30191Views47Replies

Author Options:

Deactivated Bone Growth Stimulator Answered

I have a CMF bone growth stimulator that no longer works. These devices are set to die after so many uses. Does anyone have any ideas on how to reactivate these units? Or, hacking these things for another purpose?

Discussions

0
None
joelr7

3 months ago

After some further investigation I discovered that the main board has a NXP P87C554SBAA 8-bit micro-controller on it, which does include non-volatile EPROM. That is most certainly the source of the memory persistence.
I looked up the data sheet for the microcontroller, but its very unlikely that someone could figure out how to communicate with it to reset it. The program running on the controller and the device used to reset it would be intellectual property Donjoy (the devices maker). I would love to get my hands on that device and snoop the reset communication, but I dont see that happening.
I'm leaning toward this thing being truely bricked.

0
None
joelr7joelr7

Reply 3 months ago

I just checked through the datasheet for the microcontroller again and it looks like there is a reset procedure for the controller which could be accomplished with some jumper wires. However, I believe this would reset the controller completely. Like wipe the program. Which would make the thing completely worthless. But maybe then service would reset it for you?

0
None
joelr7joelr7

Reply 3 months ago

I tried the magnetic field app on my phone and bridging pins 1 and 2 does indeed induce a magnetic field. However probing the signal going directly to the coil (white and grey wires) shows that it is not functioning according to specification. The manual says that it produces a DC wave and an AC wave with a period at 76.6Hz (13ms).

Hooked up to the O-scope, shows that the magnetic feild (via the voltage) produced is ~545ms long and about every 2 seconds.

So, I'm not really sure what its doing, but its not producing the signal for bone growth therapy.

Capture.PNGIMG_20190227_175325921.jpg
0
None
joelr7

3 months ago

I just gave the reset procedure others descrived a try and it didn't change anything.
I actually unsoldered the coin cell battery completely.

How long did people have to wait before trying it again?

Mine timed out, as in I got past the 270 day mark. It kind of sounds like if you catch it before that removing the battery will keep it from continuing to track days gone by.

When I press and hold the button it turns on then shows the smilie face and turns back off. When I bridge pins 1 and 2, like JunartS described, the screen displays RX Complete and then turns off.

0
None
Tinterr

10 months ago

Since mine gives 2 numbers then a smiley face does that mean 8ts not working?

0
None
joelr7Tinterr

Reply 3 months ago

The smilie face means you have satisfied the current treatment regimen.
You only use it once a day while it is active. The smilie face lets you know you already used it that day. After the alloted time has passed (270 days in my case) the smilie lets me know its over. Basically that means your locked out of triggering a treatment cycle.
When I bridge pins 1 and 2 like JunartS described it shows RX Complete on the screen.

0
None
Zay24Tinterr

Reply 10 months ago

Hey mines gives a smiley face too, is there any way that we can sell them online ?

0
None
robio5150

5 months ago

Just did the memory battery hack to our CMF OL1000SC unit. Gently pried the bottom "neg" battery spot weld loose and seperated it from the battery. Just left the battery floating connected to top prongs. Put it all back together and pressed the start button..nothing. Just usage counter display. But then.... Press and HOLD the start button, got the "beep" the counter display and VOILA the session began with sanddail "wait" icon then the session countdown clock start doing it's thing.
Glad I could be a part of safely hacking this medical-device, what a scam! Seriosly, the medical device fleecing of our country is sickening.

0
None
JunartS

8 months ago

Bought this at a good will. Makes for a great back brace un powered. Using a multimeter is was able to cycle the unit WITHOUT the audible beep every 4 seconds by shorting pins 1 and 2. The initial phase of the powercyle starts with a 300 microgausse pulse for approximately 300 miliseconds and then remains at 80 microgauss till the end of the cycle. Then the display reads Treatment Complete at end of the cycle and then repeats. If you keep pin 1 and 2 shorted you can maintain the electromagnetic pulse at 300 microgauss/4seconds with a 80 microgauss baseline for as long as the pins are shorted.

Shorting pins 5 and 1 appear to act just like the button at the front of the unit and does have the audible beep.

Hope this helps.

On a tangent:
This device could be useful in getting rid of those Morgellons everyone keeps talking about. I heard these creatures lay eggs in your pores and then the larvae hatch and produce electro-conductive microfibers in your body. Waving a magnet destroys them or renders them inert because the moving magnet produces eddy currents in the microfibers that cause them to heat up enough to cause the fibers and the organism to explode. Just kidding.

Frankly waving a standard magnet over the affected area has the same effect with more Gauss strength (over 1000+ microgauss).

donjoy pinout.jpg
0
None
MikeW427

10 months ago

Hello, I have followed your guidance. Now the only thing it will do is put out a loud continuous beep with a yellow screen that says contact customer service. Very frustrating. Can you or someone anyone help me through this.!? Thank you in advance.!!!

0
None
MikeW427MikeW427

Reply 10 months ago

I stated, followed your guidance however realized I never clarified who you were. You would be JonB102

0
None
SarahD130

1 year ago

I reactivated one. Since they wanted $1600 without insurance and $800 with insurance I bought 2 different ones on ebay and tried. The orthofix model, once the round battery was removed, just kept beeping. It wanted a program installed. I used the Spinal logic brand instead. First get a magnetic field app on your phone to test it. It'll jump in the hundreds if it's working. The Spinalogic has a curly wire going to the control unit. I removed the control unit and cut all the wires. I soldered a 9 volt battery adapter onto the red and black wires. Those are the only 2 wires you need to worry about. The rest are for programming. Now put a battery on the connector and test with the magnetic field sensor you downloaded onto your phone. If it says 40-60 try soldering the wires reversed. Otherwise it should jump to 300 or so. You'll have to take the battery off when not using it. In my opinion magnetic fields like these cause cancer but my doctor wants me to wear one so my bone fusion heals. Talk to your doctor about it.

0
None
TrentK9

2 years ago

I just did this 12/6/16 - Simply removed all 4 screws opened unit. The battery is in fact connected to two different metal pieces, I just lifted up on it with a screw driver (under the battery but NOT under the metal piece connecting to the main board. It just popped off with a little pressure. It did not FULLY reset for me though, at first I could not use it at all. Now I have 160 uses left out of 238. I believe disconnecting the battery simply reset the "9 month then dead issue", but did not fully reset the previous uses. Thank OP for this thread it saved me a headache and made me some money, I picked up a size 2 and a size 3 OL1000 "DONJOY BRAND" for $7 at a garage sale...Look out Ebay hehehehe

0
None
MaryB400TrentK9

Reply 1 year ago

I did the same, it gave the usage count and then a smiley face but does not start a session. Does your actually work?

0
None
BryantP9TrentK9

Reply 1 year ago

is yours still working after the hack?

0
None
Rml1121TrentK9

Reply 1 year ago

Hey Trent, I followed your instructions and my numbers did reset (not the full amount) but when I push to actually activate it, the 30 min countdown doesn't start. Are you able to activate yours and receive a treatment?

0
None
abmorse1TrentK9

Reply 2 years ago

Hey Trent - I picked up a Donjoy OL1000 too, but I'm not having luck with the reset. It sounds like you didn't have success at first; what finally got it to work?

0
None
JonB102

3 years ago

if you remove the four screws on the control unit, you will see a battery spot welded into a holder. That battery holds the clock data and counters. I broke the bottom weld loose with a thin blade. Once disconnected, it forgot that 270 days had gone by. Seems to be working now. The timer is counting down.

0
None
forrieJonB102

Reply 3 years ago

We may have different units. However, I opened mine and attached a couple of photos here, where you can see the battery connector; as well, the CMOS/disc battery to the left. From your description, it's not clear this applies here. Could you comment? Thanks!

IMG_4890.JPGIMG_4891.JPG
0
None
JamesH327forrie

Reply 3 years ago

All I did was separate the battery from it's hosting using a small screw driver. Reset the unit just fine. Now it may expire in 270 but it will be sold long before that.

0
None
MaryB400JamesH327

Reply 1 year ago

We remove the battery and only shows the previous information of the times used and left and then a smiley face. What else should we do?

0
None
JonB102forrie

Reply 3 years ago

That is how mine looks. The battery with "129E" on it is the culprit.

With very sharp cutters, if you can clip it free, you will reset the time clock to Day 1. As long as it stays disconnected, it doesn't run up the clock. It does still count the number of times used, though.

0
None
DonKnockJonB102

Reply 1 year ago

I disconnected this battery but now the unit won’t go into the treatment mode. It turns on and says the count and beeps then shuts back off.

0
None
MaryB400DonKnock

Reply 1 year ago

We removed the battery but still does not work, just gives the count 16/271 then smiley face. It does not go into timer countdown. What do we do now?

0
None
forrieJonB102

Reply 3 years ago

So if we disconnect this battery and it can't track the time, but can still count number of times used, it sounds like there may still be a problem using the unit beyond X uses. This suggests it has NVRAM somewhere that is holding this figure.

0
None
JonB102forrie

Reply 3 years ago

yes, there must be an NVRAM somewhere. What I don't know is if it will reset at 127 or quit. Only time will tell on that.

0
None
p51aviatorforrie

Reply 2 years ago

Thanks for posting this! Rather than cutting anything, I separated the battery from the board with a soldering iron and the pin connected to the negative side of the battery. I soldered it back in place a minute later and it worked perfectly.

0
None
BrittanyN11JonB102

Reply 3 years ago

Hi there-- I have one of these and am trying to follow your instructions. I see two screws at the bottom of the control unit where the cord comes in. I've unscrewed those two but CANNOT seem to get the control unit open. Where are the other two screws? Thanks!

0
None
JonB102BrittanyN11

Reply 3 years ago

The two top screws are under the sticky label. You can either remove it (I did) or just cut holes to access the screw heads. Use finger pressure to locate the indentations.

0
None
forrieJonB102

Reply 3 years ago

Curious if this is the same brand I posted above. Would you be able to post a photo?

0
None
JonB102JonB102

Reply 3 years ago

I already assembled and didn't think to take pictures. You can't miss the battery holder (CR2035). Use a pair of metal snips or similar to cut out the time clock battery. Don't go "he-man" on it, though.

0
None
forrieJonB102

Reply 3 years ago

Just seeing this now. Thank you for replying, I will take a screwdriver to this and see if I can find this. Will post after.

0
None
wmlaveckJonB102

Reply 3 years ago

I have already trashed it, but this is good to know in the future. Thanks

0
None
DebbieC151

1 year ago

I have two of these for your femur and wondering what to do with them. Has anyone figured it out yet ?

0
None
DonKnockDebbieC151

Reply 1 year ago

Taking the disc battery out of the device reset the counter for me, but it won’t go into treatment mode. Still tinkering with it.

0
None
BryantP9

1 year ago

I just purchased one of these units, and the timer is not counting down. Are y’all still having success using y’all unit after disconnecting the round batterinside the housing?

0
None
DonKnockBryantP9

Reply 1 year ago

This is the issue I made having. Got the inside battery disconnected but now the time count doesn’t start. Going to tinker around with it some more.

0
None
JamesH327

3 years ago

Thanks for the advice. Now I took mine apart and just separated the battery for a second and now system is working fine.

0
None
forrie

3 years ago

I have one of these that I wish to re-activate.

First, why do they de-activate after X treatments? That's because the providers felt they were getting ripped off by these devices being re-sold on eBay, etc.

From my perspective, my insurance paid on my behalf about 4k for this, so I do NOT accept that it's deactivated.

When bone is growing, it emits a specific magnetic signal. These units work by imitating that signal.

I included an image of the internal/battery/port side of the control unit. This is made by DONJOY called a "CMF". That port above the 9v battery looks clearly like a computer connection (maybe serial). I don't dare take it apart yet. But I wonder if someone here might know how to access this unit and remove the restriction/disable/block.

IMG_4550.JPG
0
None
BryanJ23

3 years ago

it quits after 9 months...mine cost $3500.00 USD

behind the battery is a ten pin receptacle...find a brainiack....me no clue

0
None
AraC3

3 years ago

Ok guys I picked up one of these things for nothing at a goodwill. Behind the battery port is the communication port. It seems to be a 10-pin unidirectional connection.

The data logging is most likely rudimenturay, if any. This port most likely just resets the days available and timer lock.

Configuration wise I can take the controller aparts and see what leads where and what different electronics are in there. Perhaps there are clues as to what protocol it uses and how to read it.

Let us say there are most likely two configurable settings. One will be how many of the 270 days are available, and what the timer-lock is for allowing sessions (12H, 24H). I'm not sure if there are any other configurations becaues I do not have the manual with it.

0
None
wmlaveck

5 years ago

Bone Stimulator was supplied by my VA. I was surprised when they told me they did not want it back.

0
None
caitlinsdadwmlaveck

Reply 5 years ago

It is probably a pretty sophisticated device, unless you are some kind of RF electronics engineer it might be difficult to repurpose it for something useful. Harvesting parts may not get you much either.

0
None
Kiteman

5 years ago

Why on earth would they be designed to switch off? These things cost hundreds of dollars at minimum, building in a shut-down is an obscene waste.

0
None
caitlinsdadKiteman

Reply 5 years ago

Just browsing around it seems these are medical devices prescribed by a doctor to assist in the healing of some bone fracture. The are meant to jumpstart the healing process specific for an individual patient and to be monitored by the doctor for progress. It is programmed for the expected "therapy" period and then cuts off, presumably to be returned to the equipment supplier and reprogrammed. I think there is more fun to be had and cheaper in hacking a microwave oven.