[Guide][English] Unbrick your LG G3

My first Christmas present was very nice. I was on my way to a small village in the Paris area, I had just left the A5 and entered this jungle that Parisians seem to love: la Francilienne. Luckily my phone, LG G3 « International » (D855 for short), was there to guide me.

It is at that moment that my smartphone suddenly passed away. Switch off, impossible to turn it back on: bootloop of CyanogenMod 13, freeze when bootingTWRP to try to reflash quickly CM, finally stuck on the LG logo.

After hours of research, all kinds of crafts … My phone is alive. What if I told you we’re gonna fix it?

 

Well. Let’s play?

 

Step 1 : pre-requisites

 

 

I put everything you need in the zip file, except for the TOT file that contains the original firmware, as it is kind of big (>2Gb). Link for this firmware file follows.

We’ll need a computer running Windows (I did this guide under Windows 7) and:

  • LG drivers for the phone
  • Qualcomm HS-USB drivers (for this famous « 9008 » thingy)
  • DSEO, to use unsigned drivers under Windows
  • BoardDiag by willcracker
  • 2-3 files, like DLL linked to specific phone models
  • LG G3’s firmware (TOT format)
  • LG Flash Tool v1.8
  • a little piece of metal such as iron wire
  • a little screwdriver

 

The thing is, to install Qualcomm drivers, your Windows installation needs to be in « test mode » as they’re not signed by Microsoft: if you’re in « regular mode », you won’t be able to use those drivers. So, to start, download and extract the zip archive I linked above, and open the folder « 1-DSEO » and execute the .exe file as an administrator. Enable test mode and reboot.

After the reboot, you’ll notice near the clock that your test mode is enabled. 😉

Then, install the content of the folder « 2-Drivers », with the appropriate setup (32 or 64 bits depending on your OS) for the Qualcomm drivers, then install LG drivers.

 

Step 2 : that f*ckin’ 9008 mode

Some of us think that Qulacomm SoC are indestructible.

Actually, according to phone models (because that part does not apply only to LG G3, but to any Qualcomm Snapdragon-based phone), there is a « recovery mode » that communicates (or try to, at least) with the chip to say « hey, it’s going to be okay, you can get back to work ». A phone placed in this mode is recognized as QHSUSB__BULK by Windows if the correct drivers are not installed, and as « Qualcomm HS-USB QDLoader 9008 » (COM port, in fact) if drivers are OK. This will allow us to use other tools to fix all that mess.

So, at this point, if you’re « lucky », your phone seems to simply not want to switch on, and it is possible it locks securely into 9008 mode, in which case you just have to plug it to tue computer to check … or you’re less fortunate and you’re stupidly starring at the LG logo waiting for it to vanish. Phone may eventually enter in fastboot mode after 15-20min. Note that this fastboot mode does you no good, since it only gives errors if you try to use it.

 

Teardown

If you’re stuck with LG logo… Real fun is around the corner. Open up your G3, pull the battery out and take off the 8 screws that maintain the upper plastic part on the motherboard. Leave the one just near the camera in place, it’s okay. Pull of the SIM card / SD card, if any.

You’re now facing your phone’s motherboard. There’s a « metal block » in the middle of the mobo, you can safely remove it, it should come very easily.

shortme

There we are. We’re going to use a metal wire to make contact between the 2 red dots  you can see on the picture above. You’ll have to maintain contact between those points, and use you 3rd hand to connect the USB cable to your computer. Windows should detect the device almost instantly. Count to 5 seconds, and release the contact.

Windows’ Device Manager is your best friend now: go check that the COM port we were talking earlier is detected (Qualcomm 9008…).

 

Now, let’s get the party started

Download  from StorageCow the TOT file corrsponding to your phone. The link points to the folder for « LG G3 international D855 », the model we have here in Europe. You want to download V10E firmware, in 16Gb or 32Gb depending on your phone.

Once the file is on your computer, simply open the « 3-BoardDiag by willcracker » folder of my archive and run BoardDiag. Fill the window as below:

Capture2

BIN should refer to your TOT file and DIR to the folder you want to extract the TOT file to. click on Extract, and let the magic be. No, it’s not frozen, even if if looks like it is… that process may take 10-15min 😉

  1. AP Check : self-explaining
  2. EMMC Test : we’ll check internal memory for defects… don’t select a specific particion, we’ll test the entire EMMC
  3. AP chipset : B2 corresponds to our G3’s chip
  4. Com port : the one affected by Windows (see your device manager 😉 )

Once the extraction process is done, point « Target dir » to the same folder, double chek COM port and click « START ».

If you’re lucky enough (again) both of the tests will be OK. If, like me, you have nothing but a huge FAIL on the EMMC test, in the options list switch « Read/Write » to « Erase », unplug/plug your G3 (always with your metal wire to have 9008 mode, that’s pain in the a*s but it’s mandatory) and click START again. Internal memory will be entirely erased. Do a « read/Write » again, this time it should be a PASS. :mrgreen:

Now untick EMMC Test select « RESTORE BOOT IMG ». Choose and restore, one by one and in the right order: aboot, BackupGPT, boot, dbi, laf, PrimaryGPT, recovery, rpm, tz. Check there’s no errors during the process!

Once it’s OK and ONLY if everything’s OK, put the battery back into the phone (still connected to the computer) and flash the Sbl1 partition. This will cause the phone to reboot. DO NOT FLASH SBL1 BEFORE THE OTHER PARTITIONS (you want super-brick? 😉 ).

 

Weeeell. If the TOT file you have corresponds exactly to the ROM you were running before the crash, your phone MAY start normally. Otherwise, unplug the USB cable, remove the battery, put it back in place, keep pressing Vol+ button and plug again the USB cable. When you see the « Download Mode » screen, release Vol+ button.Now you should see the « Firmware upgrade » screen, and believe me, that’s a relief. \o/

 

Step 3 : back to stock

We just need to flash stock ROM then.

Install LG Flash Tool from « 4-LG Flash Tool v1.8 » folder, but don’t run it yet. Replace the MegaLock.dll file in C:\LG\LGFlashTool\ with the one in the archive.

In the devices manager, right click on « LGE AndroidNet USB Serial Port » and go to Properties> Port settings > Advanced, and change COm port to 41. Apply.

 

Back to LG Flash Tool, tick « Select Manual Mode », point the DLL thing to the given « LGD855_20140526_LGFLASHv160.dll » file, which corresponds (again) to D855 ONLY.Other DLL are in their respective folders on StorageCow, along with TOT files.

Click « Add » button on the right of S/W and point to your TOT file.

Capture

Click OK, and in the main window just click on the yellow arrow. You may need to unplug and plug back your phone (again, in Download Mode) for the transfer to start. This may take a while to begin, maybe 1 minute.

Transfer should be quick (less than 5min) and Flash Tool should throw an error somewhere after 85% (not a problem, the phone should be restarting: every error after 85% should be fine).

Note : I personnally couldn’t transfer my ROM, I faced an error that was caused by LG Flash Tool not being fully compatible with USB3. Try again with a USB2 port, or another computer.

 

Capture

(yeah, interface changed, I had to move to my old laptop with Windows 7 and… USB2 ports…)

 

Once you’re done, you should be able to boot your G3 into Android !! 😀

 

I included in the archive another version of LG Flash Tool 2014, for KDZ files flashing, if that’s more convenient for you. If you’re not sure about how to fill the window, just ask.

 

Bonus : G3’s IMEI is gone

Well, remember? We wiped everything. Maybe a full wipe was not required, I don’t know, maybe wiping some partitions only would have been enough. But for now, our IMEI is « 000 », and no phone carrier will allow our G3 to connect to one of its antennas.

As we are all serious guys, we all have our backup of the EFS partition, right? You know, one you should have done with TWRP right before flashing it for the 1st time…

 

This is the most simple way : root our firmware(Android 4.4.2 : easy), install TWRP, put the backup on an external SD card and restore it.

 

Root

You need to go into your phone settings, tap 7 times on build number to unlock Developer Options, and in this section you have to enable USB debugging (ADB). Then, run the installer in the folder « 5-Root » and launch the tool. Plug the G3 to the computer and click « Start ». You’ll have to authorize the computer fingerprint on the phone, tick « Always » of course. the script should be doing its magic right now.

TWRP

I included TWRP 2.8.7.0 by jon777 with modem support, F2FS and so on. Once you’ve rooted the phone, open the folder « 6-TWRP », right click in it while pressing Shift key. You’ll be able to open an invite from here. AGAIN, this TWRP file is for D855 only. For other variants, download it from here.

In the console, enter : adb.exe push recovery.img /sdcard/, adb.exe shell, then su. SuperSU should pop on the phone: authorize the shell. You’re now root. Enter: dd if=/dev/zero of=/dev/block/platform/msm_sdcc.1/by-name/recovery, and dd if=/sdcard/recovery.img of=/dev/block/platform/msm_sdcc.1/by-name/recovery.

Now type exit twice, and finally adb.exe reboot recovery. The phone should reboot right into TWRP!

Now you’re free to restore an EFS backup, a full backup…

 

What if I don’t have any EFS backup?

Too bad. I faced this issue once (that’s why I have a backup of my EFS, now…), you can apply GZ’s method on the G3. Just go to DroidViews and follow the instructions.

 

Over!

Here we are. I survived 3 days without my phone, and I wanted to demonstrate that there’s always something to do before throwing something away and replacing it by a new one. I flash CyanogenMod 13 again, along with OpenGApps, and I’m fine for now.

Big thanks (really !) to 777jon, team codefire, l33tlinuxh4x0r, hacklockx, hyelton and xian2786 from XDA forums for their guides and tools which helped me going through this.

43 commentaires sur “[Guide][English] Unbrick your LG G3

  • 2 janvier 2016 à 3 h 20 min
    Permalink

    Thank you, excellent guide, helped me restore my phone!

    Réponse
  • 3 janvier 2016 à 20 h 53 min
    Permalink

    Hi, I can’t download the files, it always interruptd the download in the middle, do you havo other link?

    Thanks

    Réponse
    • 8 janvier 2016 à 17 h 32 min
      Permalink

      try disabling antivirus or another antispyware you have

      Réponse
  • 7 janvier 2016 à 0 h 33 min
    Permalink

    hello good I have a LG G3 d855.lo I want to know is you have to do to come out of Qualcomm’s what poreso want more details on that little red dot to connect with otro.espero your reply soon, thanks

    Réponse
  • 8 janvier 2016 à 15 h 34 min
    Permalink

    Thank you alot!!!, I agree with Artem, excellent guide, helped me restore my phone! I had problems with root and TWRP because my pc not recognize the connection port once recovered, but avoid stress to the method and realized by the playstore app (how to root via stumproot, and TWRP); I did not have my E.FS Backup and perform the recommended procedure and all ok.

    Réponse
  • 16 janvier 2016 à 14 h 08 min
    Permalink

    hiPeace

    Highly detailed guide Thank you very much.
    I need your help, I went through all the steps I found at:

    Now, let’s get the party started

    I set up the software the guide and I got an error:

    FAIL on the EMMC test

    I changed the parameter Read / Write »to« Erase

    And again I got the error:

    FAIL on the EMMC test

    Then I try again, click Start, open a window and write in English and Chinese

    Device DLOAD mode
    device was not found in dload trying flash peogrammer

    I click OK, the window closes and then when I press Start again, the window reappears.

    Only when I disconnect the USB cable from the computer and the author briefly again then I’m able to do the test, but he failed.
    FAIL on the EMMC test

    The device always is in Download Mode and appears port:
    RELINK HS-USB QDLoader 9008

    My component can not be right at all and it always is in Download Mode?

    I did not do short the guide, because the computer also detected me.
    It has always seemed stuck in a download mode.

    There is another option? Short elsewhere as will enable progress?
    Thank you very much for your help,
    Eliran

    Réponse
    • 28 janvier 2016 à 21 h 36 min
      Permalink

      If your device is detected by your PC, I suggest you spend at step 3: back to stock

      Réponse
    • 20 décembre 2016 à 18 h 32 min
      Permalink

      Did you find a solution. Same problem here

      Réponse
  • 24 janvier 2016 à 12 h 31 min
    Permalink

    Hello,

    how is anyone able to « connect this to GND »?! Sorry, totally impossible here… i can’t imagine that « average user » user has the necessary tools and knowledge and is able to this.

    Best regards

    Réponse
    • 28 janvier 2016 à 20 h 46 min
      Permalink

      You need not be so exact to make contact with the ground points if you touch the other points there is no problem, it is important that those marked connect to identify cell in the computer, I used just a piece of a line cable charger from another cell.

      Réponse
  • 30 janvier 2016 à 16 h 34 min
    Permalink

    Hi,
    I did a hard brick of LG LEON LTE H345 while flashing with a wrong KDZ file. It is not responding for any button press. Tried following the http://open-freax.fr/guide-unbrick-your-lg-g3/ link shared on XDA. Not of big help since i do not see device specific entries also the partition.txt does not exist error appears with broaddiag tool

    Please help

    Réponse
  • 7 février 2016 à 1 h 22 min
    Permalink

    Hello, i’m doing all the steps correctly, but i still having the FAIL: sbl1 partition write fail.. sector 0x28000
    i changed to erase, and again to read/write and the same problem, how i can pass this ??
    someone know how to fix it?
    Pleasee!!

    thanks

    Réponse
  • Ping : [Tutorial] Get rid of the EMMC issues

  • Ping : [Tutorial] Get rid of the EMMC issues | education android

  • Ping : [Tutorial] Get rid of the EMMC issues – user's Blog!

  • Ping : [Tutorial] Get rid of the EMMC issues | Fell free ask anythings

  • 28 février 2016 à 14 h 27 min
    Permalink

    I could follow the guide fine, but after I installed the sbl1 partition, nothing happened! Turning on the phone didn’t work, neither did download mode, just a black screen. Please help!

    Réponse
  • 29 février 2016 à 1 h 47 min
    Permalink

    ^
    The reason for above was my battery wasn’t charged. However, I went through the steps and I got back the LG screen, but I still couldn’t enter download mode. Please help

    Réponse
    • 2 mars 2016 à 18 h 38 min
      Permalink

      Same here.
      After flash sbl1, nothing happens.
      No download mode, just a black screen.

      Réponse
  • 29 février 2016 à 20 h 52 min
    Permalink

    Did all the process right and without errors but after I restore boot img sbl1 my phone doesn’t turn on and I can’t get into download mode. Any help?
    Device: d855 16GB
    Tot file: LGD855AT-V10e-EUR-16G

    Réponse
  • 13 mars 2016 à 12 h 26 min
    Permalink

    My AP Check fails. It says
    « waiting for device to connect in flash prg… »
    then
    « Failed to connect to the flash programmer »
    Sometimes it says something like
    « …failed in dload mode try flash programmer… (or something like that) »
    Please help

    Réponse
  • 25 mars 2016 à 4 h 38 min
    Permalink

    Hello
    I got a AP Check Fail
    what can i do now?

    my phone is unable to enter to download mode and recovery mode.
    can i flash it using flash tool (manual mode) anyway?

    Réponse
  • Ping : Unbrick my LG G3

  • Ping : BoardDiag Problem

  • 4 avril 2016 à 23 h 18 min
    Permalink

    Whoever you are, thank you so much for this guide. I was without my phone for 3 days and this is the only guide which was clear to the smallest detail and really fixed my G3. I have specially registered and made an account just to say thanks to you.

    Réponse
  • 5 avril 2016 à 14 h 09 min
    Permalink

    hi, i’ve trough this all. and my lg g3 already normal again, after one day..my lg g3 have a green screen with messeage  » demigod crash kernel ». its a virus.

    please help..

    Réponse
    • 6 avril 2016 à 10 h 04 min
      Permalink

      Hi, this message is not caused by a virus but by « something wrong » with your kernel. You should try to flash another one using fastboot mode.

      You can also try to boot into recovery and flash an older backup, or a fresh kernel (you can download it from your computer and put it on a SD card).

      Hope you’ll get through this 🙂

      Réponse
      • 8 décembre 2016 à 12 h 09 min
        Permalink

        after using Boarddiag and flashing the sbl1 partition, my d855 shows the splash screen and then immediately displays ‘demigod crashhandler: Apps Watchdog bark’..
        When I try to enter download mode, it never makes it to the software update screen. Instead, the screen goes black and the phone shows up in windows device manager as ‘Qualcomm HS 9008’
        Last night I even tried to flash all the partitions in Boarddiag, which took a long time. The phone managed to boot but crashed after the initial setup was completed. Now it is back to the state where it only shows the demigod crashhandler screen..

        Is there anything I can try or is there a hardware issue?

        Réponse
  • Ping : [HELP] Hard Bricked D325F [HELP]

  • 12 avril 2016 à 17 h 22 min
    Permalink

    Mi amigo muchas gracias por fin recupere mi g3 despues de 5 dias lo lleve como a 5 tecnicos en celulares y ninguno me lo arreglo ya estaba rendido tenia que cambiar la placa base pero encontre tu post y lo arregle encerio muchisimas grasias

    Réponse
  • 20 avril 2016 à 10 h 03 min
    Permalink

    Thanks alot for your Tutorial , it’s clear and Helpful.
    i did it step by step until i stuck on step 2 , at the end of it
    after flashing Sbl1 partition and my phone reboots …
    it seems that my TOT file wasn’t exactly the one running before the crash so , it suppose to go on download mode by pressing volume+ and plug the usb cable , but what happens with me is i’m back again to the fastboot screen 🙁

    BTW all test and check with the BoardDiag goes write without any issue.

    Réponse
    • 20 avril 2016 à 10 h 14 min
      Permalink

      i’ll write down what appear on my phone , my be that means anything to you

      [65810] Fastboot mode started
      [66090] – reset –
      [66090] – portchange –
      [66120] – reset –
      [66130] – portchange –
      [66300] fastboot: processing commands
      [407010] – reset –
      [407010] EP1/out FAIL nfo=40 pg0=f885200
      [407010] – portchange –
      [407020] usb_read() transaction failed
      [407020] fastboot: oops!
      [407060] – reset –
      [407060] – portchange –
      [407180] fastboot: processing commands

      Réponse
  • 20 avril 2016 à 22 h 22 min
    Permalink

    hello that when you run the STAR medice me a sale that appears not to be found partition file rawprogram0.xml

    Réponse
  • 12 mai 2016 à 18 h 41 min
    Permalink

    Can anyone help with that error on Boardiag?

    ‘Serial port open FAILED..
    TEST aborted’

    Running on windows 10.

    Réponse
    • 13 mai 2016 à 2 h 17 min
      Permalink

      Was the windows 10, worked with windows 7! Thanks

      Réponse
  • 19 mai 2016 à 17 h 38 min
    Permalink

    my phone : erros: demigod crash dlown mode: hw reset, please help me

    Réponse
  • 21 juillet 2016 à 9 h 22 min
    Permalink

    Thank you very much.It worked perfectly..

    Réponse
  • 10 août 2016 à 18 h 31 min
    Permalink

    Hey, good afternoon.

    After pass all steps, doing everything good, my LG g3 wont enter in DMode.

    Just got a black screen whit any command, power or Download Mode after LG boot logo.

    Confusing, but he enter on factory recovery screen… (why t f$@#$#! that’s a shame for me)

    Can someone help me? Please!

    Réponse
  • 29 mars 2017 à 11 h 02 min
    Permalink

    Excellent guide .. but one needs to be techsavy 😉

    Just a quick comment: Thoretening ground can be done with a simple wire .. you don’t have to touch only the one « connector ». It will instantly detect the Qualcomm HS-USB driver on the e.g. COM 5 or 6

    One question: I performed the procedure (worked nicely — but on one of my devices after restore everything as described and flashing SLB1 — the device does not boot to show the LG menue or anything at all.
    How would I go from here?

    Réponse

Laisser un commentaire

Votre adresse de messagerie ne sera pas publiée. Les champs obligatoires sont indiqués avec *