phone...
MCUSW: V 04wk47_m_v14
09-02-06
RM-36
(c) Nokia.  
APESW: (null)
VariantSW: V 5.04.07-Arabic
15-02-06
RM-36
(c)NOKIA
Prodcode: 0521808
Setting test mode...
Setting FULL FACTORY...
Operation took 0 minutes 1 seconds...
Done!
Done!

any queries, problems, post here.

NOTE:
THIS SOFT CAN FLASH, UPGRDAE, OR SOLVE PROBLEM OF ALMOST ALL BB5 PHONES

**azrine** · 24-08-2009, 07:00 PM

Great share mate, rep + added
Thread edited and stickied

**DANIELMTZA** · 25-08-2009, 08:12 PM

hi I have this problem trying to downgrade a nokia 5800
can you help me thanks

JAF version 1.98.62
Detected PKEY: 9000AAC9
Card life counter: 99.99%
P-key nokia module version 01.02
FBUS INTERFACE NOT CONNECTED!!!
USB Cable Driver version: 7.1.17.0
Changing mode...Done!
Detected P-KEY: 9000AAC9
P-key nokia module version 01.02
Done!
FILES SET FOR FLASHING:
MCU Flash file: NONE
PPM Flash file: NONE
CNT Flash file: NONE
APE Variant file: NONE
Searching for JAF saved location of ini...
Checking path: C:\Program Files\Nokia\Phoenix\Products\RM-428\

Searching for default location of ini...
Checking path: C:\\Products\RM-428\
Searching for JAF saved location of ini...
Checking path: C:\Program Files\Nokia\Phoenix\Products\RM-428\
Scanning ini files...
Searching for default location of ini...
Checking path: C:\\Products\RM-428\
Checking path: C:\Program Files\Nokia\Phoenix\Products\RM-428\
FILES SET FOR FLASHING:
MCU Flash file: C:\Program Files\Nokia\Phoenix\Products\RM-428\RM-428_20.2.014_prd.core.C00
PPM Flash file: C:\Program Files\Nokia\Phoenix\Products\RM-428\RM-428_20.2.014_prd.rofs2.V16
CNT Flash file: C:\Program Files\Nokia\Phoenix\Products\RM-428\RM-428_20.2.014.327.08.rofs3.fpsx
APE Variant file: C:\Program Files\Nokia\Phoenix\Products\RM-428\RM428_20.2.014_001_U327.uda.fpsx
Backing up CRT...
Detected P-KEY: 9000AAC9
P-key nokia module version 01.02
Init usb communication...
Reading IMEI...
C:\Program Files\ODEON\JAF\ProgData\359348020720983_CRT_backu p_1510258.pm
Done!
Backup CRT OK!
Preparing for downgrade...
Detected P-KEY: 9000AAC9
P-key nokia module version 01.02
Init usb communication...
Failed to prepare for downgrade...

**threat** · 26-08-2009, 06:25 AM

this is what i said in my first post

NOTE:: not all BB5 phones support downgrading

actually 5800 can't be downgraded with USB cable

, you will need FBUS cable and JAF BOX for downgrading 5800

**azrine** · 27-08-2009, 09:33 PM

Even with a Real JAF box you couldn't downgrade phone like 5800, N95 or N96, .......

Originally Posted by DANIELMTZA

hi I have this problem trying to downgrade a nokia 5800
can you help me thanks
......
......

**threat** · 28-08-2009, 07:03 AM

well mate, although i haven't tried it personally, but a friend successfully downgraded his 5800 with FBUS and JAF BOX

but yeah it's not possible with N95, N82 etc., they seem to have a downgrade protection in their latest firmwares

**azrine** · 28-08-2009, 10:34 AM

Originally Posted by threat

well mate, although i haven't tried it personally, but a friend successfully downgraded his 5800 with FBUS and JAF BOX

but yeah it's not possible with N95, N82 etc., they seem to have a downgrade protection in their latest firmwares

Perhaps for 58OO XM (coz, I didn't try)
About the others: itsn't only the latest firmwares; it's also the previous (I'm flashing phones from 2006). Even the new BB5 phones (I mean S40 like 6300, 3110, .........), there is always a problem when downgrading these phones

**reeeow** · 30-08-2009, 07:33 PM

i was wondering if it is possible to downgrade from nokia 6500s-1 v9.60 euro product code back to my original product code 0563967 v8.30 or earlier also would i beable to unlock this earlier firmware

**reeeow** · 30-08-2009, 07:56 PM

actually i probably need to go back to v4.81 in that product code if this will work can someone tell me as i dont want to fry my phone

**shareefnallur** · 31-08-2009, 12:04 AM

I got the error in rapidshare while downloading the second file,(NAVIFIRM)...WT TO DO>>>>???

Error

This file is neither allocated to a Premium Account, or a Collector's Account, and can therefore only be downloaded 10 times.

This limit is reached.

To download this file, the uploader either needs to transfer this file into his/her Collector's Account, or upload the file again. The file can later be moved to a Collector's Account. The uploader just needs to click the delete link of the file to get further information.