First I found the phone runs of a digital PBX not the normal analogue one in my workshop so no way to start testing immediately.
Plugged into a digital socket, it retrieves the time digitally from the PBX after booting, increments one minute, then stops ? other phones of the same model working fine.
I found a customer service manual for a similar model
http://www.google.co.uk/url?sa=t&source=web&cd=5&ved=0CDgQFjAE&url=http%3A%2F%2Fwww.kpn.com%2Fweb%2Ffile%3Fuuid%3D2a56194a-8fac-48c2-9a10-d0a3c5c08d36%26owner%3D15103e95-8a38-48c7-b7f7-81bc3d170f31&ei=USzwTMTjENCwhAfCp_HlAg&usg=AFQjCNFvUb-ZhIo1-86nbxktyoBPMkGPuA
this helped a lot, got me into service mode with password 12687, the service codes for the similar model were not all the same, working from 00 to 99, service code 28 feprom test would fail.
Inside the phone there was no RTC, a mcu, a transcoder, ram, flash ram and logic. feprom fail was the clue, I swapped the application flash eprom with one from a working phone, no change, swapped the boot eprom and bingo, code 28 passed and the clock worked.
The flash chips were faulty, failing to verify after being read.
Found an excellent desoldering technique for plcc packages on youtube, this helped the bulk desoldering no end.
http://www.youtube.com/watch?v=FTQqjggeklo&feature=related
I performed it with regular low temp solder ~270 degrees but have ordered some of this chipquick solder for future use, it looks very handy.
Purchased 4Mbit flash eproms, programmed with a good dump. Twelve phones in all faulty from new. (no warranty option as they had all been in storage for a while).
Chip out.
Success !