ZTE MF637 internal parts " SmartBroPlug-It USB"

I was eager to put an external antenna to my USB modem ZTE MF637, an HSDPA/HSUPA 3.75G from SmartBro Plug-It. I found two internal antenna, one might be the GPRS/EDGE and the other one is for 3G. Though I can't determine well which antenna is 3G and the other. Both has different frequency of operation, whereas 3g UMTS is 2100Mhz and so on.

There is only one internal antenna connector, and which I think is for GPRS/EDGE only.

Unlocked E160 Settings for SUN, SMART, GLOBE to enter in your unlocked USB

For Smart:
Profile Name: Smart Bro
Dial Number: *99#
APN: internet

Go to Advance and choose PAP then SAVE

***************************

For Globe:
Activate Globe sim for internet use. To activate, type TIME and send to 1111

Profile Name: Globe Visibility or Globe Tattoo
Dial Number: *99***1#
APN: http.globe.com.ph

then SAVE.

***************************

For Sun:
Activate Sun sim for internet use. To activate, type ACTIVATE and send to 2300

Profile name: Sun Broadband
APN: minternet
Dial Number: *99#

Go to Advance and choose PAP then SAVE

ZTE MF637 HSUPA modem unlocking

Recent STF(search the forum) I found how to unlock my ZTE MF637 HSUPA 3g modem.

My intention is to look for MF627 unlocking technique for my SmartBro Plug It modem, I downloaded some apps and follow some instructions posted in some forums.

I did not succeed on MF627. Quite unhappy... I was thinking to put my next target my other modem which is model MF637 for unlocking. At first I'm afraid that it might brick the firmware, because there are some suggestions that it is only intended for MF627. Huhh... the hell...what I was thinking... and so I made up a choice to take the risk.

Before unlocking;

a. My Smartbro dashboard is installed and modem drivers, typical installation for SmartBro to work/connects.

b. Replace your Smartbro sim card (e.g. Globe or Sun SIM)

From one of the applications given to unlock MF627 is DC-Unlocker 2 Client v1.00.0460




1. Download the file DC-Unlocker 2 Client (dccrap.zip)
2. Unzip/Extract to any folder or to your desktop

Now Plug in your Smartbro modem with Globe or Sun SIM inserted on it.

3. run the dccrap.exe
4. Select Manufacturer = ZTE datacards
5. click "server"
6. Enter Username/Password of your choice then click "Check Login".
For me, I enter smartbro for both userb=name and password
7. Click on the the Magnify Glass icon to search your modem model automatically.
Dont need to Select model manually.

Just wait for the modem to sync, sometimes reading the datacard is slow.

8. Once your modem has been detected, Click "Unlocking" then UNLOCK it.

You will be then prompted unlocking successful!

Now, Open your Smartbro dashboard, it takes a while to sync in the modem.

From my experiment, I use Sun sim card. Once it catches the signal, you can notice it from the dashboard, signal .::| and the network name (SUN)

Then I configured my Network Settings to Sun Internet on my dashboard.
Name: Sun Wireless(any name of your choice)
Dial Number: *99#
APN: minternet

Set it to default.

Load up with i50 (24 hours unlimited) with 5 pesos regular load balance.

Then here it goes....


Now I wont have to use a strainer to catch that signal of Smart, because we are near to Sun cell site here in Laguna.


This is the internal antenna of SmartBro Plug-It USB modem



If you find this topic helpful to you, kindly post comments of appreciation.

Goodluck! and happy homebrewing(hacking)... =)

BTW, this USB modem MF637, I got it from an event for free.

ZTE AT-commandsThis is a featured page

disable/enable flashdrive

AT+ZCDRUN=8 enable
AT+ZCDRUN=9 disable

stay online

AT+ZOPRT=5

check net-/SIMlock

AT+ZSEC?
answer: <SEC_STATUE>,<SEC_ITEMS>

< SEC_STATUE >:
0 Initializing the encryption (Insignificant SEC_ITEMS)
1 Network Lock error. (Insignificant SEC_ITEMS)
2 Network Locked
3 Unlocked or correct MCC/MNC

<SEC_ITEMS>:
0 No action
1 Network lock
2 (U)SIM card lock
3 Network Lock and (U)SIM card Lock

Unlock

+ZNCK="unlock-code"
+ZNCK?
Unlock residual time 0-5



Report signal strength +ZRSSI
Syntax
+ZRSSI parameter command syntax
Command Possible response(s)
+ZRSSI <CR><LF>+ZRSSI:<rssi>,<ecio>,<rscp><CR><LF><CR><LF>
OK<CR><LF>

<CR><LF>+CME ERROR: <err><CR><LF>


Description
This command is used to report signal strength.. Notice the command is used only in platform
6290 and 6246.
Defined values
3G network（registered to 3G network）
+ZRSSI: rssi,ecio,rscp
The unit of Rscp is 0.5dbm ( in 0.5 dBm step with no sign).
The unit of Ecio is 0.5db ( in 0.5 dB step with no sign).
The relation is: 2*rssi=rscp-ecio
e.g.
+ZRSSI: 49,8,106
Rssidbm = -rssi = -49dbm
Eciodb = -ecio/2= -4db
Rscpdbm = - rscp /2= -53dbm
2G network（there is no ecio and rscp value when registered in 2G network ，so set
value of 1000）
e.g.
+ZRSSI: rssi,1000,1000
No network e.g.
+ZRSSI ：OK
Notice! the command is used only in platform 6290 and 6246.

Set Operational Mode
AT+ZSNT=0,0,0 (Auto) - Default
AT+ZSNT=1,0,0 GPRS Only
AT+ZSNT=2,0,0 3G Only
AT+ZSNT=0,0,1 GPRS Preferred
AT+ZSNT=0,0,2 3G Preferred

Query Operational Mode
AT+ZPAS?
<CR><LF>+ZPAS:<network>,<srv_domain><CR><LF>OK<CR><LF>
<network>: the type of current network
No Service
Limited Service
GPRS
GSM
UMTS
EDGE
HSDPA
<srv_domain>: service domain
CS_ONLY: CS domain service available.
PS_ONLY: PS domain service available.
CS_PS: CS&PS domain service available.
CAMPED: camped in a cell.
example
Command: AT+ZPAS?
Response: +ZPAS: "GPRS","CS_PS"
OK


Set Band Status +ZBANDI
at+zbandi=0 • Automatic (Auto) - Default
at+zbandi=1 • UMTS 850 + GSM 900/1800
at+zbandi=2 • UMTS 2100 + GSM 900/1800 (Europe)
at+zbandi=3 • UMTS 850/2100 + GSM 900/1800
at+zbandi=4 • UMTS 850/1900 + GSM 850/1900
Notice! the command is used only in platform 6290 and 6246.


Weblinks
http://www.zte.com.au/downloads/USB_Modem_Config_Procedure.pdf

ZTE K3565-Z (Vodafone)This is a featured page

Specifications

manufacturer:	ZTE
model:	K3565-Z
interface:	USB 2.0 (A plug)
chipset:	Qualcomm MSM6246
GSM frequency bands:	850, 900, 1800, 1900
UMTS frequency bands:	900, 2100
HSDPA:	3,6 MBit/s
HSUPA:	-
EDGE:	+
GPRS:	57,6 KBit//s
CSD:	?
connector for ext. antenna:	-
connector type:	-
internal antenna diversity:	+
voice telephony:	-
NAND-flashmemory:	+
microSD-drive:	+ (up to 8GB)
rebranded versions:	-

Vodafone K3565
Vodafone sells two different versions of the K3565:

• K3565-H which is a Huawei E160X (Rev.2 models carry the hardware ID "K3565")
• K3565-Z which is produced by ZTE (no equivalent in ZTE's product range)

Those two version are not only produced by two different companies, but they are also technically totally different. Since the K3565-Z was introduced by Vodafone only in 2009, the earlier version from Huawei was only designated K3565 (without "-H"). However some sellers omit the extension (-H or -Z), so you should be careful during purchase and better check the label on the back of the box.




Debranding Vodafone K3565-Z
The K3565-Z comes with an installer for Vodafone's dashboard ("Vodafone Mobile Connect" ) in it's flashmemory, which will start installation of the dashboard automatically after plugging the modem into your computer. The Vodafone dashboard takes up relatively much resources on your system and it refuses to connect to other networks than Vodafone's. So if you want to use another network or just a thinner dashboard, you need to use an unbranded one. You can either just download and install such on your computer (see "Dashboard" below) or, if you want your device to have ready installation files for an unbranded dashboard permanently, use one of the following debranding methods:



soft method
With this method the flashmemory will remain untouched, it's easily reversible and so you won't risk to void your warranty. However you will permanently need a microSD-card, if you want your dashboard & drivers on the stick.
Basicly you just switch off the flashmemory, from which usually the branded dashboard is being installed after plugging in, and instead store the installation files for an unbranded dashboard on a microSD-card in the microSD-slot. Afterwards the microSD-card/drive will replace the flashmemory.

1. Disable the flashmemory by executing the following AT-command: AT+ZCDRUN=8 (see: how to execute AT-commands)
   note: in some cases you might first need to unmount the flashmemory by "safely remove hardware" and stop the "USB Mass Storage Device" in order the AT-command to take effect.
   
   
2. Put a microSD-card in your microSD-drive an format it with FAT32
   
   
3. download this file (containing an unbranded dashboard inlcuding drivers and autorun files)
   
   
4. extract the contents from the downloaded RAR file to the root of the microSD-drive
   
   
5. That's it. After unplugging and replugging your modem, the unbranded ZTE dashboard should install automatically from your microSD drive.

To revert this soft debranding just remove or format the microSD-card and reactivate the flashmemory by executing the following AT-command: AT+ZCDRUN=9 (see: how to execute AT-commands)




hard method
please note that by debranding your device by the hard method you probably lose your warranty!
With the hard method the flashmemory of the modem will be changed persistently. This is also reversible, if you backup the original content of your flashmemory (also described in the following instructions). However if your device breaks down before or during restoring the original content of the flashmemory warranty claims may be refused.

1. Install the original dashboard from your device, because later operations will require all drivers to be installed.
   
   
2. Download QPST and install it.
   
   
3. Click "Start", "Programs", "QPST" and start "QPST" Configuration" and select the "Ports" tab
   
   
   
4. Now click "Add New Port"
   
   
   
5. Find and chose the port labeled "USB/QC Diagnostic" and click "OK".
   note: If more than one "USB/QC Diagnostic" port appears, you have to find the correct one by trying each one. If you got the wrong one the "Phone selection" in step 7 won't show the "Unknown" phone but will be empty.
   
   
   
6. Chose "Start Clients" from the menu and click "EFS EXPLORER"
   
   
   
7. In the following dialog you should see an "Unknown" phone, which you select and then confirm with "OK".
   
   
   
   Now QPST will read the EFS filesystem of your device:
   
   
   
8. When QPST has finished reading it will show up several files. Now you might first want to back up the existing content of the flashdrive, which is stored in the file "ZTEMODEM.ISO". Therefore right-click "ZTEMODEM.ISO" chose "Copy File from Phone"...
   
   
   
   
   and chose a destination where the file should be saved and click "OK".
   
   
   Now QPST will backup ZTEMODEM.ISO to the selected folder, which may take up to ~30 minutes.
   note: keep this downloaded backup version of ZTEMODEM.ISO in a safe place - you might need it one day!
   
   
   
9. After the backup has finished, right-click "ZTEMODEM.ISO" and select "delete".
   
   
   
10. After the old ZTEMODEM.ISO has been deleted, insert this one (NEW VERSION August 2010) [mirror 1 - mirror 2 - mirror 3 - mirror 4 - mirror 5] by drag & drop (extract ISO from RAR first!). It contains the unbranded "ZTE Join Air" dashboard (version 1.00.0B02, English and German) with preconfigured settings for most German operators, a separate "Driver" folder with drivers (including installer DPInst.exe), MWconn 5.6 (an alterative dashboard) and MDMA 1.0.0.30a, a monitoring tool with USSD-support. Unfortunatley it lacks MacOS-support.
    backup of original ZTEMODEM.ISO: ZTEMODEM.ISO from Vodafone K3565-Z (VMC 9.4.2.14731)
    
    
    
11. Wait until the new ZTEMODEM.ISO has been written to your device and then close QPST EFS Explorer. When asked wether to reset the device click "Yes".
    
    
    
    
12. That's it. Now your modem should contain the new dashboard.

rebrandingTo rebrand your device just follow the debranding instructions above but use the backup of original ZTEMODEM.ISO: ZTEMODEM.ISO from Vodafone K3565-Z (VMC 9.4.2.14731).


dashboard
Instead of permanently debranding your modem (and so probably losing warranty), you can also manually install and use an unbranded dashboard from any ZTE modem. However since the drivers for all other ZTE devices are incompatible with the K3565-Z, the drivers, which will be installed with those unbranded dashboards won't work. So you either need to additionally install drivers for the K3565-Z manually or download and install this modified unbranded dashboard, which will install appropriate drivers for the K3565-Z right "out of the box": download here



drivers
Windows drivers only: download here


installation and usage under MacOS X
Following is tested on OS X 10.6.2.

• Download the connection manager (from this website). It is for some device called MF626, which seems to be the same.
  Do not install this package but instead only ./Contents/Packages/drv.pkg (can be reached by e.g. right-click - show package contents).
• Now plug in the UMTS-stick and wait for the ZeroCD-crap to be mounted. Eject the device in the Finder. Ignore any "found new devices"-messages for now.
• Open Terminal.app and run sudo screen /dev/tty.ZTEUSBATPort.
  Type: at+zcdrun=8, press enter. You should receive "Close autorun state result(0:FAIL 1:SUCCESS):1". The annoying flash-drive is now disabled.
• Now open System Preferences and choose "ZTEUSBModem". Go through Advanced - Modem and choose "Generic" as vendor and "GPRS (GSM/3G)" as device. Don't forget to enter the APN if your provider requires you to do so.
• Use *99# as phone number.

Linux after debranding via the Hard method
If you have removed the ZTEMODEM.iso you will have problems under Debian Lenny
To solve this issue run following script to initialize the Modem.

debserver:/# lsusb
Bus 005 Device 003: ID 19d2:0016 ONDA Communication S.p.A.
debserver:/# ./script.sh 19d2 0016

Script:

#!/bin/bash
VID="$1"
PID="$2"
PATH=/usr/bin:/bin:/usr/sbin:/sbin
modprobe -a option
echo "0x${VID} 0x${PID}" > /sys/bus/usb-serial/drivers/option1/new_id

dismantle
Dismantling the K3565-Z is easy and doesn't pose any difficulties.

1. Remove seals next to the USB-connector and open both screws.


2. Open housing by separating both halves of the housing with your fingernail.





dismantled

front


back



PCB layout

Huawei E160 (E160G, E160E, E160X, K3565)This is a featured page

Huawei E160 (E160G, E160E, E160X, K3565)This is a featured page

specifications

manufacturer:	Huawei
model:	E160
interface:	USB 2.0 (A plug)
GSM frequency bands:	850, 900, 1800, 1900
UMTS frequency bands:	850, 1900, 2100
HSDPA:	3,6 MBit/s
HSUPA:	-
EDGE:	236,8 KBit/s
GPRS:	57,6 KBit//s
CSD:	?
connector for ext. antenna:	+
connector type:	CRC9
internal antenna diversity:	+
voice telephony:	-
NAND-flashmemory:	+
microSD-drive:	+ (up to 8GB)
rebranded versions:	Fonic Surf-Stick (DE) MEDIONmobile Web Stick S4011 (DE) O2 Loop Surf Stick (DE) Tchibo Internet-Stick (DE)

manufacturer:	Huawei
model:	E160G
interface:	USB 2.0 (A plug)
GSM frequency bands:	850, 900, 1800, 1900
UMTS frequency bands:	2100
HSDPA:	3,6 MBit/s
HSUPA:	-
EDGE:	236,8 KBit/s
GPRS:	57,6 KBit//s
CSD:	?
connector for ext. antenna:	+
connector type:	CRC9
internal antenna diversity:	+
voice telephony:	-
NAND-flashmemory:	+
microSD-drive:	+ (up to 8GB)
rebranded versions:	?

manufacturer:	Huawei
model:	E160E, E160X
interface:	USB 2.0 (A plug)
GSM frequency bands:	850, 900, 1800, 1900
UMTS frequency bands:	900, 2100
HSDPA:	3,6 MBit/s
HSUPA:	-
EDGE:	236,8 KBit/s
GPRS:	57,6 KBit//s
CSD:	?
connector for ext. antenna:	+
connector type:	CRC9
internal antenna diversity:	+
voice telephony:	-
NAND-flashmemory:	+
microSD-drive:	+ (up to 8GB)
rebranded versions:	N24 Surf Stick (DE)

Vodafone K3565

manufacturer:	Huawei
model:	K3565
interface:	USB 2.0 (A plug)
GSM frequency bands:	850, 900, 1800, 1900
UMTS frequency bands:	900, 2100
HSDPA:	3,6 MBit/s
HSUPA:	-
EDGE:	236,8 KBit/s
GPRS:	57,6 KBit//s
CSD:	?
connector for ext. antenna:	+ (covered by housing)
connector type:	CRC9
internal antenna diversity:	+
voice telephony:	+ (enabled by default)
NAND-flashmemory:	+
microSD-drive:	+ (up to 8GB)
rebranded versions:	Vodafone K3565-H (DE)

Vodafone sells two different versions of the K3565:

• K3565-H which is a Huawei E160X (Rev.2 models carry the hardware ID "K3565", "Rev.2" is printed on the back of the device)
• K3565-Z which is produced by ZTE

Those two version are not only produced by two different companies, but they are also technically total different. Since the K3565-Z was introduced by Vodafone only in 2009, the earlier version from Huawei was only designated K3565 (without "-H").


unlocking
unlock codes are available free of charge at http://a-zgsm.com/huawei.php
To unlock your device, put in a third-party SIM card, start Mobile Partner and after entering the PIN code, the unlock code will be required.


debranding
see debranding Huawei modems


latest update

• latest dashboard update (will flash onto memory)
  E160G Client Software-WINMACB300D00SP01C03 (UTPS11.300.05.00.03_MACHOST11.202.08.00.03) (For Winxp&2K&Vista &MAC) (05010AAG) (10395 KB) 27-May-2009
  alternatively try this inofficial version (especially required for the Vodafone K3565)
• latest firmware update
  11.609.10.00.00.B716 (22940 KB) 1-Jun-2010

disable/revive flashdrive
The integrated flashdrive of the E160 can be disabled by executing the following AT-command:
at^u2diag=256
If your modem answers ERROR, instead you can use command:at^u2diag=0
Unfortunately this command will also disable the microSD-drive.
To revive the flashdrive and the microSD-drive execute:
at^u2diag=255


Weblinks
product page of manufacturer: http://www.huawei.com/mobileweb/en/products/view.do?id=1960
support page of manufacturer: http://www.huawei.com/mobileweb/en/doc/list.do?type=-1&id=5840