Database Users

[Tutorial] Unlock VZW Razr M/M HD (XT907/XT926) for U.S. Carriers *CDMA WS Method*

THIS WORKS WITH THE LATEST UPDATE!!!! THANK YOU dreamliner2012 FOR RUNNING IT THROUGH AND CLARIFYING!
THE ORIGINAL METHODS STILL WORK FOR ANYONE WHO WANTS TO USE RADIOCOMM AND DFS INSTEAD!
ALL CREDITS TO CELLZEALOT'S THREAD AND ARNOLD SNARB'S POST
GIVE THEM YOUR PROPER THANKS!!!
this was done with stock bootloader, rom, no root, official EVERYTHING
video tutorial HERE
heres the quick rundown -
1: get the Motorola QC Diagnostics driver to install. hard with Win7 x64, but be diligent it does work.
2: boot your XT907/XT926 into BP Tools mode (Vol Up and Down + Power, scroll down to BP Tools hit Vol Up)
3: connect to your computer *duh*
4: open CDMA WS 2.7 or higher (google)
5: connect to your COM Port and press CONNECT
6: click the SECURITY tab and enter 000000 as SPC and click SEND
7: click the MAIN tab and click READ *dunno if you need to but I did for safe measure*
8: click the MEMORY tab and select READ under NV ITEMS. dismiss the SPC prompt
9: First Item to read is 8322. Last Item to read is 8323. click SAVE and name the .txt file whatever you want, just remember where you put it
10: open the .txt file you just saved and under 8322 you will see 01 00 00 00 00 etc. change 01 to 00 and save the .txt file. DONT CHANGE 8323!!!
11: back in CDMA WS click WRITE under NV ITEMS. dismiss the SPC prompt again
12: find the .txt file you just edited and click OK
13: reboot the phone and put in your preferred Sim
14: in Settings go to More... under Wireless Networks and change your Network Mode to GSM/UMTS
15: SUCK IT VERIZON
happy days ahead for all!
don't forget that THANKS button :victory:
***DISCLAIMER***
NOT RESPONSIBLE FOR YOUR LACK OF ABILITY TO FOLLOW SIMPLE DIRECTIONS RESULTING IN A BRICKED DEVICE!
---from cellzealot on how to load Win7 x64 drivers---
cellzealot said:
Here is a screenshot of Device Manager on my PC on WIN7 64 bit with the latest 6.2 Motorola USB drivers and my XT907 connected in BP Tools mode with all of the interfaces highlighted.
There are 3 modems, 1 network device and 1 COM port that should be present and installed.
The 6.2 driver set has signed versions for these device interfaces so no force loading should be required and they should install automatically when the phone is connected in BP Tools mode with USB debugging enabled.
Make note of the port number assigned to the COM Port as that is the port you will use for CDMA WS or DFS or any other QC based NV access tool.
The QC Interface is the Motorola QC Diag Port.
Right click and choose Update Drivers then choose Do not load drivers automatically. Allow me to choose from a list of available devices.
Scroll down to Ports: COM/LPT and then Motorola and then Motorola QC Diag Port.
It will warn about unsigned drivers, just click Install anyway and it will load the driver and show up with a COM port number assigned.
Use that COM port for CDMA WS to edit the NV.
If you continue to have problems, I suggest reflashing the firmware or just the modem and fsg.mbn in fastboot, and starting over.
Click to expand...
Click to collapse

Thanks for some clarification on a confusing subject. Might want to move it to the General section or get it stickied.
Sent from my XT907 using xda premium

Leraeniesh said:
Thanks for some clarification on a confusing subject. Might want to move it to the General section or get it stickied.
Sent from my XT907 using xda premium
Click to expand...
Click to collapse
how would i go about making a request for such thing or would i have to do it myself?

dragonhart6505 said:
how would i go about making a request for such thing or would i have to do it myself?
Click to expand...
Click to collapse
Just contact a moderator and I'm sure they'd be able to help.
Sent from my XT907 using xda premium

Leraeniesh said:
Just contact a moderator and I'm sure they'd be able to help.
Sent from my XT907 using xda premium
Click to expand...
Click to collapse
gratzi ^_^

6: click the SECURITY tab and enter 000000 as SPC and click SEND
I got to this step, however I did not get a popup and at the bottom of the CDMA Workshop window reads the following error:
"Failed.. Phone does not answer"
Any suggestions?

lallafa said:
6: click the SECURITY tab and enter 000000 as SPC and click SEND
I got to this step, however I did not get a popup and at the bottom of the CDMA Workshop window reads the following error:
"Failed.. Phone does not answer"
Any suggestions?
Click to expand...
Click to collapse
you have the proper drivers installed i am assuming? check your device manager. your looking for Motorola QC Diagnostics Port. find the COM Port your phone is connected to then select it in CDMA WS.

dragonhart6505 said:
you have the proper drivers installed i am assuming? check your device manager. your looking for Motorola QC Diagnostics Port. find the COM Port your phone is connected to then select it in CDMA WS.
Click to expand...
Click to collapse
Okay, I have followed all of the instructions, went along with the video, everything seemed to work okay... I haven't gotten the Network Error popup message yet... However, I still do not have service.. I'm hoping it's just because I'm in a rural area. I'm going to drive around a bit and see if it changes.
My network mode is still under Global for preferred, should I change this?

lallafa said:
Okay, I have followed all of the instructions, went along with the video, everything seemed to work okay... I haven't gotten the Network Error popup message yet... However, I still do not have service.. I'm hoping it's just because I'm in a rural area. I'm going to drive around a bit and see if it changes.
My network mode is still under Global for preferred, should I change this?
Click to expand...
Click to collapse
yes to GSM/UMTS. probably why your not getting service. shoulda mentioned that

dragonhart6505 said:
yes to GSM/UMTS. probably why your not getting service. shoulda mentioned that
Click to expand...
Click to collapse
Okay, I changed the settings, and have turned my phone off and back on, hopefully this works, fingers crossed

lallafa said:
Okay, I changed the settings, and have turned my phone off and back on, hopefully this works, fingers crossed
Click to expand...
Click to collapse
and the verdict?

dragonhart6505 said:
and the verdict?
Click to expand...
Click to collapse
Well, after driving for about 15 minutes, still with the "Emergency Calls Only" symbol, I was about to turn around and give up...
and I got one bar, then two bars... then full service!! Everything works great, I am now running (what once was) a Verizon-locked Motorola Razr XT907 with the JellyBean 4.1.2 update, on Straight Talk's monthly service (with an activated Straight Talk card).
I kind of want to have your babies, but I hope a thanks and a subscription to your YouTube will do Thanks again SO much!

dragonhart6505 said:
ALL CREDITS TO CELLZEALOT'S THREAD AND ARNOLD SNARB'S POST
GIVE THEM YOUR PROPER THANKS!!!
video tutorial HERE
heres the quick rundown -
1: get the Motorola QC Diagnostics driver to install. hard with Win7 x64, but be diligent it does work.
2: boot your XT907/XT926 into BP Tools mode (Vol Up and Down + Power, scroll down to BP Tools hit Vol Up)
3: connect to your computer *duh*
4: open CDMA WS 2.7 or higher (google)
5: connect to your COM Port and press CONNECT
6: click the SECURITY tab and enter 000000 as SPC and click SEND
7: click the MAIN tab and click READ *dunno if you need to but I did for safe measure*
8: click the MEMORY tab and select READ under NV ITEMS. dismiss the SPC prompt
9: First Item to read is 8322. Last Item to read is 8323. click SAVE and name the .txt file whatever you want, just remember where you put it
10: open the .txt file you just saved and under 8322 you will see 01 00 00 00 00 etc. change 01 to 00 and save the .txt file. DONT CHANGE 8323!!!
11: back in CDMA WS click WRITE under NV ITEMS. dismiss the SPC prompt again
12: find the .txt file you just edited and click OK
13: reboot the phone and put in your preferred Sim
14: in Settings go to More... under Wireless Networks and change your Network Mode to GSM/UMTS
15: SUCK IT VERIZON
happy days ahead for all!
***DISCLAIMER***
NOT RESPONSIBLE FOR YOUR LACK OF ABILITY TO FOLLOW SIMPLE DIRECTIONS RESULTING IN A BRICKED DEVICE!
Click to expand...
Click to collapse
please set up how to instal the drivers manually

gagnier27 said:
please set up how to instal the drivers manually
Click to expand...
Click to collapse
Here is a screenshot of Device Manager on my PC on WIN7 64 bit with the latest 6.2 Motorola USB drivers and my XT907 connected in BP Tools mode with all of the interfaces highlighted.
There are 3 modems, 1 network device and 1 COM port that should be present and installed.
The 6.2 driver set has signed versions for these device interfaces so no force loading should be required and they should install automatically when the phone is connected in BP Tools mode with USB debugging enabled.
Make note of the port number assigned to the COM Port as that is the port you will use for CDMA WS or DFS or any other QC based NV access tool.

cellzealot said:
Here is a screenshot of Device Manager on my PC on WIN7 64 bit with the latest 6.2 Motorola USB drivers and my XT907 connected in BP Tools mode with all of the interfaces highlighted.
There are 3 modems, 1 network device and 1 COM port that should be present and installed.
The 6.2 driver set has signed versions for these device interfaces so no force loading should be required and they should install automatically when the phone is connected in BP Tools mode with USB debugging enabled.
Make note of the port number assigned to the COM Port as that is the port you will use for CDMA WS or DFS or any other QC based NV access tool.
Click to expand...
Click to collapse
In my particular case, the drivers does not loading here is a picture, how can i do that manually?
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}

gagnier27 said:
In my particular case, the drivers does not loading here is a picture, how can i do that manually?
Click to expand...
Click to collapse
The QC Interface is the Motorola QC Diag Port.
Right click and choose Update Drivers then choose Do not load drivers automatically. Allow me to choose from a list of available devices.
Scroll down to Ports: COM/LPT and then Motorola and then Motorola QC Diag Port.
It will warn about unsigned drivers, just click Install anyway and it will load the driver and show up with a COM port number assigned.
Use that COM port for CDMA WS to edit the NV.
If you continue to have problems, I suggest reflashing the firmware or just the modem and fsg.mbn in fastboot, and starting over.

cellzealot said:
The QC Interface is the Motorola QC Diag Port.
Right click and choose Update Drivers then choose Do not load drivers automatically. Allow me to choose from a list of available devices.
Scroll down to Ports: COM/LPT and then Motorola and then Motorola QC Diag Port.
It will warn about unsigned drivers, just click Install anyway and it will load the driver and show up with a COM port number assigned.
Use that COM port for CDMA WS to edit the NV.
If you continue to have problems, I suggest reflashing the firmware or just the modem and fsg.mbn in fastboot, and starting over.
Click to expand...
Click to collapse
Thanks for this cellzealot! I'll quote this in the OP so it'll be easier to find soon as I get to my office in the morning

lallafa said:
Well, after driving for about 15 minutes, still with the "Emergency Calls Only" symbol, I was about to turn around and give up...
and I got one bar, then two bars... then full service!! Everything works great, I am now running (what once was) a Verizon-locked Motorola Razr XT907 with the JellyBean 4.1.2 update, on Straight Talk's monthly service (with an activated Straight Talk card).
I kind of want to have your babies, but I hope a thanks and a subscription to your YouTube will do Thanks again SO much!
Click to expand...
Click to collapse
Will do just nicely and your quite welcome!

dragonhart6505 said:
Will do just nicely and your quite welcome!
Click to expand...
Click to collapse
done!!!!
thanks to you and cellzealot..

gagnier27 said:
done!!!!
thanks to you and cellzealot..
Click to expand...
Click to collapse
Anytime

Rooted Locked Razr M/ How do I get recovery/GSM Straight Talk

The situation is this: Friend got a Droid Razr M, and I went and rooted it. I have learned that it's impossible pretty much to unlock the bootloader since his was built May 24th and has the most current OTA update.
What he would like to have is the phone on the Straight Talk Network. He would also like a custom recovery and ROM. I'm a little lost on this phone and have spent 3 hours reading at least on the forum between last night and this afternoon. Is it possible someone could give me some pointers?

DanRyan85 said:
The situation is this: Friend got a Droid Razr M, and I went and rooted it. I have learned that it's impossible pretty much to unlock the bootloader since his was built May 24th and has the most current OTA update.
What he would like to have is the phone on the Straight Talk Network. He would also like a custom recovery and ROM. I'm a little lost on this phone and have spent 3 hours reading at least on the forum between last night and this afternoon. Is it possible someone could give me some pointers?
Click to expand...
Click to collapse
GSM unlock http://forum.xda-developers.com/showthread.php?p=38485323
Custom recovery for locked device is safe strap...http://blog.hash-of-codes.com/downloads/safestrap/
how tohttp://blog.hash-of-codes.com/how-to-safestrap/
As far as ROMs for safe strap I don't believe there are many at all... but IMO debloated stock works its what I use even being unlocked just a little theming here n there n its good to go... hope this helps...
Sent from my XT907 using xda app-developers app

ezknives said:
GSM unlock http://forum.xda-developers.com/showthread.php?p=38485323
Custom recovery for locked device is safe strap...http://blog.hash-of-codes.com/downloads/safestrap/
how tohttp://blog.hash-of-codes.com/how-to-safestrap/
As far as ROMs for safe strap I don't believe there are many at all... but IMO debloated stock works its what I use even being unlocked just a little theming here n there n its good to go... hope this helps...
Sent from my XT907 using xda app-developers app
Click to expand...
Click to collapse
I prefer using the NV Item method with CDMA NV-Items Reader Writer, offered free from CDMA-Ware.
(Credits for this go to tehjolly81 for his PagePlus guide to connect phone)
1) With the phone off, do the three-finger salute (hold Volume Up and Down and Power to boot) and boot into BP Tools mode (looks just like normal boot).
2) Now connect phone to PC via USB cable. If you are on Win7 x64 like me, Windows should find 4 new devices but won't have the drivers to install any of them. If prompted to install anything by Windows, (i.e., Add New Hardware Wizard, etc) cancel out of it.
3) Click 'Start' -> right click on 'Computer' and choose 'Properties'. Click on 'Device Manager' on the left. Here you should see 4 items from the phone that are missing a driver (they will have a yellow question mark next to them).
4) One of the items with a question mark should be labeled something similar to "QC Interface" (NOT the NMEA interface). Right click on it and choose Update Driver Software. Now choose Browse my computer for driver software -> Let me pick from a list of device drivers on my computer -> Show all devices -> Motorola -> Motorola QC Diag Port. Finish running through the wizard and it should install the correct driver. After installed, it should show the COM Port # that the diagnostic interface is installed on under the "Ports (COM & LPT)" section of Device Manager.
After getting the QC Interface and getting a com port, just download the free NV-Items reader writer from Here.
Unrar the exe and run it;
1: Select the com port of your phone and hit connect
2: Press read at the top, bottom should say this: Log message: > SPC is correct. Phone unlocked
3: In Range (Dec): put 8322 in the left box 8323 in the right box and hit read; it will prompt to save as a text file.
4: Open the file and change the first 01 to 00 under the 8322 section DO NOT MODIFY 8323. Save the changes.
5: Tap Write and select the saved text file, it should show Writing NV-items from a file: Done at the bottom.
6: Tap Mode > Reset then tap Disconnect and close the program, GSM should work fine after that.
I find this method easier and less dangerous than the Radiocomm method.
This is *IF* you want to use Straight Talk's GSM BYOP, they DO offer CDMA BYOP now, which then should just activate like a normal Verizon phone after you buy their network code and activate the MEID with them.

my dfs progress

Received my boost aquos crystal today. Was hoping to dfs it to page plus as easy as the moto g, but was unsuccessful. I was able to read all normal values using dfs, just not write.
Process:
Entered diag mode using ##diag#.
Installed sharp drivers. (I will attach).
Updated 306sh drivers using Device Manager in windows. Select driver "I know location" or whatever. Chose "show all drivers". Scroll to Sharp Corporation. Select USB diag driver.
Open in dfs. ( I got my Spc code from boost by registering my device on their website to my account. Don't worry, they dount make you pay. Choose your plan, create a new phone number or whatever needed. Doesn't matter... They call it MSL code.)
Entered Spc in dfs and was able to read all info.... But nothing I wrote saved.
In the phone's ##diag# screen, I'd I selected the serial option, I installed the drivers... Same results.
I also force installed my moto RAZR m xt907 drivers (also msm Qualcomm) but same results.
Hope this helps someone with something.
let me know if the link works https://docs.google.com/uc?id=0B2YrFGY95PiIeklOT1VVRU5QVGs&export=download

hemanolio said:
Received my boost aquos crystal today. Was hoping to dfs it to page plus as easy as the moto g, but was unsuccessful. I was able to read all normal values using dfs, just not write.
Process:
Entered diag mode using ##diag#.
Installed sharp drivers. (I will attach).
Updated 306sh drivers using Device Manager in windows. Select driver "I know location" or whatever. Chose "show all drivers". Scroll to Sharp Corporation. Select USB diag driver.
Open in dfs. ( I got my Spc code from boost by registering my device on their website to my account. Don't worry, they dount make you pay. Choose your plan, create a new phone number or whatever needed. Doesn't matter... They call it MSL code.)
Entered Spc in dfs and was able to read all info.... But nothing I wrote saved.
In the phone's ##diag# screen, I'd I selected the serial option, I installed the drivers... Same results.
I also force installed my moto RAZR m xt907 drivers (also msm Qualcomm) but same results.
Hope this helps someone with something.
let me know if the link works https://docs.google.com/uc?id=0B2YrFGY95PiIeklOT1VVRU5QVGs&export=download
Click to expand...
Click to collapse
can't download the files could you please send to me [email protected]

what is DFS ?

you may try msm drivers.

whynot4444 said:
what is DFS ?
Click to expand...
Click to collapse
cdma tools 。。。 now I need drive for 306 so i can connect 306 to DFS but I cant find the COM drive 。。。

cairui505 said:
cdma tools 。。。 now I need drive for 306 so i can connect 306 to DFS but I cant find the COM drive 。。。
Click to expand...
Click to collapse
oh, you need drive DIAG, but what do you want with this port?

Hey guys I just found this thread. I am a CDMA Programmer and I wouldn't mind tinkering with this phone. Did it come with stock drivers embedded in the phone? Most do or sometimes you need to get adb driver packs for it. I am willing to help as I have DFS, CDMA Workshop, QPST and more. Please lmk what the current progress is on your end and I'll go ahead and share what I find when the phone arrives at my house. Let's get this rollin again!

kalanir said:
Hey guys I just found this thread. I am a CDMA Programmer and I wouldn't mind tinkering with this phone. Did it come with stock drivers embedded in the phone? Most do or sometimes you need to get adb driver packs for it. I am willing to help as I have DFS, CDMA Workshop, QPST and more. Please lmk what the current progress is on your end and I'll go ahead and share what I find when the phone arrives at my house. Let's get this rollin again!
Click to expand...
Click to collapse
yes in sharp web page have stock drivers.. also your can search bcs I saw that one guy is share diag modem driver(also here have msl unlock guide) .. most big problem is that we don't have root and other is if you can seen that phone have gsm radio..

loonbg said:
yes in sharp web page have stock drivers.. also your can search bcs I saw that one guy is share diag modem driver(also here have msl unlock guide) .. most big problem is that we don't have root and other is if you can seen that phone have gsm radio..
Click to expand...
Click to collapse
Ok I just ordered a bad esn one from eBay. Is it easy to get the msl code for it aside from activation? That's gonna be a big pain the @$$ if it's not like the Samsung or HTC.

OK guys so I just got my Sharp Aquos today and I have to say, WHAT A PIECE OF ART!!!! But I have started to work on it now. Did have some issues with it but I got it working. Managed to get into a hidden menu to do a RTN reset of it and now trying to get Diag Drivers. I got my MSL courtesy of an hour of research that surly paid off. So next step: connection to CDMA Workshop! Let me know what drivers you have found that work for this for the coms.

kalanir said:
I have to say, WHAT A PIECE OF ART!!!!
Click to expand...
Click to collapse
you r 100% right
kalanir said:
Managed to get into a hidden menu to do a RTN reset of it
Click to expand...
Click to collapse
how?
kalanir said:
trying to get Diag Drivers.
Click to expand...
Click to collapse
please share
kalanir said:
I got my MSL courtesy of an hour of research that surly paid off
Click to expand...
Click to collapse
can u tell me how?

[How To] Edit ALL Network Bands on ALL M9's

EDIT: 21/06/2017 THIS MAY NO LONGER WORK DUE TO NEW SECURITY. LEFT HERE FOR REFERENCE ONLY
WARNING: THIS PROCEDURE MAKES DANGEROUS CHANGES TO YOU DEVICE, I DO NOT ACCEPT ANY RESPONSIBILITY FOR DAMAGES
EDIT: FINDINGS SHOW THAT GSM MODELS DO NOT SAVE THE BANDS AFTER REBOOT. QPST/QXDM MAY SUIT BETTER FOR THIS. CDMA MODELS SEEM TO BE FINE AT THIS STAGE.
For GSM MODELS (please click unhide content below) thanks to @guidojusto, be sure to thank his post
QXDM / QPST software for below can be found here http://forum.xda-developers.com/galaxy-s5/general/how-to-add-rf-lte-frequency-bands-to-t2886059
guidojusto said:
Well I did find some little time to do a guide trough the process to change LTE bands, take in consideration that I did this process on my HTC One M9 Developer-Unlocked version (Should be the same as the AT&T one).
I DO NOT ACCEPT ANY RESPONSIBILITY FOR DAMAGES
You will need:
QXDM Pro 3.12.714 (I do not have any links, and deleted my installer, I’m sorry) .
HTC Diag drivers (Find these drivers on first post).
DFS CDMA software (Also find the link to this program on first post).
NV LTE Calculator (I found a couple of apps on the Play Store, I used both of them in order to check if the values matched).
Phone should be:
Rooted
Developer Mode Enabled with USB Debugging activated
S-Offed (Not completely sure about this one, I'm while doing this process though)
In order to install the drivers on Windows 8 and upcoming OS’s you will have to turn off signature driver verification.
Also, please, use the two screenshots provided in order to make things easier for you.
1.
Open a terminal where your adb folder is and run
Code:
adb shell
su
echo 1 > /sys/devices/virtual/android_usb/android0/f_diag/func_en
Note: After this, you need to install the diag drivers you download before, when you are ready, continue.
2.
Open DFS CDMA software and look for the COM HTC Diagnostic Interface, take note of the COM port the phone is using. On the screenshot provided is COM 3, yours may differ. Close the program now.
3.
Open QXDM Pro and go to Options --> Communications… Check for the COM with diagnostics (In this case COM 3) (Step 2 on the screenshot). Then look for Target Port and select the COM your HTC Device is using from what you saw while using DFS CDMA software on the beginning (Step 4 on the screenshot). Click OK (Step 5 on the screenshot).
4.
Go to Category Filter and select LTE there.
5.
Look for the first value 06828.
6.
In Fields press Read (Step 8 on the screenshots)
7.
Save the value to somewhere safe, as a backup of what the phone is currently using for connecting to LTE antennas.
8.
Input the number you want to use (Use NV LTE Calculator or other program to get the right number for the LTE bands you want to use) (Step 9 on the screenshots).
9.
Press Write. Close QXDM Pro now.
10.
Go again to your adb terminal and type
Code:
adb shell
su
echo 0 > /sys/devices/virtual/android_usb/android0/f_diag/func_en
11.
Profit!
If you want to check if these settings stick after reboot, then you reboot the phone, and do the same steps up to the step 8 where you need to read the values the phone has, if it has the same values you have manually changed it means the process worked perfectly.
Hope this helps @stifilz you should thank him!
Click to expand...
Click to collapse
Hi all,
I have been playing with this for the last couple of days.
Hopefully this will help you to change the network bands available to your HTC One M9 - All variants should work - Tested on Sprint M9 and GSM M8.
Prep:
You will need DFS CDMA tool from http://cdmatool.com/ demo version will work (create an account too, it is free and you do not need to add credit)
You will need HTC Diag drivers (attached)
Preparing your device:
Device Should be S-OFF (S-ON may work)
You must have ROOT
ADB must be enabled
Firstly USB diag mode must be enabled, on CDMA devices you can use ##3424#.
This option is not available for GSM devices. So we have to echo '1' (which means turn on) to the f_diag USB mode, this is set to '0' (which means turn off) by default.
So you have to use the following code:
Code:
adb shell
su
echo 1 > /sys/devices/virtual/android_usb/android0/f_diag/func_en
This is the code available on my Sprint M9 but should be the same on other variants.
I have tested this method on my HTC M8 GSM and it does connect to the PC
M8's code is slightly different.
This should have enabled DIAG mode and you should have a new device on the PC.
Please install driver by manually updating the unknown driver.
Install DFS CDMA Tool if you haven't already and open DFS.
I should show a login screen, you may need to create an account (I can't remember). Log in and close that window and the main window should ope wait 50 seconds (demo limitations).
You should be presented with your device on the 'Equipment' tab. Mine is COM3 HTC Diagnostic Interface (COM3).
If it is not showing please check you drivers and close the program and then open it again.
If you are still having trouble try to use QPST to check that the device is recognised.
From there double click your device name and it should put a 'tick' next to it.
It should show your device details and the bottom under 'Devices Online:'
From the click on the 'Band' tab.
This will change screens to the band menu.
CMDA/GSM/HSDPA
ALL THE BANDS will show for CDMA/GSM/HSDPA (NOT YOURS)
Down the bottom right change the radio (black circle) to 'RF BC Config' form 'Band Preferred'
Click the Read button and wait 300seconds (demo limitations)
This will show the bands that YOUR DEVICE HAS.
DO NOT ADD MORE BANDS THAN YOU REQUIRE THIS IS HIGHLY DANGEROUS
To enable more bands, simply click the ones you need and then press Write when you are ready.
LTE
Click the 'LTE' tab
ALL THE BANDS will show for LTE (NOT YOURS)
Down the bottom right change the radio (black circle) to 'LTE BC Config LTE #6828'
Click the Read button and wait 300 seconds (demo limitations)
This will show the LTE bands that YOUR DEVICE HAS.
DO NOT ADD MORE BANDS THAN YOU REQUIRE THIS IS HIGHLY DANGEROUS
To enable more bands, simply click the ones you need and then press Write when ready.
For good measure also change the vaules in 'LTE BC Config DIV LTE #6829'
You can now close DFS.
Disable diag mode using the following code
Code:
adb shell
su
echo 0 > /sys/devices/virtual/android_usb/android0/f_diag/func_en
Don't freak out if you loose signal, this is normal. Simply reboot the phone and signal should come back.
Please read bands from the phone again and let me know if they stayed
I tested it using my Sprint M9.
For me I in New Zealand I enabled LTE Bands 3 (1800+) and 28 (700 APT) and WCDMA VIII (800 MHz).
It seems the change was permanent as I rebooted and read it from the phone and it was still there.
I am unable to test as it is still Sim Locked . If someone could help with that, that would be greatly appreciated
I also tested on my GSM M8, but I did not write to it as I have all the bands I need.
Any questions, feel free to ask.
Hopefully this opens up some doors for this device.
Band LTE reference:
Sprint: 2, 4, 12, 25, 41
T-Mobile: 2, 3, 4, 7, 12, and 17
AT&T: 2, 3, 4, 5, 7, 12, 17, and 29
HTC Dev & Unlocked Versions: 2, 3, 4, 5, 7, 12, 13, 17, 29, 30
Cheers
Stifilz
Thanks to all those involved in testing:
@v1rk - confirmed working on Sprint M8
@guidojusto - confirmed working on M9 Dev Edition S-Off - Maximus HD Rom His method here

can you also share the m8 code separately

x017in said:
can you also share the m8 code separately
Click to expand...
Click to collapse
Same procedure as above
For diag on
Code:
echo 1 > /sys/devices/virtual/android_usb/android0/f_diag/on
For diag off
Code:
echo 0 > /sys/devices/virtual/android_usb/android0/f_diag/on
Please let me know the results

Will this work on the M9+ as well?
Sent from my HTC One M9+

smartboy_anu said:
Will this work on the M9+ as well?
Sent from my HTC One M9+
Click to expand...
Click to collapse
EDIT: According to Phone Arena and GSM Arena the M9 + uses a MediaTek MT6795T chipset and therefore is not compatible with QUALCOMM methods (such as above)
Sorry for the confusion @smartboy_anu

No problem
Sent from my HTC One M9+

@v1rk I noticed you answered 'Yes' in the poll. Would you mind sharing your experience with this?
Such as phone model, brand, s-on/s-off etc
You may well be the very first tester (other than myself) and I would be happy to add you to the credits.
Thanks

stifilz said:
@v1rk I noticed you answered 'Yes' in the poll. Would you mind sharing your experience with this?
Such as phone model, brand, s-on/s-off etc
You may well be the very first tester (other than myself) and I would be happy to add you to the credits.
Thanks
Click to expand...
Click to collapse
Tested on a spare sprint m8 with the sim unlocked. It was fairly simple process but you have to be patient and make sure its copied correctly. I used windows 7 since windows 8.1 & 10 was annoying me a times with driver issues. My m9 is already gsm unlocked so cant really test on that nor can i try on a dev m8 which i got already.

v1rk said:
Tested on a spare sprint m8 with the sim unlocked. It was fairly simple process but you have to be patient and make sure its copied correctly. I used windows 7 since windows 8.1 & 10 was annoying me a times with driver issues. My m9 is already gsm unlocked so cant really test on that nor can i try on a dev m8 which i got already.
Click to expand...
Click to collapse
Thanks for the feedback. The idea is that it will WORK on GSM
The f_diag code can enable the diag mode on GSM phones. On CDMA you can use the ##3424# code from phone dialer.
I could read the bands of my GSM M8 but had no need to write to it.
Also tried on a spare GSM M7, but this did no keep the bands that I added / removed after a reboot. Whereas, the M9 kept them changed.
With windows 8 you'll have to disable driver checks etc also. It was such a pain
Thanks again for your input
Stifilz

Are the drivers same for m8?

Worked without any issues at all. Thanks a lot, I needed in order to unlock band 28 700 APT. I'm using an HTC One M9 Unlocked - Developer Edition.
Only thing, I had to reboot my device after doing echo 0 command in order to get signal again.
Thanks again!

x017in said:
Are the drivers same for m8?
Click to expand...
Click to collapse
Pretty sure they are the same. On my Windows 7 it found them automatically. On my Windows 8.1 I had to do it manually. Cheers

guidojusto said:
Worked without any issues at all. Thanks a lot, I needed in order to unlock band 28 700 APT. I'm using an HTC One M9 Unlocked - Developer Edition.
Only thing, I had to reboot my device after doing echo 0 command in order to get signal again.
Thanks again!
Click to expand...
Click to collapse
Glad to hear. Can you please confirm that the band is still available after the reboot by reading the bands from the phone again? I thought it had worked with my M7 but the bands had changed back after boot. I'm hoping it was an isolated incident
Thanks again, will add you to the credits for testing :good:

I wasn't able to install the new drivers. Tried on win 7 and win8.1

x017in said:
I wasn't able to install the new drivers. Tried on win 7 and win8.1
Click to expand...
Click to collapse
Please try the diag drivers from here. I will double check mine later http://forum.xda-developers.com/showthread.php?t=673174

Ok. So do I uninstall my driver's and install again? Because the moment I put it to diag mode I don't find any new unrecognised devices

x017in said:
Ok. So do I uninstall my driver's and install again? Because the moment I put it to diag mode I don't find any new unrecognised devices
Click to expand...
Click to collapse
Strange. Are you 100% it is enabling diag mode? Can you please use root explorer or similar and navigate to the file and check the contents are '1' (without quotes) and not '0'?

Which file shud I check

x017in said:
Which file shud I check
Click to expand...
Click to collapse
Oops. I assume there was no error from adb?
File to check
For M8
/sys/devices/virtual/android_usb/android0/f_diag/on
For M9
/sys/devices/virtual/android_usb/android0/f_diag/func_en
Cheers

stifilz said:
Glad to hear. Can you please confirm that the band is still available after the reboot by reading the bands from the phone again? I thought it had worked with my M7 but the bands had changed back after boot. I'm hoping it was an isolated incident
Thanks again, will add you to the credits for testing :good:
Click to expand...
Click to collapse
Just checked after a couple of reboots and I can confirm BC 28 is not sticking upon reboot. I tried deselecting another band (BC 29) and adding BC28 thinking maybe there was a maximum limitation of bands HTC One M9 can be capable of handling but it does not change the result. It sticks while it is on and when the phone reboot it resets to its original bands configuration. I can only edit 'LTE BC Config LTE #6828' on DFS and not DIV LTE. I'm running Maximus ROM, S-Off, latest firmware and modem radio.
Hope it helps!

[Guide] How to unlock McAfee lock LG G3 (US990,LS990)

Hello from sunny Moldavia.
I found a method to bypass a blocked MсAfee. This is post about unlocking LG G3 USCellular - US990(and Sprint LS990), but you can unlock any G3. (all you need - tot file from you G3 and some partitions from non-locking G3)
Link to my site for thanks)
Instruction on russian language: http://4cdma.ru/news/39-snyatie-blokirovki-mcafee-na-lg-g3-us990-ch1-poluchaem-dostup-k-rekaveri.html & http://4cdma.ru/news/40-snyatie-blokirovki-mcafee-na-lg-g3-us990-ch2-poluchaem-dostup-k-download.html
1. Download https://www.androidfilehost.com/?fid=24269982087002399
2. Extract LGG3US990_McAfee_9008.rar for US990 or LS990ZVA_4_BoardDIAG.ZIP for LS990
Step 1. Open the Windows command prompt as “Run as Administrator”.
Step 2. Run
Code:
Code:
bcdedit -set loadoptions DISABLE_INTEGRITY_CHECKS
Step 3. To finalize the process run
Code:
Code:
bcdedit -set TESTSIGNING ON
Step 4. Reboot and you’re done.
I have attached both the 32 bit version and the 64 bit version be sure to only use the 64bit one on 64bit and likewise only use the 32bit one on 32bit, you do not need both sets of drivers.
1. Open your phone and take out the battery. Remove the top half of the phone housing. You do not need to remove the bottom half by the usb. Also you don't need to remove the screw next to the camera. If you do remember that it is a different size so keep it separate.*
2, You will see a big metal shield. You need to remove it. It is pretty easy just pry it off and it pops back into place when you are done.
3. Next you need to short the pins as shown in the following picture. While continuing to short the pins plug in your usb cable. You should hear windows detect the phone almost instantly. Keep shorting the pins for the count to 5 and then you can release the wire. See image below in attach file
4. Now open device manager in windows and it should show your phone under com ports as Qualcomm 9008 (COM #). If it doesn't try the process over again. When it does work remember this number. It is going to be used later.
5. Now fire up BoardDiag by willcracker be sure to run it as administrator. It is in this post named willcracker.rar There are some pictures on how to flash with this app but I will describe it as well. First we are going to need to extract your tot file. This can take some time. Like 10 mintues on a decent PC. The app may look like it froze up but it is just thinking. When it is complete move on to the next step.
Click to expand...
Click to collapse
Now You need to tell the program the com port that you are using that we found earlier and the folder where you extract the firmware. In LGG3US990_McAfee_9008.rar has folder "img10c". Select it to Target Dir.
once you have extracted the firmware and set up the program with the correct port you need to Check "AP" and "EMMC" then press start. After test passed ok you will check*RESTORE BOOT IMG and flash all of the partitions except for Cache, System, Userdata, and Sbl1. Sbl1 will be flashed later and causes the phone to reboot.
Click to expand...
Click to collapse
After you flash all partitions in BoardDiag. Switch off the phone and make a factory reset (if you dont know how - link http://www.hard-reset.com/lg-g3-hard-reset.html)
After you make a factory reset - you will see TWRP recovery welcome logo and phone switch in Windows on ADB mode and install ADB drivers. (If not - switch off/on ENABLE *MTP in MOUNT TWRP section)
Than download this link for US990 20a_dd_files.rar or LS990 zv4_dd_files.rar, extract him, and run repair.cmd
After flashing by repair.cmd script. Switch off the phone. Then press and hold the “Volume Up” and connect the USB cable from phone to PC. You will see a Download mode and you CAN now flash phone by FlashTool via tot or kdz file.
Sorry for bad english and subscribe to my youtube chanel https://www.youtube.com/channel/4cdma

What will achieve with this?
Unlocks network carreer?

No lol, unlocks devices locked with mcafee.

MidnightDevil said:
No lol, unlocks devices locked with mcafee.
Click to expand...
Click to collapse
Ah ok, i thought you managed a way to unlock carrier:laugh:

puya.crisan said:
Ah ok, i thought you managed a way to unlock carrier:laugh:
Click to expand...
Click to collapse
If you want unlock gsm - g3 unlock gsm - https://www.google.com/search?client=opera&q=g3+unlock+gsm+xda&sourceid=opera&ie=UTF-8&oe=UTF-8#q=g3+unlock+gsm+xda+site:forum.xda-developers.com ( LG US990 hasnt GSM module in hardware)
if u wanna change spc/msl for flash another cdma network - http://forum.xda-developers.com/sprint-lg-g3/help/how-to-enable-diag-mode-msl-service-code-t2851086
and after enable DIAG mode - use CdmaDevTerm - Beta v.2 - https://code.google.com/p/cdmaworkshoptool/downloads/list
Connect to you Diag port, choose in SPC/Lock - LG & write 000000
Thats all

thanks alot
MFKilla said:
If you want unlock gsm - g3 unlock gsm - https://www.google.com/search?client=opera&q=g3+unlock+gsm+xda&sourceid=opera&ie=UTF-8&oe=UTF-8#q=g3+unlock+gsm+xda+site:forum.xda-developers.com ( LG US990 hasnt GSM module in hardware)
if u wanna change spc/msl for flash another cdma network - http://forum.xda-developers.com/sprint-lg-g3/help/how-to-enable-diag-mode-msl-service-code-t2851086
and after enable DIAG mode - use CdmaDevTerm - Beta v.2 - https://code.google.com/p/cdmaworkshoptool/downloads/list
Connect to you Diag port, choose in SPC/Lock - LG & write 000000
Thats all
Click to expand...
Click to collapse
thank you very much, i will try this after my contract expires. :good::good::highfive:

Killswitch lock removal?

ScottPomroy said:
Killswitch lock removal?
Click to expand...
Click to collapse
Yes

You the man! ?

this guide dont work in LS990...

Lussardi said:
this guide dont work in LS990...
Click to expand...
Click to collapse
this method working on any G3.
You need download some partitions from working G3 (all sbl,tz,rpm,bak and others)

Working thank you
LG-D855 cihazımdan Tapatalk kullanılarak gönderildi

why would we need this if we can flash all partitions with qualcomm flasher?

its works on ls990 i did
Lussardi said:
this guide dont work in LS990...
Click to expand...
Click to collapse
100% working

MFKilla said:
If you want unlock gsm - g3 unlock gsm - https://www.google.com/search?client=opera&q=g3+unlock+gsm+xda&sourceid=opera&ie=UTF-8&oe=UTF-8#q=g3+unlock+gsm+xda+site:forum.xda-developers.com ( LG US990 hasnt GSM module in hardware)
if u wanna change spc/msl for flash another cdma network - http://forum.xda-developers.com/sprint-lg-g3/help/how-to-enable-diag-mode-msl-service-code-t2851086
and after enable DIAG mode - use CdmaDevTerm - Beta v.2 - https://code.google.com/p/cdmaworkshoptool/downloads/list
Connect to you Diag port, choose in SPC/Lock - LG & write 000000
Thats all
Click to expand...
Click to collapse
hi, i tried mamny times this guide but i cant read the msl with this tool.
is there any other method to read the msl?
---------- Post added at 10:05 PM ---------- Previous post was at 10:05 PM ----------
MFKilla said:
If you want unlock gsm - g3 unlock gsm - https://www.google.com/search?client=opera&q=g3+unlock+gsm+xda&sourceid=opera&ie=UTF-8&oe=UTF-8#q=g3+unlock+gsm+xda+site:forum.xda-developers.com ( LG US990 hasnt GSM module in hardware)
if u wanna change spc/msl for flash another cdma network - http://forum.xda-developers.com/sprint-lg-g3/help/how-to-enable-diag-mode-msl-service-code-t2851086
and after enable DIAG mode - use CdmaDevTerm - Beta v.2 - https://code.google.com/p/cdmaworkshoptool/downloads/list
Connect to you Diag port, choose in SPC/Lock - LG & write 000000
Thats all
Click to expand...
Click to collapse
hi, i tried many times this guide but i cant read the msl with this tool.
is there any other method to read the msl?

EddieVsDaddy said:
100% working
Click to expand...
Click to collapse
i need partition.txt LS990

it work with D-852?? i don't have partitions to inject where i can found them?

klevismartini said:
hi, i tried mamny times this guide but i cant read the msl with this tool.
is there any other method to read the msl?
---------- Post added at 10:05 PM ---------- Previous post was at 10:05 PM ----------
hi, i tried many times this guide but i cant read the msl with this tool.
is there any other method to read the msl?
Click to expand...
Click to collapse
1. Connect to DIAG PORT
2. Choose LG - Click Read SPC - Send SPC - Write 000000
Thats all)

this method has bricked my g3 f400l
this method has bricked my g3 f400l
i have flashed all them and i have no data system cache, LGUP detect it's us990 and i cannot flash f400 firmwares

It may be possible to only have to flash 1-3 files, instead of most of them. I don't have an extra LG G3 to test with, So if you want to check out my experience with the killswitch.
http://forum.xda-developers.com/lg-g3/help/experience-lg-g3s-killswitch-t3324698