Downgrade to unlock FRP lock? - LG G6 Questions and Answers

Coming from GNote 3, totally new to LG devices.
Locked Verizon G6 V988T has Google FRP lock, trying to remove it.
After going through frp unlock process and getting to file manager, bringing up settings I am getting a reduced version of settings. Options are wifi and data only; and if you click more there's only bluetooth and hotspot. And that's it. So I have no way of enabling install from unknown sources, so that I can install slide.
When I use the other method where in chrome you search for a business number, hit call and it brings up the dial pad so that you can dial service menu, there's no response. Even dialing imei does not bring the imei ID number. Seems this is disabled too.
I have no idea what software version is installed currently but it seems those two options/routes have been disabled/blocked. So my thinking is to downgrade to 7.0, follow the FRP unlocking procedure. Then install TWRP, root it.
I cannot properly ID the correct older kdz file for this phone.
1-Can you guys confirm if my steps are the way to go in order to be able to unlock frp, and,
2-a link to the correct kdz version for this phone?

Took a while/couple of tries but mission accomplished.

Related

LG G5 RS988 Removing RAC (rent a center) remote locking software

Hello,
I hope this post is not against the rules, but I believe I found out how to remove the Rent a Center tracking and locking software that I believe if from computrace that is installed on our devices. It acts like a root kit that automatically reinstalls itself and has a device administrator profile that you can not remove.
I think I figured out how to get rid of the RAC (rent a center) lock for good. The rac lock uses a system administrator profile along with a program called sec.abt that can not be removed or frozen. If you manage to uninstall it is just reinstalls itself. I was not able to find any information on how to remove this without using special hardware like an octopus box that costs hundreds of dollars.
I used LGUP with the uppercut modification (can be found here on XDA) along with the KDZ files from here https://lg-firmwares.com/lg-rs988-firmwares/
I was only able to find the USA RSS 11C firmware until I found the page linked above with the BPT 10D firmware. Whenever you flash the stock 11C USA firmware the RAC program comes back and once connected to the net will lock your device, however if you use LGUP and uppercut to flash the BPT 10D firmware using the upgrade option (refurbish will error out) I found that my device booted correctly and seemed to work, however I did not have any fastboot options and it said there were no updates available (you need fastboot to unlock the bootloader and the latest update grants that ability). I then reinstalled the USA 11C firmware and to my delight found that the RAC software and device administrator profile were gone.
I then checked for updates and it started download the latest update. I believe I will not have a problem unlocking the bootloader and rooting from this point on. I'll let you guys know if anything changes.
I'm only posting this because I have been sitting on a RAC locked phone for months that got locked over six months after I bought it used and really hope this can help someone else that got screwed over.
Bought my phone almost a year ago off ebay woke up yesterday to this RAC device lock. This worked for me thanks.
Well done..
This happened to me after buying a device off of ebay.. thankfully RAC lock happened within a couple of days and I was able to use the ebay return policy.. I'm gonna pass this on to the dude who sold it to me as he got conned as well.. I verified the original RAC owner with RAC.. the device was purchased in Puerto Rico..
Cheers!
I'm trying to do same with V20 (us996) , but there is only one firmware avaliable :| no older or newer firmwares
Nothing seemed to happened after I tried to flash back to stock using either file. Do you know what I might have done wrong?
EDIT: It works now. Not sure what happened buy after my 7th attempt, the flash went smoothly and I was able to follows inaudible101 instruction to remove RAC lock. Thanks for the help!
inaudible101 said:
Hello,
I hope this post is not against the rules, but I believe I found out how to remove the Rent a Center tracking and locking software that I believe if from computrace that is installed on our devices. It acts like a root kit that automatically reinstalls itself and has a device administrator profile that you can not remove.
I think I figured out how to get rid of the RAC (rent a center) lock for good. The rac lock uses a system administrator profile along with a program called sec.abt that can not be removed or frozen. If you manage to uninstall it is just reinstalls itself. I was not able to find any information on how to remove this without using special hardware like an octopus box that costs hundreds of dollars.
I used LGUP with the uppercut modification (can be found here on XDA) along with the KDZ files from here https://lg-firmwares.com/lg-rs988-firmwares/
I was only able to find the USA RSS 11C firmware until I found the page linked above with the BPT 10D firmware. Whenever you flash the stock 11C USA firmware the RAC program comes back and once connected to the net will lock your device, however if you use LGUP and uppercut to flash the BPT 10D firmware using the upgrade option (refurbish will error out) I found that my device booted correctly and seemed to work, however I did not have any fastboot options and it said there were no updates available (you need fastboot to unlock the bootloader and the latest update grants that ability). I then reinstalled the USA 11C firmware and to my delight found that the RAC software and device administrator profile were gone.
I then checked for updates and it started download the latest update. I believe I will not have a problem unlocking the bootloader and rooting from this point on. I'll let you guys know if anything changes.
I'm only posting this because I have been sitting on a RAC locked phone for months that got locked over six months after I bought it used and really hope this can help someone else that got screwed over.
Click to expand...
Click to collapse
Hey bro, thanks for the input.
I know you're talking about LG G5 but Im exactly in the same situtation for an LG V20 us996(Unlocked version), I have kinda tried this but didnt work. Do you have any advice or any other thing to consider you could tell me so I try on my phne? I cant access the phone to activate usb debugging nor oem unlock
Thanks man!
I got USB debugging to turn on, but the settings close everytime I try to turn on the oem unlocking.
Sent from my LG-US996 using Tapatalk
ThaHaloMilitia said:
I got USB debugging to turn on, but the settings close everytime I try to turn on the oem unlocking.
Click to expand...
Click to collapse
If you go into safe mode you can turn on USB debug as well as enable OEM unlock. You can normally get into safe mode by holding power button like your going to shut it off only hold the power off till a screen pops up. Select turn on and phone will reboot into safe mode.

Help Remove or Bypass FRP

I have done a lot of reading on this matter, and am just wondering if there is any way still possible to get beyond the FRP?
FWIW, this is a company phone and the former user doesn't remember the password.
I have tried the RootJunky method, but it seems that the Verizon setup wizard differs just enough to make his method ineffective.
I have tried Xboxexpert's method, but the problem with his method is that a prerequisite of USB Debug must be enabled. I don't know how to do this w/o getting access to the settings menu. Also, in his instructions, you must select option 5 at the menu, but only 4 options existed when I was able to get to said menu.
I have tried RealTerm, but I only get errors, despite using copy/paste to ensure the correct syntax is used. I did get Realterm to call the phone once, but like many others, the follow-up screen was not as depicted - no options whatsoever; just the flashing call length.
I have tried flashing a different ROM, but discovered the ROM is separate from FRP and doesn't help.
Currently, PI3 is installed. I tried to flash back to PE1, but fails in Odin.
Anyone have any ideas?
We have several other S7 that are untouched. Is there a way to make an image from a non-FRP-bricked phone, and then deploy it to the FRP-bricked phone?
I could be wrong, but isn't the password the person's current Google password? I just had to give someone my Google password because I sold him my old phone on Swappa and it was FRP. Did it over the phone and then changed my password immediately after he got access to the phone. If this is a different kind of FRP, just ignore.

Is it possible to bypass FRP* without bootloade unlock?

I bought cracked essential phone on ebay and replace screen today(aliexpess part is wondeful!!!)
But realize this phone is bad esn & locked by FRP.
Actually bad esn is not important for me cuz I am staying outside of US, but FRP lock is serious problem
I read the thread about essential phone bypass but It is not possible to use that method cuz my phone is not bootloader unlocked.
I also try to bypass by refering* google pixel method one, but not possible as well(bypass app is 'corrupted'. Can install but cant launch)
I search on google for more than 5days and now exhasted T T.
Is there anyone did bypass FRP on same situation with me?
1. Now I can access to Setting and apex launcher main page. But cant activate USB debugging.
2. can use OTG.
3. Version is 7.1.1
cjsdntlswh said:
I bought cracked essential phone on ebay and replace screen today(aliexpess part is wondeful!!!)
But realize this phone is bad esn & locked by FRP.
Actually bad esn is not important for me cuz I am staying outside of US, but FRP lock is serious problem
I read the thread about essential phone bypass but It is not possible to use that method cuz my phone is not bootloader unlocked.
I also try to bypass by refering* google pixel method one, but not possible as well(bypass app is 'corrupted'. Can install but cant launch)
I search on google for more than 5days and now exhasted T T.
Is there anyone did bypass FRP on same situation with me?
1. Now I can access to Setting and apex launcher main page. But cant activate USB debugging.
2. can use OTG.
3. Version is 7.1.1
Click to expand...
Click to collapse
Contact the seller.
You will not get help regarding this issue.
MOD ACTION:
Thread closed.

SM-935A FRP Lock, am I screwed? (accidentally upgraded to Binary A)

Purchased the phone off guy on Facebook. It appears that he wiped it without realizing about the FRP lock. It had 7.0 on it. I tried all the tricks you see on the youtube videos to bypass FRP but none of them worked. I know how to use ODIN and Z3X, so I flashed an 8.0 firmware thinking I would try some of the bypass methods for 8.0. Those didn't work so then I tried to move back to 7.0.....and then I learned that you can't downgrade bootloaders. In odin it would say Fused 10 > Binary 4, for example. To be clear, the firmware that I am on is G935UUESACSF1.
The next thing I tried was to load a combination firmware. I used G935AUCUAASF1. That allowed me to load up "Factory Binary" and within that firmware I have access to the settings menu and IMEI dialer. I went into the menu, enabled developer options, and made sure that USB debugging was enabled. There was no option for "OEM Unlock". I used the dialer to bring up USB settings and set it to MTP+ADB. Then I brought up Z3X 29.5 thinking I would use the FRP unlock feature there. The SM-935A does not have a feature for that, but the SM-935T and F models do. So I took a risk and pulled up the T model and I selected FRP Reset. It did it's thing and it said that it was successful. I followed the instructions to do a factory data wipe directly after.
I wasn't sure what to do next, so I put the phone back into download mode and used ODIN to flash the 8.0 firmware back on. When that booted up, nothing had changed..it was still FRP locked. I'm not sure if I'm missing something in the process or what I should do next, if anything can be done. It seems I'm very limited in what I can do because from what it seems, I can't downgrade to a lower bootloader binary so I can't, for example, go back to 7.0 or 6.0.1. I can't even go back to earlier versions of 8.0 and try some of the tricks for those (like the S Voice Terms and Conditions trick..S Voice isn't listed during startup on my firmware)...
Anything that I can do? Any help is appreciated.
Can you get into custom recovery? If you can, flash no verity opt encrypt and it will be fixed or if not, also flash RMM bypass
freakwithracket said:
Purchased the phone off guy on Facebook. It appears that he wiped it without realizing about the FRP lock. It had 7.0 on it. I tried all the tricks you see on the youtube videos to bypass FRP but none of them worked. I know how to use ODIN and Z3X, so I flashed an 8.0 firmware thinking I would try some of the bypass methods for 8.0. Those didn't work so then I tried to move back to 7.0.....and then I learned that you can't downgrade bootloaders. In odin it would say Fused 10 > Binary 4, for example. To be clear, the firmware that I am on is G935UUESACSF1.
The next thing I tried was to load a combination firmware. I used G935AUCUAASF1. That allowed me to load up "Factory Binary" and within that firmware I have access to the settings menu and IMEI dialer. I went into the menu, enabled developer options, and made sure that USB debugging was enabled. There was no option for "OEM Unlock". I used the dialer to bring up USB settings and set it to MTP+ADB. Then I brought up Z3X 29.5 thinking I would use the FRP unlock feature there. The SM-935A does not have a feature for that, but the SM-935T and F models do. So I took a risk and pulled up the T model and I selected FRP Reset. It did it's thing and it said that it was successful. I followed the instructions to do a factory data wipe directly after.
I wasn't sure what to do next, so I put the phone back into download mode and used ODIN to flash the 8.0 firmware back on. When that booted up, nothing had changed..it was still FRP locked. I'm not sure if I'm missing something in the process or what I should do next, if anything can be done. It seems I'm very limited in what I can do because from what it seems, I can't downgrade to a lower bootloader binary so I can't, for example, go back to 7.0 or 6.0.1. I can't even go back to earlier versions of 8.0 and try some of the tricks for those (like the S Voice Terms and Conditions trick..S Voice isn't listed during startup on my firmware)...
Anything that I can do? Any help is appreciated.
Click to expand...
Click to collapse
can you Kindly Share the stock rom you used. i am having the Same issues. Thank you in advance .

ASUS_A009 ZenFone 5 V500KL Live

I have this phone (ASUS_A009 ZenFone 5 V500KL Live) and I've yet to find a reliable resource to unlock the bootloader. I sure rooting the phone won't be a problem but the bootloader has been the time consumer today. Am I just missing something here. I've done every method I ran across on XDA pertaining to ZenFone. I am about to attempt to flash firmware with an image for the only other phone similar to this one (except the VZW part). I say that because when you look up "ASUS_A009 specs" in Google you'll get the V520KL but upne further investigation I found otherwise. There is talk about the ENG Firmware Allowing for OEM unlock through fastboot. I grabbing at air here.
RawAmphetamine said:
I have this phone (ASUS_A009 ZenFone 5 V500KL Live) and I've yet to find a reliable resource to unlock the bootloader. I sure rooting the phone won't be a problem but the bootloader has been the time consumer today. Am I just missing something here. I've done every method I ran across on XDA pertaining to ZenFone. I am about to attempt to flash firmware with an image for the only other phone similar to this one (except the VZW part). I say that because when you look up "ASUS_A009 specs" in Google you'll get the V520KL but upne further investigation I found otherwise. There is talk about the ENG Firmware Allowing for OEM unlock through fastboot. I grabbing at air here.
Click to expand...
Click to collapse
For Oem unlock, go to settings, then about phone, them software version and tap 7 times on that. Then go back to settings and tap on developer options. Then inside developer options, tap oem toggle. After this do unlock process with computer

Categories

Resources