Related
I was comfortably running WETA rom on my US Cellular US996 and I decided to install Magisk so I could use Android Pay. Doing so only allowed me to boot into Fastboot and Download. So I put in download and flashed the KDZ for it. It worked for about 5 minutes and then I was greeted with a static screen. I then re-flashed and now I get a boot loop that i cant escape. I have flashed both the 1205 and 1216 kdz files, as well as a bunch of factory resets.
The boot loader is now locked as well.
Any help is appreciated. I have gotten kind of attached to this phone and have assigned sentimental value to it. I would really hate to rid of it.
Thank you much!
Anyone?
US99610f_00_1205.kdz is intended for the Unlocked (Non US Cellular) variant of the US996
US99610g_00_1216.kdz is intended for...supposedly...a "Brightpoint" variant of the US996
You should probably try out US99610h_00_0413.kdz which are intended for the US Cellular variant of the US996. Hopefully you have better luck with that.
McNutnut said:
US99610f_00_1205.kdz is intended for the Unlocked (Non US Cellular) variant of the US996
US99610g_00_1216.kdz is intended for...supposedly...a "Brightpoint" variant of the US996
You should probably try out US99610h_00_0413.kdz which are intended for the US Cellular variant of the US996. Hopefully you have better luck with that.
Click to expand...
Click to collapse
Nope, that didn't do it.
WinterDeer said:
Nope, that didn't do it.
Click to expand...
Click to collapse
Without an unlocked bootloader I don't see much else that can be attempted. While I doubt it would work, you could try to flash the Unlocked US996 KDZ and then attempt to unlock your booatloader using LG's online tool. I've seen a report that the the LG website was flagging someones phone as the US Cellular variant when they flashed the US Cellular firmware onto their Unlocked variant. Possibly you could have some luck the other way around making LG's website think your phone is an Unlocked variant. If that works, you could possibly unlock your bootloader and try some more additional steps.
Another option is to open an RMA with LG. I've heard of them being pretty lenient on bricked phones due to root attempts.
Has any find a way to fix the issue with the latest ota update on the sprint ls997. its saying invalid sim and cant get into the bootoader so no root or even into the hidden menu option
What do you mean by "wave lost"? In order for people to help you, you need to detail what exactly you are trying to do, what you previously did before issues arose, and what is currently wrong with the phone. The ls997 doesn't have an unlockable bootloader or fastboot commands, so there isn't anything you can do from the bootloader.
After updating my lg ls997 to ZVC firmware and resetting the phone its saying invalid sim so no network service cant load into boot-loader either or go into hidden menu. I cant make or received any calls or even flash a different rom
Ah. There's a thread somewhere by runningnak3d that details the issues people are having with unlocking the carrier variants. If you are using the ls997 (Sprint device) on another network, many people have been reporting issues with the unlocked state resetting upon updating or wiping the data partition. Many of the people have root though, so they can either downgrade their firmware, or try different modems. If you're not rooted currently, there is no way to do this at the moment for Sprint devices with zv8 or higher due to antirollback being enabled. Here's the thread https://forum.xda-developers.com/v20/how-to/hardware-modem-modem-firmware-ril-t3744860
@Zhanozuki Are you using your phone on a network besides Sprint? If so, was it working before you took the OTA update?
Also, were you rooted, or were you asking if there is a way to root?
-- Brian
invalid sim
runningnak3d said:
@Zhanozuki Are you using your phone on a network besides Sprint? If so, was it working before you took the OTA update?
Also, were you rooted, or were you asking if there is a way to root?
-- Brian
Click to expand...
Click to collapse
Yes i was using it on different network in my country which is "Digicel". i didn't have root because i just received the phone after purchasing it off eBay. I didn't get time to root it i just put in my sim using it for 3 hours saw the update went ahead and update then reset when i lost network:crying: now my phone is useless
Hmm. @runningnak3d this is almost the exact same situation that happened to those us996 users from England. They took the 10n ota and suddenly their phones could no longer connect to their network. One of them sent his phone to LG and it was found that there were non-LG parts in the phone that would cost 378 to replace. Some of these refurb phones being sold by not reputable vendors are replaced with knock-off Chinese mobos and parts that break very easily. May not be the case here but just a thought.
Here is a link to that thread https://forum.xda-developers.com/v20/help/lg-v20-us996-radio-off-security-update-t3718507
It think it much more likely that the Sprint modem had bands enabled that Sprint doesn't use, and they sent out a modem that disabled those bands.
OMG OH NOES someone can use our phone on another network -- hurry up and disable that!
Super Di**s
-- Brian
Is it possible to safely flash a us996 unlocked rom onto my ls997zvc? And will it allow me to continue to use my gsm att based sim card? I bought this phone used the other day. He said it was Verizon unlocked but turns out its this sprint model. No carrier branding anywhere. No splash screen on boot. I almost thought it was a non carrier based unlocked phone until i looked up the model number.
Bump
Buuuuuump. I bought my phone through sprint, paid it off, they keep telling me It's unlocked, but i have to factory reset every time i turn my phone off to get it to work with the other carrier sim. I've contacted them over and over and all they say is "we sent the unlock signal, that's all we can do on our end" but their signal is only working on factory reset. I really want to root this and install the unlocked firmware so i can have my phone without having to reinstall everything constantly. I mistakenly upgraded to ZVC update before having it unlocked and now I'm stuck. Any updates on an unlock eta?
Unfortunately I believe that ZVC is ARB 2 and it has the latest lafd with copy2 pulled, so that means that even once the lafsploit is finished, the LS997 will not be able to use it because you can't roll back to a firmware version that has copy2. If I am wrong, and ZVC is still ARB 1, then you can roll back to a version that has copy2.
If I can find a dump of the ZVC firmware, I can tell you for certain what ARB version it is. If no one has made a dump, you can do it yourself by grabbing the patched LG UP, and used the dump option. If you grab one of the full stock flashable zips from another model, you can see what partitions need to be included. I could just tell you, but I think people need to learn
-- Brian
I accidentally updated mine to zvd the other day. A brand new release. Would be very nice if you could tell me exactly how to flash the us996 firware safely. Ther3 has to be a way to unlock this damned phone. I paid 200 for it and now i am ****ed.
Please help me out. I could post a dump of the zvd firmware if i can figure it out
runningnak3d said:
Unfortunately I believe that ZVC is ARB 2 and it has the latest lafd with copy2 pulled, so that means that even once the lafsploit is finished, the LS997 will not be able to use it because you can't roll back to a firmware version that has copy2. If I am wrong, and ZVC is still ARB 1, then you can roll back to a version that has copy2.
If I can find a dump of the ZVC firmware, I can tell you for certain what ARB version it is. If no one has made a dump, you can do it yourself by grabbing the patched LG UP, and used the dump option. If you grab one of the full stock flashable zips from another model, you can see what partitions need to be included. I could just tell you, but I think people need to learn
-- Brian
Click to expand...
Click to collapse
Yo im back zvc is ARB01 btw. Im looking for a way to root it PM me if ya wanna talk.
Please let me know if find a way for zvd. Im stuck with a worthless phone because of some lying asshole on cl.
@me2151 Welcome back dude
If all goes as planned, we will soon be able to root any model on any ARB version. My info above about ARB 2 being an issue was incorrect (must have been on crack when I typed that post).
LG phones with unlockable bootloaders (or that have an engineering aboot / abl) will be rootable indefinitely -- a hole that can't be closed without changing their security significantly.
-- Brian
runningnak3d said:
@me2151 Welcome back dude
If all goes as planned, we will soon be able to root any model on any ARB version. My info above about ARB 2 being an issue was incorrect (must have been on crack when I typed that post).
LG phones with unlockable bootloaders (or that have an engineering aboot / abl) will be rootable indefinitely -- a hole that can't be closed without changing their security significantly.
-- Brian
Click to expand...
Click to collapse
Please keep me informed on your progress. I really just want to do this to gsm unlock my phone for my at&t sim card. Guy sold me it saying it was unlocked already.
Do i have to root to flash us996 rom onto my phone? And does that unlock it or the root method from dirty santa exploit what uicc unlocks the phone. I read tidbits of information on this forum that say the phone is uicc unlocked after rooting and/or flashing us996 firmware, but all are supposedly only possible on zv7 or older firmware of Sprint phones.
runningnak3d said:
Unfortunately I believe that ZVC is ARB 2 and it has the latest lafd with copy2 pulled, so that means that even once the lafsploit is finished, the LS997 will not be able to use it because you can't roll back to a firmware version that has copy2. If I am wrong, and ZVC is still ARB 1, then you can roll back to a version that has copy2.
If I can find a dump of the ZVC firmware, I can tell you for certain what ARB version it is. If no one has made a dump, you can do it yourself by grabbing the patched LG UP, and used the dump option. If you grab one of the full stock flashable zips from another model, you can see what partitions need to be included. I could just tell you, but I think people need to learn
-- Brian
Click to expand...
Click to collapse
me2151 said:
Yo im back zvc is ARB01 btw. Im looking for a way to root it PM me if ya wanna talk.
Click to expand...
Click to collapse
Hello, I'm here with Ls997 ZVA, ARB=1 and are waiting for any update from you guys.
Thank you ^^
Does anybody know If i can do the similar thing but towards using TMobile network?? Can I flash Tmo H918 stock rom to LS997 Sprint variant?? I just want to use my Tmo Sim, or maybe if my LS997-SVC still a problem?
Andy Chi said:
Does anybody know If i can do the similar thing but towards using TMobile network?? Can I flash Tmo H918 stock rom to LS997 Sprint variant?? I just want to use my Tmo Sim, or maybe if my LS997-SVC still a problem?
Click to expand...
Click to collapse
2 years late but better than never I suppose?
No idea what my LS997 is using. Performed the dirty santa a long time ago to root, and just this morning I flashed /e/OS over Lineage to test the waters with a de-googled experience. I'm now on T-mobile magenta max plan following the merge and daily driver is a Pixel 4A 5G. Popped the SIM into the V20 running /e/OS and data works but voice and text do not. Not sure if this is a hardware, firmware, or software incompatibility.
Honestly the V20 really pissed me off with how locked down it was. I am NEVER buying a phone that is not easy to root or repair. that is 100% deal breaking for me. Pixel phones have unlockable bootloaders so not too much bull**** necessary to break from the clutches of these damn phone companies and carriers.
Without AT&T's help?
No, you can contact AT&T, https://www.att.com/deviceunlock
Yes you can. I've done it with a site called unlockplus.
Here you go. Flash one of these KDZ to carrier unlock the phone. You want the ones that say "open" -- which means they are not locked to a carrier.
https://lg-firmwares.com/lg-lmv350ulm-firmwares/firmwares/
https://lg-firmwares.com/lg-lmv350em-firmwares/firmwares/
Top link is for North America Google Fi variant.
Bottom link is for Central/South America -- but if you use that, you do NOT want Claro. You want the other one (carrier unlocked) MIA.
Yeah, flashing an unlocked firmware won't unlock this device. Why in the world would you post something ridiculous like this? How can you have 8185 posts and not know what unlocking means? smh
zeek6228 said:
Yeah, flashing an unlocked firmware won't unlock this device. Why in the world would you post something ridiculous like this? How can you have 8185 posts and not know what unlocking means? smh
Click to expand...
Click to collapse
So your saying that wont work.. I was just about to figure out how to flash it. Good thing i didnt or i would have more than likely bricked it.
zeek6228 said:
Yeah, flashing an unlocked firmware won't unlock this device. Why in the world would you post something ridiculous like this? How can you have 8185 posts and not know what unlocking means? smh
Click to expand...
Click to collapse
Just so you know, you're replying to a guy who (besides other feats) made it possible for anyone to carrier unlock virtually any LG V30 model no matter what carrier it was on previously. And that was made exactly by crossflashing. So yeah, I would kinda listen to him.
zeek6228 said:
Yeah, flashing an unlocked firmware won't unlock this device. Why in the world would you post something ridiculous like this? How can you have 8185 posts and not know what unlocking means? smh
Click to expand...
Click to collapse
Because that's EXACTLY how we carrier unlock the LG V30/V30+. We flash carrier unlocked firmware over carrier locked firmware -- specifically AT&T and Sprint variants. The principle should be the same with the AT&T LG V35.
Besides the two carrier locked North American LG V30 phones (AT&T & Sprint), some of the European LG V30 are also carrier locked. Cross flashing the region appropriate "open market" firmware carrier unlocks them.
I haven't done it on LG V35, but I've done it many, many times on the predecessor LG V30/V30+.
We flash V30 firmware and forth at will to carrier unlock the phones, get fastboot flash commands, bootloader unlock, install TWRP and root. The simplest of all these goals is carrier unlock.
____________
MorbidMonkey101 said:
So your saying that wont work.. I was just about to figure out how to flash it. Good thing i didnt or i would have more than likely bricked it.
Click to expand...
Click to collapse
He says it won't work. Whereas I've carrier unlocked several LG V30/V30+ doing EXACTLY that. And so have hundreds of other people. I've written a couple of guides on the subject.
While I've not done it on LG V35, I suggested this method because it seems reasonable and logical based on the immediate V30 predecessor.
Something similar (cross flashing) also worked on the LG V20. However, in both cases we had Dev Patched LGUP to use. IF it doesn't work for the LG V35, that would be why -- because perhaps the appropriate .dll has not been used to create LG V35 dev patched LGUP.
I can't guarantee it will work on LG V35, the way I can guarantee it does for the LG V30.
lg V35
You can flash it and it will boot (not dead, frozen or stuck in Qualcomm 9008 mode like when you normally flash mismatched firmware, picks up signal fine)
Yes I am aware of how to unlock G6, V30 and G7 by flashing a different firmware and I have unlocked several HUNDRED of them. Even LS998 on V22B firmware.
This will flash successfully (I use Octopus tool, the newest LGUP tool is not released so can't do it that way) but it will still show the V350AWM model and will still be locked to AT&T. Only it will remove the AT&T bloatware.
It is a good solution to flash these if you brick your device. But it won't unlock them.
zeek6228 said:
You can flash it and it will boot (not dead, frozen or stuck in Qualcomm 9008 mode like when you normally flash mismatched firmware, picks up signal fine)
Yes I am aware of how to unlock G6, V30 and G7 by flashing a different firmware and I have unlocked several HUNDRED of them. Even LS998 on V22B firmware.
This will flash successfully (I use Octopus tool, the newest LGUP tool is not released so can't do it that way) but it will still show the V350AWM model and will still be locked to AT&T. Only it will remove the AT&T bloatware.
It is a good solution to flash these if you brick your device. But it won't unlock them.
Click to expand...
Click to collapse
1) Well debloating V35 is at least one advantage others will like, even if it won't carrier unlock it -- and this answer is much better than your first attempt. Can you also now access the bootloader on the V35 and do fastboot flash commands work when, once you flash the open market KDZ? Cross flashing carrier locked North America V30/V30+ to open market US998 allows this, besides carrier unlocking them.
2) If you are aware of how to to carrier unlock AT&T H931 V30 and Sprint LS998 V30/V30+ by flashing different firmware -- like to the US998 V30 open market KDZ -- as well as other LG phone series (G6/G7) using the same technique, and you say you have carrier unlocked "several hundred" by using that technique (with Octopus box, it seems), then your previous insulting post looks like it was written by someone totally ignorant of this Frankenstein process which we use every day to carrier unlock phones like this...
zeek6228 said:
Yeah, flashing an unlocked firmware won't unlock this device. Why in the world would you post something ridiculous like this? How can you have 8185 posts and not know what unlocking means? smh
Click to expand...
Click to collapse
zeek6228 said:
You can flash it and it will boot (not dead, frozen or stuck in Qualcomm 9008 mode like when you normally flash mismatched firmware, picks up signal fine)
Yes I am aware of how to unlock G6, V30 and G7 by flashing a different firmware and I have unlocked several HUNDRED of them. Even LS998 on V22B firmware.
This will flash successfully (I use Octopus tool, the newest LGUP tool is not released so can't do it that way) but it will still show the V350AWM model and will still be locked to AT&T. Only it will remove the AT&T bloatware.
It is a good solution to flash these if you brick your device. But it won't unlock them.
Click to expand...
Click to collapse
I have pulled the RSA certs from every model V35, G7, and V40 that are currently available, and LG learned their lesson from the WTF V30 exploit .. they use different certs for every model.
If you have cross flashed the V35, or G7 .. you are only flashing boot and system. If you had flashed an RSA signed partition, you would have had a brick.
I will be glad to post the certs if you like.
-- Brian
Oh sorry I didn't mean it to be insulting at all but flashing these files will not unlock it.
I'm new on this forum. Sorry for being disrespectful.. Everyone is very thankful to you Only WTF? Why would you suggest to flash something if you never tried it before?
To flash I did flash these firmwares but I used Octopus box (super highly recommended)
Lets do something constructive here though. If you have signed cert files let me test it. I have a couple AT&T V350AWM, we can brick them, it is OK. I'll load anything and post results here.
Again sorry about insulting retort but a forum like this should have only 100% clean reliable info.
Hello everyone,
I just bought a LGV35 form eBay for a few bucks but has bad imei is there any chance that I can unlock the phone? I want to use it outside USA, any idea or can somebody help me?
Regards
runningnak3d said:
I have pulled the RSA certs from every model V35, G7, and V40 that are currently available, and LG learned their lesson from the WTF V30 exploit .. they use different certs for every model.
If you have cross flashed the V35, or G7 .. you are only flashing boot and system. If you had flashed an RSA signed partition, you would have had a brick.
I will be glad to post the certs if you like.
-- Brian
Click to expand...
Click to collapse
Interesting, since the G7 and even V35 was released before V30 WTF was discovered (mid-May 2018). @TxanMoe started the WTF thread with his "crazy" story May 14 -- and you helped him unbrick his phone soon after that. I wrote the WTF instructions on May 21.
Well, V35 was released beginning of June 2018, but it was already in the pipeline by May 2018.
The RSA stuff for every variant is probably more an extension of what LG started with T-Mobile H932...
Very sad.
ChazzMatt said:
Interesting, since the G7 and even V35 was released before V30 WTF was discovered (mid-May 2018). @TxanMoe started the WTF thread with his "crazy" story May 14 -- and you helped him unbrick his phone soon after that. I wrote the WTF instructions on May 21.
Well, V35 was released beginning of June 2018, but it was already in the pipeline by May 2018.
The RSA stuff for every variant is probably more an extension of what LG started with T-Mobile H932...
Very sad.
Click to expand...
Click to collapse
Well, let me clarify. I have only been able to check models that have a KDZ that I can pull the certs from. Any model that either never has KDZ (AT&T or Sprint), or if a KDZ isn't publicly available yet .. I haven't been able to check since I can't get anyone to dump abl.
I will try to post a list of the ones I have checked when the holidays are over.
-- Brian
Hi
I have a lg v35 at&t unlocked and I'm using another carrier(metro pcs) but i can't update it to the latest software version.
Is there any way to get the latest software version?
rapidrayo said:
Hello everyone,
I just bought a LGV35 form eBay for a few bucks but has bad imei is there any chance that I can unlock the phone? I want to use it outside USA, any idea or can somebody help me?
Regards
Click to expand...
Click to collapse
I bought one too. It's bad esn. So someone can help to unlock to use it outside USA? I already tried unlocking company but they didn't find the code... Thanks:good:
Klenti said:
Hi
I have a lg v35 at&t unlocked and I'm using another carrier(metro pcs) but i can't update it to the latest software version.
Is there any way to get the latest software version?
Click to expand...
Click to collapse
How did you go about unlocking it? Did you buy it from ATT without a contract.. Did you use an unlocking service or from att directly for unlock?
Klenti said:
Hi
I have a lg v35 at&t unlocked and I'm using another carrier(metro pcs) but i can't update it to the latest software version.
Is there any way to get the latest software version?
Click to expand...
Click to collapse
If you put an AT&T MVNO sim in it, it should update. When I put a Red Pocket Mobile (MVNO) sim in my v35 along with wifi working, it updated the software to version V350AWM10w even though the phone was not yet activated on the red pocket network. If you can find a pre-paid AT&T sim, it should also work, but I'm guessing there.
(note, my v35 is locked to AT&T, I wonder if your phone being unlocked might have some other 'thing' that might be stopping it from updating)
So I picked up this old flagship budget phone and I was having no service at all. I tried resetting the phone, and reconfiguring APN settings, scanning for networks, but nothing worked.
So I did some research, and it turns out I was told I was getting the US996 (factory unlocked) version which is compatible with all carriers. But when I look under the battery, it says LS997 instead. But when I look at the software settings, it says Software Version US99610p. The seller must have flashed the US996 firmware onto an LS997 (Sprint) phone.
So at this point, I'm pretty sure I got scammed, and the sad part is this phone isn't refundable. I thought maybe if I could somehow get this phone off the US996 firmware and back to the LS997 firmware it originally came with, I'd have no problems. My carrier is Sprint as well.
But the sad part is, there's no LS997 KDZ's which I could just flash, since Sprint, unlike other carriers, does not release KDZ's.
So at this point, what are my options? Any help will be greatly appreciated.
Not sure if this is of much help, but if I were you I would unlock the bootloader and just flash a custom rom.
d2xTaimen said:
Not sure if this is of much help, but if I were you I would unlock the bootloader and just flash a custom rom.
Click to expand...
Click to collapse
I thought of that, but should I use the LS997 method or the US996 method to unlock?
Honestly Im not too sure since I have a H918 and none of those, Take my info with a grain of salt as I might be wrong, I think that the firmware update partition is not a part of the OS so you may be able to get away using the LS997 method?