I caught the deal on ebay for an inexpensive Flex 2 not so long ago and, of course, the first thing I set out to do was update and root it.
The stock image ran 5.0.1, w/ firmware H950 v10b. I attempted an OTA update several days in a row, being told each time that none was available (the phone is AT&T branded and my service is through AT&T), but eventually grew impatient to get that sweet, sweet 5.1.1 action going.
After attempting to flash the 5.1.1 v11x rooted system image provided by randrew87 (here), I was greeted with a nifty little 'Security Error' boot screen and pursuant loop. Sadly, I wound up flashing the stock system dump I created following that tutorial to get back into a usable state.
Left with no other options (assuming, correctly, that I'm being impatient with OTA), I decided to try the 5.1.1 H950PR v15a firmware.
NOTE: Though I chose to flash the unrooted 5.1.1 H950PR image first, you may not have to complete this step; I'm not sure, but it's possible that you could simply write the rooted image instead.
First, I followed this wonderful tutorial by Sj12345: [KDZ] H950PR 5.1.1 compatible with ATT H950 with Video!!!
My initial plan was to write the unrooted system image and root using any of the available tutorials. Unfortunately, I couldn't get any of the tutorials to work for me as my device simply refused to allow r/w operations to /system while using the COM interface, regardless of my approach.
After a little trial and error, I discovered I could write the rooted H950PR-v15A image, provided here by Sj12345, and achieve root.
Here's how:
Download rootedsystem.img (from Sj12345's post)
Download LG Root Tools.zip (attached) and extract to a folder
Copy to the root of your internal sdcard via means of your choice (I used MTP mode and Explorer to drag and drop)
Power off your device
While holding VOLUME UP, insert a USB cable.
Open a Command Prompt window where you extracted the archive (easiest way is by holding Shift then right clicking within the folder > Open Command Prompt Here)
Double click ports.bat (included in the archive). Find the diagnostics port (in my case, COM4)
Type the following:
Code:
Send_Command.exe \\.\COM4
(replacing 4 w/ your com port)
You'll be greeted with a '#' prompt, terminal-style. From there, issue the following command (thanks to randrew87's thread):
Code:
dd if=/data/media/0/rootedsystem.img bs=8192 seek=53248 count=534528 of=/dev/block/mmcblk0
The operation will take a couple of minutes. Once complete, you'll again be greeted with the '#' prompt.
Type LEAVE (all capitals), and hit enter. Your phone will reboot and have a clean, rooted image installed.
Profit.
This guide is obviously very specific, requiring H950v10b 5.0.1 firmware on an AT&T flex 2, no OTA availability, and a myriad of other issues (such as /system being readonly). My hope is that this will aid others who don't fall exactly into the parameters described in existing tutorials.
Thanks again to randrew87 and Sj12345 for their great posts and work; this thread is merely a slightly different approach to their pre-existing methods. They did the work, not me!
Hope this helps someone!
Regards
Smith
Any reason to go with h950pr instead of Ota 5.1.1 or simply just out of frustration of waiting? I'm asking cause I should get my att flex 2 tomorrow.
bL33d said:
Any reason to go with h950pr instead of Ota 5.1.1 or simply just out of frustration of waiting? I'm asking cause I should get my att flex 2 tomorrow.
Click to expand...
Click to collapse
PR rom does not have all of the AT&T bloat. However, the main drawback that I'm aware of is that there is currently no way to go back to official AT&T. Seems everyone who has tried to do so has ended up with a bricked phone. You may also run into issues trying to get warranty honored once you move off the official AT&T version. So.. caveat emptor and all.
Most folks who really want the 5.1.1 OTA have managed to do so by laying down the minimum amount of cash for an AT&T gophone plan then getting on the horn with AT&T's tech support to have them manually push the update through.
Hi smithisize, thank you for your guide A very basic question, how do I know which version of root file to use? I just check in About Phone > Hardware Info and it said the phone was LG-H950.
Smithisize,
Thank you for the guide. I have a question.
My H950 has H950v10d 5.0.1 on it. I am just guessing that it would work for any 5.0.1 version.
Is this right?
Thanks again,
MB
Same here...
As Meatbag_1 written, I have the H95010d release witch rom we take???
Yes it will work for atnt g flex2 on atnt firmware 5.0.1 all subversions
Sent from my Lenovo P780 using Tapatalk
Isn't the latest software version for the US h950 the "v11x" version? Is it possible to flash that instead of the PR firmware?
No
Only OTA from AT&T
No flash
Sent from my LGLS996 using Tapatalk
I tried rooting my newly flashed 5.1.1pr with this method and got authentication error 11. I had to reflash to get out of the boot loop. What am i doing wrong?
Thanks man. How can i root it in the first place?
I was trying HERE but i do not know which to dowload, if H950 V11X or H950 V11Z ... can you help me with that?
H950v10d 5.0.1 not rooted. Tried method from OP using H950PR 5.1.1 rootedsystem.img. Now I am stuck at Security Error bootloop. Where to go from here?
Nevermind... Phone started non stop bootlooping with no way to shut it off. So, I smashed it to bits.
For Android 5.1.1 PR (Puerto Rico)
First Flash the KDZ file from here: http://forum.xda-developers.com/g-flex2/general/kdz-compatible-att-h950-t3180847 using LG Flash Tool. I use Build 03/07/2014 Offline with modded hosts file.
Then download the Rooted H950PR-v15A image file from the link provided and continue with the guide.
btw: thanks for adding; you type: "LEAVE" in caps. No other guide seemed to mention that and when I did, it was the only time it actually rebooted my phone..:good:
dustindavidson900 said:
H950v10d 5.0.1 not rooted. Tried method from OP using H950PR 5.1.1 rootedsystem.img. Now I am stuck at Security Error bootloop. Where to go from here?
Nevermind... Phone started non stop bootlooping with no way to shut it off. So, I smashed it to bits.
Click to expand...
Click to collapse
My Phone did that too but I caught it quickly between boots and got into download mode so I missed the satisfaction of smashing it..
twiice said:
My Phone did that too but I caught it quickly between boots and got into download mode so I missed the satisfaction of smashing it..
Click to expand...
Click to collapse
I was able to get to download mode, but it would just go into bootloop after entering download mode. I have another on the way, so hopefully things go better this time. Will try the method posted above.
Can you send me a link to download "LG Flash Tool Build 03/07/2014 Offline with modded hosts file?"
thanks
Your can download it from here:
http://forum.xda-developers.com/showthread.php?t=2797190
I ignore the warning about the kdz having to be in the flash tool directory. I just browse to the location I downloaded it to, never fails.
And about the hosts file, this version doesn't seem to need a modded hosts file as it won't try to connect. That was sth I had to do from an earlier version a long time ago and forgot.
Fyi: I soft-bricked my phone like many others having the same security error because of tring to install the rooted system image file for 5.1.1 over the top of 5.0.1. And to reboot from download mode I had to hold all three back-buttons.
To install Xposed framework follow this guide: http://forum.xda-developers.com/g4/themes-apps/guide-installing-xposed-locked-t3181593 but USE Flashfire 0.24 or earlier as the latest beta version won't flash sh*t on this phone (or the G4)
If you need detailed instructions let me know.
Good luck!
PS: I bought the AT&T version(5.0.1) for the 3GB of RAM but I live in Australia so couldn't get the 5.1.1 OTA which is why I had to do this way, but apparently if you flash the 5.1.1PR kdz over the 5.1.1 AT&T OTA update(just to avoid AT&T bloatware) it will brick your phone.
so i just purchased the the g flex 2 much like yourself and i have everything ready to go. My only concern before doing so is what to do after the soft brick. Once you reboot from download mode is, doesthe phone start normally? or is there an extra step since you talked about USE flashfire
PS. i dont care to root the phone or is it necessary for this all to work?
Updated H950 5.0.1 ATT to H950PR 5.1.1
had the lg drivers which i downloaded using the lg suite from the LG website ( i originally tried to update my phone using this method...didnt work obviously so i came here)
Used lg flash tool 2014 as provided from this forum.
Placed H950PR15a_00.kdz in the place where it asks in the tool
followed the guide, i had the phone in debugging mode and it was just on my homescreen unlocked, phone shut off restarted into download mode and started the firmware update, phone itself reset at 100% ( keep it plugged in)
Lg flash tool was still going at this point it was around 90%, phone was resetting when the lg flash tool hit 100% and then crashed ( had a panic attack really ) i kept the phone plugged in and it reset to the lg boot screen
Leaving it plugged in , in spanish i saw that it was optimizing my apps, went to the tutorial within the phone and it resarted again... so i started having another attack, i then saw the boot screen claro at this point i unplugged my phone and it is now on 5.1.1 h950PR i have not rooted the phone before hand it was stock from ATT.
Thought i put my experience in here with this phone in hope to ease some tension. it was easier than i thought even though the tool crashed at the end, phone had already accepted the KDZ at that point
twiice said:
For Android 5.1.1 PR (Puerto Rico)
First Flash the KDZ file from here: http://forum.xda-developers.com/g-flex2/general/kdz-compatible-att-h950-t3180847 using LG Flash Tool. I use Build 03/07/2014 Offline with modded hosts file.
Then download the Rooted H950PR-v15A image file from the link provided and continue with the guide.
btw: thanks for adding; you type: "LEAVE" in caps. No other guide seemed to mention that and when I did, it was the only time it actually rebooted my phone..:good:
Click to expand...
Click to collapse
Thanks mate. Ran into this problem when flashing the ATT version before flashing the PR version like I was going to. This solved it, thought I'd wrecked the phone for a sec.
Much appreciated
Hello
A brief timeline of events leading to this thread:
1. I purchased a G-Flex2 H950 from Ebay for $250 and was supposed to be upgrading from a Galaxy S4-I337.
2. Received my device yesterday and set out to update to 5.1.1 & root the device to remove bloatware.
3. I was able to update to 5.1.1 V11x using my StraightTalk sim on AT&T network.
4. After many frustrating hours of trying to root using different methods, I finally was able to root using the technique mentioned in this thread: http://forum.xda-developers.com/g-flex2/development/root-easy-root-att-flex-2-5-1-1-t3178354
5. A nice complement to point "4" above was the firmware update to 5.1.1 V11z.
6. Extremely happy that I was ready to rock, I set out to delete all the bloatware from my device.
7. First surprise obviously was the inability to remove a bunch of AT&T apps because "APK could not found" error.
8. Like the idiot that I am, I went ahead and deleted the "rootsystem.img" from the internal memory (unnecessarily, blame my OCD!).
9. Now after I finished de-bloating the device (or so I thought), I rebooted it and to my horror... I see the error message:
LG Security Error
Authentication Fail #9
10. I attempted to get to the recovery mode and deleted/erased all data & settings. No dice!
11. I'm still able to get to the download mode using the Volume-Up & USB connect method (& this is why I'm cursing myself at point "8" because I could have re-used the easy root method again to flash the img file).
12. I tried to use the "LG Mobile Support Tool", it recognizes the device correctly as "LGH950" but says V11z is the latest software update.
My question to experts: How SOL am I? I don't think LG would honor my warranty since the purchase is NOT from a authorized dealer/reseller. So no chance of warranty repair/replacement, no?
I looked everywhere (for close to 10 hours) for KDZ & TOT files to even attempt something. But I couldn't find anything for H950. Man, I hate AT&T so much now... Why couldn't they just leave the bootloader unlocked? Or LG (AT&T?)even provide the necessary files to start off with?
Could someone with more knowledge please offer any help? Meanwhile, I've pretty much resigned to be joining the queue full of others with bricked H950's...
From what I've heard LG goes by the S/N and date of manufacturing just like Lenovo for warranty. You can just ask their customer service if the warranty is active for your phone.
As for recovering it all you would've needed to do was use the tool as you stated. I have commented many times explaining people should only disable/freeze bloat and not *delete* anything (there are some crucial system apps, editing build prop seems to cause loops for me for ex.). There was another member in this situation if I remember correctly.
In case you can't go the warranty route ask Sj if he has found a way to push files while the phone is in DL mode.
Sent from my XT1528
Hi i have the same problem, I rename many apps in system folder of my ls996 zv8 and now the phone no boot and only show "LG Security Error"
I tried to rename the files in download mode but system partition is mounted as read only, and also fails when attempting to mount this in rw.
In 5.1.1 the download mode remove the option to read files from sd card.
I tried to mount the sd card, but I had no luck.
The sd-card is located in /sys/block/mmcblk1
cat /proc/partitions show: 179 64 1921024 mmcblk1
Click to expand...
Click to collapse
mount -t vfat -o rw,dirsync,nosuid,nodev,noexec,relatime,uid=1023,g id=1023,fmask=0007,dmask=0007,allow_utime=0020,utf 8 /dev/block/vold/179:65 /data/media/1 , fail to mount
Click to expand...
Click to collapse
maxie.maverick said:
Hello
LG Security Error
Authentication Fail #9
10. I attempted to get to the recovery mode and deleted/erased all data & settings. No dice!
11. I'm still able to get to the download mode using the Volume-Up & USB connect method (& this is why I'm cursing myself at point "8" because I could have re-used the easy root method again to flash the img file).
12. I tried to use the "LG Mobile Support Tool", it recognizes the device correctly as "LGH950" but says V11z is the latest software update.
My question to experts: How SOL am I? I don't think LG would honor my warranty since the purchase is NOT from a authorized dealer/reseller. So no chance of warranty repair/replacement, no?
I looked everywhere (for close to 10 hours) for KDZ & TOT files to even attempt something. But I couldn't find anything for H950. Man, I hate AT&T so much now... Why couldn't they just leave the bootloader unlocked? Or LG (AT&T?)even provide the necessary files to start off with?
Could someone with more knowledge please offer any help? Meanwhile, I've pretty much resigned to be joining the queue full of others with bricked H950's...
Click to expand...
Click to collapse
hey have u been able to fix the issue ??
as i just got the ls996 sprint g flex 2, and some how i renamed wrong system file, and got the same issue
my phone is stuck on
SECURITY ERROR
AUTHENTICATION ERROR #9
please help me out if someone around found a solution
same problem here
Security error authentication fail #9 on Lg tribute 2 LGLS665
Hello,
I am stuck on security error authentication fail #9 on Lg tribute 2 LGLS665 at start up.
Got this error when rename the Lgstartupwizard.apk to Lgstartupwizard.bak.
Please Help.........
Same phone and problem as op. H950 V11X Rooted "Authentication Failure #9". Anyone ever figure this out?
We just need someone with the H950 KDZ
Maybe as a G2 user I'm overlooking something but - why not download the kdz from http://csmg.lgmobile.com:9002/csmg/b2c/client/auth_model_check2.jsp?esn=XXXXXX (put your IMEI instead of Xs), eh?
Security Error
Thanks for the link ..
Its not helping me on Lg tribute 2 LGLS665. Below is the text received.
I have replaced the MEID number below with "X".
<response req_cmd="auth_model_check" status="OK">
<auth_model_check>
<result>2</result>
<esn>XXXXXXXXXXXXXX</esn>
<model>LGLS665</model>
<suffix>AVGMBLH</suffix>
<msn>XXXXXXXXX</msn>
<esn_date/>
<sw_version/>
<sw_url/>
<sw_locale_url/>
<sw_recommand_uri/>
<app_version/>
<app_url/>
<cs_em_flag>N</cs_em_flag>
<cs_em_uri>N</cs_em_uri>
<chip_type/>
<prod_type/>
<buyer>VGM</buyer>
<file_name/>
</auth_model_check>
</response>
mwedo said:
Maybe as a G2 user I'm overlooking something but - why not download the kdz from http://csmg.lgmobile.com:9002/csmg/b2c/client/auth_model_check2.jsp?esn=XXXXXX (put your IMEI instead of Xs), eh?
Click to expand...
Click to collapse
Hey man, thanks for the suggestion, but tried that too. Did not get an option to download the kdz when I entered IMEI. Here's the screenshot I get.
hi sorry to bump in
but i made the huge mistake in renaming system apps, so now bootloop and same security error condition with a ls996 zv6,
1.- i know that don't even think to try to downgrade from zv6 to zv5 tot= Brick.
2.- is there a way to push, copy (aroma file manager, twrp file manager), in normal or stock recovery?
3.- is there a way to flash rootedsystem.img zv6 to the phone in: recovery, fastboot or even the command:
Step 11 flash commands:
For LS996 (ZV6/ZV7/ZV8)
Code:
dd if=/data/media/0/rootedsystem.img bs=8192 seek=58368 count=522240 of=/dev/block/mmcblk0, from another source, rather than from internal sd, because obviously i didn't copied to the device previously?
4.- already tried to flash from stock recovery, the ZV6 Update= update.zip but it gives an error to load because some system app not valid, i remember
please, if someone could help me and us with this problem
thank you very much indeed
atv said:
but i made the huge mistake in renaming system apps, so now bootloop and same security error condition with a ls996 zv6,
1.- i know that don't even think to try to downgrade from zv6 to zv5 tot= Brick.
2.- is there a way to push, copy (aroma file manager, twrp file manager), in normal or stock recovery?
3.- is there a way to flash rootedsystem.img zv6 to the phone in: recovery, fastboot or even the command:
Step 11 flash commands:
For LS996 (ZV6/ZV7/ZV8)
Code:
dd if=/data/media/0/rootedsystem.img bs=8192 seek=58368 count=522240 of=/dev/block/mmcblk0, from another source, rather than from internal sd, because obviously i didn't copied to the device previously?
4.- already tried to flash from stock recovery, the ZV6 Update= update.zip but it gives an error to load because some system app not valid, i remember
please, if someone could help me and us with this problem
thank you very much indeed
Click to expand...
Click to collapse
Only solution is to send it back to LG.
There is no way (yet) to flash with dd command from external SD.
and there is no other tot besides ZV5 and as you said thats a Hard brick.
hi
Alex_XV6700 said:
Only solution is to send it back to LG.
There is no way (yet) to flash with dd command from external SD.
and there is no other tot besides ZV5 and as you said thats a Hard brick.
Click to expand...
Click to collapse
thank you very much indeed for your answer, but as another reply i posted, as question in other thread, read this, maybe a solution if semi bricked, LG security error, in: zv06, zv07 or zv08, if it turns to be truth....
hi...... there is a forum member form another site that claims to have a zv8 rooted tot to sell, but i'm not sure if its true or reliable, claims that it fix bricks and its a 4.3 gb file, does anybody knows about it?
any help or guide please, thank you very much indeed
File name:LGLS996AT-00-ZV8-SPR-US-AUG-18-2015+01.zip
Android OS version:5.1
File Download:
Buy topic
Existing 2 People buy This topic is to be paid to the author 1000 Credits Before viewing
This TOT firmware contains the ROOT authority, after the success of flashing, ROOT success
TOT firmware flashing effect:
1.brick the repair
2, upgrade ROM
3, downgrade ROM
4, remove the lock screen password
5, Clear Google locks
6, restore factory settings
Tips:
1,This TOT firmware suitable for LGFlashTool.
2,After the purchase of the post, hidden content will be displayed, then you can free download attachments.
3,After purchase is successful, the second time to visit this page does not appear charges prompt.
atv said:
thank you very much indeed for your answer, but as another reply i posted, as question in other thread, read this, maybe a solution if semi bricked, LG security error, in: zv06, zv07 or zv08, if it turns to be truth....
hi...... there is a forum member form another site that claims to have a zv8 rooted tot to sell, but i'm not sure if its true or reliable, claims that it fix bricks and its a 4.3 gb file, does anybody knows about it?
any help or guide please, thank you very much indeed
File name:LGLS996AT-00-ZV8-SPR-US-AUG-18-2015+01.zip
Android OS version:5.1
File Download:
Buy topic
Existing 2 People buy This topic is to be paid to the author 1000 Credits Before viewing
This TOT firmware contains the ROOT authority, after the success of flashing, ROOT success
TOT firmware flashing effect:
1.brick the repair
2, upgrade ROM
3, downgrade ROM
4, remove the lock screen password
5, Clear Google locks
6, restore factory settings
Tips:
1,This TOT firmware suitable for LGFlashTool.
2,After the purchase of the post, hidden content will be displayed, then you can free download attachments.
3,After purchase is successful, the second time to visit this page does not appear charges prompt.
Click to expand...
Click to collapse
Well I wouldnt trust this.
But if this only flashes the system partition well it shouldnt be harmful. You could download the zv6 stock sys.img and flash it afterwards so you can ota update your phone to zv9 and then root again.
But like I said I wouldnt suggest that...
Alex_XV6700 said:
There is no way (yet) to flash with dd command from external SD.
Click to expand...
Click to collapse
Why no? You can use Push_file.exe.
MAXIMATOR said:
Why no? You can use Push_file.exe.
Click to expand...
Click to collapse
Please, elaborate....
jplum22 said:
Please, elaborate....
Click to expand...
Click to collapse
https://www.google.com.ua/#q=Push_file.exe
---------- Post added at 11:30 AM ---------- Previous post was at 11:26 AM ----------
LS9960 ZV6 with
LG Security Error
Authentication Fail #9
was secsessfuly unbricked without SDcard using Push_file.exe for send system.img to internal sdcard
Well this is new @MAXIMATOR at least it is to me.
If you let me I can add this to my back to stock forum.
Push_file.exe can not send files larger than 16 MB . the image to be split into files no more than 16 MB , after which they can be sent to the device . On the device, combined to one file.
MAXIMATOR said:
Push_file.exe can not send files larger than 16 MB . the image to be split into files no more than 16 MB , after which they can be sent to the device . On the device, combined to one file.
Click to expand...
Click to collapse
I've already tried. It doesn't work. Files can not be combined.
http://forum.xda-developers.com/g-flex2/help/to-unbrick-g-flex-2-ls996-t3286105
Zte N9515 Boost Mobile.
I rooted the zte n9515 warp sync from boost mobile about a year ago, I received an OTA update one day, unrooted the phone and the phone still is stuck in a bootloop. I am able to get to stock recovery, but, my issue is I have done everything I could think of to unbrick that phone. Zte updates don't work, stock firmware doesn't work, zte open gives me a partition mbn error, all kinds of flash tools using .pit files bin files IMG files.... I haven't found a way to fix it yet... I'm not too familiar with adb commands and I've done the research.. Using android SDK I only receive an adb rejected shell command error and adb sideload continuously gives me E:2 footer[2]=0x00 footer[3]=0x00 E:signature verification failed error message... No matter what I sideload. I need help fixing this issue if anyone has a suggestion or the answer to this I would really appreciate it....
trysten711 said:
Zte N9515 Boost Mobile.
I rooted the zte n9515 warp sync from boost mobile about a year ago, I received an OTA update one day, unrooted the phone and the phone still is stuck in a bootloop. I am able to get to stock recovery, but, my issue is I have done everything I could think of to unbrick that phone. Zte updates don't work, stock firmware doesn't work, zte open gives me a partition mbn error, all kinds of flash tools using .pit files bin files IMG files.... I haven't found a way to fix it yet... I'm not too familiar with adb commands and I've done the research.. Using android SDK I only receive an adb rejected shell command error and adb sideload continuously gives me E:2 footer[2]=0x00 footer[3]=0x00 E:signature verification failed error message... No matter what I sideload. I need help fixing this issue if anyone has a suggestion or the answer to this I would really appreciate it....
Click to expand...
Click to collapse
My question should've been more direct, what adb commands can I use if fastboot commands won't work?
Wow! A year Later and No takers?
I Have the same issue as of 3 Days ago My ZTE N817 Quest Assurance mobile (Virgin Mobile) received a notice to OTA from Google... It Downloaded just fine.. at the Pause of Install screen I was busy with Grankids so hit Install...
Phone Booted into Recovery Mode (Bootloop)
and all sub flders/files in /fota... /etc... and /system... are Somewhere in the Ether, as far as i can tell.
Used ALL types of recovery methods... [Except oem Firmware... {it's a UNICORN}
unavailable from every ZTE site that claims *ALL ZTE ROMS*
And they often do have over 795 roms ... Just NOT that 1 i need ( ZTE N817 Quest 4.4.4 kitkat Qualcomm MSM8610 sdk19 )
I have Rooted it successfully and unlike so many Zte n817-s mine doesn't unroot @ reboot...
ANYWHO!
Hope ya find a solution i don't want to have to pay for anymore Forensic Applications to deep Force this Crap Box... Jes Sayin
I was told i could get a Forensic App from ZTE China by ZTE china and had to register as an Advocate tester/developer for the Company, and all discovery would be proprietary to them, and them Only!... OoooK!
I'm not gonna fix the issue then have someone else profit on it if i cannot SHARE IT!
CmeL8r
sent from acer 5250 laptop without keyboard