Database Users

[REF] [ROOT] [RECOVERY] [BOOT LOADER] Metro PCS LG K7 LGMS330 [Guide For Dummies]

I have not been on this site since posting my guide, i do want to let any future people reading this know that, I am not a professional. everything in this guide is using stuff from other peoples threads.... this thread is just step by step directions on how i rooted (and installed TWRP on) MY lg k7 (MetroPCs). Also i had to root before i unlocked the boot loader. Which is not safe, you should probably unlock the boot loader before you root, but i couldn't figure out how to unlock it without root access.
I AM NOT RESPONSIBLE FOR ANY THING THAT HAPPENS TO YOUR DEVICE!
YOU AND ONLY YOU CAN BE HELD RESPONSIBLE​
~BACK UP FILES ON PC, YOUR PHONE WILL BE RESET TO FACTORY SETTINGS DURING THIS TUTORIAL~
Step One: Enable Dev Options
A) open settings>about phone>software info then tap "Build Number" really fast about 10 times
B) open settings>Developer Options, then check the box labeled "Enable OEM Unlock", and the box Labeled "USB Debugging"
Step Two: Install Android SDK/ADB/USB drivers
A) go to http://developer.android.com/sdk/index.html in your browser, and click download...
B) go to https://www.microsoft.com/net/default.aspx in your browser, and click the big blue button that says .NET
Framework 4.6.1 or X.X.X depending on when your reading this...
C) go to http://www.oracle.com/technetwork/java/javase/downloads/jdk8-downloads-2133151.html scroll down until you get to the first box, labeled Java SE Development Kit 8u91 or XuXX Depending on when your reading this, then find your OS (ex: Windows x86, Mac OS, Linux, Etc..), then select the download link
Step Three: Installing LG K7's USB Driver's
A) unlock your phone
B) plug your phone into you Computer via USB
C) pull down your notifications, Tap on the USB icon which should be labeled "Media Device (MTP)," "Send Images (PTP)," or "Charge Phone"
D) if a dialogue box pops up asking to install drivers tap install, if not proceed to step E
1) Your PC should ask you if you want to auto run, Either auto run or open the folder and run LG_PC_Programs.exe then proceed to Step Four
E) select "Media Device (PTP)," if not already selected
1) click the three vertical dots next to the magnify glass in the upper right hand corner, select install pc drivers, then tap install
Step Four: Installing Java SE
A) return to the folder where you downloaded the files in step two, install the file which contains the word java in it
Step Five: Installing Microsoft .NET 4 Framework
A) now in the same folder as step four, install the with the name "NDP461-KB3102438-Web," the name might be different then mine depending on when you are reading this
B) if it is already installed it will notify you and you can proceed to the next step
Step Six: Installing Android Studio 2.0 (SDK/ADB Drivers)
A) in the download folder from step four & five, double click the remaining file, the name should contain the words "android", and "studio" in it
B) when the dialogue box opens requesting admin rights, select allow
C) click next
D) click next
E) make sure all boxes are checked and click next
F) read the license agreement, (unless your the 99.9% that doesn't) click i agree
G) you may click next or choose where you'd like to install android studio, and where you'd like to install SDK, for this tutorial i will change make a new folder in my docs named SDK then change the SDK install dir to My Docs
H) click next
I) it will take a moment to install so just wait
(note: the progress bar will fill up, then reset, as it is installing in two separate locations)
J) when finished, click next
K) uncheck the box and click finish
Step Seven: Root your device
(Note: I rooted before i unlocked my boat loader, as i could not get it to boot into boot loader mode until i rooted it)
A) go to http://www.kingroot.net/wap on your android device and download the apk file
B) go to settings>security and check the box labeled "Unknown Sources"
C) install the apk
Video tutorial for king root here: https://www.youtube.com/watch?v=tG_ruuTPVpU
(Not my channel or video)
D) open the king root app
E) make sure you have a charged battery or your phone is plugged in as the rooting process time may vary (better safe then sorry)
F) swipe up until you see a "TRY IT" button click it
G) under "Root Access not available" tap "Get Now
H) do not turn off your phone
I) when it is done you can tap optimize now if you wish, otherwise close the app
Step Eight: Replacing KingRoot with SuperSU ~ W0lfDroid Method
A) go to http://www.w0lfdroid.com/2015/05/How-to-Remove-Replace-KingUser-KingRoot-with-SuperSU.html
B) scroll down until you see the word "download:" (should be right above the related posts
C) click on the "new link" next to "Replace_Kingroot_With_SuperSU.zip"
D) extract the .zip so that the "MRW" folder is on your internal storage
(Easiest way is to download it on PC and open up your k7 in "my computer" and select internal storage and drag the MRW folder inside the .zip there)
E) go to google play and search "terminal emulator for android" or use this link if your reading this on your phone https://play.google.com/store/apps/details?id=jackpal.androidterm&hl=en
F) install the first one, or use this link if your reading this on your phone https://play.google.com/store/apps/details?id=jackpal.androidterm&hl=en
G) open terminal emulator
H) type "su" without the quotations
(everything typed in the terminal is case sensative)
I) type "sh /sdcard/mrw/root.sh" without the quotations
J) you might see a few errors, that is fine
K) wait until it says finished
L) when SU opens, select "update" "install" or what ever pops up
M) when it asks to uninstall, uninstall it, it is not uninstalling SuperSU it is uninstalling Kingroot,
O) if 30 minutes pass and it is still uninstalling then exit the app and then reboot the phone
DO NOT STOP HERE ~ YOU HAVE TO UNLOCK THE BOOTLOADER, and OPTIONALLY FLASH TWRP
Step Nine: Unlocking The Bootloader
A) refer to step one and double check the OEM unlock is enabled and USB debugging is turned on
(If not then please enable them)
B) search quick boot on the google play store download the first app it should be a circle with a lightening bolt
C) open quick boot
D) when asked to "allow root access?" tap allow
E) if an add pops up close it with the ex in one of the corners
F) tap on the word boot loader
G) at the top of your phone you should see " * Welcome To Fast Boot Mode : "
H) now go to your SDK dir, in my case it is C:\Users\USER\Documents\SDK
I) hold shift, then right click on the "platform-tools" folder, then select "open command window here"
J) in the CMD window type "fastboot devices" - without quotations
(everything is case sensative)
K) then type "fastboot oem unlock" - without quotations
L) then type "fastboot getvar unlocked" if that doesn't work try "fastboot getvar" or "fastboot getvar unlock" to confirm if it is unlocked
(if non of the getvar commands work you did something wrong, and i wont be able to help you, but if you followed the tutorial you shouldn't have any issues as these are the exact steps i took)
M) then type "fastboot reboot"
LEAVE THE CMD OPEN OR YOU WILL HAVE TO REPEAT steps H-I
Step Ten: Flashing TWRP
A) go to http://forum.xda-developers.com/general/general/qa-metro-pcs-lg-k7-lgms330-t3331678 and click on the latest download for twrp for me it is BETA1
if the links on that page dont work then use the links here http://forum.xda-developers.com/showpost.php?p=66282525&postcount=42
B) extract the download into your SDK folder on your PC
C) in the sdk CMD window from Step nine
D) type "fastboot devices" - without qoutation
E) ~optional, HIGHLY RECOMENDED~
1)type fastboot "boot twrp-image-3.img" - this will boot up twrp WITHOUT flashing it, just so you can make sure everything is working right
in my case it was twrp-image-3.img check your twrp file name and replace fastboot boot twrp-image-3.img with
fastboot boot INSERT YOUR FILE NAME HERE.img
2)in twrp tap reboot>bootloader
F) when bootloader mode opens back up
G) type "fastboot flash twrp-image-3.img" or "fastboot boot INSERT FILE NAME HERE.img" depending on your file name
H) when finished flashing type "fastboot reboot"
Step eleven
A) follow instructions on step one
B) the reason you must do this is because when you flash TWRP it erases your entire phone and resets it
Congrats you have Successfully Rooted, Unlocked Your Bootloader, and Flashed TWRP, to your LG K7

Well done, my friend. Well done indeed.

[QUOTE
Congrats you have Successfully Rooted, Unlocked Your Bootloader, and Flashed TWRP, to your LG K7[/QUOTE]
is this ok with the gapps 5.1 instsall .zip for twrp install or should i use a different? also, do you have a suggested camera app? awesome thread btw. Nevermind simple twrp install fixed everything.

I have tribute 5 and can't access bootloader or install SuperSU.....always fails.
How can I get this to work?

Today backup important files you need!

Is this a real method BC everybody having problems rooting this device so I ask can u make a video and add screenshots
Sent from my LG-D800 using Tapatalk

I can confirm this method works. The only different thing i did was purchase Supersume pro from playstore. Worked like it said it would. The Ls675 is rootable. But no bootloader unlock or bootloader at all for that matter. Im running MS330 with TWRP full root and have twrp backups and fastboot flashable backups via flashfire....
---------- Post added at 02:28 AM ---------- Previous post was at 02:20 AM ----------
https://mega.nz/#!CRAVWAyI!QIbo20-0ZnVqlREs7ZXF66aB_Eh3UjCEMVQbLuP1Zec
https://mega.nz/#!zBoxGIQR!buXvorPkA14Vr2Idn7uhNPHanOL6wbvcEav3MhRdjv8
https://mega.nz/#!yQBg1ayC!r3qvWfLjCAKg0e8t91J1IEtae8_EwhvYTXjawv7b_2A
Screen shots of root, flashfire backups, and device info

While it does work I can find no method using the buttons to get into twrp all the instructions I find for recovery fail so I can only boot back to it after the phone boots, thus it's worthless at this point. Also the command is fastboot flash recovery imgagename.img and you'll need to remove kingroot from administrators to uninstall.
Anyone else been able to boot directly into twrp from the off position?

zgauthier8286 said:
I can confirm this method works. The only different thing i did was purchase Supersume pro from playstore. Worked like it said it would. The Ls675 is rootable. But no bootloader unlock or bootloader at all for that matter. Im running MS330 with TWRP full root and have twrp backups and fastboot flashable backups via flashfire....
---------- Post added at 02:28 AM ---------- Previous post was at 02:20 AM ----------
https://mega.nz/#!CRAVWAyI!QIbo20-0ZnVqlREs7ZXF66aB_Eh3UjCEMVQbLuP1Zec
https://mega.nz/#!zBoxGIQR!buXvorPkA14Vr2Idn7uhNPHanOL6wbvcEav3MhRdjv8
https://mega.nz/#!yQBg1ayC!r3qvWfLjCAKg0e8t91J1IEtae8_EwhvYTXjawv7b_2A
Screen shots of root, flashfire backups, and device info
Click to expand...
Click to collapse
can you please help me i have 2 MS330 that are bricked

callihn said:
While it does work I can find no method using the buttons to get into twrp all the instructions I find for recovery fail so I can only boot back to it after the phone boots, thus it's worthless at this point. Also the command is fastboot flash recovery imgagename.img and you'll need to remove kingroot from administrators to uninstall.
Anyone else been able to boot directly into twrp from the off position?
Click to expand...
Click to collapse
Try to do the factory hard reset trick but say no at the second screen. I haven't tried it out yet but I've been reading around several sites and that's a possible solution

zgauthier8286 said:
Try to do the factory hard reset trick but say no at the second screen. I haven't tried it out yet but I've been reading around several sites and that's a possible solution
Click to expand...
Click to collapse
Just reboots. Think we're going to have to change something? Boot image? Kernel?

callihn said:
Just reboots. Think we're going to have to change something? Boot image? Kernel?
Click to expand...
Click to collapse
I'm no developer by any means but I have Linux and windows on my laptop. I'm familiar with kernel building on bunt and have the source code for MS330 on my laptop. I have a backup of my boot img as well. If you can get to fastboot u can probably flash my boot img if you want me to send it. I have recovery img as well which is twrp. Let me know if you have any ideas on what u need or i can do as far as possibly doing a fresh build kernel later tonight and getting a zImage out of it

Does anyone know a way to successfully root this phone? Not just recover?
Sent from my LGMS330 using Tapatalk

callihn said:
Just reboots. Think we're going to have to change something? Boot image? Kernel?
Click to expand...
Click to collapse
Of other interest 5.1 is very dendent on Google apps and move app updates to the system via TB or Link2SD fails more than it succeeds, shows they moved but app inaccessible afterwards hence brick. Mine went down trying to integrate play services and reinstalling from adb didn't help. FYI if you relock the BL it'll lock the phone with a security error too. Moving play services causes unending error screens so you can't really see if it's done moving, but I waited a good 5 minutes before reboot. Issue on fails could have been the system not being r/w. Needless to say backup, backup, backup as I hadn't because I've never had a serious issue doing that and considered it a trivial task. Anyone had good success with integrating updates and cache? Anyone restored from twrp yet?

JayCouture.com said:
Does anyone know a way to successfully root this phone? Not just recover?
Sent from my LGMS330 using Tapatalk
Click to expand...
Click to collapse
Yes! Just follow the instructions here:
http://forum.xda-developers.com/showpost.php?p=66456635&postcount=1

zgauthier8286 said:
I'm no developer by any means but I have Linux and windows on my laptop. I'm familiar with kernel building on bunt and have the source code for MS330 on my laptop. I have a backup of my boot img as well. If you can get to fastboot u can probably flash my boot img if you want me to send it. I have recovery img as well which is twrp. Let me know if you have any ideas on what u need or i can do as far as possibly doing a fresh build kernel later tonight and getting a zImage out of it
Click to expand...
Click to collapse
Can you figure out why we can't boot to recovery via hardware buttons? That's critical for tinkering and testing on the go since I always have my phone but not my laptop for booting into recovery with adb. Not sure exactly where to look, probably start with a search for the words "recovery" and "safe mode" for the buttons and "security error" in the boot.img files.

callihn said:
Can you figure out why we can't boot to recovery via hardware buttons? That's critical for tinkering and testing on the go since I always have my phone but not my laptop for booting into recovery with adb. Not sure exactly where to look, probably start with a search for the words "recovery" and "safe mode" for the buttons and "security error" in the boot.img files.
Click to expand...
Click to collapse
If your rooted u can dl a reboot recovery app on the play store I have one that works like a charm. But im gonna take a look through Linux at the kernel options using make menu_config and see if there's anything I can see in there.

zgauthier8286 said:
I'm no developer by any means but I have Linux and windows on my laptop. I'm familiar with kernel building on bunt and have the source code for MS330 on my laptop. I have a backup of my boot img as well. If you can get to fastboot u can probably flash my boot img if you want me to send it. I have recovery img as well which is twrp. Let me know if you have any ideas on what u need or i can do as far as possibly doing a fresh build kernel later tonight and getting a zImage out of it
Click to expand...
Click to collapse
im having a problem w the security 9 error boot loop. only seem to b able to get it into download mode , not bootloader or recovery. would your boot and recovery img's help me at all ya think ? thanks !

goitalone said:
I have tribute 5 and can't access bootloader or install SuperSU.....always fails.
How can I get this to work?
Click to expand...
Click to collapse
Thanks again. For anyone that has a soft bricked LG K7 see this man! He brought my S#!? To life through teamveiwer. Thanks again. From my LG K7.

Maybe just my experience, but regarding step 10. I had to have the twrp image in SDK>platform tools, also when you get to fastboot flash twrp-image-3.img, I couldn't get it to work, until I typed it as fastboot flash recovery twrp-image-3.img. Hope this helps anyone else getting errors during this part. Thanks for the writeup.

[HOWTO][H815] Complete Guide to Unlock Bootloader + TWRP + Root + Xposed + ViperFX

Disclaimer and Warning: By attempting any of the processes outlined below, you accept full responsibility for your actions. Neither the contributors of this thread or XDA are responsible for any damage caused. Some of the actions may void your warranty.
Click to expand...
Click to collapse
I recently went through all of this and it took me quite a while to dig through dozens of threads so I decided to make a new one bringing all of these great things together specifically for the H815. Brace yourselves for the Android right of passage...
LG G4 H815 Marshmallow 6.0 Guide.
1. Unlock the Bootloader
2. Install the custom recovery: TWRP
3. Root
4. Install Xposed
5. Install Viper4Android
6. Unbrick Guide
7. Debloat
8. Battery Optimisations
- Quicklinks:
Drivers: http://oceanhost.eu/e4h2px4e0hkd/LGMobileDriver_WHQL_Ver_4.0.4.exe.htm
Minimal ADB: https://www.androidfilehost.com/?fid=24521665358595410
LG Bootloader Unlock: https://developer.lge.com/resource/mobile/RetrieveBootloader.dev?categoryTypeCode=ANRS
TWRP: https://forum.xda-developers.com/attachment.php?attachmentid=4387389&d=1515789045
SuperSU: https://www.androidfilehost.com/?fid=24369303960690845
System Image Complete: http://forum.xda-developers.com/g4/development/stock-h815-20g-images-kdz-flashable-t3450503
Xposed Framework: http://forum.xda-developers.com/attachment.php?attachmentid=3848457&d=1471691646
Xposed Installer App: http://forum.xda-developers.com/showthread.php?t=3034811
Viper4Android: https://www.dropbox.com/s/lvcxffdqimbi78b/V4A_Poweramp_Lollipop_v3.zip?dl=0
SELinux Mode Changer App: http://forum.xda-developers.com/devdb/project/dl/?id=12506
LG Bridge Unbrick Tool: http://www.lg.com/us/support/product-help/CT10000025-1438110404543-preinstall-apps
IMPORTANT | IMPORTANT | IMPORTANT | IMPORTANT | IMPORTANT
Backup any personal files because everything will be deleted! Make sure you have at least 50% battery remaining.
1. Unlocking the bootloader officially
This is the first step in voiding your warranty so is the point of no return. I've read in some places that you may be able to do this without voiding your warranty but I did not look into this.
WARNING - This will delete everything on the phone so make sure to backup important personal files.
i) Visit the official LG website to obtain a bootloader unlock file. First click the 'How to Unlock the Bootloader' tab and then the button 'Starting Unlocking the Bootloader' at the bottom of the page: https://developer.lge.com/resource/mobile/RetrieveBootloader.dev
ii) Sign up to a free developer account using a real email address (it's needed)
iii) Enter your IMEI number which you can find on your box, under the battery or by dialing *#06# on the phone. Keep this tab open
iv) On your phone, go to settings -> About phone -> Software info and then tap on Build number 7 times. Go back to Developer options under general settings and enable 'USB debugging' and 'Enable OEM unlock'.
v) Install the LG G4 drivers from here: http://oceanhost.eu/e4h2px4e0hkd/LGMobileDriver_WHQL_Ver_4.0.4.exe.htm
vi) Download and install minimal adb 1.4 from here: https://www.androidfilehost.com/?fid=24521665358595410
vii) Browse to where you installed this and then right click and select 'Open command window here'. By default, this is in C:\Program Files (x86)\Minimal ADB and Fastboot
viii) Plug in your phone to your computer using a reliable USB port and cable (USB 3.0 doesn't seem to work). Enter "adb reboot bootloader" into the command window without quotations. Wait for it to reboot and then type "fastboot oem device-id"
ix) This fastboot command will return a character string. This is the Device ID which is needed to generate your unique unlock key. It will look like this:
Code:
Example Device ID (PC User)$ fastboot oem device-id
(bootloader)-----------------------------------------------------------------
(bootloader) Device-ID
(bootloader) CD58B679A38D6B613ED518F37A05E013
(bootloader) F93190BD558261DBBC5584E8EF8789B1
(bootloader)-----------------------------------------------------------------
To generate your unlock key, you will need to paste together the 2 lines of output into one continuous string without "(bootloader)" or white spaces. In the example above, the Device ID would be:
CD58B679A38D6B613ED518F37A05E013F93190BD558261DBBC5584E8EF8789B1
Paste this into the LG website form and confirm. It will email you an unlock.bin file which you need to put in the same folder as your adb.exe file.
x) Now enter "fastboot flash unlock unlock.bin" into the command window. This should take seconds.
xi) Now check it is unlocked. By entering “fastboot reboot” and waiting for it to reboot. Then enter "adb reboot bootloader" again and then "fastboot getvar unlocked" and verifying that the response is "unlocked: yes".
Your bootloader should now be unlocked.Keep this command window open for the next step.
Thanks to shimp208 for minimal adb http://forum.xda-developers.com/showthread.php?t=2317790
2. Installing TWRP Custom Recovery
This will install a custom recovery allowing you to make backups and flash zip files.
i) With your bootloader freshly unlocked, you can boot up the device and set it up. Go through the startup guide thoroughly without skipping as these settings are going to stay.
ii) Download the latest TWRP img file from https://forum.xda-developers.com/attachment.php?attachmentid=4387389&d=1515789045 and place it in the same folder as your adb.exe file and unlock.bin. Now rename it to lgg4-twrp.img without changing the file extension!
iii) Now also copy the lgg4-twrp.img file to your phone's SD card using a USB cable.
iv) Enable USB debugging again
v) Open up a command window again by Shift+Right clicking in the folder with adb.exe.
vii) In the command window, type "adb reboot bootloader". Wait to enter the bootloader and then type "fastboot boot lgg4-twrp.img" and hit enter. The device should now restart in TWRP but it is not installed yet.
vii) Once TWRP starts, select 'install' and then tick 'images' at the bottom.
viii) Find the lgg4-twrp.img file and select it. Then in the next menu select 'recovery' and swipe the bar at the bottom to confirm flash.
ix) You should then see 'Image Flash Complete' so can select back then reboot and system.
(If installing from an external SD card, go to 'mount' from the main screen and then tick to mount your ext SD card. Go back and continue as normal)
Thanks to TeamWin for TWRP https://twrp.me/
Thanks to Adam Myczkowski for TWRP install corrections.
3. Root
By now, you should have an unlocked bootloader and a custom recovery installed.
If you use snapchat, you won't be able to log in with a rooted phone. So it would be a good idea to install it now and log in. You remain logged in rooting and installing Xposed. Quicklink: https://play.google.com/store/apps/details?id=com.snapchat.android​i) Download SuperSU from https://www.androidfilehost.com/?fid=24369303960690845 and place it on your phones internal storage.
(this works fine but you can get the latest from here: http://forum.xda-developers.com/showpost.php?p=64161125&postcount=3
ii) Make sure you have USB debugging enabled again.
iii) Now with your phone on and plugged in, enter recovery by opening adb as before and entering "adb reboot recovery".
If you have problems, see the end of this section​iv) Once in the recovery, hit install and browse to the SuperSU file we just downloaded.
vii) Swipe flash and then reboot into the system.
The phone should now boot and be rooted. If not, see the notes at the end of this section.
You can use https://play.google.com/store/apps/details?id=com.joeykrim.rootcheck to verify if you have root.
• If your phone does not turn on then pull out the battery and USB cable and then put just the battery back in. Now Press and hold the volume down and power buttons together. Then first LG logo should appear. Now continue holding the down button but release the power button for one second and then press it again and hold.
You should now see a screen asking you to wipe everything. Navigate with the down arrow and press the power button for both screens. This should now take you to TWRP recovery and NOT actually wipe the phone.
• If you had a bootloop then follow the above steps to get into the recovery and then you will need to download the following onto the phone: http://forum.xda-developers.com/g4/development/stock-h815-20g-images-kdz-flashable-t3450503 [1.5GB]
Once in the recovery, you are able to connect the phone to the computer for regular data transfer in order to transfer the file. (I had problems with the microSD card so I would avoid it).
This system image seems to be missing the FM Radio, LG Remote and SmartSettings, Voice Recorder and Quickmemo apps. To get these back, go to general settings -> About phone -> Update centre -> App updates and download/install as necessary.​• If you still could not get into the recovery at all then follow the unbrick steps below in section 6.​
Thanks to autoprime for the system images [url[http://forum.xda-developers.com/g4/development/stock-h815-20g-images-kdz-flashable-t3450503[/url]
Thanks to Chainfire for SuperSU http://forum.xda-developers.com/showpost.php?p=64161125
4. Installing Xposed
i) Download Xposed from here: https://forum.xda-developers.com/attachment.php?attachmentid=3848457&d=1471691646 and place it on your phone or SD card
ii) Enter recovery using the methods shown before. (You can also now enter recovery using this root app: https://play.google.com/store/apps/details?id=com.antaresone.quickreboot)
iii) Use the recovery menus to flash the zip file. Reboot.
iv) Download and install the Xposed installer app, XposedInstaller_3.0_alpha4.apk, from the post attachment here: http://forum.xda-developers.com/showthread.php?t=3034811
Thanks to rovo89 for Xposed and Follow_and_Feel for sharing the G4 Xposed link http://forum.xda-developers.com/showthread.php?t=3034811
5. Installing Viper4Android (this breaks FM radio!)
WARNING - The FM radio app will not work after installing this.
i) Download Viper4Android from here: https://www.dropbox.com/s/lvcxffdqimbi78b/V4A_Poweramp_Lollipop_v3.zip?dl=0
ii) Place the zip file on your phone or SD card and flash it in recovery. Reboot.
iii) Open the ViperFX app. From the menu and install the driver.
iv) You need to get Viper4Android to run in enforcing mode so flash this zip in recovery: https://www.dropbox.com/s/k9cnruw2e1t1d4t/ViPER4Android-supolicy.zip?dl=0
Install it. Open the app and set selinux to permissive. Reboot.
v) Install BusyBox from here: https://play.google.com/store/apps/details?id=stericson.busybox
Thanks to the ViperFX developers and zhuhang for Viper4Android http://forum.xda-developers.com/showthread.php?t=2191223
Thanks to Choristav for the Viper4Android file http://forum.xda-developers.com/lg-g2/general/guide-poweramp-viper4android-lollipop-t3133935
Thanks to maximumentropy for the SElinux enforcing zip http://forum.xda-developers.com/showthread.php?p=61242973#post61242973
Once all this is done and you're happy. It would be a good idea to enter recovery and make a full backup so that you can restore to the clean rooted state.
6. Unbrick Guide
If something messed up while flashing something and can't boot. Open up the recovery and restore your backup. If you don't have one, flash the v20d system image from an external SD card [1.5GB]. Download here: http://forum.xda-developers.com/g4/development/stock-h815-20g-images-kdz-flashable-t3450503
If you cannot get to the recovery then follow these steps:
i) Make sure you have the LG Drivers installed from here: http://oceanhost.eu/e4h2px4e0hkd/LGMobileDriver_WHQL_Ver_4.0.4.exe.htm
ii) Download the LG Bridge software from here: http://www.lg.com/us/support/product-help/CT10000025-1438110404543-preinstall-apps
iii) Remove the battery and reinsert it so the device it is fully off.
iv) While holding the up volume button, insert your USB cable.
v) You should enter download mode. Go to the Software Update tab of the LG Bridge. It will say connecting and then should say your device is up to date. Click on the recovery text on the bottom right and then follow the instructions. The software will download the system image for you and this is roughly 1.6GB so make sure your firewall doesn't block this connection.
This shouldn't delete your data (no guarantees) but you will have to grant app permissions again and reapply any changes to system files e.g. root, viper4android, xposed ect.
If you have problems try this method instead:
http://forum.xda-developers.com/g4/general/guide-lg-g4-stock-firmware-to-stock-kdz-t3107848
7. Debloat
Here is a list of apps and services an XDA user has suggested removing: https://forum.xda-developers.com/g4/general/bloatware-tool-t3141890/post61509537#post61509537
Removing these won't break the phone but of course be smart about it; removing Weather will mean you don't have the weather app. I only removed Google apps I don't use and redunadant apps from LG.
You can remove bloat apps using the Titanium Backup app from here: https://play.google.com/store/apps/details?id=com.keramidas.TitaniumBackup
I would advice you to make a backup of them first in case you want them back. It's the easiest way to get the apps back.
If you do need a guide for using Titanium Backup, head over to this excellent guide: http://forum.xda-developers.com/showthread.php?t=2717159
8. Battery Optimisations
The aim is to get maximum battery life without compromising speed, user experience, features or notifications.
(I'm just going to use the following space as a log of things I've done. I will tidy this up when complete. Please do suggest if any of these things are ineffective or detrimental.)
Read through this guide: http://forum.xda-developers.com/g4/general/guide-g4-lag-free-marshmallow-t3327878
1. Disable Activity Logs: General Settings -> About phone -> Activity Logs at the bottom.
Also try following the steps on here; users report better battery life: https://www.reddit.com/r/lgg4/comments/4fb4uf/psa_free_up_some_ram_up_to_300mb_and_maybe_gain_a/
2. Disable Smart Settings under General Settings
3. Disable Bluetooth and Wi-Fi scanning location service: General Settings -> Location -> Menu -> Scanning -> Untick both. (I honestly can't believe these exist. I wondered why I have bluetooth wakelocks)
4. Disable Open Wi-Fi scanning: Network Settings -> Wi-Fi -> Menu -> Advanced -> Untick Wifi notification. Toggle this on and off as it should also fix random white LED blinking.
5. Greenify 2.9 beta to enable aggressive doze.
6. Follow this guide for processor tweaks http://forum.xda-developers.com/nexus-5x/general/guide-advanced-interactive-governor-t3269557
Please note that this is my first thread and I'm not a developer. I hope the instructions are as complete and accurate as possible and they are what I followed for my H815 602. If there are any things I forgot or updates, please do let me know.

Superb guide. Thanks. Should be stickied.

Official LG don't unlock bootloader for H815P
Only europe is eligible for service

when i try to get my device id it just hangs at:
Code:
C:\ADB>adb reboot bootloader
C:\ADB>fastboot oem device-id
< waiting for any device >
any ideas?
running win10, with the drivers installed.
-LE-
found out the problem. usb3.0 does not work used usb2.0 and work flawlessly

On 6.0 Android is more secured and so to install recovery you have to either boot the recovery, flash custom kernel, then flash recovery or unpack boot.img from a custom kernel, flash it via fastboot, then flash recovery and lastly full kernel package in recovery. Better if you include this in your guide because many people will be asking "why my recovery is not booting?" and that's what we don't want. I've repeated this about 50 times or more and finally I will not have to.

Hi! Thanks for this guide!
Just found a "typo"
ii) Now with your phone on and plugged in, enter recovery by opening adb as before and entering "adb fastboot recovery". (You will need to enable USB debugging again)
I'm sure it should say "adb reboot recovery" : )
It could be worth saying that after installing root, there will be a boot loop or two, it even say so when you install the latest SuperSU.
I am also interested in your battery optimization, the most I've done so far is to disable NFC and location and disable some of my google account syncs that I don't use or use very rarely.

Redgoblin said:
Hi! Thanks for this guide!
Just found a "typo"
ii) Now with your phone on and plugged in, enter recovery by opening adb as before and entering "adb fastboot recovery". (You will need to enable USB debugging again)
I'm sure it should say "adb reboot recovery" : )
It could be worth saying that after installing root, there will be a boot loop or two, it even say so when you install the latest SuperSU.
I am also interested in your battery optimization, the most I've done so far is to disable NFC and location and disable some of my google account syncs that I don't use or use very rarely.
Click to expand...
Click to collapse
Thanks for the correction.
In addition to what you've done, I have installed greenify and hibernated Snapchat, Viber and Facebook apps. WhatsApp isn't hibernated.
I have the donate version and xposed so till gcm push notifications.
I haven't done anything else. I had better battery stats installed for a few days and I kept checking it and was annoyed that I'd always have ~30% awake time with the screen off. There were no kernel wake locks, it was just app alarms mainly from android and Google.

I was getting 4 hours SOT and 20 hours use out of the box. Now I'm down to 3 hours 30.
I really wish the Autostarts app would work but it has no effect: https://play.google.com/store/apps/details?id=com.elsdoerfer.android.autostarts
This would allow me to stop many apps from waking up everytime the connectivity changes or the screen is unlocked.
I have Greenify with the donate Xposed settings. Coalescing, Deep Hibernation and GCM push enabled only. Here are the apps I have greenfied:
Maps
Skype
Viber
Messenger
Snapchat
Whatsapp
Gmail with 1 Google and 1 Yahoo account
CF.Lumen
Lux Autobrightness
Spotify
Viper4Android in High quality mode. Enabled are playback gain control; Equalizer; Dynamic System; Fidelity Control; Auditory System Protection and gain limiter.

Is anyone else not getting any sound from the radio app? It starts and even tunes to frequencies with channel name and now playing I hear no sound through headphones or speakers.
I've tried removing the app and installing from the update centre again.
The NextRadio app is incompatible (even when sideloading the apk) https://play.google.com/store/apps/details?id=com.nextradioapp.nextradio&hl=en

Well, I tried to unlock the H815 Taiwan version (bought on Amazon as a USA unlocked cellphone... ) but is not supported.
Damn it!

thanks...

i am wondering: if I go to settings / general / backup&reset, and then LG backup and perform a full backup on my SD card, will I be able to restore it all after rooting and get the system as it was previously?

joriq said:
i am wondering: if I go to settings / general / backup&reset, and then LG backup and perform a full backup on my SD card, will I be able to restore it all after rooting and get the system as it was previously?
Click to expand...
Click to collapse
I haven't tried it myself but have gone with the tried and trusted TWRP backup: http://www.howtogeek.com/240582/how-to-back-up-and-restore-your-android-phone-with-twrp/
And ADB backup which also works without root: http://forum.xda-developers.com/galaxy-nexus/general/guide-phone-backup-unlock-root-t1420351
These work great; you end up booting exactly where you left off and even with browser tabs still open as you left them.
From my understanding, you would need to boot into the phone and then perform the restore in the LG app. So this would require a bootable phone. The only times I restore would be after bootloops. For general app restore and settings, I use Titanium Backup. This provides the added benefit of being able to restore on different phones.

just to update all of you: I did root my 20d g4 and LG backup managed to restore almost everything. All apps are back, but I needed to agree to permissions for all of them and some returned with saved data, some did not. For example, none of my BT devices were recognised, so I have to pair all of them, which is tricky for moto 360, since it needed to be factory reset. However, I am very pleased with how things went in the end.
Also, my phone was not recognised when rebooting to fastboot, it took me an hour of changing ports and drivers, but then I decided to install the driver manually via device manager (win 7). I made an educated guess and nailed it
Also, I had a really hard time unlocking the bootloader, because LG site kept providing "service unavailable" message, so I had to fool the server that I am in Singapore (like in this guide https://youtu.be/O64GfQORCaE )...

it is work for H815-L?
and i will be glad if you post a guide how to unlocking the bootloader without voiding my warranty

and how about a guide to unlock the free money printing machine in our G4s? LOL
warranty will be void

Question will this work on sprint variants

I've updated the Viper4Android install method. You can flash this zip file: http://forum.xda-developers.com/showthread.php?p=61242973#post61242973
This will allow you to run Viper4Android without having to set SELinux to permissive. This is better for security but I also had issues with the SELinux mode changing back so would sometimes have to reboot or reinstall the viper driver to get it to work again. After doing this, you don't need the SELinux mode changer app.

will this work on v20e?

Murtagh92 said:
will this work on v20e?
Click to expand...
Click to collapse
You can try to follow the steps in this thread or install v20d as I believe they are basically the same but for different region.
Alternatively, follow this guide for v20e http://forum.xda-developers.com/g4/general/guide-root-h815-v20e-installing-twrp-t3354668

[Guide] Procedure with Video to Return from Oreo Beta to Nougat step by step

Hello everyone, I leave here step by step how to return from Oreo Beta to Nougat along with a video that I made with the process step by step, greetings.
NOTE: THIS PROCESS WAS TESTED AND WORKS, IT MUST BE CLEARED THAT THIS PROCESS IS UNDER YOUR RESPONSIBILITY, IF YOU FOLLOW THE STEPS YOU WILL NOT HAVE ANY PROBLEM, ONLY YOU ARE RESPONSIBLE FOR BRICK.
COMMUNICATION GIVEN BY THE COMPI @kacarot, "ONLY YOU ARE RESPONSIBLE FOR YOUR TELEPHONE"
Look to read by xda and in androi hilfe who are warning that this system is dangerous and that there is a step where you can produce the brick .... I have only read a case of brick (recovered with fh) but several cooks insist on warning the risks ..... From what I read the failure can be given to clean data from twrp and copy the new oeminfo ... There may fail ....
Perhaps it would be prudent to notice well that in the mentioned forums they are withdrawing the instructions ...
COPIO flashdance user post very advanced
It is not advisable for any fan to do it! The trick with dd if =
is that you have to delete the data before in the TWRP to obtain a "normal file structure". You can verify that in the installation. Only if there are no numbers / combinations of letters can you be in Advanced in the TWRP with cp .... and dd if = make and wait until you have finished exchanging the message. Only then can you turn it off and then with VOL + / VOL- and Power of the SD starts the update and waits until it finishes. Then the HWOTA arrives at Zug. Yes, that's just with this rom and the dload folder in the root directory of the SD.
TELEPHONE PREPARATION
1. Activate OEM unlocking
2. Enable USB debugging
3. Have installed the Minibus ADB Fastboot 1.4.2 link download: https://drive.google.com/file/d/0B5MSGGCOoMjiTFE5RHlaOWFvOVE/view?usp=drivesdk
4. Copy to the folder where the Minimal ADB FASTBOOT was installed the TWRP OREO link download: https://drive.google.com/file/d/0B5MSGGCOoMjial94VHVzVnNVSGc/view?usp=drivesdk
5. download the rom MHA-AL00C00, unzip it and the dload folder that we have left to save it in the root of the SD link rom card: https://mega.nz/#!lYIhhDqY!I8lrCig3x2MMTHINZOvwVmhYDX2vz9QWb6V9epA6JI4
6. Download the file MHA-AL00C00.bin and save it in the root of the SD link card oeminfo: https://drive.google.com/file/d/0B5MSGGCOoMjiSUdZQmJQdzNIRUU/view?usp=drivesdk
DOWNGRADE PROCESS
1. Unlock the bootloader.
2. Enter the folder where you have installed the ADB Fastboot Minimal, press the shift key + right click and choose to open the command window here.
3. While in the command window we proceed to install the OREO TWRP with the following command: fastboot flash recovery_ramdisk twrp-oreo.img
4. Once the OREO TWRP is installed, we enter it with the button (volume up + power), the Huawei logo comes out and we release the power button.
5. Being in the TWRP we go to the option ADVANCE and in this we select the option TERMINAL where it opens a window to place the following commands which install the oeminfo saved in the SD the MHA-AL00C00.bin
cp /external_sd/MHA-AL00C00.bin /tmp/oeminfo.bin and they give the blue button of the keyboard to confirm it.
dd if = / tmp / oeminfo.bin of = / dev / block / sdd5 bs = 1048576 and they give you the blue button on the keyboard to confirm it.
After entering the two commands, we go back to the TWRP and look for the option to turn off.
7. With the phone completely turned off we proceed to install the ROM MHA-AL00C00 which is in the dload folder, press the three buttons at the same time (volume up + volume down + power) until the installation of this one.
If everything was done to the letter the phone should restart and turn on normally with the ROM MHA-AL00C00 installed, and after performing this process, you can re-perform the model and rom you want.
TIP: When doing the rebrand again for the change of ROM, perform the procedure twice selecting REBRAND so that the change of ROM can remain because once it is compiled in TEST KEYS NRD-900M, this I say as experience from someone who has already performed this procedure twice.
Link Video: https://www.youtube.com/watch?v=TtRD8g5n2_U#action=share
http://www.htcmania.com/showthread.php?t=1362900
Thanks to the creators of this method since without them this would not have been possible.

This procedure really helped when i was stuck while upgrading to Oreo. Especially the part where u need to load TWRP for oreo and then you are able to flash the oeminfo.bin file..
Thanks a million

ernest2728 said:
Hello everyone, I leave here step by step how to return from Oreo Beta to Nougat along with a video that I made with the process step by step, greetings.
NOTE: THIS PROCESS WAS TESTED AND WORKS, IT MUST BE CLEARED THAT THIS PROCESS IS UNDER YOUR RESPONSIBILITY, IF YOU FOLLOW THE STEPS YOU WILL NOT HAVE ANY PROBLEM, ONLY YOU ARE RESPONSIBLE FOR BRICK.
COMMUNICATION GIVEN BY THE COMPI @kacarot, "ONLY YOU ARE RESPONSIBLE FOR YOUR TELEPHONE"
Look to read by xda and in androi hilfe who are warning that this system is dangerous and that there is a step where you can produce the brick .... I have only read a case of brick (recovered with fh) but several cooks insist on warning the risks ..... From what I read the failure can be given to clean data from twrp and copy the new oeminfo ... There may fail ....
Perhaps it would be prudent to notice well that in the mentioned forums they are withdrawing the instructions ...
COPIO flashdance user post very advanced
It is not advisable for any fan to do it! The trick with dd if =
is that you have to delete the data before in the TWRP to obtain a "normal file structure". You can verify that in the installation. Only if there are no numbers / combinations of letters can you be in Advanced in the TWRP with cp .... and dd if = make and wait until you have finished exchanging the message. Only then can you turn it off and then with VOL + / VOL- and Power of the SD starts the update and waits until it finishes. Then the HWOTA arrives at Zug. Yes, that's just with this rom and the dload folder in the root directory of the SD.
TELEPHONE PREPARATION
1. Activate OEM unlocking
2. Enable USB debugging
3. Have installed the Minibus ADB Fastboot 1.4.2 link download: https://drive.google.com/file/d/0B5MSGGCOoMjiTFE5RHlaOWFvOVE/view?usp=drivesdk
4. Copy to the folder where the Minimal ADB FASTBOOT was installed the TWRP OREO link download: https://drive.google.com/file/d/0B5MSGGCOoMjial94VHVzVnNVSGc/view?usp=drivesdk
5. download the rom MHA-AL00C00, unzip it and the dload folder that we have left to save it in the root of the SD link rom card: https://mega.nz/#!lYIhhDqY!I8lrCig3x2MMTHINZOvwVmhYDX2vz9QWb6V9epA6JI4
6. Download the file MHA-AL00C00.bin and save it in the root of the SD link card oeminfo: https://drive.google.com/file/d/0B5MSGGCOoMjiSUdZQmJQdzNIRUU/view?usp=drivesdk
DOWNGRADE PROCESS
1. Unlock the bootloader.
2. Enter the folder where you have installed the ADB Fastboot Minimal, press the shift key + right click and choose to open the command window here.
3. While in the command window we proceed to install the OREO TWRP with the following command: fastboot flash recovery_ramdisk twrp-oreo.img
4. Once the OREO TWRP is installed, we enter it with the button (volume up + power), the Huawei logo comes out and we release the power button.
5. Being in the TWRP we go to the option ADVANCE and in this we select the option TERMINAL where it opens a window to place the following commands which install the oeminfo saved in the SD the MHA-AL00C00.bin
cp /external_sd/MHA-AL00C00.bin /tmp/oeminfo.bin and they give the blue button of the keyboard to confirm it.
dd if = / tmp / oeminfo.bin of = / dev / block / sdd5 bs = 1048576 and they give you the blue button on the keyboard to confirm it.
After entering the two commands, we go back to the TWRP and look for the option to turn off.
7. With the phone completely turned off we proceed to install the ROM MHA-AL00C00 which is in the dload folder, press the three buttons at the same time (volume up + volume down + power) until the installation of this one.
If everything was done to the letter the phone should restart and turn on normally with the ROM MHA-AL00C00 installed, and after performing this process, you can re-perform the model and rom you want.
TIP: When doing the rebrand again for the change of ROM, perform the procedure twice selecting REBRAND so that the change of ROM can remain because once it is compiled in TEST KEYS NRD-900M, this I say as experience from someone who has already performed this procedure twice.
Link Video: https://www.youtube.com/watch?v=TtRD8g5n2_U#action=share
http://www.htcmania.com/showthread.php?t=1362900
Thanks to the creators of this method since without them this would not have been possible.
Click to expand...
Click to collapse
What if we don't have SD card support. Mate 9 Pro with dual SIM. Is it possible to modify command as external OTG?
Metallica&Manowar

[GUIDE] (Exynos) TWRP+Magisk updated guide (June 2021)

Magisk+TWRP for Exynos ONLY
Hi, there are some tutorials out here on the forum but some are outdated, others have dead links and other mix some steps from exynos and snapdragon, so this is a guide on how I did it, My device is the International Exynos LTE Dual sim variant or SM-N985F-DS running android 11 (oneUI 3.1) patch from april 2021 with security patch from may 2021 but this has been tested on many exynos variants.
See DR.Ketan post: https://forum.xda-developers.com/t/guide-how-to-root-n20-ultra-n986b-n9860.4147023/
I based my guide on @dr.ketan 's guide and some bits from the comments and references from that post, so all credit goes to him and the people he reference on his post.
First of all as dr.ketan said:
NOTICE :
Before you move further, make clear that rooting device -
- Your warranty will be void
- Some of functions may not work on rooted device, some function may get back with un rooting, some may never.
- All your data on device will be lost
- Flashing custom binaries may brick (Usually soft but can be hard brick too) your device, so follow it on your own risk!
If you are ready with condition, move further -
Click to expand...
Click to collapse
1.- BACK UP ALL OF YOUR DATA, copy your files to a PC, make backups on google and samsung clouds and any other cloud service backup you have (whatsapp for example) becuase in this process all data is wiped TWICE.​
2.- Prepare your PC: ​
I personally recommend using a laptop or a pc with an UPS (backup battery) just to be safe.
2.1 Create a folder fo the files and create 2 folders inside named OLD and NEW (this is merely to keep files organized since they CAN be confused (see next steps), unless said otherwise ALL files and folders go in the OLD folder.
2.2 Download ODIN [CHECK FILES BELOW]
2.3 Download YOUR phone stock firmware (you have several options for this, I personally use sammobile but here you have to google on your own. Remember to extract the contents and you should have 5 files.
NOTE(hehe): to get your exact model name you can check on Settings>About phone>Software information>Baseband version.
2.4 Download Magisk APK and ZIP [CHECK FILES BELOW]
2.5 Download Multidisabler ZIP [CHECK FILES BELOW]
2.6 Download TWRP recovery [CHECK FILES BELOW] and place it in the "NEW" folder you created on step 2.1
IMPORTANT: use only THIS recovery from THIS file, since it's modified for exynos and also to skip a step on the process.
3.- Prepare your Phone:​
3.1 Copy the AP file from your PC (the one from the stock firmware) and the magisk.apk file you downloaded, to your phone.
3.2 Install the magisk app (the apk file)
3.3 Open the magisk app and select the first option, there you will have an option to select a file, select the AP file you copied from your pc an tap continue (or start I dont remember)
3.4 Now you will have a "Masgisk_patched-*********.tar" file on your download folder on your phone, copy that file to your PC and place it in the "NEW" folder you created on step 2.1.
4.- Now we start the process of modifying the phone​
4.1 UNLOCK BOOTLOADER: on your phone go to SETTINGS>ABOUT PHONE>SOFTWARE INFORMATION and tap the "Build Number" repeatedly until you see "You are now a developer" (or something similar)
4.2 Go back to SETTINGS and now you will have at the bottom a new menu called "Developer options", enter and toggle on the OEM unlocking option, this will prompt some warnings and an assistant, follow the instructions and when you finish turn off your phone.
4.3 Press and hold the VOL+ and VOL- buttons at the same time and connect the phone to your PC WHILE HOLDING BOTH BUTTONS, this will prompt DOWNLOAD MODE on your phone and you will see 3 options, Press and hold the VOL+ button to unlock the bootloader, now your phone will reboot and wipe all of your data.
4.4 Confirm OEM Unlock is enabled: after the reboot you will get the initial setup process again (as if the phone were new) skip though all (because it will be wiped again) and repeat the process on step 4.1
Now the OEM unlock setting should be GRAYED OUT and with this your phone is ready to be modified
5.- Flashing custom binaries​
5.1 Turn off the phone and put it into DOWNLOAD MODE again (see step 4.3) but this time use the first option, that is, press the VOL+ button ONCE, this will enter DOWNLOAD mode and put the phone in flashing state.
5.2 Open ODIN on your PC as administrator
5.3 On the Options tab UNTICK the "Auto Reboot" option
5.4 Click on the AP button and locate the "Masgisk_patched-*********.tar" on the "NEW" folder.
5.5 Click Start, wait until you see PASS on the top left corner
5.6 Click on the AP button again and locate the "Exynos no vbmeta recovery.tar" file on the "NEW" folder.
5.7 Click Start, wait until you see PASS on the top left corner.
5.8 THIS STEP IS CRITICAL: disconnect your phone from your PC, now READ AHEAD before doing anything.
Here you will have to do a combination of button presses to boot into recovery. Once your phone is disconnected press and hold VOL- and POWER BUTTON (side key) for approximately 7 seconds, once the phone screen goes black immediately release the VOL- button and press the VOL+ button WHILE KEEP PRESSING THE POWER BUTTON. You will see 1 or 2 warning and a glimpse of the samsung logo, keep pressing the buttons until you see the TWRP (Team Win Recovery) splash screen, at this point you can release the buttons.
5.9 now in the recovery navigate to WIPE tab > FORMAT DATA > and type yes to continue (read instructions on screen). DO NOT RESTART. go back to the starting screen and then navigate to REBOOT > REBOOT TO RECOVERY.
5.10 Your phone will reboot into recovery on its own, no need to press any buttons.
5.11 Once inside the Recovery, connect the phone to your PC, after a few seconds the phone will connect normally as if it were in the OS, now copy this files to your phone from your PC:
Magisk.zip
Multidisabler-samsung-3.1.zip
5.12 Go to INSTALL tab on your phone and select the multidisabler zip and install it (it will prompt you to swipe to install), once finished tap on WIPE CACHE/DATA.
5.13 Now do the same with magisk.zip but this time DO NOT tap the "wipe cache/data" button, instead tap on REBOOT.
6.- First Boot​
NOTE: First boot takes a while but if your phone is not showing the initial setup screen in max 15 minutes something went wrong and you will have to flash back to stock firmware and start over.
6.1 Once you boot do the usual initial setup, here you can do it normally and restore your cloud backups.
6.2 When you are all set up, look for the MAGISK app, open it and follow the instructions. Your phone will reboot so make sure you are all set up BEFORE opening the app.
6.3 ALL DONE!​

Hi there,
Thanks for the updated guide!
Maybe worth mentioning that when done, to get back into TWRP power down phone -> connect USB ->press & hold Power AND VOL- until black screen (7sec) -> Quickly press VOL+ with still holding Power button.
Would you know how to update firmware to latest security patches (downloaded from SamMobile for example) now phone is rooted with Magisk, with TWRP recovery and multidisabled?
Regards,

I followed all directions, and Magisk and TWRP are installed. However, I do not have root access. I have an S10e (SM-G970F, Exynos). To get root access, you have to do the bixby, volume up, and power together. I always get to TWRP. When I had only Magisk installed, I always got stock recovery. How do I get the keys correct?

Also, I understand you must have something in the USB port. I tried mostly connected to the computer, sometimes to a charger, and sometimes not at all. Nothing can get Magisk root access unless it boots me to recovery, and then I can just reboot to system (no root) or recovery (same place, still no root).

Threx71 said:
IMPORTANT: use only THIS recovery from THIS file, since it's modified for exynos and also to skip a step on the process.
Click to expand...
Click to collapse
Where is this TWRP file?

DAVIRO1 said:
Where is this TWRP file?
Click to expand...
Click to collapse
Weird, it was together with all the other files, I'll re-upload it when I get home.

josephgrab said:
Also, I understand you must have something in the USB port. I tried mostly connected to the computer, sometimes to a charger, and sometimes not at all. Nothing can get Magisk root access unless it boots me to recovery, and then I can just reboot to system (no root) or recovery (same place, still no root).
Click to expand...
Click to collapse
Only thing I can think of is you are not flashing the correct magisk zip file on TWRP, try downloading it from magisk's official site. Is the same file for the both procedures, you just have to change the file extension accordingly (.apk or .zip)

Threx71 said:
Weird, it was together with all the other files, I'll re-upload it when I get home.
Click to expand...
Click to collapse
thanks, I have all the files ready to do the flash,

DAVIRO1 said:
thanks, I have all the files ready to do the flash,
Click to expand...
Click to collapse
here you go
Exynos no vbmeta recovery.tar
drive.google.com
EDIT: why the f is xda deleting the file after uploading?

I tried that file. First, I could not flash with odin 2 recovery.img . I used 7-zip to archive it as .tar, and it still would not flash. I do have an SM-G970F, so it is Exynos. I am not sure of the results, but I did flash with newest twrp-3.5.2_9-5-beyond0lte.img.tar .

Threx71 said:
5.6 Click on the AP button again and locate the "Exynos no vbmeta recovery.tar" file on the "NEW" folder.
Click to expand...
Click to collapse
What is this file?

DAVIRO1 said:
What is this file?
Click to expand...
Click to collapse
Here
Exynos no vbmeta recovery.tar
drive.google.com

josephgrab said:
I tried that file. First, I could not flash with odin 2 recovery.img . I used 7-zip to archive it as .tar, and it still would not flash. I do have an SM-G970F, so it is Exynos. I am not sure of the results, but I did flash with newest twrp-3.5.2_9-5-beyond0lte.img.tar .
It was the wrong file, this is the correct one:
Exynos no vbmeta recovery.tar
drive.google.com
Click to expand...
Click to collapse

After flashing that, it would not boot to recovery but just to download.

Thanks! Worked for me! I have a question:
do you know how to Bypass root detection for bank app?

After I flash Exynos no vbmeta recovery.tar this is the error I get
Couldn't find grp7 symbol in main dtb
failed to permorm fixtps in overlay
ufdt overlay apply fail
UFDT DT Overlay FAIL
need kernel: could not find do normal text
vbmeta: Error verifying vbmeta image
vbmeta VERIFICATION_DISABLE bit is set
CUSTOM VBMETA
VBMETA
I cannot read everything it is so small, so there may be some typos

I found out what I did wrong. I am using SM-G970F (S10e), whereas this forum is for SM-N985F.
Great instructions, though.
Thank you. Just wish I could get root. I cannot because of the updated firmware (August 2021).

Hello, thank you for the guide it worked to root my sm-n986b !
Threx71 said:
5.6 Click on the AP button again and locate the "Exynos no vbmeta recovery.tar" file on the "NEW" folder.
5.7 Click Start, wait until you see PASS on the top left corner.
5.8 THIS STEP IS CRITICAL: disconnect your phone from your PC, now READ AHEAD before doing anything.
Here you will have to do a combination of button presses to boot into recovery. Once your phone is disconnected press and hold VOL- and POWER BUTTON (side key) for approximately 7 seconds, once the phone screen goes black immediately release the VOL- button and press the VOL+ button WHILE KEEP PRESSING THE POWER BUTTON. You will see 1 or 2 warning and a glimpse of the samsung logo, keep pressing the buttons until you see the TWRP (Team Win Recovery) splash screen, at this point you can release the buttons.
Click to expand...
Click to collapse
There is just this part that I did differently.
First, to start flashing the twrp at step 5.6 I had to restart the phone in download mode because odin would be stuck at "setup connection" if i tried to flash it just after the file before.
And at step 5.8 I had to keep the phone connected to the PC otherwise it would not boot in recovery menu.
I did all the phone setup and installed "Riru" then "Universal SafetyNet Fix" magisks modules to pass the Safetynet.
I just have one question if someone can tell me if there is a way to not display the bootloader warning message when the phone is booting please.

lilstyle974 said:
I did all the phone setup and installed "Riru" then "Universal SafetyNet Fix" magisks modules to pass the Safetynet.
I just have one question if someone can tell me if there is a way to not display the bootloader warning message when the phone is booting please.
Click to expand...
Click to collapse
I have installed drketanrom and there are a tweak that delete this message.

lilstyle974 said:
Hello, thank you for the guide it worked to root my sm-n986b !
There is just this part that I did differently.
First, to start flashing the twrp at step 5.6 I had to restart the phone in download mode because odin would be stuck at "setup connection" if i tried to flash it just after the file before.
And at step 5.8 I had to keep the phone connected to the PC otherwise it would not boot in recovery menu.
I did all the phone setup and installed "Riru" then "Universal SafetyNet Fix" magisks modules to pass the Safetynet.
I just have one question if someone can tell me if there is a way to not display the bootloader warning message when the phone is booting please.
Click to expand...
Click to collapse
Thanks, I was just about to post this about the safety net since I just did it yesterday to start using google pay.
I'll add it to the Post as EXTRAS along with some other things.
Also sorry to everyone for having this thread so abandoned, I used to get so much spam from XDA that I ended up blocking all emails (?

Lenovo M10 Plus 3rd Gen Root Guide (TB125FU)

Notice! This process also completely resets your tablet! Backup all files and information.
This is just me documenting my process for rooting my tablet. I am not responsible for any damage or lost information due to the process changing, errors in execution, or mistakes in my documentation. Let me know of any errors, corrections, or updates that may need made.
Thank you to contributors to the thread linked below for the information provided that allowed me to create this more detailed root guide.
Custom Rom / rooting Options vor TB-125FU (Lenovo Tab M10 Plus 3rd Gen)
Hey everyone, I've been looking for options to Install a custom Rom or root since I bought the Tablet several month ago. It seems like there are some options for the Full Hd Version, but I have a hard time finding anything useful for the 125FU...
forum.xda-developers.com
This process was completed on Model: TB125FU
Follow documentation at your own risk!
First I updated my tablet until it was the newest system update available. For me that was version "TB125FU_S000118_220927_ROW"
Step 1 - Install tablet drivers on your computer
Download drivers folder and unzip
https://forum.xda-developers.com/attachments/android_adb_interface-zip.5741369/
Plug tablet into computer
Open Device Manager
You’ll see a line item labeled “ANDROID” with a yellow exclamation mark
Right click on it and select update drivers
Select Browse Computer and navigate to the unzipped driver folder
Make sure the Include Subfolders box is checked and select Next
This will install the drivers for the tablet
Step 2 - Unlock your tablet for usb debugging
Open settings on your tablet
Search for “build”
Click “Build Number”
Click the Build Number box seven times to unlock developer options
Close and reopen the settings app
Under System there is now a Developer options, open it
Toggle the selections for OEM Unlocking and USB debugging
Step 3 - Obtain boot.img
Download and install Lenovo LSMA
https://support.lenovo.com/us/en/downloads/ds101291-rescue-and-smart-assistant-lmsa
plug your tablet into the computer
run program, select rescue
check the allow USB debugging popup on your tablet
select tablet in the LSMA program and select the allow popups on your tablet
select Download when it shows the firmware for your tablet
DO NOT CLICK START RESCUE
close the program when it finishes downloading the ROM
The ROM will download to C:\ProgramData\RSA\Download\RomFiles
Make sure ROM folder name matches the current system update version on your tablet
Copy from the downloaded ROM folder “boot.img” to your tablet
Step 4 - Modify boot.img
Download Magisk apk from the official Github page
https://github.com/topjohnwu/Magisk/releases
install APK on your tablet
open Magisk
Select Install
Select “Select and Patch a File”
Navigate to the location you copied the boot.img file and select the file
Select “Let’s Go”
Wait for flashing lot to say “All done” indicating it modified the boot.img file
Transer modified file to your computer, for me it was called “magisk_patched-25200_rgIWh.img” I then renamed it “magisk_patched.img” to make future typing commands shorter
Step 5 - Unlock bootloader and flash modified boot.img
Download Minimal ADB and Fastboot Tools
I chose to download the portable version
https://forum.xda-developers.com/t/tool-minimal-adb-and-fastboot-2-9-18.2317790/
unzip folder
Place the modified .img file in this folder as well
Navigate to this folder, right click and launch a Command Prompt
Plug in your tablet to your computer if it isn’t already
Type “adb devices” to confirm your computer sees your tablet
Type “adb reboot bootloader” this should reboot your tablet into fastboot
Type “fastboot devices” to confirm the computer sees your tablet
Type “fastboot flashing unlock” read the instructions on screen which will tell you to press the volume up button (volume button closest to power button) to unlock bootloader.
Press the volume up button, It will say it was successful, wait a few seconds for the tablet to return to fastboot
Type “fastboot flash boot magisk_patched.img” and when you hit enter you should see a transferring status on your tablet (if you named your modified .img file something else, type that into the command instead)
When you see the transfer is complete type “fastboot reboot” which will restart the tablet.
The tablet should now be rooted which will completely reset the tablet. You will need to setup the tablet again and reinstall the Magisk app from the official Github. The Magisk App should now have superuser controls
You can relock the bootloader and return the tablet to factory image. IT WILL WIPE ALL DATA AGAIN!
To unroot you just reverse a couple steps.
Put the original boot.img (Make sure it is the boot.img of the same version ROM) in the Minimal ADB and Fastboot Tools folder on your computer
Navigate to this folder, right click, and launch a Command Prompt
Plug in the tablet to your computer
Type “adb reboot bootloader” this should reboot your tablet into fastboot
When the tablet reboots into fastboot type “fastboot flash boot boot.img”
When you see the transfer is complete type “fastboot flashing lock” read the instructions on screen which will tell you to press the volume up button (volume button closest to power button) to lock bootloader. Press the volume up button.
Type “fastboot reboot” which will restart the tablet
You tablet should now be back to normal.
***Note, if you relock the bootloader first it will not let you flash the original boot.img file. If you make that mistake as I did once you'll be able to manually startup recovery mode by first powering off the tablet by holding down the power button, then boot into recovery by holding the power button and the volume up button until the recovery screen appears. Then you can unlock the bootloader again.

Hello,
Please can you confirm that the model you tested is the same as
Lenovo Android TB125​ZAAJ0198SE​
The one above is a mediatek helio G80 4GB+64GB 2000*1200 resolution with Android 12 (bought some days ago, for sure it is M10 Plus 3rd Gen).
Thanks in advance.

Mine is: ZAAJ0401US
The process detailed above should still work on yours. Remember, you will be downloading the boot.img that Lenovo is recommending for your tablet, not using one I uploaded. So you will be rooting your specific file.
I doubt there would be differences between our ROM anyway but even if there were, it wouldn't effect you be because you are creating your own rooted .img.

Thanks for this guide. What system app did you uninstall after rooting?

I didn't remove any system apps when I rooted. I'm sure some are extra and can be removed safely.

Sorry, what is the reason for rooting then, when there are no custom roms yet?

Some apps require root access.

fastboot flash boot magisk_patched-25200_ofAPj.img
Sending 'boot_a' (98304 KB) OKAY [ 2.660s]
Writing 'boot_a' FAILED (remote: 'unknown command')
fastboot: error: Command failed
Click to expand...
Click to collapse
Now what? The bootloader is already unlocked.
EDIT: I had to use the volume keys to select "recovery mode" which opens a menu. From there I have to select "fastboot" (not "bootloader") which displays "fastbootd" (note the "d" on the end), then fastboot commands work.
BUT, after flashing the boot.img, it just powers off after the logo, no option to enter any kind of recovery, no USB connection. At most, if I hold Power for 15 seconds, then release and hold again, sometimes it turns on, and then if I hold VolUp, it boots to a recovery menu, but the only options are "try again" and "factory data reset". if I reset, it shows the animation for half a second, then shuts down.
On this menu it appears in "adb devices" as "unauthorized".
UPDATE: I was able to use Lenovo's "Recovery and Smart Assistant" tool to repair, but it has to be run on a Windows machine (will not connect in VirtualBox). It doesn't recognize the serial number, but by selecting "help finding serial" there's an option for manual entry of model number.
Choosing TB128FU and following the directions I was able to flash the stock firmware, but, the tool downloaded the wrong version. After flashing, the device claims the firmware isn't compatible with the hardware, and shuts down.
To fix this, I've had to find "TB128FU_CN_OPEN_USER_Q00012.0_S_ZUI_13.5.365_ST_220526_qpst" online. The tool downloads to C:\ProgramData\RSA\Downloads\RomFiles. You need to replace the contents of the folder in there (back it up!) with the contents of this, then it will flash a working firmware. (I think you can also use this to flash the patched boot.img, but I haven't tried). The only catch is, this is the Chinese ZIUI firmware, not the Global firmware it came with. It can be used in English, so I might keep it if I can't find the correct Global firmware.
https://wiki.postmarketos.org/wiki/Lenovo_Tab_M10_FHD_Plus_(lenovo_tbx606) PostMarketOS Wiki mentions that another file needs to be flashed any time you enter fastboot to prevent this brick. The article is for a different model, but probably the same applies.

I'm not sure why you got that error if the bootloader was unlocked. My patched .img file only failed like that when I failed to unlock the bootloader first.
Did you toggle the "OEM unlocking" in developer options on the tablet before trying to unlock the bootloader with command prompt commands?
When the bootloader is unlocked the tablet gives a warning message for a few seconds on every boot telling you that the bootloader is unlocked.

The "OEM unlocking" was grayed out saying the bootloader is already unlocked, and it does show the message at startup.
The problem might be that this is model TB128FU (not TB125FU) which is only sold in China, so it doesn't accept the same firmware. I don't know how the seller put the global firmware on it originally.

ok, i think i understand. Your tablet model number is different.
When going through the rooting process it downloaded the wrong version for your tablet without you realizing it so you patched and attempted to install the wrong version of ROM boot.img.
If so it means it is extra important to follow the line in step 3, "Make sure ROM folder name matches the current system update version on your tablet"
It is weird though that the Lenovo Rescue Tool didn't download the correct software for your tablet.

Does anybody know how to unlock bootloader for TB128XU? It is the same tablet but with Snapdragon SOC.
I am failing on unlock command. Both of these won't work :-(
fastboot oem unlock
FAILED (remote: 'unknown command')
fastboot: error: Command failed
fastboot flashing unlock
FAILED (remote: 'unknown command')
fastboot: error: Command failed
Click to expand...
Click to collapse

So everything worked great for me.
As a launcher I now use the Microsoft Launcher.
Nice interface and features.
The OTAs with Magisk Root also work great.
As described by the developer.
Section Devices with A/B Partitions
OTA Upgrade Guides
The Magic Mask for Android
topjohnwu.github.io

Thanks for this! I haven't rooted an Android device since Gingerbread (2.3) in 2010, so it was good to have a basic guide for the newer stuff.
One thing I noticed: Step 1 says to find the "Android" device in Device Manager and manually install the drivers. However, that device didn't appear in Device Manager for me until I booted into fastboot mode. So effectively I had to move step 1 to instead be later, immediately after this sentence:
Type “adb reboot bootloader” this should reboot your tablet into fastboot
Click to expand...
Click to collapse

zippy411 said:
Notice! This process also completely resets your tablet! Backup all files and information.
This is just me documenting my process for rooting my tablet. I am not responsible for any damage or lost information due to the process changing, errors in execution, or mistakes in my documentation. Let me know of any errors, corrections, or updates that may need made.
Thank you to contributors to the thread linked below for the information provided that allowed me to create this more detailed root guide.
Custom Rom / rooting Options vor TB-125FU (Lenovo Tab M10 Plus 3rd Gen)
Hey everyone, I've been looking for options to Install a custom Rom or root since I bought the Tablet several month ago. It seems like there are some options for the Full Hd Version, but I have a hard time finding anything useful for the 125FU...
forum.xda-developers.com
This process was completed on Model: TB125FU
Follow documentation at your own risk!
First I updated my tablet until it was the newest system update available. For me that was version "TB125FU_S000118_220927_ROW"
Step 1 - Install tablet drivers on your computer
Download drivers folder and unzip
https://forum.xda-developers.com/attachments/android_adb_interface-zip.5741369/
Plug tablet into computer
Open Device Manager
You’ll see a line item labeled “ANDROID” with a yellow exclamation mark
Right click on it and select update drivers
Select Browse Computer and navigate to the unzipped driver folder
Make sure the Include Subfolders box is checked and select Next
This will install the drivers for the tablet
Step 2 - Unlock your tablet for usb debugging
Open settings on your tablet
Search for “build”
Click “Build Number”
Click the Build Number box seven times to unlock developer options
Close and reopen the settings app
Under System there is now a Developer options, open it
Toggle the selections for OEM Unlocking and USB debugging
Step 3 - Obtain boot.img
Download and install Lenovo LSMA
https://support.lenovo.com/us/en/downloads/ds101291-rescue-and-smart-assistant-lmsa
plug your tablet into the computer
run program, select rescue
check the allow USB debugging popup on your tablet
select tablet in the LSMA program and select the allow popups on your tablet
select Download when it shows the firmware for your tablet
DO NOT CLICK START RESCUE
close the program when it finishes downloading the ROM
The ROM will download to C:\ProgramData\RSA\Download\RomFiles
Make sure ROM folder name matches the current system update version on your tablet
Copy from the downloaded ROM folder “boot.img” to your tablet
Step 4 - Modify boot.img
Download Magisk apk from the official Github page
https://github.com/topjohnwu/Magisk/releases
install APK on your tablet
open Magisk
Select Install
Select “Select and Patch a File”
Navigate to the location you copied the boot.img file and select the file
Select “Let’s Go”
Wait for flashing lot to say “All done” indicating it modified the boot.img file
Transer modified file to your computer, for me it was called “magisk_patched-25200_rgIWh.img” I then renamed it “magisk_patched.img” to make future typing commands shorter
Step 5 - Unlock bootloader and flash modified boot.img
Download Minimal ADB and Fastboot Tools
I chose to download the portable version
https://forum.xda-developers.com/t/tool-minimal-adb-and-fastboot-2-9-18.2317790/
unzip folder
Place the modified .img file in this folder as well
Navigate to this folder, right click and launch a Command Prompt
Plug in your tablet to your computer if it isn’t already
Type “adb devices” to confirm your computer sees your tablet
Type “adb reboot bootloader” this should reboot your tablet into fastboot
Type “fastboot devices” to confirm the computer sees your tablet
Type “fastboot flashing unlock” read the instructions on screen which will tell you to press the volume up button (volume button closest to power button) to unlock bootloader.
Press the volume up button, It will say it was successful, wait a few seconds for the tablet to return to fastboot
Type “fastboot flash boot magisk_patched.img” and when you hit enter you should see a transferring status on your tablet (if you named your modified .img file something else, type that into the command instead)
When you see the transfer is complete type “fastboot reboot” which will restart the tablet.
The tablet should now be rooted which will completely reset the tablet. You will need to setup the tablet again and reinstall the Magisk app from the official Github. The Magisk App should now have superuser controls
You can relock the bootloader and return the tablet to factory image. IT WILL WIPE ALL DATA AGAIN!
To unroot you just reverse a couple steps.
Put the original boot.img (Make sure it is the boot.img of the same version ROM) in the Minimal ADB and Fastboot Tools folder on your computer
Navigate to this folder, right click, and launch a Command Prompt
Plug in the tablet to your computer
Type “adb reboot bootloader” this should reboot your tablet into fastboot
When the tablet reboots into fastboot type “fastboot flash boot boot.img”
When you see the transfer is complete type “fastboot flashing lock” read the instructions on screen which will tell you to press the volume up button (volume button closest to power button) to lock bootloader. Press the volume up button.
Type “fastboot reboot” which will restart the tablet
You tablet should now be back to normal.
***Note, if you relock the bootloader first it will not let you flash the original boot.img file. If you make that mistake as I did once you'll be able to manually startup recovery mode by first powering off the tablet by holding down the power button, then boot into recovery by holding the power button and the volume up button until the recovery screen appears. Then you can unlock the bootloader again.
Click to expand...
Click to collapse
ok thank you bro for this very clean tuto, for me all went well, all works well, except for the restart where I have the Orange state problem with the 5 sec delay !!! ????
I tried what I was advised:
modify the LK.img, all went very well saying ok on the tab, ok on my Pc, but NO !!!!
I was a brick I think: black screen and nothing.
From there I rescued and redid everything,
conclusion : still the same, all goes except orange state and 5 delay
Can anyone or you ZIPPY411 help me with this please, I am lost with the veritydm pls
Thanks for reading and thanks again for all the work

Tacotac78570 said:
ok thank you bro for this very clean tuto, for me all went well, all works well, except for the restart where I have the Orange state problem with the 5 sec delay !!! ????
I tried what I was advised:
modify the LK.img, all went very well saying ok on the tab, ok on my Pc, but NO !!!!
I was a brick I think: black screen and nothing.
From there I rescued and redid everything,
conclusion : still the same, all goes except orange state and 5 delay
Can anyone or you ZIPPY411 help me with this please, I am lost with the veritydm pls
Thanks for reading and thanks again for all the work
Click to expand...
Click to collapse
By orange state I assume you are describing the unlocked bootloader warning screen.
Unfortunately I don't know of a way to get rid of that delay and warning screen from the boot process. It should not have any effect on your tablet other than just notifying you that the bootloader is unsecured. Rooting a tablet does this and creates a more vulnerable system state that the manufacturer wants to make sure you are aware of. The tablet should boot normally after the few second delay.

zippy411 said:
By orange state I assume you are describing the unlocked bootloader warning screen.
Unfortunately I don't know of a way to get rid of that delay and warning screen from the boot process. It should not have any effect on your tablet other than just notifying you that the bootloader is unsecured. Rooting a tablet does this and creates a more vulnerable system state that the manufacturer wants to make sure you are aware of. The tablet should boot normally after the few second delay.
Click to expand...
Click to collapse
Yeahhh all good bro ty, well I ve just change the lk.img in XD.dex and after flash fastboot the lk_a and perfect ,finish the Orange state

Tacotac78570 said:
Yeahhh all good bro ty, well I ve just change the lk.img in XD.dex and after flash fastboot the lk_a and perfect ,finish the Orange state
Click to expand...
Click to collapse
Hello @Tacotac78570
Could you write a tutorial how to remove orange state? What software you used to remove orange state in lk.img?
Best regards!

tajfunPL said:
Hello @Tacotac78570
Could you write a tutorial how to remove orange state? What software you used to remove orange state in lk.img?
Best regards!
Click to expand...
Click to collapse
Sup bro anyway easy u follow this thread and that take 10 min //
How to remove Orange, Yellow & Red state warnings on MTK
This guide will explain how to hide or remove Yellow, Red and Orange state warnings on a Mediatek Android device. Its ideal for those who feel irritated by constantly seeing these warnings on reboot.
www.hovatek.com

Hello,
Got a new TB125FU with firmware ver. "TB125FU_S000160_230227_ROW".
Anyone tried and succeeded rooting with this version?
Thank you