[GUIDE] Backup/Restore/Repair Your EFS Partition [LS970] - Sprint LG Optimus G

LS970 EFS Backup/Restore/Repair
Every rooted Optimus G user should backup their EFS partitions!
Thanks goes to interloper, toastcfh and everyone in #lg-optimus-g that helped out.
PM me if interested in my Sprint LGOG LS970 EFS repair service.
Contents
1. Flashable EFS for backing up your EFS partitions and packing them into a new flashable .zip.
2. Commands for backing up/restoring EFS manually with terminal or ADB.
3. Flashable "ZERO EFS" with guide for repairing your EFS. This EFS needs to be reprogrammed but could be used in a "worst case" scenario where you didn't backup your EFS and the phone cannot be replaced by any LG/Sprint warranty.
Backup script/commands also work on the ATT/Telus variants. ZERO EFS zip is ONLY for Sprint LS970 users. ATT/Telus users, if you would like a ZERO EFS, please send me your efsbackup.tar in a private message. It is not suggested to publicly post your EFS file. ​
Background
You never know when your NV/EFS/PRL/RADIO may stop working. Restoring your WORKING EFS may save the day. A few users in the #lg-optimus-g IRC channel have run into issues and found their phone unusable, myself included. A few users who flashed the test/Korean JB builds found 3g not working.. or calls/text not working. Some users ran into radio issues after PRL writing failures. My own issues was a missing ICCID which resulted in no 4G. Data wipes, reactivations, ##786# resets were not helping. All of the above issues could have been fixed if an EFS backup was made while the phone was still in working order.
m9kefs1 seems to be radio related
m9kefs2 contains your unique phone identifiers: MEID, IMEI, phone number, MSL, data profiles etc
m9kefs3 seems to be blank 00s​
Backing up EFS
It's easiest to run the Optimus_G_Create_Flashable_EFS.zip attached to this thread. Run in recovery. Optimus_G_Create_Flashable_EFS.zip creates a flashable zip backup of your EFS in /sdcard/EFS_Backup/(instead of just a .tar).
If you don't like convenience this can also be done manually with adb or terminal with the commands below.. root required.
Code:
su
dd if=/dev/block/platform/msm_sdcc.1/by-name/m9kefs1 of=/sdcard/m9kefs1.img
dd if=/dev/block/platform/msm_sdcc.1/by-name/m9kefs2 of=/sdcard/m9kefs2.img
dd if=/dev/block/platform/msm_sdcc.1/by-name/m9kefs3 of=/sdcard/m9kefs3.img
Restoring EFS
To restore your original EFS just boot into recovery and flash the efsbackupflash.zip in your /sdcard/EFS_Backup folder.
If you don't like convenience this can also be done manually with adb or terminal with the commands below. Adjust the "dd if=/sdcard/" command depending on where your backup EFS .img files are located.
Code:
su
dd if=/sdcard/m9kefs1.img of=/dev/block/platform/msm_sdcc.1/by-name/m9kefs1
dd if=/sdcard/m9kefs2.img of=/dev/block/platform/msm_sdcc.1/by-name/m9kefs2
dd if=/sdcard/m9kefs3.img of=/dev/block/platform/msm_sdcc.1/by-name/m9kefs3
Repairing EFS
YOUR EFS IS *NOT* BROKEN IF YOU FLASHED AN AOSP ROM AND NO LONGER HAVE SIGNAL BUT STILL HAVE YOUR MEID AND PRL SAYS "40000"...
GO BACK INTO AOSP ROM > SETTINGS > MORE... > MOBILE NETWORK SETTINGS > CDMA SUBSCRIPTION > SET TO "NV"
YOU SHOULD NOW HAVE A SIGNAL AGAIN... NO EFS REPAIR NEEDED!!
If you have a messed up PRL/Radio/EFS(no signal.. calls/text doesn't work.. no PRL showing.. no 3G) then you should first confirm there are no outages in your area. After confirming no outages you may want to try a factory data reset(settings > backup & reset) or perform a ##786# reset(MSL required). If you are feeling daring you could even try a lgnpst reset which involves installing lgnpst(automated install on IRC suggested) and flashing a stock .tot to your phone while it's in download mode(power off phone > plug phone into USB cable/computer > vol up + vol down + power buttons). If none of the previous suggestions work you could see if Sprint/LG will warranty repair your device.
If NOTHING ABOVE works your final option is to flash a new EFS. Technically you could possibly look through each and every NV item with QXDM and see what's incorrect but that may take forever... so I have included a flashable zip at the bottom of this thread which flashes a fresh LS970 EFS to your device. This EFS is clear of all personal data and any previous phone identifiers. Below are directions on how to reprogram your EFS to the Sprint network after flashing the LS970_ZERO_EFS.zip. I'd rate this as medium-hard difficulty for those that are unfamiliar with how (Sprint)CDMA phones are programmed. For those that have flashed a phone in the past, this ZERO EFS zip just made your day even easier.
The ZERO EFS has a zero'd out SPC/MSL, zero'd out IMEI/MEID, zero'd out MDN/MSID and all data profiles emptied.
NV item 114(NV_FACTORY_INFO_I) has been "anonymized" and no longer identifies to anyones real account.
In recovery, flash LS970_ZERO_EFS.zip then wipe data/cache(factory wipe in TWRP). LS970_ZERO_EFS.zip backs up your current EFS partitions to /sdcard/EFS_Backup and then replaces your EFS with the ZERO EFS.
You will have to manually program your phone to get it working again.
READ EVERYTHING BELOW IF YOU DON'T KNOW WHAT YOU'RE DOING.
After flashing LS970_ZERO_EFS.zip:
For talk/text working - use DFS(www.cdmatool.com) or other known working CDMA tools.
a1. Set LS970 into diag mode.. open the dialer and hit ##3424# . Also make sure phone is set to "Charge only"
b1. Connect phone to DFS and set correct COM port. Use the diag port NOT the serial port.
c1. In DFS send SPC(MSL) to phone using "SPC" button(under the green ports button, top left). SPC = 000000.
d1. On Programming > General tab... Write desired IMEI with DFS. Hit "status" button to make sure it stuck. IMEI = MEID + 1 extra digit.
e1. After writing IMEI.. write the matching MEID. Hit "status" button to make sure it stuck.
f1. On your phone, open dialer and hit ##000000# and program in your MDN/MSID. Hit done. Phone will reboot.
Talk/text will now work!
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
For 1X/3G working - use DFS
a2. Connect phone to DFS and send SPC using above methods.
b2. In DFS, open the Programming > Data tab and hit the read button.
c2. Set the UID under HDR AN LONG to your [email protected]
d2. Set the Pwd to your 32-char hex password, no spaces between hex bytes. Make sure box is checked next to Pwd!!
e2. In DFS go to the Programming > Mobile IP tab. Hit the blue "Read" button in the lower left.
f2. Set the username(NAI) to the same username you just wrote in step c2... [email protected]
g. Set the AAA Shared Secret password. The same 32-char password used in step d. Make sure box is CHECKED for AAA!!!
h. Set the HA Shared Secret password to: secret . Yes, the word secret. MAke sure the box is UNCHECKED for HA!!!
i. Hit the red "Write Current Profile Settings" button.
j. Back on your phone, open the dialer and press ##3282# and click "Data Profile" then "edit". Enter 000000 for code.
k. Once inside Data Profile menu, set up your Sprint username and password(AAA password).
[email protected] and the AAA password is a 6-char password.
l. Once data profile is written back out of the menu and the phone should reboot.
1X/3G will now work!! [as long as ALL usernames and passwords were written correctly with the 100% correct info!!!]
*Notes*
1. If a ##786# reset is ever done, the 1X/3G data passwords will be wiped and have to be rewritten.
2. Dialer code 3845#*970# > Data -LG menu has a PPP setting. Never set this to Sprint... always leave on "Undetermined"
3. You shouldn't have to do anything for 4G to work.
Now you may say "yeah, that's great... but I don't know my MEID, IMEI, MDN, MSID, 32-char AAA password, Data Profile username... now what?"
Good question.
IMEI - Hopefully your phone isn't TOO messed up and you can still view your IMEI via Settings > About Phone > Phone Identity.
If you can't read it, call Sprint and ask them for it, mention your phone acting up or blah blah. The IMEI is your MEID + 1 extra digit.
MEID - MEID is on your LG OG box. You can also see this by viewing the current phone on your plan using Sprint.com
You want to use the MEID HEX not MEID DEC. If you can only find the DEC you can use online converters to convert MEID DEC to HEX.
MDN - MDN is your phone number. You should know this.
MSID - MSID is sometimes the same as your phone number, but sometimes not. You can view this info in Settings > About Phone > Phone Identity
You can call Sprint to get this info if you can't view it on your phone.
Data Profile username/password - You can get this info by calling Sprint. You may be able to view the username with ##3282# > Data Profile > View
32-char AAA Password - If you are unable to acquire your 32-char AAA password(NV item 466 and 1192), ask Sprint. You may have to speak to some form of advanced tech support.
​
Code:
[B]My other LS970 threads..[/B]
[B][URL="http://forum.xda-developers.com/showthread.php?t=2049701"][How-To] Enable DIAG mode without Service Code(MSL)[/URL][/B]
[B][URL="http://forum.xda-developers.com/showthread.php?t=2052816"][Info] LS970 Hidden Dialer Codes[/URL][/B]
[B][URL="http://forum.xda-developers.com/showthread.php?t=2058506"][WIP]Optimus G AT Commands[/URL][/B]

although i didnt really help much, glad we figured out what partition it was on

Re: [GUIDE] Backup/Restore/Repair Your EFS Partition
So if I'm reading this right, for simple minded people like me, make a backup with the backup zip. Then to restore, just follow that paragraph about restoring?
Does this mean that if I mess up my phone as far as reception, I could just use my backup to restore it? This stuff is way beyond me, so I gotta pick your brain.
Sent from my LG-LS970 using xda premium

engine95 said:
So if I'm reading this right, for simple minded people like me, make a backup with the backup zip. Then to restore, just follow that paragraph about restoring?
Does this mean that if I mess up my phone as far as reception, I could just use my backup to restore it? This stuff is way beyond me, so I gotta pick your brain.
Click to expand...
Click to collapse
it doesn't touch the actual modem/baseband... but it backs up your entire EFS/NV. NV items are sort of like Windows Registry... but lower level than the Android filesystem. The PRL is also contained in the EFS.
If you ever go into a hidden menu and set a weird setting which kills 3g... if you write a PRL and it goes wrong and you lose all reception.. if you flash a rom and all of the sudden your MEID is gone(etc etc etc).. then having an EFS backup would help.
Backing it up saves the current state of the EFS. So yes, if you had a working backup and then ran into issues down the road... you could reflash your backup EFS and you'd have a fix(hopefully).
The EFS contains all the unique parts of your phone... MEID, IMEI, Data Profiles, Phone number.. etc etc. Its the one thing that can't be replaced if it gets screwed up. If you don't have a backup and replaced all partitions from someone elses phone you'd have their meid, imei, phone number data profile etc.. instead of your own. This is where the 2nd half of my guide comes in. In the extreme case that you have no EFS backup and you can't get your phone replaced by Sprint/LG.. the ZERO EFS zip + guide can get your phone working again.

Wish I new about this a week ago....
Sent from my LG-LS970 using xda premium

Thanks to you autoprime and to all involved that made this possible, this fix worked like a charm!

So crazy question.... Can you use this to correct the radio in the Korean JB rom?
Sent from my LG-LS970

kc_exactly said:
Wish I new about this a week ago....
Click to expand...
Click to collapse
your broken EFS + skullzaflare's broken EFS + my broken ICCID were the reasons I put this together. Wish I put it out sooner
cxdatl said:
So crazy question.... Can you use this to correct the radio in the Korean JB rom?
Click to expand...
Click to collapse
I don't know enough about the Korean JB rom to answer that correctly. I do know it fixes the efs issues if you flash back to a Sprint rom after flashing the korean rom.
is the Korean JB rom CDMA or GSM? I'm not even sure it matters.. but if it's also CDMA I'd have a better feeling about it maybe being possible.
could you tell me the exact issues people were facing after flashing and using the Korean JB rom? was it working minus radio? was radio "active" but not working? etc etc.
as long as you make a backup of your working efs first.. you can always restore back to it. I've flashed bad data to both efs partitions just to see how well this worked. my phone had no baseband.. no working radios... flashed my backup.. all working again. :good:

Hey, I was just attempting to be funny. I truly appreciate this guide. Thanks.
Sent from my LG-LS970 using xda premium

autoprime said:
your broken EFS + skullzaflare's broken EFS + my broken ICCID were the reasons I put this together. Wish I put it out sooner
I don't know enough about the Korean JB rom to answer that correctly. I do know it fixes the efs issues if you flash back to a Sprint rom after flashing the korean rom.
is the Korean JB rom CDMA or GSM? I'm not even sure it matters.. but if it's also CDMA I'd have a better feeling about it maybe being possible.
could you tell me the exact issues people were facing after flashing and using the Korean JB rom? was it working minus radio? was radio "active" but not working? etc etc.
as long as you make a backup of your working efs first.. you can always restore back to it. I've flashed bad data to both efs partitions just to see how well this worked. my phone had no baseband.. no working radios... flashed my backup.. all working again. :good:
Click to expand...
Click to collapse
interpoler needs credit too lol, if it wasnt for his backed up EFS partitions i wouldnt have figured out it was those and got mine working lol.
even though i got mine working aside from 3g, sprint replaced it for free (i just got impatient) but atleast we have a fix now, and you got a blank efs to use for it
edit- oh i didnt see that you edited the post and added info lol

skullzaflare said:
interpoler needs credit too lol, if it wasnt for his backed up EFS partitions i wouldnt have figured out it was those and got mine working lol.
even though i got mine working aside from 3g, sprint replaced it for free (i just got impatient) but atleast we have a fix now, and you got a blank efs to use for it
edit- oh i didnt see that you edited the post and added info lol
Click to expand...
Click to collapse
I actually signed the 2 year contract, I have gotten my first LG through craiglist, then got home and saw this, I did it and the radio worked right away, again great job guys.
Edit: I will start theming this baby soon.
Sent from my LG-LS970 using Tapatalk 2

Updated the Optimus_G_Create_Flashable_EFS.zip in the OP
Now creates a flashable EFS backup instead of just a .tar. Just flash the "efsbackupflash.zip" in recovery to restore.
m9kefs1.img, m9kefs2.img and efsbackupflash.zip are stored in /sdcard/EFS_Backup
I suggest remotely backing up the zip somewhere(Dropbox, PC, etc) just in case /sdcard gets erased.

autoprime said:
your broken EFS + skullzaflare's broken EFS + my broken ICCID were the reasons I put this together. Wish I put it out sooner
I don't know enough about the Korean JB rom to answer that correctly. I do know it fixes the efs issues if you flash back to a Sprint rom after flashing the korean rom.
is the Korean JB rom CDMA or GSM? I'm not even sure it matters.. but if it's also CDMA I'd have a better feeling about it maybe being possible.
could you tell me the exact issues people were facing after flashing and using the Korean JB rom? was it working minus radio? was radio "active" but not working? etc etc.
as long as you make a backup of your working efs first.. you can always restore back to it. I've flashed bad data to both efs partitions just to see how well this worked. my phone had no baseband.. no working radios... flashed my backup.. all working again. :good:
Click to expand...
Click to collapse
Well everything worked for me. But the radio quit after 10min.
Sent from my LG-LS970

cxdatl said:
Well everything worked for me. But the radio quit after 10min.
Sent from my LG-LS970
Click to expand...
Click to collapse
you mean after flashing the korean jb.. it all worked?
was this stock korean jb.. or something modded for sprint users? i saw a few "jb test builds"... are we discussing them or the real korean build?
for the 10 min it worked.. calls/text/3g worked?
were you able to get the radio working again after it quit on you 10 min later? did you have to flash back to sprint? everything working again?

thank you so much for this. i dont know if this is to much to ask but could somebody possibly make a zip that would restore them for you because i have absolutely no idea on how to use abd or terminal lol

I'm not positive, but I think that's just what the new update does. It created a flash able zip with all the info.
Sent from my LG-LS970 using xda premium

javskies said:
thank you so much for this. i dont know if this is to much to ask but could somebody possibly make a zip that would restore them for you because i have absolutely no idea on how to use abd or terminal lol
Click to expand...
Click to collapse
engine95 said:
I'm not positive, but I think that's just what the new update does. It created a flash able zip with all the info.
Sent from my LG-LS970 using xda premium
Click to expand...
Click to collapse
engine95 is correct. the latest backup efs zip extracts your EFS partitions, zips them into a new flashable zip and stores the zip in /sdcard/EFS_Backup.
also in the efs_backup folder are the loose efs partition files... just cause.

The zip creates the back up but from what I read from the guide it says you have to use terminal to restore them
Sent from my LG-LS970 using xda premium

javskies said:
The zip creates the back up but from what I read from the guide it says you have to use terminal to restore them
Sent from my LG-LS970 using xda premium
Click to expand...
Click to collapse
reread, he forgot to add a word
To restore your original EFS just boot into recovery and flash the efsbackupflash.zip in your /sdcard/EFS_Backup folder. OR To manually restore use the commands below. Adjust the "dd if=/sdcard/" command depending on where the backup .img is located.

It's been updated. Autoprime mentioned it about 8 posts up. Updated file in the op.
Sent from my LG-LS970 using xda premium

Related

[Mod] Using the Optimus V on Verizon

Do not ask me or anyone else on these forums about how to change your ESN! It is highly illegal! Don't do it! I will not discuss that at all in this thread.
If you have activated your Optimus V on Verizon's network, and you have any of the Optimus V Froyo roms installed, the following will show you how to mod the rom to run on Verizon smoothly. Otherwise, you won't be able to send and receive sms/mms messages, and the phone will constantly complain that it is roaming. The scope of this thread is how to mod the rom once you have already activated your phone.
Always do a backup before doing anything on this page. You will need to use root explorer or adb to install these files onto the system partition. Or you can build/mod your own rom and install it.
Using adb, you would first mount system as write-able:
Code:
adb remount
Then you would push the files to the phones with the push command:
Code:
adb push file.ext /path/file.ext
Step 1: download this file pack
Step 2: Extract the files into the same folder as adb or onto your sdcard if you are using root explorer.
Step 3:
Place apns-conf.xml inside /system/etc/
Place Phone.apk inside /system/app/
Place telephony.db inside /data/data/com.android.providers.telephony/databases/
Step 4: I've included a modded framework-res.apk from the reborn rom. If you use a different rom or if the included one does not work for you, extract the original framework-res.apk from your rom located in /system/framework/. Using winrar or 7zip, add the included eri.xml to /res/xml/. Replace the original framework-res.apk on your rom.
Step 5: Using QPST, flash the included PRL file, 52299.prl
I've been using this setup for a week now without problems. I thought I would share. I tried using the LG Vortex rom on the Optimus V, but the hardware was too different. This method should also work on the Optimus S, M, and C, but I have not confirmed.
For the CM7 roms, check here: http://forum.xda-developers.com/showpost.php?p=19992286&postcount=11
nice <3 it looks awesome
I really need to find a way to repair my esn. it reads all zeros .. please help
if it truely is all zeros,then it would not be illegal to write the phone's own esn/meid back in,but it MUST be the one on the sticker of the phone. the way to do that would be to flash a rom that lets the phone show up in diag mode. I know aospCMOD does,I don't think IHO does though. experiment and you should end up with the phone showing up as a modem. then install qxdm,if you google for it its easy to find. you need qpst also,they are both on the same page if you google for them together. once you have all that,launch qxdm,go through the menus and find communication,pick the lge diag port,then in the command box,type "spc ______"<enter>where the ______ is your SPC/MSL. you can get these using cdma workshop 2.7 which is also illegal to link here,but is easy to find,just pick the diag port,click connect,then go to the security tab and pick lg method and hit read. now back in qxdm,type "RequestNVItemWrite meid 0x_______________"<enter> where the ____ is your meid from the phone's sticker. DO NOT USE THE MEID FROM ANY OTHER PHONE OR THIS IS ILLEGAL.once that is done,which should be instant,then type "mode reset"<enter> the phone should now reboot.
Message to mods: Please do not remove this post as it does not show anyone how to change an esn/meid,it only allows them to write one in if the phone does not already have one. If the phone does already have one,this method will not work to change it,it will stay at its original.
msnuser111 said:
if it truely is all zeros,then it would not be illegal to write the phone's own esn/meid back in,but it MUST be the one on the sticker of the phone. the way to do that would be to flash a rom that lets the phone show up in diag mode. I know aospCMOD does,I don't think IHO does though. experiment and you should end up with the phone showing up as a modem. then install qxdm,if you google for it its easy to find. you need qpst also,they are both on the same page if you google for them together. once you have all that,launch qxdm,go through the menus and find communication,pick the lge diag port,then in the command box,type "spc ______"<enter>where the ______ is your SPC/MSL. you can get these using cdma workshop 2.7 which is also illegal to link here,but is easy to find,just pick the diag port,click connect,then go to the security tab and pick lg method and hit read. now back in qxdm,type "RequestNVItemWrite meid 0x_______________"<enter> where the ____ is your meid from the phone's sticker. DO NOT USE THE MEID FROM ANY OTHER PHONE OR THIS IS ILLEGAL.once that is done,which should be instant,then type "mode reset"<enter> the phone should now reboot.
Message to mods: Please do not remove this post as it does not show anyone how to change an esn/meid,it only allows them to write one in if the phone does not already have one. If the phone does already have one,this method will not work to change it,it will stay at its original.
Click to expand...
Click to collapse
thanks I will try this on my brick phone as soon as I get home.
thanks it work. thanks a billion.
how do I get M.Ip settings in QPST Service programming to stick. they always revert back to original.
not working on bumblebee rom
mereed1977 said:
not working on bumblebee rom
Click to expand...
Click to collapse
if you're having problems connecting with qxdm/qpst, try booting into recovery first.
you can also restore your first stock backup and the pst's can talk while it's turned off but still plugged into the pc.
freddysam has been a God-send..He has helped me with SOOO much pertaining to all of this..I just wanted to publicly let it be known that this guy is AWESOME and SUCH A HUGE HELP!!! Thanks again bro!!!
Thanks to freddysam, I found that this was possible and I now have another Optimus V but it is on the Verizon network via Page Plus Cellular. However, instead of using the package freddysam posted here, I have built an up-to-date ROM from the IHO/CM repo hybridized for OV on the Verizon network. It is working fine for me without any issues. Instead of going through steps 1-4, you can just flash the following ROM (updated 02/22/2012)
http://www.mediafire.com/?emblkx8bb2bcoc1
MD5sum: ab4290cdccc249a5766458841d6e2565
You can check the MiRaGe build at IHO Wiki. This is the same build with VZW mods. If you also want the theme for MiRaGe ROM for VZW, it is here. Don't use the theme on the Wiki.
You still need step 5 to flash the PRL using QPST. But after that, you can update to the latest PRL by dialing to *228 and choosing option 2.
Thanks especially to Blarf and BobZhome for creating the IHO repo and VM670, VS660 ROMs.
I am attempting to get an Optimus V on Page Plus but am having trouble with Step 4.
I keep getting a boot loop or frozen flash screen after I repack and load framework-res.apk
Here is where I am at:
1)Rooted stock ROM using Gingerbreak
2)Flashed Xionia Recovery
3)Made backup of stock ROM
4)Flashed the Mirage ROM posted above after clearing caches and formatting the appropriate partitions
5)Get stuck at splash screen during boot. Sometimes it goes into a loop if I wait long enough
6)Tried using Xionia to fix boot loop, does not work
7)Tried installing the Mirage ROM in this thread using IHO_Recovery (BobZHome update for new Optimus V), still loops.
Alternatives I have tried:
1)Flashed IHO_Recovery
2)Installed BobZHome CM7 ROM. It works fine.
3)Replaced files in BobZHome CM7 ROM with the files in this thread. Everything went fine until step 4, then I would freeze at splash screen on boot.
4)Attempted to unpack/replace eri.xml/repack framework-res.apk from BobZHome CM7 ROM. Again freezes/loops at splash screen.
Any suggestions?
depthsounder said:
I am attempting to get an Optimus V on Page Plus but am having trouble with Step 4.
I keep getting a boot loop or frozen flash screen after I repack and load framework-res.apk
Here is where I am at:
1)Rooted stock ROM using Gingerbreak
2)Flashed Xionia Recovery
3)Made backup of stock ROM
4)Flashed the Mirage ROM posted above after clearing caches and formatting the appropriate partitions
5)Get stuck at splash screen during boot. Sometimes it goes into a loop if I wait long enough
6)Tried using Xionia to fix boot loop, does not work
7)Tried installing the Mirage ROM in this thread using IHO_Recovery (BobZHome update for new Optimus V), still loops.
Alternatives I have tried:
1)Flashed IHO_Recovery
2)Installed BobZHome CM7 ROM. It works fine.
3)Replaced files in BobZHome CM7 ROM with the files in this thread. Everything went fine until step 4, then I would freeze at splash screen on boot.
4)Attempted to unpack/replace eri.xml/repack framework-res.apk from BobZHome CM7 ROM. Again freezes/loops at splash screen.
Any suggestions?
Click to expand...
Click to collapse
Try wiping the partitions several times more and flashing the MiRaGe ROM over again. I had the same trouble with a new OV and it worked after trying three-four times. I have an OV with new screen and used BobZhome's recovery, see under the heading "Alternatives" in the IHO Wiki.
Success! (Sort of )
The files in this thread do work on CM7, I just could not just copy them into the respective folders without errors. Here is how I got them to work.
Warning, it took alot of rebooting and reflashing backups to figure this stuff out, make a nandroid backup before you attempt to replace the system files.
1. Follow steps 1 and 2 in OP
2. Download NinjaMorph or other app that can unpack/repack apk files. These instructions were written for NinjaMorph.
3. Copy files from Step 3 onto phone memory (I used /system), change permissions to rw-r--r--:
- Read:User,Group,Others
- Write:User
- Execute:None
If these files are not set to the correct permissions then apps will start force closing when the files are replaced.
4.MOVE (not copy) files to the folders in OP
- Place apns-conf.xml inside /system/etc/
- Place Phone.apk inside /system/app/
- Place telephony.db inside /data/data/com.android.providers.telephony/databases/
This method would not work for framework-res.apk for me, I had to rebuild the framework-res.apk that came on CM7 with the eri.xml file from the framework-res.apk in the OP. Instructions for doing so follow.
5. Rename the framework-res.apk from the OP to something else, I used VZWframework-res.apk. Open Ninjamorph, start new project and point it to the file you just renamed. It will unpack the apk into a folder on your sdcard called /sdcard/AndroidThemes/workspace. It will ask you to select a file you want to change, back out because we will do that in the next step.
6. Create a new project in Ninjamorph, this time point it to /system/framework/framework-res.apk, it will unpack this apk and ask you to select a file you want to change. Select res/xml/eri.xml, it will then ask you which file to replace it with. Point it to /sdcard/AndroidThemes/workspace/VZWframework-res/res/xml/eri.xml, note that i used VZWframework-res, your folder will be whatever name you chose in Step 5 above.
7. Select finish project, it will repack framework-res.apk and overwrite the existing framework-res.apk in your phone.
8. Reboot Phone. If your phone reboots fine and apps don't start force closing it worked! You should see a change in the taskbar, roaming should not show when the network is Verizon Wireless if you have installed the prl as described by the OP.
I still did not have MMS working at this point and even though my phone didn't say it was roaming, Cell Connectivity Tracker indicated that it was in a roaming state and data would not work without enabling roaming data. The following steps fixed these issues:
9. Move the attached Mms.apk file to /system/app Ensure that the permissions are rw-r--r-- on the file before you move it.
10. Make a copy of your original build.prop and save it on your sdcard (you are making backups this whole time right?) Rename the build.prop.txt in this post to build.prop and move it into /system/ Ensure that permissions are rwxr-xr-x
Both of the files in this post came from the VZW MiRaGe ROM that mrg666 posted above, I did not alter them and full credit goes to him for creating them, I just made them easier to access.
edited out the following due to the help from bigsupersquid and BobZHome (thanks!)
Some Notes:
-While this method got the files onto my Optimus V running CM7.2_RC0 by BobZHome without crashing it, I still do not have mms working.
-I replaced the Mms.apk in my system/app/ directory with the one from the MiRaGe VZW in hopes to fix my mms issues, but no luck.
-Even though the taskbar does not show roaming, if I go into the phone status menu it still says roaming even though I am on the Verizon Wireless network.
-I believe the above issue can be traced to the fact that my phone still thinks it is a Virgin Mobile device. If I run STMurray Cell Connectivity Tracker it gives me "Sim provider name (MCC+MNC): Virgin Mobile" in the log results.
Does anyone know which system file holds the provider information? I never activated this phone on Virgin Mobile, so I can only assume that the setting came from the CM7 ROM I installed.
/system/build.prop
thanks for the pointer to Ninjamorph.
Add/change the following in system/build.prop
ro.cdma.home.operator.alpha=Verizon
ro.cdma.home.operator.numeric=310004
ro.HorizontalVVM=true
Thanks so much for your help guys. I have everything working now including mms and data without roaming.
The tip about build.prop seemed to be the last piece of the puzzle.
I changed the settings above, but still had indications of roaming; I ended up using the entire build.prop from the MiRaGe VZW ROM and it works fine now.
I also noticed that my data usage was dominated by "dialer and dialer storage" before I fixed this roaming issue. Dialer still uses an uncomfortably large amount of data, but it isn't the 20Mb/day that it used yesterday, more like 1Mb/day now. The dialer data usage issue doesn't seem to be fully understood from what I could find; maybe my experience above is a clue.
So I am going to try and switch my optimus v details over to a samsung epic 4g, which will leave my optimus v useless. I was wondering if I could use an old verizon lg flip phone as a donor to the optimus v just for talk and text no data (i am aware mms wont work..)
My youngest brother is on my parents verizon plan and wants a smartphone but they wont pay for the data. I was thinking I could give my phone to him and make the optimus v appear as a dumbphone on the verizon network with just talk and text w/ wifi for internet. I am not asking help on HOW to do it, just do you guys think it would work?
brooksyx said:
So I am going to try and switch my optimus v details over to a samsung epic 4g, which will leave my optimus v useless. I was wondering if I could use an old verizon lg flip phone as a donor to the optimus v just for talk and text no data (i am aware mms wont work..)
My youngest brother is on my parents verizon plan and wants a smartphone but they wont pay for the data. I was thinking I could give my phone to him and make the optimus v appear as a dumbphone on the verizon network with just talk and text w/ wifi for internet. I am not asking help on HOW to do it, just do you guys think it would work?
Click to expand...
Click to collapse
I use one OV on Verizon through Page Plus Cellular prepaid plan. Everything works (data, mms ...). I just disable data since it eats all of the money quickly. I went to Canada two weeks ago, it was also roaming there and I could call back US.
mrg666 said:
I use one OV on Verizon through Page Plus Cellular prepaid plan. Everything works (data, mms ...). I just disable data since it eats all of the money quickly. I went to Canada two weeks ago, it was also roaming there and I could call back US.
Click to expand...
Click to collapse
Good to know that it can work without data. But what I am wondering is if can i switch it with the esn and meid of my old dumbphone and not put in any of the data password/settings. All I want is talk and text on it so my brother won't get charged data and verizon would think he was using the dumbphone not a smartphone. He is part of my parents family plan.

[FIX/TOOL] Backup/Restore/Fix IMEI & Data Restore Tool v3.5 - Updated 03/22/2013!!!

[FIX/TOOL] Backup/Restore/Fix IMEI & Data Restore Tool v3.5 - Updated 03/22/2013!!!
USE THIS AT YOUR OWN RISK AS QPST WILL FLASH JUST ABOUT ANYTHING YOU TELL IT TO. I AM NOT RESPONSIBLE IF YOUR PHONE BECOMES MORE BRICKED THAN IT ALREADY IS, EXPLODES, OR TRANSFORMS INTO A SITH LORD AND ATTACKS YOU WITH A LIGHT SABER!
Verizon Users please refer to this thread HERE for IMEI and Roaming fix.
Click for Screenshots in Post #4
FILES YOU WILL BE NEEDING
DOWNLOAD QPST V2.7.378 from HERE
(if you have build version 2.7.385 please let me know)
Fix for Data Issues (Stuck on EDGE/2g) see Post # 3
(Sasktel users custom App has not been updated for you guys cause I am still in need of additional data)
How to get to DIAG Mode
**AOSP ROMs to get to DIAG Mode see Post #2
Option1:Stock ROM (Stock Dialer) dial *#7284#.
Option 2: Stock ROM (No Stock Dialer) flash this file HERE!
Install QuickShortcutMaker.
Open it and type IOT in the search box.
Click on the entry that says IOTHiddenMenu / IOTHiddenMenu / com.android.hiddenmenu/com.android.hiddenmenu.IOTHiddenMenu
Click OK
STOCK ROMS: In the hidden menu or PhoneUtil menu select USBSettingsMenu choose the correct mode and click ok.​
To get started put phone into RMNET + DM + MODEM mode (DIAG Mode)
Connect your phone to your computer using your USB cable (Stock cable will work best no guarantees with any other cable).
You might need these if your phone won't connect USB Drivers.
Look in device manager under ports and serials you should see your phone there.
Now open QPST Configuration click on ports tab and then on Add new port button type in COM## where ## is the port number your phone is connected to.
To make a backup:
Open Software Download from the Start Clients menu.
Click on the Backup tab.
Make sure your phone is listed under port.
Select a location to save your backup (recommended).
Click Start and wait for it to finish.
You should now have a QCN file of your NV Data.
Save the file in a safe place.
To restore:
Open Software Download from the Start Clients menu.
Click on the Restore tab.
Make sure your phone is listed under port.
Select the location you saved your backup to.
Click Start and wait for it to finish.
The phone will attempt to restart if it fails don't panic just manually reboot your phone it may take longer than usual but you should be fine.
IMEI Injection:
Please see Post #3 for IMEI Injection + Data Restore All in one App and Instructions
or
Inject IMEI with QPST
Open RF NV Item Manager from the bin folder found in Program Files folder/Qualcomm/QPST
(RF NV Manager is no longer accessible from the start menu or from inside QPST Configuration).
Click on Setting menu in RF NV Item Manager and select Comport.
Select your phone from the list of ports and click ok.
Go to File menu and select Read From Phone.
You will get a list of NV items and their values from your phone.
Look for item NV_UE_IMEI_I it will be item number 550 you can do a search for it using the search.
If you are unable to find it you will need to add it in
Go to Option => Customize NV Item List.
Then look for the item on the left and move it to the right.
Click OK now you should be able to find it.
NEVER ADD AN ITEM THAT YOU DO NOT KNOW THE CORRECT VALUE FOR YOU CAN DAMAGE YOUR PHONE IF YOU DO SO!​
On the right you will see a set of 9 text boxes this is where your IMEI should be.
Click the Hex Check Box.
The Hex values for your IMEI will consist of no more than 2 characters per a box and must match your IMEI or it will not take the values you enter. The IMEI is also listed in a special order so you must follow this guide to ensure your IMEI is correct. The first box will always be an 8.
Example if your IMEI was: 954091051099226 then the boxes would look like this:
8
9a
45
90
01
15
90
29
62​
Click on the button Write NV to write the values to your phone.
Once they have been written reboot your phone and check to see if your IMEI has been restored.
If IMEI is correct and you are stuck on EDGE/2g go to Post #3.
Remember to go back into the Hidden Menu and set your USB Settings back to MTP + ADB once you are done!!!!
________________________________________________________________________________________________
Thread Rules:
Do not ask how to spoof IMEI or how to clone IMEI you will be ignored!
Do not answer someone who asks for information on IMEI spoofing or cloning!
Please do not ask questions unless you have used the Search option!!
Please do not use this thread as a place to settle out any ill feelings towards each other or any other developments!!!
Please do not ask questions that have already been answered!!
Please do help each other when at all possible!!
Don't hesitate to have fun while we all try to figure this problem out!
If I do not answer you right away it's not because I don't like you it's because I have a family, a job, a life outside of development that needs tending to!!
Also thanks to jroyalty, zmore, drothenberger, David Dee, PureMotive, Bigbyte.me, GerardAnthony, Amoamare, <>, XDA, and everyone who donated their phone data for research =)
DX
I don't ask for donations (I do this cause I enjoy it) but a nice latte every now and then late at night is quite refreshing while developing...lol
________________________________________________________________________________________________
AOSP Roms
Added scripts as downloadable files for those who may want them that way.
Place phone in and out of DIAG Mode by running these scripts.
Script to enter DIAG Mode (RMNET + DM + MODEM Mode)
Code:
echo 0 > /sys/class/android_usb/android0/enable 0
echo smd,bam > /sys/class/android_usb/android0/f_rmnet/transports
echo diag > /sys/class/android_usb/android0/f_diag/clients
echo 1 > /sys/class/android_usb/android0/f_acm/instances
echo rmnet,acm,diag > /sys/class/android_usb/android0/functions
echo 1 > /sys/class/android_usb/android0/enable
Script to return to MTP(eject first)
Code:
echo "" > /sys/devices/virtual/android_usb/android0/f_mass_storage/lun_ex/file
echo 0 > /sys/devices/virtual/android_usb/android0/enable
echo "mtp,acm,adb" > /sys/class/android_usb/android0/functions
echo 1 > /sys/devices/virtual/android_usb/android0/enable
vold
Custom App updated current support is for AT&T, T-Mobile, Bell, Telus, and Rogers. I am in need of anyone with a working Sasktel phone in order to get this working for Sasktel.
Updated to version 3.5. Added IMEI Injection Checkbox.
Download - SGS3 Data Restorer App
This custom app will create a QCN file that can be restored to your phone after you inject your IMEI back into your phone and find yourself with data connection issues. This is only used if you had lost your IMEI and did not have a backup created!!
Instructions:
Create a QCN backup of your phone using QPST (see OP for instructions).
On a Windows Vista or higher computer download the app and install it.
Once installed, close the app.
Go to start menu, you will find app under DanX and run it.
(If there are any new updates the app will find it.)
Select your Carrier
If you need your IMEI injected then click the checkbox next to "Inject IMEI"
Upload your QCN backup into the app.
If you clicked the checkbox a window will pop up at this time asking for your IMEI.
**Enter it exactly how you see it on the back of your phone.
Select a save location and create a save name.
Verify that your IMEI is correct.
Click "IMEI Verified" button.
Wait and the QCN should be generated.
Go to the location where you saved the QCN.
Go to QPST and restore file into your phone (see OP for instructions).
Manually reboot your phone.
If you have a slow connection still but you're no longer on 2g reboot again.
If you still a have slow connection after that consider flashing stock again through Odin and then generate another backup using this app.
You can also try flashing a different modem and then generate another backup using this app.
If it still is not working respond to this thread.
I do not guarantee any success and results may vary on how badly you have screwed your phone!
I am not responsible if you screw your phone worst than it already is as QPST is a deadly phone weapon use it at your on risk.
DX
I cannot guarantee release times as I do this on my spare time but I promise I will try to keep this updated as long as I can. Though the coffee may keep me up I do sleep every now and then if you used the app and you liked it please donate it pays for coffee.
Screenshots
Great emergency resource.
Now everyone can start flashing again like it's going outta style.
--------------------------------------------------------------------------------------------------
EDIT: Added some screenshots of the process to reassure whomever it helps:
1_SAM_GS3_EXPLOITER_By_GeeK_finished.png
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
1b_Hidden_menu_screenshot_montage.jpg
2_win7_drivers_after_changing_to_RMNET_DM_MODEM.png
3_QPST_InstallShield.png
4_Device_Manager_Phone_COM_Port.png
5_QPST_Add_New_Port.png
6_QPST_Port_Added.png
7_QPST_Software_Download_BackupNV.png
8_QPST_RF_NV_Manager_WRITE_IMEI_TO_NV.png
This last screenshot is for people who haven't already backed up their IMEI but want to try forcefully writing it back. The example 15-digit IMEI number I used (but didn't actually write) was: 123456789012345
Awesome.
If confirmed, please make an app that we can all donate too. This will be most beneficial to you and the community.
Thank you for the countless nights
Sent from my SAMSUNG-SGH-I747 using Tapatalk 2
I'm more interested in the IMEI injection. If someone has already lost their IMEI and can simply inject their original IMEI back into the phone then we're golden (not that you shouldn't have a backup just in case, but it's nice nevertheless).
Haha look whose got their own thread! great work man look forward to this being confirmed so we can all breathe a sigh of relief!
Sent from my SGH-I747 using Tapatalk 2
Thanks man! You are a life saver for many. Your work is much appreciated.
The only thing I'm confused is secured and unsecured kernel.
Sent from my SAMSUNG-SGH-I747 using Tapatalk 2
As soon as this is confirmed working I think it will be time to fulfill our promise of donating to the one who solved this issue
We need links to insecure kernels for Canadian carries unfortunately
rgoyena said:
The only thing I'm confused is secured and unsecured kernel.
Click to expand...
Click to collapse
An "insecure" kernel is one in which adb automatically gets root access. This is required for GeeK's mod to work. If you are on UCALEM, you can flash the one from here. (There are others, too.)
If you're running the LG1 stock kernel, you can install the "adb insecure" app. Run it and click the box to make your kernel insecure, then use GeeK's mod. This is what I did and it worked perfectly.
EDIT: "adb insecure" should work for any kernel, including the Canadian ones.
rgoyena said:
The only thing I'm confused is secured and unsecured kernel.
Click to expand...
Click to collapse
Just to add to what drothenberger said: in secure mode, when you adb shell into your phone, you have to use 'su' post-login to become root:
Code:
$ adb shell
[email protected]:/ $ su
[email protected]:/ #
This is a pain, because you can't directly do stuff like "adb push foobar.apk /system/app/" without being root first, which is what the insecure mode fixes. Newer versions of CyanogenMod also now have a root settings menu that gives you even finer grained control of this.
It does work for Can carriers, I confirmed that in the other thread. Take a look at my mini guide there: http://forum.xda-developers.com/showthread.php?p=29462669
Sent from my SGH-I747M using XDA Premium HD app
I'm running faux kernel for att.
About adb. Now this is a problem for me. Never used it and always tried to avoid using it. Lol
Sent from my SAMSUNG-SGH-I747 using Tapatalk 2
rgoyena said:
I'm running faux kernel for att.
About adb. Now this is a problem for me. Never used it and always tried to avoid using it. Lol
Sent from my SAMSUNG-SGH-I747 using Tapatalk 2
Click to expand...
Click to collapse
kernel doesn't matter as long as it is stock. The app will make it insecure. Adb is something essential if you are flashing.
Sent from my SGH-I747M using XDA Premium HD app
Hey this is awesome! I hope it is confirmed working! I have one quick question. When you say that you have to be on a stock rom, do you mean "stock" stock as in, the stock rom the phone came out of the box in, or does it still work on a stock based rom (like a debloated/deodex rom, with mods etc?)
drothenberger said:
An "insecure" kernel is one in which adb automatically gets root access. This is required for GeeK's mod to work. If you are on UCALEM, you can flash the one from here. (There are others, too.)
If you're running the LG1 stock kernel, you can install the "adb insecure" app. Run it and click the box to make your kernel insecure, then use GeeK's mod. This is what I did and it worked perfectly.
EDIT: "adb insecure" should work for any kernel, including the Canadian ones.
Click to expand...
Click to collapse
I'm on LG1 and I used adb insecure, purchased from the Market (gotta support Chainfire, the man rocks!). It all worked flawlessly for backing up my IMEI.
ViralCipher said:
Hey this is awesome! I hope it is confirmed working! I have one quick question. When you say that you have to be on a stock rom, do you mean "stock" stock as in, the stock rom the phone came out of the box in, or does it still work on a stock based rom (like a debloated/deodex rom, with mods etc?)
Click to expand...
Click to collapse
stock based, not aosp. I am on k747 Sammy kernel and it worked
Sent from my SGH-I747M using XDA Premium HD app
SOOOO happy now I can start flashing away when i get my s3 on monday!

[TOOL/GUIDE] Full NV Backup and Restore [SIMPLE] [08-03-2012]

This is a simple and easy way to backup and restore your GS3's COMPLETE NV items which hold your IMEI, IMSI, Data settings and much more!
INSTRUCTIONS:
1) Download NV reader/writer HERE and install THESE drivers.
2) Dial *#7284# and select "Qualcomm USB Settings" then check "RMNET + DM + MODEM".
*If you are running a aosp rom (cm9,cm10,aokp etc) you can use the diag method described HERE
3) Create backup.
a) Click "port" in the top left and select your samsung serial port.
b) Make sure BOTH boxes in the top bar are checked.
c) Click "Connect" in the top bar.
d) Click "Read" in the top bar.
e) Click "Read" in the lower 'NV-items' section.
f) Save the .txt file, this is your backup
*The process will take 5-10min. The file size will be roughly 3mb and "inactive item" and "bad parameter" sections are normal.
*To restore click "Write" in the lower 'NV-items' section and navigate to your backup file.
4) Dial *#7284# and select "Qualcomm USB Settings" then check "MTP + ADB".
Demonstration video HERE << Thanks to moonfire for the video.
IMEI ALREADY CORRUPT?
Use THIS custom built tool to easily generate a backup file with your properly formatted IMEI to restore your phone!
1) Enter your IMEI (find it behind your battery) in the text box up top, hit generate then hit save.
2) Use "NV-Item reader writer" to write the saved text file back to your phone and then reboot.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Thanks:
Me
cdma-ware
Peoplearmy
GerardAnthony
oriax123
Time and money have been invested into this project so donations are appreciated.
Donations: HERE
ATTENTION: I need a copy of someones full backup. Requirements are that you never flashed an AOSP rom (CM9, CM10, AOKP) and that your SGS3 is T-mobile. I need this to work on the data issue!
Update: The data issue is still being worked on and some progress has been made but there is still not a solid easy fix. IF YOU MADE A BACKUP THEN GOT THE DATA BUG, PLEASE MAKE A SECOND BACKUP SO THAT I CAN COMPARE THE BEFORE/AFTER!
great work!!!! thanks for your contribution~
very nice!
Is this for real? If it is then SWEET!
Sent from my SAMSUNG-Spaceshiplll using xda premium
I post question on T-mobile sectrion ... hre is my answer for one of question Second was do i need unsecre kernel tothis too work?
Almost seems too simple, amazing work.
I have a fully stock att s3 and unable to write back to phone. Anyone can help with a pointer or two? I can read from phone but unable to write back. Also right before it write back to phone I do notice it shows offline for a quick second but does state it has successful wrote to phone.
Great job! Nice and easy and quick!
nunyabiziz said:
I have a fully stock att s3 and unable to write back to phone. Anyone can help with a pointer or two? I can read from phone but unable to write back. Also right before it write back to phone I do notice it shows offline for a quick second but does state it has successful wrote to phone.
Click to expand...
Click to collapse
Why are you trying this on a bone stock phone? Did you lose your imei?
Has anybody restored a backup and worked?
Sent from my SAMSUNG-SGH-I747 using Tapatalk 2
nunyabiziz said:
I have a fully stock att s3 and unable to write back to phone. Anyone can help with a pointer or two? I can read from phone but unable to write back. Also right before it write back to phone I do notice it shows offline for a quick second but does state it has successful wrote to phone.
Click to expand...
Click to collapse
If you are trying to write something other than your stock IMEI it will not work. Also, make sure you have both of the boxes checked before you hit the read button at the top so that is sends the 000000 security code to the phone and unlocks it.
*when i say unlock i do not mean carrier unlock, so dont get exited people.
thacounty said:
Why are you trying this on a bone stock phone? Did you lose your imei?
Click to expand...
Click to collapse
I put everything back to stock because it wasn't working with root and insecure kernel.
nunyabiziz said:
I put everything back to stock because it wasn't working with root and insecure kernel.
Click to expand...
Click to collapse
Is your IMEI already corrupt and your trying to fix it?
This is confirmed working and will back up your IMEI. If you are looking for a full NV backup please refer to my post here:
http://forum.xda-developers.com/showthread.php?t=1801997
Once againgreat work <>!!
DX
Peoplearmy said:
This is confirmed working and will back up your IMEI. If you are looking for a full NV backup please refer to my post here:
http://forum.xda-developers.com/showthread.php?t=1801997
Once againgreat work <>!!
DX
Click to expand...
Click to collapse
Thanks!
If you want a FULL backup just read the phone with the default values [Range (Dec): 00000-65535].
It is actually a more comprehensive and easily managed backup than what the old RF NV item manager in qpst offers.
The 00550 [hex 226] is just for the single item that handles the IMEI.
<:GeeK:> said:
Thanks!
If you want a FULL backup just read the phone with the default values [Range (Dec): 00000-65535].
It is actually a more comprehensive and easily managed backup than what the old RF NV item manager in qpst offers.
The 00550 [hex 226] is just for the single item that handles the IMEI.
Click to expand...
Click to collapse
^ Probably should update the OP with that.. As Im sure some will prefer A FULLL "just in case" backup, and others just the IMEI..
Always good to list the choices/options
Narcistic said:
^ Probably should update the OP with that.. As Im sure some will prefer A FULLL "just in case" backup, and others just the IMEI..
Always good to list the choices/options
Click to expand...
Click to collapse
Good idea, done.
Flashed to smokins touch mii rom so I can run this, but when I click read it says Failed "connect to COM port before"
What am I doing wrong?
Edit: Nvm, got it.
<:GeeK:> said:
Is your IMEI already corrupt and your trying to fix it?
Click to expand...
Click to collapse
A friend's s3, its corrupted and unable to write the imei back to it.
nunyabiziz said:
A friend's s3, its corrupted and unable to write the imei back to it.
Click to expand...
Click to collapse
In private message send me the backup you made of the corrupt NV and also tell me the IMEI (get it from behind the battery) and ill try to help you out.

[Q&A] [GUIDE] Backup/Restore/Repair Your EFS Partition [LS970]

Q&A for [GUIDE] Backup/Restore/Repair Your EFS Partition [LS970]
Some developers prefer that questions remain separate from their main development thread to help keep things organized. Placing your question within this thread will increase its chances of being answered by a member of the community or by the developer. Thanks for understanding and for helping to keep XDA neat and tidy! :smile:
autoprime said:
LS970 EFS Backup/Restore/Repair
Every rooted Optimus G user should backup their EFS partitions!
Thanks goes to interloper, toastcfh and everyone in #lg-optimus-g that helped out.
PM me if interested in my Sprint LGOG LS970 EFS repair service.
Contents
1. Flashable EFS for backing up your EFS partitions and packing them into a new flashable .zip.
2. Commands for backing up/restoring EFS manually with terminal or ADB.
3. Flashable "ZERO EFS" with guide for repairing your EFS. This EFS needs to be reprogrammed but could be used in a "worst case" scenario where you didn't backup your EFS and the phone cannot be replaced by any LG/Sprint warranty.
Backup script/commands also work on the ATT/Telus variants. ZERO EFS zip is ONLY for Sprint LS970 users. ATT/Telus users, if you would like a ZERO EFS, please send me your efsbackup.tar in a private message. It is not suggested to publicly post your EFS file. ​
Background
You never know when your NV/EFS/PRL/RADIO may stop working. Restoring your WORKING EFS may save the day. A few users in the #lg-optimus-g IRC channel have run into issues and found their phone unusable, myself included. A few users who flashed the test/Korean JB builds found 3g not working.. or calls/text not working. Some users ran into radio issues after PRL writing failures. My own issues was a missing ICCID which resulted in no 4G. Data wipes, reactivations, ##786# resets were not helping. All of the above issues could have been fixed if an EFS backup was made while the phone was still in working order.
m9kefs1 seems to be radio related
m9kefs2 contains your unique phone identifiers: MEID, IMEI, phone number, MSL, data profiles etc
m9kefs3 seems to be blank 00s​
Backing up EFS
It's easiest to run the Optimus_G_Create_Flashable_EFS.zip attached to this thread. Run in recovery. Optimus_G_Create_Flashable_EFS.zip creates a flashable zip backup of your EFS in /sdcard/EFS_Backup/(instead of just a .tar).
If you don't like convenience this can also be done manually with adb or terminal with the commands below.. root required.
Code:
su
dd if=/dev/block/platform/msm_sdcc.1/by-name/m9kefs1 of=/sdcard/m9kefs1.img
dd if=/dev/block/platform/msm_sdcc.1/by-name/m9kefs2 of=/sdcard/m9kefs2.img
dd if=/dev/block/platform/msm_sdcc.1/by-name/m9kefs3 of=/sdcard/m9kefs3.img
Restoring EFS
To restore your original EFS just boot into recovery and flash the efsbackupflash.zip in your /sdcard/EFS_Backup folder.
If you don't like convenience this can also be done manually with adb or terminal with the commands below. Adjust the "dd if=/sdcard/" command depending on where your backup EFS .img files are located.
Code:
su
dd if=/sdcard/m9kefs1.img of=/dev/block/platform/msm_sdcc.1/by-name/m9kefs1
dd if=/sdcard/m9kefs2.img of=/dev/block/platform/msm_sdcc.1/by-name/m9kefs2
dd if=/sdcard/m9kefs3.img of=/dev/block/platform/msm_sdcc.1/by-name/m9kefs3
Repairing EFS
YOUR EFS IS *NOT* BROKEN IF YOU FLASHED AN AOSP ROM AND NO LONGER HAVE SIGNAL BUT STILL HAVE YOUR MEID AND PRL SAYS "40000"...
GO BACK INTO AOSP ROM > SETTINGS > MORE... > MOBILE NETWORK SETTINGS > CDMA SUBSCRIPTION > SET TO "NV"
YOU SHOULD NOW HAVE A SIGNAL AGAIN... NO EFS REPAIR NEEDED!!
If you have a messed up PRL/Radio/EFS(no signal.. calls/text doesn't work.. no PRL showing.. no 3G) then you should first confirm there are no outages in your area. After confirming no outages you may want to try a factory data reset(settings > backup & reset) or perform a ##786# reset(MSL required). If you are feeling daring you could even try a lgnpst reset which involves installing lgnpst(automated install on IRC suggested) and flashing a stock .tot to your phone while it's in download mode(power off phone > plug phone into USB cable/computer > vol up + vol down + power buttons). If none of the previous suggestions work you could see if Sprint/LG will warranty repair your device.
If NOTHING ABOVE works your final option is to flash a new EFS. Technically you could possibly look through each and every NV item with QXDM and see what's incorrect but that may take forever... so I have included a flashable zip at the bottom of this thread which flashes a fresh LS970 EFS to your device. This EFS is clear of all personal data and any previous phone identifiers. Below are directions on how to reprogram your EFS to the Sprint network after flashing the LS970_ZERO_EFS.zip. I'd rate this as medium-hard difficulty for those that are unfamiliar with how (Sprint)CDMA phones are programmed. For those that have flashed a phone in the past, this ZERO EFS zip just made your day even easier.
The ZERO EFS has a zero'd out SPC/MSL, zero'd out IMEI/MEID, zero'd out MDN/MSID and all data profiles emptied.
NV item 114(NV_FACTORY_INFO_I) has been "anonymized" and no longer identifies to anyones real account.
In recovery, flash LS970_ZERO_EFS.zip then wipe data/cache(factory wipe in TWRP). LS970_ZERO_EFS.zip backs up your current EFS partitions to /sdcard/EFS_Backup and then replaces your EFS with the ZERO EFS.
You will have to manually program your phone to get it working again.
READ EVERYTHING BELOW IF YOU DON'T KNOW WHAT YOU'RE DOING.
After flashing LS970_ZERO_EFS.zip:
For talk/text working - use DFS(www.cdmatool.com) or other known working CDMA tools.
a1. Set LS970 into diag mode.. open the dialer and hit ##3424# . Also make sure phone is set to "Charge only"
b1. Connect phone to DFS and set correct COM port. Use the diag port NOT the serial port.
c1. In DFS send SPC(MSL) to phone using "SPC" button(under the green ports button, top left). SPC = 000000.
d1. On Programming > General tab... Write desired IMEI with DFS. Hit "status" button to make sure it stuck. IMEI = MEID + 1 extra digit.
e1. After writing IMEI.. write the matching MEID. Hit "status" button to make sure it stuck.
f1. On your phone, open dialer and hit ##000000# and program in your MDN/MSID. Hit done. Phone will reboot.
Talk/text will now work!
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
For 1X/3G working - use DFS
a2. Connect phone to DFS and send SPC using above methods.
b2. In DFS, open the Programming > Data tab and hit the read button.
c2. Set the UID under HDR AN LONG to your [email protected]
d2. Set the Pwd to your 32-char hex password, no spaces between hex bytes. Make sure box is checked next to Pwd!!
e2. In DFS go to the Programming > Mobile IP tab. Hit the blue "Read" button in the lower left.
f2. Set the username(NAI) to the same username you just wrote in step c2... [email protected]
g. Set the AAA Shared Secret password. The same 32-char password used in step d. Make sure box is CHECKED for AAA!!!
h. Set the HA Shared Secret password to: secret . Yes, the word secret. MAke sure the box is UNCHECKED for HA!!!
i. Hit the red "Write Current Profile Settings" button.
j. Back on your phone, open the dialer and press ##3282# and click "Data Profile" then "edit". Enter 000000 for code.
k. Once inside Data Profile menu, set up your Sprint username and password(AAA password).
[email protected] and the AAA password is a 6-char password.
l. Once data profile is written back out of the menu and the phone should reboot.
1X/3G will now work!! [as long as ALL usernames and passwords were written correctly with the 100% correct info!!!]
*Notes*
1. If a ##786# reset is ever done, the 1X/3G data passwords will be wiped and have to be rewritten.
2. Dialer code 3845#*970# > Data -LG menu has a PPP setting. Never set this to Sprint... always leave on "Undetermined"
3. You shouldn't have to do anything for 4G to work.
Now you may say "yeah, that's great... but I don't know my MEID, IMEI, MDN, MSID, 32-char AAA password, Data Profile username... now what?"
Good question.
IMEI - Hopefully your phone isn't TOO messed up and you can still view your IMEI via Settings > About Phone > Phone Identity.
If you can't read it, call Sprint and ask them for it, mention your phone acting up or blah blah. The IMEI is your MEID + 1 extra digit.
MEID - MEID is on your LG OG box. You can also see this by viewing the current phone on your plan using Sprint.com
You want to use the MEID HEX not MEID DEC. If you can only find the DEC you can use online converters to convert MEID DEC to HEX.
MDN - MDN is your phone number. You should know this.
MSID - MSID is sometimes the same as your phone number, but sometimes not. You can view this info in Settings > About Phone > Phone Identity
You can call Sprint to get this info if you can't view it on your phone.
Data Profile username/password - You can get this info by calling Sprint. You may be able to view the username with ##3282# > Data Profile > View
32-char AAA Password - If you are unable to acquire your 32-char AAA password(NV item 466 and 1192), ask Sprint. You may have to speak to some form of advanced tech support.
​
Code:
[B]My other LS970 threads..[/B]
[B][URL="http://forum.xda-developers.com/showthread.php?t=2049701"][How-To] Enable DIAG mode without Service Code(MSL)[/URL][/B]
[B][URL="http://forum.xda-developers.com/showthread.php?t=2052816"][Info] LS970 Hidden Dialer Codes[/URL][/B]
[B][URL="http://forum.xda-developers.com/showthread.php?t=2058506"][WIP]Optimus G AT Commands[/URL][/B]
Click to expand...
Click to collapse
Can any body held me . I have lost my cell fone service after installing kitkat zip rom V20A of vodafone in my LG optimus f180L. After that I flashed European KDZ back which I was uning previously V10h but after installing baseband I lost signals on my device. no data ne any service . and after inserting sim card my IMEI number shows unknown.. Please held me how can i get out of this problem..
gm sheikh said:
Can any body held me . I have lost my cell fone service after installing kitkat zip rom V20A of vodafone in my LG optimus f180L. After that I flashed European KDZ back which I was uning previously V10h but after installing baseband I lost signals on my device. no data ne any service . and after inserting sim card my IMEI number shows unknown.. Please held me how can i get out of this problem..
Click to expand...
Click to collapse
try to find proper kdz for your model phone, f180L. flash f180L kdz or tot.
autoprime said:
try to find proper kdz for your model phone, f180L. flash f180L kdz or tot.
Click to expand...
Click to collapse
I flashes peoper KDZ for F180L but same problem i am facing no signals no GSM service no IMEI showing. Plz help .
I think i have efs messed up problem. Guide me to fix this problem
gm sheikh said:
I flashes peoper KDZ for F180L but same problem i am facing no signals no GSM service no IMEI showing. Plz help .
I think i have efs messed up problem. Guide me to fix this problem
Click to expand...
Click to collapse
if you did not backup your efs BEFORE you lost signal.. then there is no fix.
if you made a backup of your efs BEFORE you lost signal... you can restore it to fix the problem.
autoprime said:
if you did not backup your efs BEFORE you lost signal.. then there is no fix.
if you made a backup of your efs BEFORE you lost signal... you can restore it to fix the problem.
Click to expand...
Click to collapse
Now there is no way to get it Back? there will be any way to make my cell fone alive to make calls,sms 3G rtc??? If you Know any way Plz guide me??
It's easiest to run the Optimus_G_Create_Flashable_EFS.zip attached to this thread. Run in recovery. Optimus_G_Create_Flashable_EFS.zip creates a flashable zip backup of your EFS in /sdcard/EFS_Backup/(instead of just a .tar).
Run a .zip? i dont get it. The .zip folder creates a flashable zip?
ryblade said:
It's easiest to run the Optimus_G_Create_Flashable_EFS.zip attached to this thread. Run in recovery. Optimus_G_Create_Flashable_EFS.zip creates a flashable zip backup of your EFS in /sdcard/EFS_Backup/(instead of just a .tar).
Run a .zip? i dont get it. The .zip folder creates a flashable zip?
Click to expand...
Click to collapse
Yes, that's correct. The create flashable efs zip does that, then you can just flash the efs zip it creates if you ever need. I create one every time there is a prl update from sprint just because. (Prl is stored in efs partition with all the imei and carrier stuff specific to your phone.)
so i updated to the 02/11 update to my phone and all of the sudden out of the blue my prl says 40000 and i cant make calls and i cant use lte i need help asap please i already put it in NV mode and nothing happens . i have the efs backed up but when i try to flash them the recovery wont let me for some reason
Update i actually got it to work after 5 hours of trial and error . what since all of my backups got corrupted i managed to find one of the early versions of when i first backed up my efs and made a flashable zip of it then i got my cellular network and voice to work but as i am replying to this message now the efs got deleted after i made a call on the 2/11 version of cm12 so i think im going to revert back to an earlier build . thanks for the help .
will this work for f180 converted to e975
ihave f180 converted to e975 and it is showing imei 0 will your method work to restore imei , please reply so i should go with the procedure need help

No SIM recognition after OOS 10.0.1 update - EFS problem??

Hi,
I have my 5T rooted with Magisk and TWRP recovery.
I've upgrated from OOS 9 to official OOS 10.0.1 flashing with TWRP as usual. I did a full nandroid backup before.
Everything went fine until I noticed that during the booting of the phone after the flashing, it didn't ask for the SIM code as it used to. And once the mobile had fully restarted, I could see 2 new icons on top of the screen picturing the 2 sim cards that can be contained in a OnePLus 5T. They were striken through, as if not present, when I had My SIM in Slot 1. And so, no mobile signal, no data network.
I tried switching Sim cards with another mpbile. My SIM worked fine in the other mobile and the other SIM was not recognized by my mobile.
I've read that I could be facing problems of damaged EFS. So I tried restoring through TWRP the EFS partition from the Nandroid I had done before. Nothing. Same thing with the modem partition. Nothing.
I tried then to restore the EFS from a safety backup that I had using Fastboot. Nothing.
I could still try to restore the full nandroid backup done at the beginning, but I forgot to take out pin protection code before taking the Nandroid, and I've read somewhere that it could be an issue after restoring the system. I might not be able to restart the phone and be obliged to factory reset, witch I would really like to avoid. And anyway, if restoring with Fastboot did not work, I wonder if the full restore would change anything.
Anyway, anybody has a magic idea about might be happening? A little help please??
Same problem!
I'm having the same problem. I have my 5T rooted with Magisk and TWRP recovery.
I've upgrated from OOS 9 to official OOS 10.0.1 flashing with TWRP as usual. I did a full TWRP backup before, including my EFS partition.
I'm seeing this too:
>"once the mobile had fully restarted, I could see 2 new icons on top of the screen picturing the 2 sim cards that can be contained in a OnePLus 5T. >They were striken through, as if not present, when I had My SIM in Slot 1. And so, no mobile signal, no data network."
I did the same thing and had the same no result.
>I've read that I could be facing problems of damaged EFS. So I tried restoring through TWRP the EFS partition from the Nandroid I had done >before. Nothing. Same thing with the modem partition. Nothing.
I'm looking for a solution too.
I came across this: https://forum.xda-developers.com/oneplus-5t/help/baseband-imei-lost-t3834334 and this: https://www.getdroidtips.com/how-to-repair-and-fix-imei-baseband-on-oneplus-5t-a5010/
I've been reluctant to try and rebuild the QCN file, but it might work.
Working on this
So I'm working on reprogramming the IMEI using the Qualcomm tools. I was able to use them to back up my phone and see the it still has the correct MEID.
However, the .gcn file linked to below isn't accepted, with a weird error: "The file model MSM8998 does not match the phone model MSM8998. Please select a file for the MSM8998."
I'm not sure what it isn't liking. In theory, I think I could just put the IMEI numbers into the QPST programming tool, but I'm not certain where they would go and the correct format for them (with the chksm at the end or not?).
This is as far as I've gotten. I'm looking for an alternate .qcn or .qcnx (which is the kind the tool generates when saving files).
rootlessabroad said:
I'm having the same problem. I have my 5T rooted with Magisk and TWRP recovery.
I've upgrated from OOS 9 to official OOS 10.0.1 flashing with TWRP as usual. I did a full TWRP backup before, including my EFS partition.
I'm seeing this too:
>"once the mobile had fully restarted, I could see 2 new icons on top of the screen picturing the 2 sim cards that can be contained in a OnePLus 5T. >They were striken through, as if not present, when I had My SIM in Slot 1. And so, no mobile signal, no data network."
I did the same thing and had the same no result.
>I've read that I could be facing problems of damaged EFS. So I tried restoring through TWRP the EFS partition from the Nandroid I had done >before. Nothing. Same thing with the modem partition. Nothing.
I'm looking for a solution too.
I came across this: https://forum.xda-developers.com/oneplus-5t/help/baseband-imei-lost-t3834334 and this: https://www.getdroidtips.com/how-to-repair-and-fix-imei-baseband-on-oneplus-5t-a5010/
I've been reluctant to try and rebuild the QCN file, but it might work.
Click to expand...
Click to collapse
Hi
I've found a code (*#06#) in a page that gives you the MEID. It worked for me. Hopefully, I have the correct MEID too. The code for the IMEI did not show anything. I'll check the lynks you posted later today.
Thanks for sharing!!
PS. I can not include the lynk to codes page as I'm too junior a member and XDA forums won't let me.
rootlessabroad said:
So I'm working on reprogramming the IMEI using the Qualcomm tools. I was able to use them to back up my phone and see the it still has the correct MEID.
However, the .gcn file linked to below isn't accepted, with a weird error: "The file model MSM8998 does not match the phone model MSM8998. Please select a file for the MSM8998."
I'm not sure what it isn't liking. In theory, I think I could just put the IMEI numbers into the QPST programming tool, but I'm not certain where they would go and the correct format for them (with the chksm at the end or not?).
This is as far as I've gotten. I'm looking for an alternate .qcn or .qcnx (which is the kind the tool generates when saving files).
Click to expand...
Click to collapse
So I've tried te rebuild the QCN file. But my issue is that I can't make the ADB comunicate with my mobile. It is as the mobile was not plugged in?? The usb debugging is activated. I can browse the mobile memory from the computer. But the ADB doesn't lynk with the mobile; when you type adb devices, it says List of devices attached and nothing after. Any idea what might be happening?
What about you rootlessabroad? could you fix it?
rootlessabroad said:
So I'm working on reprogramming the IMEI using the Qualcomm tools. I was able to use them to back up my phone and see the it still has the correct MEID.
However, the .gcn file linked to below isn't accepted, with a weird error: "The file model MSM8998 does not match the phone model MSM8998. Please select a file for the MSM8998."
I'm not sure what it isn't liking. In theory, I think I could just put the IMEI numbers into the QPST programming tool, but I'm not certain where they would go and the correct format for them (with the chksm at the end or not?).
This is as far as I've gotten. I'm looking for an alternate .qcn or .qcnx (which is the kind the tool generates when saving files).
Click to expand...
Click to collapse

Categories

Resources