Update : OnePlus 5
Updated : Including OnePlus 3T
OnePlus Series Mega UNBRICK Guide + TWRP Flashing
Let’s rescue/unbrick our OnePlus One, 2 and 3 series, including OnePlus X, from any brick you may think of. Not very long, about 1.5 years ago, everyone was afraid of Qualcomm HS-USB Qdloader 9008 brick situations like death, because many didnt knew what that was, as a port. This is Qualcomm’s so called “service” port that we use to fix our phones with a proper ROM. This port can be manualy opened, or if you do something wrong like deleting your phone’s boot partitions accidently, sbl1.mbn for example, that port opens itself and waits you to flash with right Qualcomm flasher software, in the right way, with the right kind of ROM.
As someone who has been working on these “brick” cases since the past 2 years, I sometimes willingly brick a phone to death first, then unbrick it again, this takes less time in many brands, like today’s example, OnePlus series.
OnePlus is a “developer” phone in the first place. What does that mean ? This means your bootloader can be unlocked with a simple fastboot command and you are ready to “develop” ROMs or apps. This means OnePlus won’t be out of warrantee if you “root” it, as rooting and unlocking the bootloader freely are a part of being a developer phone. Thanks to OPPO, yes you read right– OnePlus One was an identical twin of the Oppo Find 7 series from inside, we are able to find “unbrick” roms of these developers phones since a while. Oppo Find 5 was the first model as an example of this story. Actually I am the first one in the world who has unbricked OnePlus One from a death brick ( i like to call this a coma brick ), from Qualcomm HS-USB Diagnostics 9006. My two articles “Snapdragon’s are UNBRICKABLE” has been read by 450,000 readers around the world in a year. It’s time to share my experiences with our readers at androidbrick.com.
Rescue Files :
Qualcomm Driver :
STEP 1:
Before we start, we need to put our Windows operating system into “Test Mode”, so we dont have to deal with any driver install issues in between our work.
To do this just :
Press Start->Search->cmd then right-click on it and click Run as administrator. In the CMD window type or copy this “Bcdedit.exe -set TESTSIGNING ON” and press enter.
Restart PC.
After your work with unbricking is done, if you want to get out of this test mode, detailed instructions are here : Windows Test Mode .
This is pure unbricking method with its own flasher inside the rescue folders so we dont need any adb or fastboot command to get in EDL (Qualcomm HS-USB Qdloader 9008) mode like we did in our Xiaomi guide before. We will use a simple key combination like I described in our Lenovo/ZUK guide. Special thanks to OnePlus for not hiding it from us, like Xiaomi did.
OnePlus’s own flashers : MsmDownloadTool V3.0 is for OnePlus 3, MSM8994DownloadTool is for OnePlus 2, MsmDownloadTool V2.0 is for OnePlus X and Msm8974DownloadTool is for the OnePlus One. These tools will be in every rescue package that you will download from links above. I will be working on OnePlus One today. This model has Color OS 2.0 as rescue ROM, so after you flashed this rom your OPO will boot with Color OS (Chinese-English version), BUT whats important for us is to get back our “fastboot mode” back, its a developer phone remember?
After we have fastboot mode back we will be able to flash TWRP recovery to our phones and flash any rom that we want, including stock ROMs. Rescue packages for other models than the OnePlus One contain only rescue partitions in it, so no “system.img” and “userdata.img’s”. They will give you stock recovery and bootloader (fastboot). There are also complete rescue ROM files but because they are big packages, hard to upload them all to our servers, i will give those “androidfilehost” links under the article too. But if you are a “custom rom” guy like me, you wont need those stock ROMs, flashing TWRP will be more then enough to go to second step after rescue (flashing a custom ROM).
STEP 2:
Let’s put our OnePlus’s into the Qualcomm HS-USB Qdloader 9008 /EDL mode. To do this, we will use the default key combination of Qualcomm for this : Phone is completely off> Press Volume “+” button> Plus the USB cable in (without pressing power button), thats all. Before that I presume that you have installed “Qualcomm QdLoader driver” on your system, if yes, your new device will be like in the picture, if not, please do it in this step and get ready for the next step.
Our flasher will be “Msm8974DownloadTool.exe”, but I pictured here all the ROM folders, because I want you see some other files too and understand what we are doing here. “rawprogram0.xml”, “patch0.xml”, “prog_emmc_firehose_8974.mbn” and “MPRG8974.mbn”, these files are Qualcomm’s engineer files and cant be found in any rom than these kind of “service” roms. All the xml files can be regenerated but those mbn files not. They include vendor (maker) related model specific sign codes in it and cant be used on cross models. What I’m trying to explain here is — You have seen those files in your Xiaomi’s fastboot roms too, like in your Lenovo and ZUK’s Qfil ROMs, but like I said, you cant use Xiaomi Mi4’s “MPRG8974.mbn” to rescue an OnePlus One for example. They share same chipsets, Snapdragon 801’s but because of the different “signs” in them they just wont work, so dont loose time on this field. I know some users are..
STEP 3:
Right click “Msm8974DownloadTool.exe” and run it as “administrator”, this flasher is in Chinese but does not matter we will only use 2 buttons on it. “Enum” to identfy our EDL ports and then “Start” to start the flashing. Here my port is on Com 28, dont get confused Windows’s com port number and this tool’s numbers — same port, different numbers.
After you click on Start, “8974_msimage.mbn” will be send to your phone and you will hear an usb unplug and plug sound from your cumputers. If this is your first time you will see this :
An error on the Msm8974DownloadTool with red color (it says cant find the necessary port) and a new device under your device manager as “QHUSB_BULK”. Windows will automaticaly install drivers, just wait for a minute till you see your new port “Qualcomm HS-USB Diagnostics 9006”. This port will be used to flash the rest of the files, its so called “EMMC” mode of the Qualcomm device.
STEP 4:
Lets close Msm8974DownloadTool first. Then press “power button” of the phone long enough while your are pressing Volume “+” button same time — this will reset Qualcomm 9006 port to 9008 again. Then, run Msm8974DownloadTool as administrator and click “Start” again. Because our 9006 driver is now installed and you will see this :
The tool will start to send rescue files to our bricked OnePlus’s. In this example, the whole Color OS 2.0 files including systemimg and userdata.img’s.
After it finishes youll see our port line will become green saying its done.
STEP 5:
Our last step will be to press our phone’s power button long enough till it vibrates and wakes up back to life again. Remember, just put your phones in “fastboot” mode pressing Volume “+” button while powering on. Then download our “OnePLus Latest TWRP Recovery Package for all Models”.
Copy your OnePlus model’s TWRP.img to your “fastboot.exe” working folder and type:
“fastboot flash recovery twrp-3.0.2-0-oneplus1.img” for OnePlus One
“fastboot flash recovery twrp-3.0.2-2-oneplus2.img” for OnePlus 2
“fastboot flash recovery twrp-3.0.2-0-oneplus3.img” for OnePlus 3 and
“fastboot flash recovery twrp-3.0.2-0-oneplusX.img” for OnePlus X of yours.
To boot into TWRP right away type :
“fastboot boot twrp-3.0.2-0-oneplus1.img” for OnePlus One
“fastboot boot twrp-3.0.2-2-oneplus2.img” for OnePlus 2
“fastboot boot twrp-3.0.2-0-oneplus3.img” for OnePlus 3 and
“fastboot boot twrp-3.0.2-0-oneplusX.img” for OnePlus X
Your OnePlus will boot to TWRP recovery, just copy your desired stock or custom ROM from your PC to your phone and flash it. That’s all folks 🙂
Here are links of complete rescue Roms like I promised :
OnePlus X Complete Rom Rescue Package
OnePlus 2 OxygenOS 2.1.1 Rescue Package
OnePlus 3 Complete Rom Rescue Package
UPDATE : OnePlus 5 files
Copyright © 2016 by androidbrick.com. All rights reserved.
Hi, I have a hardbricked oneplus 3. Followed every step of this guide, but I get stuck on step 3. When I press Start it does some stuff, gets stuck on “FireHose GetUfsInfo” for a few seconds, then it becomes red, the port disconnects, and it shows “Firehose GetUfsInfo failed”. Then it does nothing, I don’t get the 9006 new device, even if i unplug and plug it back in. How can I fix this?
Put your Windows in “test mode”, install latest Qualcomm drivers and try again. Should work.
PS: Press the power button long enough to reset the port, after every flashing attempt.
Followed the steps everything went great then i booted the phone its shows a red OP logo and its stuck on boot loop again and i’m having trouble flashing the recovery file when i type the fastboot flash twrp command it shows error: neither -p product specified nor ANDROID_PRODUCT_OUT set
Which model ?
My oneplus 3t is tottaly dead, i cant able to boot in recovery and fastboot even not led light when plug into charger. my pc detect OP3T as “qualcomm 9008” I follow your all step with OnePlus3T_Unbrick_AndroidBrick “MsmDownloadTool V3.0.exe” but i got error “CheckHwId Failed Phone:MSM8996, Image:MSM8996Pro” PLease Help Me..!
Help you ? What can i do more ? 🙂
Hello
Thank you for your post. I have successfully completed above 4 steps for Oneplus3.
In step 5.. when I give command “fastboot flash recovery twrp-3.0.2-0-oneplus3.img”, it shows following error:
PS C:\adb> fastboot flash recovery twrp-3.0.2-0-oneplus3.img
target reported max download size of 536870912 bytes
sending ‘recovery’ (18680 KB)…
OKAY [ 0.422s]
writing ‘recovery’…
FAILED (remote: Partition flashing is not allowed)
finished. total time: 0.444s
Please help.
Stock recovery is working ? If yes please flash a stock rom from stok recovery first and try again.
hello sir,
my oneplus one got bricked and when i connected it to laptop it asked me to format the disk and accidently i’ve formatted one of the three disk populated out there which i guess was system partition of my device.
how to recover this sir?
Your OnePlus One should be in 9008 state now, just fallow the guide to unbrick.
When i run MSMDownloadTool for Oneplus X it sees my device and downloads parts,
At the step which I listen the sound of disconnect-connect my device the phone reboots and stuck at oneplus sign. Stock recovery is available but I can do nothing. At MSMDownloadTool I press verify and I see the followings and under those writes FAILED in red.
8974_msimage.mbn: OK
dynamic_nvbk.bin: OK
emmc_appsboot.mbn: OK
gpt_backup0.bin: OK
gpt_main0.bin: OK
rawprogram0.xml: FAILED
NON-HLOS.bin: OK
MPRG8974.mbn: OK
rpm.mbn: OK
sbl1.mbn: OK
sdi.mbn: OK
static_nvbk.bin: OK
tz.mbn: OK
persist.img: OK
recovery.img: OK
Any ideas SOS
That test is not important just ignore it. You have fastboot ?
I have. The phone is recognised but cannot give any commands.
When I press power button + volume down I can go into a new recovery, which I couldnt before(1st time to see this) where I have some option but I cannot instal anything.
It says “loading rom.zip” and instantlly “cannot read rom.zip”
Try to find full package rescue rom file on oneplus forum, if you can’t find it, let me know i will look for it.
Fixed it!!!
I coppied the rom.zip file on my sd card and I installed it from the recovery shown in the pictures. Everything works as new.
SD card was the only thing that could be read by the new recovery.
Thank you for your time.
Glad to hear that, u r welcome.
Here is what I can see. https://drive.google.com/open?id=0B5RAG9PnZWmzYk5pZ2dXOVlNVjQ
and when I press English this : https://drive.google.com/open?id=0B5RAG9PnZWmzS0lGaUd5a1FGY1k
Local install do nothing.
USB Install finds no USB
I did wipe data and cache
At Advance there is not something that seems useful.
Do you want more photos to understand?
How about adb install ?
I have installed at my PC the adb drivers and what it needs but I cannot give any commands. can you plz tell me what commands and from where to give. I might do smthing wrong.
I meant “adb sideload rom.zip”
Hey bro, after my MsmDownloadtool show “Download complete” my phone automatically boots to fastboot mode and when I go to CMD (where my fastboot.exe exist) and give commans “fastboot flash recovery twrp-3.0.2-0-oneplus3” it says “FAILED (remote: Partition flashing is not allowed” What should I do now? (PS. I never saw QHSUSB_BULK or any Qualcomm HS-USB Diagnostics 9006. I just saw Qualcomm HS-USB Qdloader 9008 in entire process”. Thanx. Please help me out.
what happens when you type “fastboot oem unlock” ?
It say “FAILED (remote: oem unlock is not allowed)” PS: I actually dropped my onepluse 3T in water then kept it in rice and then turned in on. From then till now it only boots in fastboot mode and I can not access recovery or anything. Bro what do you think the problem is?
Try finding an other full rom from oneplus.net and try again please.
Oneplus.net roms asks to go recovery mode. Which I am not able to. Is my phone is unbrickable now?
Do you realy understand whats recovery, fastboot or EDL ?
You don’t get it. Do you?
I have used your MSMDownload Tool, this (http://www.technobuzz.net/unbrick-oneplus-3/) tool and https://forums.oneplus.net/threads/unbrick-guide-oneplus-3t.481214/ this MSMDownloadTool, they all showed “Download Complete”. And then my boots to fastboot mode with following message:
START (Green)
Restart bootloader (Red)(Vol Down)
Recovery mode (Red) (Vol Down)
Power off (White) (Vol Down)
Press volume key to select, and press power key to select.
FASTBOOT MODE (Red)
PRODUCT_NAME – msm8996
VARIANT – MTP UFS
BOOTLOADER VERSION –
BASEBAND VERSION –
SERIAL NUMBER – 9fbc1152
SECURE BOOT – enabled
DEVICE STATE – locked
———————————-
I can not go to recovery mode which is asked in one plus download support (http://downloads.oneplus.net/oneplus-3t/oneplus_3t_oxygenos_4.1.6/)
In fastboot mode if I give any command from Command Prompt it says Not Allowed.
Yes i dont get it because it never happened to me that oneplus boots too fastboot only after a successful flash. That rom that i shared always did the job.
Oh Okay. Thanks for your reply and wonderful job you did on OnePlus 3T that helped many many other users.
Thank you so much
https://youtu.be/jCgldi9Upes
It says FAILED (remote: oem unlock is not allowed)
When i run msmdownloadtool it sees my device and downloads parts but it fails at
rawprogram0.xml: FAILED… the phone will reboot and now stock bootloader is available but everything is still locked.. (bootloader, recovery not available.. and usb debugging is off..). do you have any tips ?
Which model ?
Oneplus X, brought in 2015.
“rawprogram0.xml: FAILED” this is unusual, just press “start” at the msmdownloader, don’t forget to run as administrator. If the flashing goes till the end your X should reboot normaly.
yeah i run the program in administrator mode.. and i click start, everything goes fine until it shutdown mid way.. (my phone reboots but it isnt finished.. When i try it again it starts over and shutdown at the same moment.. currently bricked. (cant flash on fastboot, bootloader locked, adb debugging off..) i cant enable bootloader either.
Yours seems a faulty one, phones that are bricked because of software stuff can mostly be rescued.
merhaba, one plus 3 t ye nasıl imei tamiri yapabilirim?
Box ile yapılabiliyor sadece, PC tabanlı maalesef. Ben yapıyorum isterseniz. testandroidx@gmail.com
Just wanted to say a huge thanks! I stupidly did fastboot oem lock when a custom ROM was installed, and my OnePlus 3T was stuck in a bootloop. This guide saved me.
I did keep getting the same “Sahara Communication Failed£¬Please…” failures that others have mentioned, so I tried using the MiFlash utility. When it complained that something else was using the COM port, I checked and MsmDownloadTool was busily installing system.img in the background.
The install succeeded and I’m now in the process of getting my phone working again.
You are wellcome, glad you got your OnePlus back working again, that phone can’t be bricked 🙂 Thank you for leaving a comment. Greetings.
Hi, I’m having trouble with Msm8974DownloadTool.exe – my OnePlus one is hardbricked. I was able to sort the drivers so that it appears as Qualcomm HS-USB Qdloader 9008. Upon running Msm8974DownloadTool.exe, it stops and the word “Sahara” appears in the garbled Chinese text. Are you able to help?
Please put your Windows in Test Mode and disable driver signature after, and use the latest Qualcomm drivers from my downloads section.
I’ve done all that to no avail. I moved onto using MiFlash (specifically the 2012.11.06 version) and followed the steps as detailed here – http://www.androidbrick.com/ultimate-qualcomm-snapdragon-unbrick-guide-snapdragons-are-unbrickable-qhsusb_dload_qpst_qfil_edl/
It started flashing earlier and then said I needed to go into test mode, so I rebooted, went into Test Mode and ran MiFlash as admin. After this I get the error “An attempt was made to load a program with incorrect format(0x8007000b: Load Programmer {PATH TO MPRG8974.mbn})”
I wonder if this is because the Advanced menu defaulted to asking for .hex files?
Any more ideas?
For Oneplus series you don’t need anything than its own flasher in the rom folder. Please check your drivers ( use sighned Qualcomm drivers from my downloads ), put your Windows in “test mode” and try again as in the article please.
I have the same issue with the OnePlus 5t.. 🙁
I always get the “Sahara” error is it can be unbricked?
Try with msmDownloadTool v4 and was able to sort the drivers so that it appears as Qualcomm HS-USB Qdloader 9008.
https://androidfilehost.com/?fid=1395089523397935889
Thanks, I still get the “Sahara” error 🙁
Open the port again.
i cannot access the fastboot on the ColorOS as everytime i try it always went to the recovery mode
OnePlus one ?
8974_msimage.mbn: FAILED cannot be done pls help
8974_msimage.mbn: FAILED cannot continue pls help
Currently, this hardware device is not connected to the computer. (Code 45)
To fix this problem, reconnect this hardware device to the computer. find7
i coonot done my download port line is red not green and the dowload restart and restart again but its done pls help thanks
Ran the unbricker for the 3t, and now it’s green. now what?
Press power button long enough to reboot.
Sorry for the typing. I’m using google translator ….. I can finish the (msn getting green) then I turn on the phone (start md5 checksum)
I go to wherever msn is green, and download complete .ai I take the cable from the pc and the cell phone starts giving error. This way ( start md5 checksun)
To do this tutorial even with bootloader blocked?
Yes works for locked bootloaders too.
Thanks got the post and very good ….. thank kkkk was desperate … wanted to know how do I receive updates over the air?