answer: Successfully unlocked/repaired phones by Infinity-Box
Vodafone 541 successfully unlock
trying to select model: /541
model selected via command line: Vodafone-541
Device: Vodafone-541
Initialization done
==== [1/3/2012 4:32:13 PM] ====
COM6 [VCP0] selected
module v4.01
Device: Vodafone-541
Checking data, wait...
advanced flash detection enabled
Action: rebuild security area
====> Boot ...
Press and HOLD Power button now !
19200 fixed
Connecting, wait...
Initializing [6225:8A05:8A00]...
CPU: MT6225
high speed boot On
chip: 0001:B503:A00A
status: 01
boot packet size: 0400
Release Power button now !
Boot Done
====> Initialize ...
detecting chip #00 in region #00...
flash: 98006F00000004:09EA0000000000
flash: AMD/Fujitsu std [T 0008x004000 00FFx020000] 32Mb
otp offset: 01FE0000
number of flash chip/regions detected: 01/01
Initialize Done
====> Set baud ...
115200
Set baud Done
====> Initialize bootcode ...
Initialize bootcode Done
====> Check firmware integrity ...
usb bootloader detect...
usb bootloader (chip) is present: 00020000
searching rom info...
search rom info finished
rom info structure: [protected] type (07), 1 record(s)
TCL-ID is present
startup code area #1 is Ok
startup code area #1 backup saved: c:\InfinityBox\MModule\backup_security\id.0EE400E7.[JRDSZ25_08A_PCB01_GPRS_MT6225_S00.MAUI_08A_W08_40_SP1_V32.BIN_E8F450A0].rpl
rom info detection finished
TCL-ID detection...
TCL-ID detection done
device-id: 0EE400E7
rom info ver: 07
sw version: JRDSZ25_08A_PCB01_GPRS_MT6225_S00.MAUI_08A_W08_40_SP1_V32.BIN
project-id: MAUI.08A.W08.40.SP1.V32, A050F4E8
code offset: 00020000
ffs offset/size [01]: 01800000/00800000
TCL-ID identification
version: 17B
provider: 708X-2EVDGB1
customization: CN17FC75
customization: XN17FC75
TCL-ID identification done
rom info structure: [protected] type (07), 1 record(s)
TCL-ID is present
ffs/eeprom address assigned: 01800000
startup code area #1 check...
startup code area #1 fixed
sec info (detailed) detection...
searching sec info#1...
search sec info#1 finished
product id: JRDHUIZHOU_MT6225_OTMINI_SERIES
area1 is invalid
area2 is invalid
area3 is valid
area4 is invalid
searching sec info#2...
search sec info#2 finished
sim-lock status: enabled
product id: JRDHUIZHOU_MT6225_OTMINI_SERIES
area1 is valid
area2 is valid
area3 is valid
area4 is valid
searching sec info#3...
search sec info#3 finished
sim-lock status: enabled
product id: JRDHUIZHOU_MT6225_OTMINI_SERIES
area1 is valid
area2 is valid
area3 is valid
area4 is valid
number of sec info areas: 3
security area (sec info, cust) calculation...
error: security area (sec info, cust) header is invalid
security area (sec info, hash) calculation...
..................security area (sec info, hash) detecting size...
security area (sec info, hash) detecting parameters...
security area (sec info, hash) encoding...
done
flash: 98006F00000004:09EA0000000000
flash: 98006F00000004:09EA0000000000
Write: security area (sec info, hash)
security area (sec info, hash) calculation done
security area (sec info, cust) calculation...
identification header detected
customization: XN17FC75
customization name adjusted
flash: 98006F00000004:09EA0000000000
flash: 98006F00000004:09EA0000000000
Write: security area (sec info, cust)
security area (sec info, cust) calculation done
security area (sec info, hash) calculation...
..................security area (sec info, hash) detecting size...
security area (sec info, hash) detecting parameters...
security area (sec info, hash) encoding...
done
flash: 98006F00000004:09EA0000000000
flash: 98006F00000004:09EA0000000000
Write: security area (sec info, hash)
security area (sec info, hash) calculation done
security area (sec info, cust) calculation...
identification header detected
customization: XN17FC75
customization name adjusted
flash: 98006F00000004:09EA0000000000
flash: 98006F00000004:09EA0000000000
Write: security area (sec info, cust)
security area (sec info, cust) calculation done
security area (sec info, hash) calculation...
..................security area (sec info, hash) detecting size...
security area (sec info, hash) detecting parameters...
security area (sec info, hash) encoding...
done
flash: 98006F00000004:09EA0000000000
flash: 98006F00000004:09EA0000000000
Write: security area (sec info, hash)
security area (sec info, hash) calculation done
Check firmware integrity Done
====> Check firmware content ...
Check firmware content Done
====> Backup required data ...
original imei: 35400703695650
flash: 98006F00000004:09EA0000000000
Backup required data Done
====> Patch required data ...
Patch required data Done
====> Special operation ...
Special operation Done
====> Write ...
Write Done
====> Finalization ...
ffs formatting...
flash: 98006F00000004:09EA0000000000
Finalization Done
file saved: c:\InfinityBox\MModule\backup_security\Vodafone-541_JRDSZ25_08A_PCB01_GPRS_MT6225_S00.MAUI_08A_W08_40_SP1_V32__system_log_0EE400E7_E8F450A0_20120103-163809.B0X.bin
Finished, time used: 5 min 40 sec
Remove/Install battery now !
File system has been modified !
It is need to press and HOLD phone "Power" button
during long time (up to 1 min) to make phone Powered-On !
