How to send FACTORY+3SPEED keys

Here are known several ways how to send IR codes (most required to unlock Extended service menu options) to TV.
You don`t need to use all described methods, it is enough to have one which works on your TV keeping in mind we need to send custom codes rare, most cases only once while unlocking PVR [1] or GuidePlus [2], change your Internet@TV region [3], change model to get extra functionality on low end cheap C and D series TV`s [4], Enable MHP [5], enable Internet@tv in UC6000 T-valdeuc Tvs [6] or change locked by default other service menu options on C/D/E series TV`s and BD players...
All methods are cross-compatible, because the goal is to get Extended Service Menu, desn`t matter which way to use for that. In all cases (except switching on to hotel mode on C series), it is needed to send two codes to TV, FACTORY and 3SPEED while being in service menu.

CAUTION!, the danger to brick TV is high. You can harm your TV by changing values in service menu. Be 100% sure what you`re doing there.

Send IR using your phone (Recommended)

Android smartphones

• For phones with built-in IR port...

We will use next buttons for our goal: Play - FACTORY Pause - 3SPEED

• Samsung galaxy series with built in IR: Samsung IR - Universal Remote(free version) or Pro version
• HTC phones with built in IR blaster: HTC IR - Universal Remote
• Other devices: for more info check http://www.power7.net/

Setup your controls

• Install and start Universal Remote (see above).(pic 1).
• Scroll down and open RED labeled My Remote Control 1 (TV) (pic 2), you will see buttons (pic 3).

(NB! Do not use Remote GUI 1 from menu at the top right corner neither "My IR REMOTE GUI", nor any other option like "My Remote Control 1 (TV) GUI" which is in cyan color, which brings you to real-remote like view as you have now! Do not use any button where is "GUI" in the name :))

• Scroll down and you will notice input fields beginning with Insert IR code string for... and button name.(pic 4).
• scroll even down and find Insert IR code string for Play... and replace the code which exists there to the hex code of FACTORY (pic5):

0000 006D 0000 0022 00AC 00AB 0015 0041 0015 0041 0015 0041 0015 0016 0015 0016 0015 0016 0015 0016 0015 0016 0015 0041 0015 0041 0015 0041 0015 0016 0015 0016 0015 0016 0015 0016 0015 0016 0015 0041 0015 0041 0015 0016 0015 0041 0015 0041 0015 0041 0015 0016 0015 0016 0015 0016 0015 0016 0015 0041 0015 0016 0015 0016 0015 0016 0015 0041 0015 0041 0015 0689

• find Insert IR code string for Pause and replace to hex code for 3SPEED:

0000 006D 0000 0022 00AC 00AB 0015 0041 0015 0041 0015 0041 0015 0016 0015 0016 0015 0016 0015 0016 0015 0016 0015 0041 0015 0041 0015 0041 0015 0016 0015 0016 0015 0016 0015 0016 0015 0016 0015 0016 0015 0016 0015 0041 0015 0041 0015 0041 0015 0041 0015 0016 0015 0016 0015 0041 0015 0041 0015 0016 0015 0016 0015 0016 0015 0016 0015 0041 0015 0041 0015 0689

• Navigate to the bottom and hit Save the IR codes and exit setup (with return)(pic 6).

Sending custom key codes

Click on My Remote Control TV 1 GUI (cyan color)(pic 7).

• Press Play and/or Pause (or your combinations) when required to send FACTORY and 3SPEED codes (pic 8).

Screenshots:

• 

  pic 1.

• 

  pic 2.

• 

  pic 3.

• 

  pic 4.

• 

  pic 5.

• 

  pic 6.

• 

  pic 7.

• 

  pic 8.

Symbian based phones

Example with symbian based phone containing IR (infrared) port on board (Nokia N93, E51 etc).
The phone must be rooted.
Install Psiloc.irRemote.v1.04.sis and start it. The app you can easy find on the internet.
Choose the AA59-00316b remote config and test it on your TV.
Download Samsung Service_Remote using gprs (or wifi if exists) from applications internet server. Choose this config (the author is Gia90)
Now you have service codes: 7 for 3SPEED and 9 for FACTORY

samyGOrc (Rooted E/F ONLY)

Root is mandatory, it means you have to wait for SamyGO to load in the background after opening Service Menu (about 1 minute until you gain FTP and Telnet access to TV)

1. Download and extract samyGOrc-v1.0.zip

2. Connect to TV by FTP and copy extracted samyGOrc file to /mnt/opt/privateer/usr/bin

3. Telnet to TV and set file permissions

chmod 755 /mnt/opt/privateer/usr/bin/samyGOrc

Steps above won't be necessary anymore if ever you need to use again this method. Now samyGOrc is installed and has execute rights. Only next step should be enough then.

4. Telnet to TV command to send consecutively FACTORY (=59) and 3SPEED (=60) keys

samyGOrc -p $(pidof exeTV || pidof exeDSP) 59; samyGOrc -p $(pidof exeTV || pidof exeDSP) 60

ruSamsungTVCommunicator (ruSTVC)

Software way and easiest way to reach your goal. This only works on TV`s with ethernet/wifi port and on models where the network remote control function isn`t disabled (all high end C, D and E series). However, it doesn't work any longer on most recent models/firmwares.
1. Download the application from author`s page.
2. Start ruSTVC on PC, and when asked, enable access to control TV on TV screen. If no popup appeared, navigate to

Menu->System->Network Remote Control ->ruSTVC 

and set allow
3. Power off TV, enter to service menu (INFO MENU MUTE POWER on your RC)
4. Press FACTORY and after this 3SPEED buttons on ruSTVC application.

Arduino project Ethernet to IR

• Ethernet to IR and Serial Console Interface

Original SamsungTV Factory Remote

The part number of this remote is: AA8100243A
This way to send Factory codes to TV is quite expensive, because the cost of this remote is 21-80$ on different internet stores.
BTW we don`t know if it able to send 3SPEED code, because this button is missing. Needed anyone who could confirm.

Programable universal remotes

If you have programable RC like "One For All" URC-7320 or similar, you also can send required codes to TV.

Build your own IR transmitter

• Build the dual led IR transmitter

IR blaster

Many high-end TVs come bundled with an IR blaster, its use is similar to own built IR transmitter [7]

References

--Juzis28 (talk) 12:08, 6 November 2014 (UTC)