Database Info

[GUIDE][PAGE PLUS] Easy Method To Flash Boost Moto G To Page Plus w/ Voice, MMS + 3G

I stumbled across this method while I was trying to flash my Boost Moto G over to Page Plus the traditional way with DFS/CDMA Workshop. I was having some trouble with it and ran into some issues flashing CM11 and bootlooping so I ended up needing to flash back to stock firmware. I decided to give the stock Verizon G firmware a try, hoping it wouldn’t brick my brand new phone, and it works beautifully. Everything works including stock OTA programming so there’s no need to mess around too much with flashing tools (except for one or two easy steps). A big plus to this method is the 3G data settings/keys get programmed properly OTA so you don’t need a donor phone or to pay someone $$ to flash it for you. It’s a little bit of a process but if you can follow the steps properly it’s fairly easy. Note: These are just the steps I took to make this work. Some may not be necessary but follow them anyway if you aren’t 100% sure of what you’re doing.
Edit: I've tested PAC ROM and Pink Kernel after flashing the Verizon firmware and voice and 3g still work and the rom is stable so far so most custom ROMs that work with the boost moto g should be fine to flash.
Disclaimer:
I am not responsible for anything you do. If you brick your phone or it explodes, don’t blame me. This method was tested by me and worked for me but if you choose to follow this guide you do so at your own risk. If you’re not somewhat technically savvy or are very unsure about any of the steps below please have someone else help you or consider paying for a flash.
Edit (3/16): If you end up with a bootloop/brick please try to flash the stock Boost firmware again as this should bring your device back. You can get version 4.3 here and version 4.4.2 here.
Requirements:
Your Phone’s MEID Activated With Page Plus
Unlocked Bootloader (See Motorola Bootloader Unlock Site)
Minimal ADB and Fastboot
DFS Demo
Verizon Stock Firmware Image (Check your "Android version" under Settings -> About Phone)
> Android 4.3
> Android 4.4.2
> Firmware Flashing Guide (Written for version 4.3, see below for an additional step for 4.4.2 and automated scripts that are safer to use)
Motorola USB Drivers
Your Phone’s MSL/SPC Code (From Boost Activation or MSL Reader App)
Edit: For activating your MEID with Page Plus I recommend going through Kitty Wireless. They currently have a promotion going where you'll receive a free "The $12" plan with any new activation or port in and the service is free as well.
Steps:
1) Go to the Boost Mobile website and activate your phone. You can do this without actually paying for the first month. The only reason we do this is to get the MSL/SPC code for your phone that is listed on the last page of the activation process. Make sure you save this code somewhere safe. Now I did the Hands Free Activation on my phone, and I don’t think you really need to, but it can’t hurt so I’d suggest you do it as well.
Edit (3/16): Apparently it's not necessary to OTA activate with Boost before flashing your phone so you can simply install this MSL Reader on your phone to get your SPC code without activating with Boost. Copy the apk to your SD card and then open and install it with a file manager or push it from your PC with "adb install SPCUtility.apk".
2) Unlock your bootloader. Go to Motorola’s bootloader unlocking site and follow their instructions. They tell you to install the Android SDK but it can be a large download so just get the Minimal ADB and Fastboot zip as that’s all you need to complete this process. Make sure you install the Motorola USB drivers as instructed because we’ll need them later on for DFS.
3) Now we need to reset your phone’s SPC to “000000” so Verizon OTA programming will work properly. You’ll need to start your phone in Fastboot mode (power off then hold the volume down and power button together until you boot into a system menu) then select the “BP Tools” option in that menu. This will boot your phone with the diagnostic port needed for DFS enabled. If the drivers fail to install automatically you’ll need to manually install them by going into Device Manager, finding the one with the red X called “Motorola QC Diagnostic Interface”, right-clicking and selecting “Update Driver Software…”, clicking “Browse my computer for driver software” then “Let me pick…”, choose the device type “Ports (COM & LPT)” and click next, then selecting the manufacturer “Motorola” and the driver “Motorola QC Diag Port” from the list. This is the only one we actually need so if there are others with a red X you can leave them as they are. Now, open DFS. Click “Ports” on the top left. Double-click on the port named “Motorola QC Diag Port”. DFS will automatically connect to your phone. Next we need to send the MSL code we got from the Boost activation. Type it into the “SPC” box under the “Ports” button and click the arrow to the left of the box. The log window should show “DEVICE UNLOCKED”. Now go to the “Programming” tab and click “Read” in the SPC section. It’ll show the MSL code you used and you need to change it to “000000” then click “Write”. Finally, click the “Reset” button on the top right and your phone will reboot. Make sure you do this because the changes won’t stick unless you do.
4) The next step is to flash the stock Verizon firmware to your phone. There’s already an excellent guide on that process so just download the Verizon image and follow those instructions.
Edit (3/16): The flashing guide linked here references version 4.3 of the firmware. If you're installing version 4.4.2 following the guide there are additional commands you need to execute. Here are all the commands necessary for 4.4.2:
fastboot flash aboot emmc_appsboot.mbn

This needs to be stickied. Would have gone with a Boost Mobile Moto G if I'd known it was this simple. I'm stuck with a Verizon Moto G.

thanks Heranthius! Super useful info!
Makes me wonder if flashing Verizon firmware is necessary. Or if you could just upload a pageplus /Verizon PRL to your phone and reset your SPC to 000000 and then try the ota programming?
Super interesting! Wish I had the money to buy another to play with!
edit: typos. kinda hate typing on phones at times.
Sent from my XT1031 using Tapatalk

I can say for sure it won't work that way. I tried it that way before I discovered this method. You can get voice and SMS but the way Sprint programs the data settings is completely different from Verizon so you won't get 3G or MMS working properly without manual flashing and a donor phone.

this is exactly what I was going to try out, but you beat me to it I had already changed my SPC to 000000 but my Boost mobile didn't end until yesterday, I was also surprised that no one else had tried this yet either. Thanks for the guide too! Cheers.

Heranthius said:
I can say for sure it won't work that way. I tried it that way before I discovered this method. You can get voice and SMS but the way Sprint programs the data settings is completely different from Verizon so you won't get 3G or MMS working properly without manual flashing and a donor phone.
Click to expand...
Click to collapse
I see. Thanks again for the post! I got mine working the manual way but had tried so many different things. I had no idea how to write a tutorial. Seems like this could be a simple fool proof way for people!
Sent from my XT1031 using Tapatalk

Heranthius said:
I'd also recommend that you also install CWM/TWRP recovery and root your phone because the Verizon firmware has a ton of bloat pre-installed.
Click to expand...
Click to collapse
So, do you have a CM11 Moto G nightly installed to get away from the bloatware? or just the basic moto g android? also, thanks for this. I was wondering if I could get the OTA to do a few things for me. and yet i'm almost thru the manual way.
glad to see all this work and sharing on the moto g to selectel and pageplus

@cedarknoll - No problem, this was my first attempt at writing a guide too. I just wanted to make sure everyone knows there's a really easy way to do this without wasting $35 on a professional flash or spending hours manually flashing. There's definitely a lot of research to do when trying to flash by hand and I know it took me many hours to get my G set up the way I wanted. Even if you have a working manual flash I would still recommend going with the Verizon firmware because it's less of a hack, you can update your PRL and profile OTA if necessary, and most importantly for me the voicemail notifications work as intended so you don't need the Voicemail Notifier apk from Viper's thread.
Sent from my Page Plus Moto G using Tapatalk

I followed this guide to the letter. I got it to activate with talk and text, but no data. Looks like it still needs manual tweaking after the fact - which I will do this weekend.

@Flinkly - Right now I'm just running the stock Verizon rom. All I did was use Rom Toolbox to freeze all of the bloat apps. Like I said in the OP, the first time I flashed CM11 I had a bootlooping issue and I haven't had time yet to try and sort it out. I love this phone though so far and I hope some devs start coming out with Verizon roms soon. The Moto G is amazing for the price and one of the best prepaids available right now I think.
Sent from my Page Plus Moto G using Tapatalk

@micallen - That's odd. When you look in the DFS settings did it write any of the Verizon information under Data and Mobile IP? What version of Android are you on? I did the OTA update to 4.4.2 before flashing my phone. Also, did you do the Boost hands free activation before flashing the Verizon firmware? I read somewhere in another thread that you may need to do that in order to unlock/make writable the NV items for the data settings.
Sent from my Page Plus Moto G using Tapatalk

Heranthius said:
...and most importantly for me the voicemail notifications work as intended so you don't need the Voicemail Notifier apk from Viper's thread.
Click to expand...
Click to collapse
that's some super good info to know!! That apk doesn't seem to work on the moto g anyway. I think most people are using the youmail app as an alternative. Even some of the paid flashers just put you mail on there for people.
Sent from my XT1031 using Tapatalk

Nice job man!
Sent from my XT907 using Tapatalk

Heranthius said:
@micallen - That's odd. When you look in the DFS settings did it write any of the Verizon information under Data and Mobile IP? What version of Android are you on? I did the OTA update to 4.4.2 before flashing my phone. Also, did you do the Boost hands free activation before flashing the Verizon firmware? I read somewhere in another thread that you may need to do that in order to unlock/make writable the NV items for the data settings.
Sent from my Page Plus Moto G using Tapatalk
Click to expand...
Click to collapse
4.2.2
I tweaked the settings (couldn't wait) in DFS and have 3G now. 1.3 down and 1.0 up. Thanks for the guide !

Nice method, I don't have a moto g with me at the moment but I am wondering if only some of the images from verizon package need to be flashed.
Is only:
mfastboot flash modem NON-HLOS.bin
mfastboot erase modemst1
mfastboot erase modemst2
mfastboot flash fsg fsg.mbn
mfastboot erase cache
mfastboot erase userdata
mfastboot reboot
required? the other image seemed more related to just the android system, recovery and booting. I'l be nice if someone that had a boost motog with them could test out which ones are actually required.

@micallen - Awesome, I'm glad it worked for you. You're welcome! Could you post the settings you had to tweak so people trying this method can know what they need to change in DFS? When I flashed my phone I had to tweak the "Primary & Secondary HA Address" and "Min HA & AAA SPI set" boxes on the "Mobile IP" tab.
Sent from my Page Plus Moto G using Tapatalk

@imkey - I think you need to flash the whole system because it's the setup/activation apk of the rom that actually programs the data settings and that's why you need the one from the Verizon firmware in order to OTA program the 3G settings successfully.
Sent from my Page Plus Moto G using Tapatalk

OK I'm a noob at this and this is where I'm stuck any help would be greatly appreciated The next step is to flash the stock Verizon firmware to your phone. There’s already an excellent guide on that process so just download the Verizon image and follow those instructions.
It won't let me open up mfastboot. It just flashes and disappears
I have all the files in falcon_boost_user_4.3_14.10.0Q3.X-84-9_11_release-keys-cid9.xml folder. I just can't figure out how to load the V Firmware on this phone. I'm actually surprised I got this far LOL I have the phone in "fastboot mode" and I'm here in .cmd mode F:\MOTO G\Minimal ADB and Fastboot>

@blueyzfr6 - I'm not near my computer right now but I can try to help from memory. It sounds like you have the Boost firmware downloaded from the "boost" in that folder title. You need to check what version of android you have under settings -> about phone and download the Verizon firmware for that version. It'll either be 4.3 or 4.4.2 and the 4.4.2 one is called "Blur_Version.173.44.20.falcon_cdma.Verizon.en.US" on the download page. Once you get that and extract it there should be a .bat file inside the folder with the firmware title as the file name (I think). Open it in notepad (right click -> edit) and after the line that says "%fastboot% reboot-bootloader" add "pause" on a new line then save it. Double click the bat file to run it. If you get an error that it can't find fastboot.exe there's a sub-folder in there that has fastboot.exe and 2 .DLL files. Copy those into the folder with the .bat file and run it again. Your phone should reboot right away and the console window will say press any key to continue. Wait for the phone to get back into the fastboot menu then press enter. Now it should flash all the image files and when your phone reboots you should have the Verizon firmware and then just perform the activation steps as instructed.
Sent from my Page Plus Moto G using Tapatalk

Thank you so much for this mini-guide. I followed it all and everything seems to work until activating. I did DL the regular verizon firmware, not the Blue one. Don't know what that is for or the difference. I live out of reception, so it's a bit more challenging for me to see what works. I drove to a place with reception, tried to activate it (while showing roaming) and it failed to activate it. I did have the phone already activated on Boost so am not sure if this actually needs to happen. I did submit an ESN change and it went through, though when i checked the ESN verification, it came back "Unknown"
More to come once I try making a phone call and try the internet.

H950 5.1.1 V11z Bricked/Bootloop: LG Security Error, Authentication Fail #9

Hello
A brief timeline of events leading to this thread:
1. I purchased a G-Flex2 H950 from Ebay for $250 and was supposed to be upgrading from a Galaxy S4-I337.
2. Received my device yesterday and set out to update to 5.1.1 & root the device to remove bloatware.
3. I was able to update to 5.1.1 V11x using my StraightTalk sim on AT&T network.
4. After many frustrating hours of trying to root using different methods, I finally was able to root using the technique mentioned in this thread: http://forum.xda-developers.com/g-flex2/development/root-easy-root-att-flex-2-5-1-1-t3178354
5. A nice complement to point "4" above was the firmware update to 5.1.1 V11z.
6. Extremely happy that I was ready to rock, I set out to delete all the bloatware from my device.
7. First surprise obviously was the inability to remove a bunch of AT&T apps because "APK could not found" error.
8. Like the idiot that I am, I went ahead and deleted the "rootsystem.img" from the internal memory (unnecessarily, blame my OCD!).
9. Now after I finished de-bloating the device (or so I thought), I rebooted it and to my horror... I see the error message:
LG Security Error
Authentication Fail #9
10. I attempted to get to the recovery mode and deleted/erased all data & settings. No dice!
11. I'm still able to get to the download mode using the Volume-Up & USB connect method (& this is why I'm cursing myself at point "8" because I could have re-used the easy root method again to flash the img file).
12. I tried to use the "LG Mobile Support Tool", it recognizes the device correctly as "LGH950" but says V11z is the latest software update.
My question to experts: How SOL am I? I don't think LG would honor my warranty since the purchase is NOT from a authorized dealer/reseller. So no chance of warranty repair/replacement, no?
I looked everywhere (for close to 10 hours) for KDZ & TOT files to even attempt something. But I couldn't find anything for H950. Man, I hate AT&T so much now... Why couldn't they just leave the bootloader unlocked? Or LG (AT&T?)even provide the necessary files to start off with?
Could someone with more knowledge please offer any help? Meanwhile, I've pretty much resigned to be joining the queue full of others with bricked H950's...

From what I've heard LG goes by the S/N and date of manufacturing just like Lenovo for warranty. You can just ask their customer service if the warranty is active for your phone.
As for recovering it all you would've needed to do was use the tool as you stated. I have commented many times explaining people should only disable/freeze bloat and not *delete* anything (there are some crucial system apps, editing build prop seems to cause loops for me for ex.). There was another member in this situation if I remember correctly.
In case you can't go the warranty route ask Sj if he has found a way to push files while the phone is in DL mode.
Sent from my XT1528

Hi i have the same problem, I rename many apps in system folder of my ls996 zv8 and now the phone no boot and only show "LG Security Error"
I tried to rename the files in download mode but system partition is mounted as read only, and also fails when attempting to mount this in rw.
In 5.1.1 the download mode remove the option to read files from sd card.
I tried to mount the sd card, but I had no luck.
The sd-card is located in /sys/block/mmcblk1
cat /proc/partitions show: 179 64 1921024 mmcblk1
Click to expand...
Click to collapse
mount -t vfat -o rw,dirsync,nosuid,nodev,noexec,relatime,uid=1023,g id=1023,fmask=0007,dmask=0007,allow_utime=0020,utf 8 /dev/block/vold/179:65 /data/media/1 , fail to mount
Click to expand...
Click to collapse

maxie.maverick said:
Hello
LG Security Error
Authentication Fail #9
10. I attempted to get to the recovery mode and deleted/erased all data & settings. No dice!
11. I'm still able to get to the download mode using the Volume-Up & USB connect method (& this is why I'm cursing myself at point "8" because I could have re-used the easy root method again to flash the img file).
12. I tried to use the "LG Mobile Support Tool", it recognizes the device correctly as "LGH950" but says V11z is the latest software update.
My question to experts: How SOL am I? I don't think LG would honor my warranty since the purchase is NOT from a authorized dealer/reseller. So no chance of warranty repair/replacement, no?
I looked everywhere (for close to 10 hours) for KDZ & TOT files to even attempt something. But I couldn't find anything for H950. Man, I hate AT&T so much now... Why couldn't they just leave the bootloader unlocked? Or LG (AT&T?)even provide the necessary files to start off with?
Could someone with more knowledge please offer any help? Meanwhile, I've pretty much resigned to be joining the queue full of others with bricked H950's...
Click to expand...
Click to collapse
hey have u been able to fix the issue ??
as i just got the ls996 sprint g flex 2, and some how i renamed wrong system file, and got the same issue
my phone is stuck on
SECURITY ERROR
AUTHENTICATION ERROR #9
please help me out if someone around found a solution

same problem here

Security error authentication fail #9 on Lg tribute 2 LGLS665
Hello,
I am stuck on security error authentication fail #9 on Lg tribute 2 LGLS665 at start up.
Got this error when rename the Lgstartupwizard.apk to Lgstartupwizard.bak.
Please Help.........

Same phone and problem as op. H950 V11X Rooted "Authentication Failure #9". Anyone ever figure this out?
We just need someone with the H950 KDZ

Maybe as a G2 user I'm overlooking something but - why not download the kdz from http://csmg.lgmobile.com:9002/csmg/b2c/client/auth_model_check2.jsp?esn=XXXXXX (put your IMEI instead of Xs), eh?

Security Error
Thanks for the link ..
Its not helping me on Lg tribute 2 LGLS665. Below is the text received.
I have replaced the MEID number below with "X".
<response req_cmd="auth_model_check" status="OK">
<auth_model_check>
<result>2</result>
<esn>XXXXXXXXXXXXXX</esn>
<model>LGLS665</model>
<suffix>AVGMBLH</suffix>
<msn>XXXXXXXXX</msn>
<esn_date/>
<sw_version/>
<sw_url/>
<sw_locale_url/>
<sw_recommand_uri/>
<app_version/>
<app_url/>
<cs_em_flag>N</cs_em_flag>
<cs_em_uri>N</cs_em_uri>
<chip_type/>
<prod_type/>
<buyer>VGM</buyer>
<file_name/>
</auth_model_check>
</response>

mwedo said:
Maybe as a G2 user I'm overlooking something but - why not download the kdz from http://csmg.lgmobile.com:9002/csmg/b2c/client/auth_model_check2.jsp?esn=XXXXXX (put your IMEI instead of Xs), eh?
Click to expand...
Click to collapse
Hey man, thanks for the suggestion, but tried that too. Did not get an option to download the kdz when I entered IMEI. Here's the screenshot I get.

hi sorry to bump in
but i made the huge mistake in renaming system apps, so now bootloop and same security error condition with a ls996 zv6,
1.- i know that don't even think to try to downgrade from zv6 to zv5 tot= Brick.
2.- is there a way to push, copy (aroma file manager, twrp file manager), in normal or stock recovery?
3.- is there a way to flash rootedsystem.img zv6 to the phone in: recovery, fastboot or even the command:
Step 11 flash commands:
For LS996 (ZV6/ZV7/ZV8)
Code:
dd if=/data/media/0/rootedsystem.img bs=8192 seek=58368 count=522240 of=/dev/block/mmcblk0, from another source, rather than from internal sd, because obviously i didn't copied to the device previously?
4.- already tried to flash from stock recovery, the ZV6 Update= update.zip but it gives an error to load because some system app not valid, i remember
please, if someone could help me and us with this problem
thank you very much indeed

atv said:
but i made the huge mistake in renaming system apps, so now bootloop and same security error condition with a ls996 zv6,
1.- i know that don't even think to try to downgrade from zv6 to zv5 tot= Brick.
2.- is there a way to push, copy (aroma file manager, twrp file manager), in normal or stock recovery?
3.- is there a way to flash rootedsystem.img zv6 to the phone in: recovery, fastboot or even the command:
Step 11 flash commands:
For LS996 (ZV6/ZV7/ZV8)
Code:
dd if=/data/media/0/rootedsystem.img bs=8192 seek=58368 count=522240 of=/dev/block/mmcblk0, from another source, rather than from internal sd, because obviously i didn't copied to the device previously?
4.- already tried to flash from stock recovery, the ZV6 Update= update.zip but it gives an error to load because some system app not valid, i remember
please, if someone could help me and us with this problem
thank you very much indeed
Click to expand...
Click to collapse
Only solution is to send it back to LG.
There is no way (yet) to flash with dd command from external SD.
and there is no other tot besides ZV5 and as you said thats a Hard brick.

hi
Alex_XV6700 said:
Only solution is to send it back to LG.
There is no way (yet) to flash with dd command from external SD.
and there is no other tot besides ZV5 and as you said thats a Hard brick.
Click to expand...
Click to collapse
thank you very much indeed for your answer, but as another reply i posted, as question in other thread, read this, maybe a solution if semi bricked, LG security error, in: zv06, zv07 or zv08, if it turns to be truth....
hi...... there is a forum member form another site that claims to have a zv8 rooted tot to sell, but i'm not sure if its true or reliable, claims that it fix bricks and its a 4.3 gb file, does anybody knows about it?
any help or guide please, thank you very much indeed
File name:LGLS996AT-00-ZV8-SPR-US-AUG-18-2015+01.zip
Android OS version:5.1
File Download:
Buy topic
Existing 2 People buy This topic is to be paid to the author 1000 Credits Before viewing
This TOT firmware contains the ROOT authority, after the success of flashing, ROOT success
TOT firmware flashing effect:
1.brick the repair
2, upgrade ROM
3, downgrade ROM
4, remove the lock screen password
5, Clear Google locks
6, restore factory settings
Tips:
1,This TOT firmware suitable for LGFlashTool.
2,After the purchase of the post, hidden content will be displayed, then you can free download attachments.
3,After purchase is successful, the second time to visit this page does not appear charges prompt.

atv said:
thank you very much indeed for your answer, but as another reply i posted, as question in other thread, read this, maybe a solution if semi bricked, LG security error, in: zv06, zv07 or zv08, if it turns to be truth....
hi...... there is a forum member form another site that claims to have a zv8 rooted tot to sell, but i'm not sure if its true or reliable, claims that it fix bricks and its a 4.3 gb file, does anybody knows about it?
any help or guide please, thank you very much indeed
File name:LGLS996AT-00-ZV8-SPR-US-AUG-18-2015+01.zip
Android OS version:5.1
File Download:
Buy topic
Existing 2 People buy This topic is to be paid to the author 1000 Credits Before viewing
This TOT firmware contains the ROOT authority, after the success of flashing, ROOT success
TOT firmware flashing effect:
1.brick the repair
2, upgrade ROM
3, downgrade ROM
4, remove the lock screen password
5, Clear Google locks
6, restore factory settings
Tips:
1,This TOT firmware suitable for LGFlashTool.
2,After the purchase of the post, hidden content will be displayed, then you can free download attachments.
3,After purchase is successful, the second time to visit this page does not appear charges prompt.
Click to expand...
Click to collapse
Well I wouldnt trust this.
But if this only flashes the system partition well it shouldnt be harmful. You could download the zv6 stock sys.img and flash it afterwards so you can ota update your phone to zv9 and then root again.
But like I said I wouldnt suggest that...

Alex_XV6700 said:
There is no way (yet) to flash with dd command from external SD.
Click to expand...
Click to collapse
Why no? You can use Push_file.exe.

MAXIMATOR said:
Why no? You can use Push_file.exe.
Click to expand...
Click to collapse
Please, elaborate....

jplum22 said:
Please, elaborate....
Click to expand...
Click to collapse
https://www.google.com.ua/#q=Push_file.exe
---------- Post added at 11:30 AM ---------- Previous post was at 11:26 AM ----------
LS9960 ZV6 with
LG Security Error
Authentication Fail #9
was secsessfuly unbricked without SDcard using Push_file.exe for send system.img to internal sdcard

Well this is new @MAXIMATOR at least it is to me.
If you let me I can add this to my back to stock forum.

Push_file.exe can not send files larger than 16 MB . the image to be split into files no more than 16 MB , after which they can be sent to the device . On the device, combined to one file.

MAXIMATOR said:
Push_file.exe can not send files larger than 16 MB . the image to be split into files no more than 16 MB , after which they can be sent to the device . On the device, combined to one file.
Click to expand...
Click to collapse
I've already tried. It doesn't work. Files can not be combined.
http://forum.xda-developers.com/g-flex2/help/to-unbrick-g-flex-2-ls996-t3286105

How to unroot Sprint LG G Flex 2 on ZV6?

Ok so I purchased a brand new Sprint G Flex 2 on ebay http://www.ebay.com/itm/221950977883 and to my surprise it was already rooted with firmware ZV6 so now I can't take OTA updates since it stops updating halfway through the update and the green Android guy lies on his back with the "error" message. I already did the full unroot method using SuperSU but still a no go. Before I send this phone back to the seller I want to make sure if there is any hope in fixing this issue and allowing the updates. I also downloaded the root checker app to see if root was gone and it states root is not configured correctly. Not sure what that means as I used SuperSu to fully unroot. Any help would be appreciated as I only have 14 days to return this device to seller but I do not want it rooted as it prevents updates through Sprint. Thanks.

Update with lg windows app
Wysłane z mojego LG-H955 przy użyciu Tapatalka

skretch said:
Update with lg windows app
Wysłane z mojego LG-H955 przy użyciu Tapatalka
Click to expand...
Click to collapse
Thanks is there a forum here with instructions to use the LG Windows app. I just want to make sure I do not brick this device because then I can't return it in case things don't work out.

Download lg pc suite connect your flex 2 to usb instal drivers
Go to mobile devices-->mobile devices software upgrade
Wysłane z mojego LG-H955 przy użyciu Tapatalka

UCLA1 said:
Ok so I purchased a brand new Sprint G Flex 2 on ebay http://www.ebay.com/itm/221950977883 and to my surprise it was already rooted with firmware ZV6 so now I can't take OTA updates since it stops updating halfway through the update and the green Android guy lies on his back with the "error" message. I already did the full unroot method using SuperSU but still a no go. Before I send this phone back to the seller I want to make sure if there is any hope in fixing this issue and allowing the updates. I also downloaded the root checker app to see if root was gone and it states root is not configured correctly. Not sure what that means as I used SuperSu to fully unroot. Any help would be appreciated as I only have 14 days to return this device to seller but I do not want it rooted as it prevents updates through Sprint. Thanks.
Click to expand...
Click to collapse
Download the version you have, DO NOT I REPEAT DO NOT DOWNLOAD ANY VERSION THAT ISNT THE ONE YOU ARE USING YOU WILL BRICK. ZV6 for ZV6.
Here are the stock image files uploaded by me.
Follow this guide its the root guide but its the fastest method to unroot using stock images (same procedure). Good luck! :good:

UCLA1 said:
Ok so I purchased a brand new Sprint G Flex 2 on ebay http://www.ebay.com/itm/221950977883 and to my surprise it was already rooted with firmware ZV6 so now I can't take OTA updates since it stops updating halfway through the update and the green Android guy lies on his back with the "error" message. I already did the full unroot method using SuperSU but still a no go. Before I send this phone back to the seller I want to make sure if there is any hope in fixing this issue and allowing the updates. I also downloaded the root checker app to see if root was gone and it states root is not configured correctly. Not sure what that means as I used SuperSu to fully unroot. Any help would be appreciated as I only have 14 days to return this device to seller but I do not want it rooted as it prevents updates through Sprint. Thanks.
Click to expand...
Click to collapse
Those who want to unroot and go back to stock ZV6 (so they can get the OTA ZV9 update) should be able to use these "dd" flashing instructions:
http://forum.xda-developers.com/g-fl...5-1-1-t3169212
along with the stock ZV6 firmware image from here:
http://forum.xda-developers.com/g-fl...k-img-t3217089
However, you will not only lose root. You will also lose the SIM carrier unlock. After reverting your phone to stock, your phone will be carrier locked to Sprint. That's because carrier unlocking is done by altering some "node db" system files.
After applying the OTA update to ZV9, you will have to redo both the carrier unlocking and the rooting of your phone. It's doable, but it's just something to keep in mind.

wtang said:
Those who want to unroot and go back to stock ZV6 (so they can get the OTA ZV9 update) should be able to use these "dd" flashing instructions:
http://forum.xda-developers.com/g-fl...5-1-1-t3169212
along with the stock ZV6 firmware image from here:
http://forum.xda-developers.com/g-fl...k-img-t3217089
However, you will not only lose root. You will also lose the SIM carrier unlock. After reverting your phone to stock, your phone will be carrier locked to Sprint. That's because carrier unlocking is done by altering some "node db" system files.
After applying the OTA update to ZV9, you will have to redo both the carrier unlocking and the rooting of your phone. It's doable, but it's just something to keep in mind.
Click to expand...
Click to collapse
Thanks for the info. I have one question though. I did the unroot method using SuperSU and was wondering if that will not be enough to get OTA updates once I get my Sprint SIM card installed. From my knowledge if the system files were messed with OTA updates won't work correct and in this case you stated that carrier unlocking involves altering node db system files. So even if I did the full unroot method using SuperSU the altered files would remain correct?

UCLA1 said:
Thanks for the info. I have one question though. I did the unroot method using SuperSU and was wondering if that will not be enough to get OTA updates once I get my Sprint SIM card installed. From my knowledge if the system files were messed with OTA updates won't work correct and in this case you stated that carrier unlocking involves altering node db system files. So even if I did the full unroot method using SuperSU the altered files would remain correct?
Click to expand...
Click to collapse
I believe you are correct. Since the eBay seller altered some system files (that's probably why he rooted all these phones and installed SuperSU) to achieve the carrier unlocking, the OTA update for ZV9 is failing. Even if you unroot and delete all traces of SuperSU, I think the OTA will still fail. The update script probably does some sort of checksum verification of all the Android OS files before proceeding.
Also, I don't think you need a Sprint SIM in order to do the OTA update. I believe the OTA comes from LG's servers, not from Sprint. I've heard of people getting the OTA update even if they are using an AT&T or T-Mobile SIM. As long as your phone has data (cellular or Wifi) I think the OTA will download. But as you've found out, it won't install unless you go back to stock.

Alex_XV6700 said:
Download the version you have, DO NOT I REPEAT DO NOT DOWNLOAD ANY VERSION THAT ISNT THE ONE YOU ARE USING YOU WILL BRICK. ZV6 for ZV6.
Here are the stock image files uploaded by me.
Follow this guide its the root guide but its the fastest method to unroot using stock images (same procedure). Good luck! :good:
Click to expand...
Click to collapse
Thank you for the links I will give this a shot and hopefully I do not brick my device as the instructions are quite long lol. I will make sure I use the ZV6 as that is what I have on my device.

UCLA1 said:
Thank you for the links I will give this a shot and hopefully I do not brick my device as the instructions are quite long lol. I will make sure I use the ZV6 as that is what I have on my device.
Click to expand...
Click to collapse
From the guide you just have to follow
1. Download and extract the stock img.
2. Transfer it to the root of your internal sdcard (images are usually named ZV6system.img) avoid moving the complete zip.
3. Put your phone in download mode (you can figure this out)
4. Use the dd command for your variant in your case LS996, just change the name of the ¨rootedsystem.img¨ to the one you downloaded.
Aaaaaaaaaaaand you´re done :good:

Alex_XV6700 said:
From the guide you just have to follow
1. Download and extract the stock img.
2. Transfer it to the root of your internal sdcard (images are usually named ZV6system.img) avoid moving the complete zip.
3. Put your phone in download mode (you can figure this out)
4. Use the dd command for your variant in your case LS996, just change the name of the ¨rootedsystem.img¨ to the one you downloaded.
Aaaaaaaaaaaand you´re done :good:
Click to expand...
Click to collapse
I did everything in the guide and phone even rebooted when I typed LEAVE after the "#" prompt but I still can't take OTA and Android guy falls on back with "error" message. I have another question when I click in the status section in the About phone settings and I scroll down to Brand it lists Chameleon. Is this normal?

Did you download the stock image from the forum I made?
Cause if you flashed your current system.img then you flashed the rooted one.
Make sure you are using the Send_command on the diag port of your phone if you arent doing this then you wont flash correctly and phone will stay rooted.
And yes, when the phone hasnt been unlocked internationally Chameleon is the ¨Sprint stock way¨

Alex_XV6700 said:
Did you download the stock image from the forum I made?
Cause if you flashed your current system.img then you flashed the rooted one.
Make sure you are using the Send_command on the diag port of your phone if you arent doing this then you wont flash correctly and phone will stay rooted.
And yes, when the phone hasnt been unlocked internationally Chameleon is the ¨Sprint stock way¨
Click to expand...
Click to collapse
I did flash the ZV6 stock image from your forum http://forum.xda-developers.com/g-flex2/general/return-to-stock-ls996-stock-img-t3217089 and I used the send command to port 5 because that is where the Diag port is when I double click the ports.bat file. I actually tried this method twice and I still am not able to update without error. Maybe I do need a SIM card installed and will try it tomorrow when I get my SIM delivered from Sprint. Thanks a lot for the tips though.

UCLA1 said:
I did flash the ZV6 stock image from your forum http://forum.xda-developers.com/g-flex2/general/return-to-stock-ls996-stock-img-t3217089 and I used the send command to port 5 because that is where the Diag port is when I double click the ports.bat file. I actually tried this method twice and I still am not able to update without error. Maybe I do need a SIM card installed and will try it tomorrow when I get my SIM delivered from Sprint. Thanks a lot for the tips though.
Click to expand...
Click to collapse
Thats kind of weird you know, I OTA updated my phone even after international SIM unlocked.
How long does the flash process take? If it takes less than a minute then its not doing things as it should.
Did you enable USB Debugging before flashing?
Have you tried to Factory Reset after flashing the stock ZV6 system.img?

Alex_XV6700 said:
Thats kind of weird you know, I OTA updated my phone even after international SIM unlocked.
How long does the flash process take? If it takes less than a minute then its not doing things as it should.
Did you enable USB Debugging before flashing?
Have you tried to Factory Reset after flashing the stock ZV6 system.img?
Click to expand...
Click to collapse
I do have USB Debugging enabled. The flash process takes around 1 minute and then the # shows up indicating it finished and then I type LEAVE and phone reboots. I even tried the factory reset after flashing it with the stock ZV6 image. This is very interesting but I will wait until tomorrow to make a decision on whether to keep the phone when I insert the SIM and see if that helps any. Thanks Alex for all your help.
I forgot to ask this but do I have to type the commands or is copying and pasting ok.

UCLA1 said:
I do have USB Debugging enabled. The flash process takes around 1 minute and then the # shows up indicating it finished and then I type LEAVE and phone reboots. I even tried the factory reset after flashing it with the stock ZV6 image. This is very interesting but I will wait until tomorrow to make a decision on whether to keep the phone when I insert the SIM and see if that helps any. Thanks Alex for all your help.
I forgot to ask this but do I have to type the commands or is copying and pasting ok.
Click to expand...
Click to collapse
Well it depends on how did you copy/paste the command.
To flash the ZV6system.img it should be like this:
dd if=/data/media/0/ZV6system.img bs=8192 seek=58368 count=522240 of=/dev/block/mmcblk0

Alex_XV6700 said:
Well it depends on how did you copy/paste the command.
To flash the ZV6system.img it should be like this:
dd if=/data/media/0/ZV6system.img bs=8192 seek=58368 count=522240 of=/dev/block/mmcblk0
Click to expand...
Click to collapse
Thanks for your patience with me. Do I have to run both the dump and flash commands as I have only been doing the flash command and maybe that is the problem?
is this how the commands should be typed?
Dump command:
dd if=/dev/block/mmcblk0 bs=8192 skip=58368 count=522240 of=/data/media/0/system.img
Flash command:
dd if=/data/media/0/ZV6system.img bs=8192 seek=58368 count=522240 of=/dev/block/mmcblk0

I'm in a similar boat w/ a slightly different issue. I bought the same phone from the same guy and have not been able to get it to activate on Sprint at all. Well, it "activates" but then it errors on updating the PRL. I have LTE data, but no call ability. It is very strange.
So far I have:
Unrooted via SuperuserSU app that was installed
Taken it to Sprint store and had them do everything they could (while being condescending about buying a phone not from them)
Played with every setting I can find
Factory reset many times at many stages
Flashed to the stock ZV6
Installed 2 OTA updates (now a third is coming through)
And every time, I get a your phone has been activated message, followed by trying to update the PRL and failing, leaving me in the same place I was to begin with. I'll try it again after this latest OTA update I'm getting, but I'm running out of things to try and I'm extremely frustrated lol. Anybody had the same problem? Any ideas? Anything? I don't know if maybe it's just a defective phone... sigh. Thanks in advance for any help!

SteveRepsold said:
I'm in a similar boat w/ a slightly different issue. I bought the same phone from the same guy and have not been able to get it to activate on Sprint at all. Well, it "activates" but then it errors on updating the PRL. I have LTE data, but no call ability. It is very strange.
So far I have:
Unrooted via SuperuserSU app that was installed
Taken it to Sprint store and had them do everything they could (while being condescending about buying a phone not from them)
Played with every setting I can find
Factory reset many times at many stages
Flashed to the stock ZV6
Installed 2 OTA updates (now a third is coming through)
And every time, I get a your phone has been activated message, followed by trying to update the PRL and failing, leaving me in the same place I was to begin with. I'll try it again after this latest OTA update I'm getting, but I'm running out of things to try and I'm extremely frustrated lol. Anybody had the same problem? Any ideas? Anything? I don't know if maybe it's just a defective phone... sigh. Thanks in advance for any help!
Click to expand...
Click to collapse
Did you get a new SIM card from Sprint or did you use an old one because Sprint told me they need to send us one that has been programmed for the LG G Flex 2. On another note when flashed the stock ZV6 image did you send both the dump and flash commands and did you have problems getting the updates before you flashed to stock. Thanks.

UCLA1 said:
Did you get a new SIM card from Sprint or did you use an old one because Sprint told me they need to send us one that has been programmed for the LG G Flex 2. On another note when flashed the stock ZV6 image did you send both the dump and flash commands and did you have problems getting the updates before you flashed to stock. Thanks.
Click to expand...
Click to collapse
I picked up a new one at the Sprint store. I would hope they knew which one to give me haha. I only used the flash command. And yes, I had the same issue as you did with getting the updates before I flashed. No problem with that now, 3 updates later I'm on ZV9. Now if I could just get the phone activated...

[Q] What's the best way to root the D850 running stock Marshmallow?

I got the 6.0 update on my stock AT&T G3 a couple of days ago. Now I am looking to root the phone, but I am confused with the rooting method because all existing methods seem to either mention Kitkat/Lollipop, or the D855 unlocked version. What's currently THE way to root an AT&T G3 running stock Marshmallow?
Thanks!

svemprala said:
I got the 6.0 update on my stock AT&T G3 a couple of days ago. Now I am looking to root the phone, but I am confused with the rooting method because all existing methods seem to either mention Kitkat/Lollipop, or the D855 unlocked version. What's currently THE way to root an AT&T G3 running stock Marshmallow?
Thanks!
Click to expand...
Click to collapse
You'll need to downgrade using LGUP

You could always try KingRoot, however I'm not sure if it works on AT&T Marshmallow. I know it worked on the D855 Marshmallow. Worth a shot.

hyelton said:
You'll need to downgrade using LGUP
Click to expand...
Click to collapse
in reading the threads for lg up i'm unable to find the kdz for lp for the d850. i tried following the link to download official from lg firmware site and after inputting my imei it says not yet available...
any help greatly appreciated. TIA
my goal is to either install a custom recovery / rom
or downgrade to stock LP so i can root ... and then recovery > custom rom
edit: a bit of an update. I was able to get into adb and reboot to stock recovery. took a few tries. and ended up having to use adb over network (so i could keep the phone plugged in to wall charger, my pc charges it but i don't think very well so when i'd issue the reboot to recovery command it would start the loop again and i'd have to start over. finally got it to reboot to recovery. but now i'm stuck at trying to issue the fastboot boot <TWRP.IMG>
says "waiting for device" im so confused right now.... i did remember to plug it back into the computer after it entered recovery (lil green android guy with the text "no command" underneath)
plz someone save my ass! its almost 2:30 am here

killerskincanoe said:
in reading the threads for lg up i'm unable to find the kdz for lp for the d850. i tried following the link to download official from lg firmware site and after inputting my imei it says not yet available...
any help greatly appreciated. TIA
my goal is to either install a custom recovery / rom
or downgrade to stock LP so i can root ... and then recovery > custom rom
edit: a bit of an update. I was able to get into adb and reboot to stock recovery. took a few tries. and ended up having to use adb over network (so i could keep the phone plugged in to wall charger, my pc charges it but i don't think very well so when i'd issue the reboot to recovery command it would start the loop again and i'd have to start over. finally got it to reboot to recovery. but now i'm stuck at trying to issue the fastboot boot <TWRP.IMG>
says "waiting for device" im so confused right now.... i did remember to plug it back into the computer after it entered recovery (lil green android guy with the text "no command" underneath)
plz someone save my ass! its almost 2:30 am here
Click to expand...
Click to collapse
Here's your problem, as stated in my back to stock guide AT&T models and the D850 is TOT File only. You won't ever find a kdz because there is not one. You only have a kitkat tot file you can flash.

Samsung On5 G550T1 MetroPCS REV0.4 stock OS anyone?

Hi All,
The short of a long story is that I just changed carriers and found out way late that I couldn't bring my Sprint phone to MetroPCS. So now I'm using the budget PCS On5 that came with the deal when we signed up.
I successfully loaded TRWP and then rooted however, I didn't know about FRP until it smacked me in the face. The root went fine but later SU prompted me to update the binary and when it did, it tripped factory reset protection and soft bricked my phone.
I want to reinstall stock OS on this phone but it appears that I have a software version that I haven't been able to find on the web yet. I found the stock rom for the MetroPCS On5 easily enough but it's Revision 0.0 and the box I have for the phone says REV0.4.
When I try to Odin Flash the REV0.0 version, I get SW REV CHECK FAIL DEVICE 2, BINARY 1 fail. So I guess I had the latest software on my phone and the phone thinks I'm trying to roll back using the 0.0 revsion.
My question is this, does anyone here have the stock rom for G550T1 REV0.4? Help!
If nobody does, maybe I can still fix this phone. I have a TRWP backup from the sister phone (same model same revision 0.4) that I'm using right now but I can't get back into TRWP on the soft bricked phone to recover that way to use the backup file.
Next I thought I might take the backup files and turn it into a rom and just flash that. However, with the tutorials I followed I kept running into problems. When I went to unpack the files per the tutorial, my rar software said that the file was corrupt. Maybe it is. but maybe not. It was my first time attempting to make a rom. If I can't find the software I need, could any of you Android geniuses help me get this backup into a flashable format?
I have to admit I'm daunted by the FRS in 5.0 and above. Is it defeatable? How do you root newer Android versions?
Thanks!

I did the same thing to my phone. did you get yours fixed?> if so could you provide me with the rom?

I haven't found the fix yet. Hopefully somebody will come through with a helping hand!

I finally got it figured out! So here is what i did and hopefully it will work for you.
1. I Odin flashed a good BL from the ROM REV0.0 floating around on the net. So at least I could now get into download mode.
2. Then I used Kies3 > Tools > Firmware Upgrade and Initialisation. It will ask you for your model number and then when you click ok it will ask you for a SN.
3. The trick is that Samsung doesn't put the SN that you need on the phone or the box. (personally, I couldn't find it on the phone either once I got it up and running) so go here: https://forum.xda-developers.com/android/general/root-samsung-galaxy-on5-t3435457/page46 and get a SN from post #454 and use that. (don't forget to say thanks)
4. Click Ok. Let it work, and max and relax.
Mine took about 10 minutes. Hopefully this will work for you too! Thanks XDA!

Help!
What is BL from the ROM REV0.0? I need your help, I have the MetroPCS On5 and I installed Reborn ON5 I want to go back to the MetroPCS ROM because the camera and the audio do not work and I tried to install the original ROM through Odin but it does not work I get an error. What I can do? I would like to use this method but I do not have very clear files needed.
You could help me bro, I'll thank you