OnePlus One / Two / 3 / 3T / 5 Mega UNBRICK Guide + TWRP Flashing

Update : OnePlus 5

Updated : Including OnePlus 3T


OnePlus  Series Mega UNBRICK Guide + TWRP Flashing

Let’s rescue/unbrick our OnePlus One, 2 and 3 series, including OnePlus X, from any brick you may think of. Not very long, about 1.5 years ago, everyone was afraid of Qualcomm HS-USB Qdloader 9008 brick situations like death, because many didnt knew what that was, as a port. This is Qualcomm’s so called “service” port that we use to fix our phones with a proper ROM. This port can be manualy opened, or if you do something wrong like deleting your phone’s boot partitions accidently, sbl1.mbn for example, that port opens itself and waits you to flash with right Qualcomm flasher software, in the right way, with the right kind of ROM.

As someone who has been working on these “brick” cases since the past 2 years, I sometimes willingly brick a phone to death first, then unbrick it again, this takes less time in many brands, like today’s example, OnePlus series.

OnePlus is a “developer” phone in the first place. What does that mean ? This means your bootloader can be unlocked with a simple fastboot command and you are ready to “develop” ROMs or apps. This means OnePlus won’t be out of warrantee if you “root” it, as rooting and unlocking the bootloader freely are a part of being a developer phone. Thanks to OPPO, yes you read right– OnePlus One was an identical twin of the Oppo Find 7 series from inside, we are able to find “unbrick” roms of these developers phones since a while. Oppo Find 5 was the first model as an example of this story. Actually I am the first one in the world who has unbricked OnePlus One from a death brick ( i like to call this a coma brick ), from Qualcomm HS-USB Diagnostics 9006. My two articles “Snapdragon’s are UNBRICKABLE”  has been read by 450,000 readers around the world in a year. It’s time to share my experiences with our readers at androidbrick.com.

Rescue Files :

OnePlus 3T

OnePlus 3

OnePlus 2

OnePlus X

OnePlus One

Qualcomm Driver :

Qualcomm QdLoader driver


Before we start, we need to put our Windows operating system into “Test Mode”, so we dont have to deal with any driver install issues in between our work.

To do this just :

Press Start->Search->cmd then right-click on it and click Run as administrator. In the CMD window type or copy this “Bcdedit.exe -set TESTSIGNING ON” and press enter.

Restart PC.

After your work with unbricking is done, if you want to get out of this test mode, detailed instructions are here : Windows Test Mode .

This is pure unbricking method with its own flasher inside the rescue folders so we dont need any adb or fastboot command to get in EDL (Qualcomm HS-USB Qdloader 9008) mode like we did in our Xiaomi guide before. We will use a simple key combination like I described in our Lenovo/ZUK guide. Special thanks to OnePlus for not hiding it from us, like Xiaomi did.

OnePlus’s own flashers : MsmDownloadTool V3.0 is for OnePlus 3, MSM8994DownloadTool is for OnePlus 2, MsmDownloadTool V2.0 is for OnePlus X and Msm8974DownloadTool is for the OnePlus One. These tools will be in every rescue package that you will download from links above. I will be working on OnePlus One today. This model has Color OS 2.0 as rescue ROM, so after you flashed this rom your OPO will boot with Color OS (Chinese-English version), BUT whats important for us is to get back our “fastboot mode” back, its a developer phone remember?

After we have fastboot mode back we will be able to flash TWRP recovery to our phones and flash any rom that we want, including stock ROMs. Rescue packages for other models than the OnePlus One contain only rescue partitions in it, so no “system.img” and “userdata.img’s”. They  will give you stock recovery and bootloader (fastboot). There are also complete  rescue ROM files but because they are big packages, hard to upload them all to our servers, i will give those “androidfilehost” links under the article too. But if you are a “custom rom” guy like me, you wont need those stock ROMs, flashing TWRP will be more then enough to go to second step after rescue (flashing a custom ROM).


Let’s put our OnePlus’s into the Qualcomm HS-USB Qdloader 9008 /EDL mode. To do this, we will use the default key combination of Qualcomm for this : Phone is completely off> Press Volume “+” button> Plus the USB cable in (without pressing power button), thats all. Before that I presume that you have installed “Qualcomm QdLoader driver” on your system, if yes, your new device will be like in the picture, if not, please do it in this step and get ready for the next step.



Our flasher will be “Msm8974DownloadTool.exe”, but I pictured here all the ROM folders, because I want you see some other files too and understand what we are doing here. “rawprogram0.xml”, “patch0.xml”, “prog_emmc_firehose_8974.mbn” and “MPRG8974.mbn”, these files are Qualcomm’s engineer files and cant be found in any rom than these kind of “service” roms. All the xml files can be regenerated but those mbn files not. They include vendor (maker) related model specific sign codes in it and cant be used on cross models. What I’m trying to explain here is — You have seen those files in your Xiaomi’s fastboot roms too, like in your Lenovo and ZUK’s Qfil ROMs, but like I said, you cant use Xiaomi Mi4’s “MPRG8974.mbn” to rescue an OnePlus One for example. They share same chipsets, Snapdragon 801’s but because of the different “signs” in them they just wont work, so dont loose time on this field. I know some users are..




Right click “Msm8974DownloadTool.exe” and run it as “administrator”, this flasher is in Chinese but does not matter we will only use 2 buttons on it. “Enum” to identfy our EDL ports and then “Start” to start the flashing. Here my port is on Com 28, dont get confused Windows’s com port number and this tool’s numbers — same port, different numbers.

Msm8974 Download Tool_enum_logo

After you click on Start,  “8974_msimage.mbn” will be send to your phone and you will hear an usb unplug and plug sound from your cumputers. If this is your first time you will see this :



An error on the Msm8974DownloadTool with red color (it says cant find the necessary port) and a new device under your device manager as “QHUSB_BULK”. Windows will automaticaly install drivers, just wait for a minute till you see your new port “Qualcomm HS-USB Diagnostics 9006”. This port will be used to flash the rest of the files, its so called “EMMC” mode of the Qualcomm device.




Lets close Msm8974DownloadTool first. Then press “power button” of the phone long enough while your are pressing Volume “+” button same time — this will reset Qualcomm 9006 port to 9008 again. Then, run Msm8974DownloadTool as administrator  and click “Start” again. Because our 9006 driver is now installed and you will see this :



The tool will start to send rescue files to our bricked OnePlus’s. In this example, the whole Color OS 2.0 files including systemimg and userdata.img’s.





After it finishes youll see our port line will become green saying its done.


Our last step will be to press our phone’s power button long enough till it vibrates and wakes up back to life again. Remember, just put your phones in “fastboot” mode pressing Volume “+” button while powering on. Then download our “OnePLus Latest TWRP Recovery Package for all Models”.

Copy your OnePlus model’s TWRP.img to your “fastboot.exe” working folder and type:

“fastboot flash recovery twrp-3.0.2-0-oneplus1.img” for OnePlus One

“fastboot flash recovery twrp-3.0.2-2-oneplus2.img” for OnePlus 2

“fastboot flash recovery twrp-3.0.2-0-oneplus3.img” for OnePlus 3 and

“fastboot flash recovery twrp-3.0.2-0-oneplusX.img” for OnePlus X of yours.

To boot into TWRP right away type :

“fastboot boot twrp-3.0.2-0-oneplus1.img” for OnePlus One

“fastboot boot twrp-3.0.2-2-oneplus2.img” for OnePlus 2

“fastboot boot twrp-3.0.2-0-oneplus3.img” for OnePlus 3 and

“fastboot boot twrp-3.0.2-0-oneplusX.img” for OnePlus X

Your OnePlus will boot to TWRP recovery, just copy your desired stock or custom ROM from your PC to your phone and flash it. That’s all folks 🙂

Here are links of complete rescue Roms like I promised :

OnePlus X Complete Rom Rescue Package

OnePlus 2 OxygenOS 2.1.1 Rescue Package 

OnePlus 3 Complete Rom Rescue Package


UPDATE : OnePlus 5 files


Copyright © 2016 by androidbrick.com. All rights reserved.



0 0 votes
Article Rating
Notify of

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Oldest Most Voted
Inline Feedbacks
View all comments
Aaron Johnston
2 years ago

I was using my messenger app and all of a sudden the phone crashed and won’t boot up again. I have tried Volume down and power but phone keeps crashing when encrypting screen comes up. Volume up and power brings to fastboot but phone doesn’t boot up no matter what I select in there. It also says at the bottom of fastboot screen DEVICE STATE – locked. What has happened here? And will this guide work for me with this issue?

5 years ago

Hi, I have a hardbricked oneplus 3. Followed every step of this guide, but I get stuck on step 3. When I press Start it does some stuff, gets stuck on “FireHose GetUfsInfo” for a few seconds, then it becomes red, the port disconnects, and it shows “Firehose GetUfsInfo failed”. Then it does nothing, I don’t get the 9006 new device, even if i unplug and plug it back in. How can I fix this?

ahmed shadan
5 years ago

Followed the steps everything went great then i booted the phone its shows a red OP logo and its stuck on boot loop again and i’m having trouble flashing the recovery file when i type the fastboot flash twrp command it shows error: neither -p product specified nor ANDROID_PRODUCT_OUT set

Maaz Shaikh
5 years ago

My oneplus 3t is tottaly dead, i cant able to boot in recovery and fastboot even not led light when plug into charger. my pc detect OP3T as “qualcomm 9008” I follow your all step with OnePlus3T_Unbrick_AndroidBrick “MsmDownloadTool V3.0.exe” but i got error “CheckHwId Failed Phone:MSM8996, Image:MSM8996Pro” PLease Help Me..!

Ali Hashmi
6 years ago

Thank you for your post. I have successfully completed above 4 steps for Oneplus3.

In step 5.. when I give command “fastboot flash recovery twrp-3.0.2-0-oneplus3.img”, it shows following error:

PS C:\adb> fastboot flash recovery twrp-3.0.2-0-oneplus3.img
target reported max download size of 536870912 bytes
sending ‘recovery’ (18680 KB)…
OKAY [ 0.422s]
writing ‘recovery’…
FAILED (remote: Partition flashing is not allowed)
finished. total time: 0.444s

Please help.

Hari Singh
6 years ago

hello sir,
my oneplus one got bricked and when i connected it to laptop it asked me to format the disk and accidently i’ve formatted one of the three disk populated out there which i guess was system partition of my device.
how to recover this sir?

Efstratios Ledakis
6 years ago

When i run MSMDownloadTool for Oneplus X it sees my device and downloads parts,
At the step which I listen the sound of disconnect-connect my device the phone reboots and stuck at oneplus sign. Stock recovery is available but I can do nothing. At MSMDownloadTool I press verify and I see the followings and under those writes FAILED in red.
8974_msimage.mbn: OK
dynamic_nvbk.bin: OK
emmc_appsboot.mbn: OK
gpt_backup0.bin: OK
gpt_main0.bin: OK
rawprogram0.xml: FAILED
MPRG8974.mbn: OK
rpm.mbn: OK
sbl1.mbn: OK
sdi.mbn: OK
static_nvbk.bin: OK
tz.mbn: OK
persist.img: OK
recovery.img: OK
Any ideas SOS

Efstratios Ledakis
Reply to  Ustabas Osman
6 years ago

I have. The phone is recognised but cannot give any commands.
When I press power button + volume down I can go into a new recovery, which I couldnt before(1st time to see this) where I have some option but I cannot instal anything.

Efstratios Ledakis
Reply to  Efstratios Ledakis
6 years ago

It says “loading rom.zip” and instantlly “cannot read rom.zip”

Efstratios Ledakis
Reply to  Ustabas Osman
6 years ago

Fixed it!!!
I coppied the rom.zip file on my sd card and I installed it from the recovery shown in the pictures. Everything works as new.
SD card was the only thing that could be read by the new recovery.
Thank you for your time.

Efstratios Ledakis
Reply to  Ustabas Osman
6 years ago

Here is what I can see. https://drive.google.com/open?id=0B5RAG9PnZWmzYk5pZ2dXOVlNVjQ
and when I press English this : https://drive.google.com/open?id=0B5RAG9PnZWmzS0lGaUd5a1FGY1k

Local install do nothing.
USB Install finds no USB
I did wipe data and cache
At Advance there is not something that seems useful.
Do you want more photos to understand?

Efstratios Ledakis
Reply to  Ustabas Osman
6 years ago

I have installed at my PC the adb drivers and what it needs but I cannot give any commands. can you plz tell me what commands and from where to give. I might do smthing wrong.

Lukesh Nimkar
6 years ago

Hey bro, after my MsmDownloadtool show “Download complete” my phone automatically boots to fastboot mode and when I go to CMD (where my fastboot.exe exist) and give commans “fastboot flash recovery twrp-3.0.2-0-oneplus3” it says “FAILED (remote: Partition flashing is not allowed” What should I do now? (PS. I never saw QHSUSB_BULK or any Qualcomm HS-USB Diagnostics 9006. I just saw Qualcomm HS-USB Qdloader 9008 in entire process”. Thanx. Please help me out.

Lukesh Nimkar
Reply to  Ustabas Osman
6 years ago

It say “FAILED (remote: oem unlock is not allowed)” PS: I actually dropped my onepluse 3T in water then kept it in rice and then turned in on. From then till now it only boots in fastboot mode and I can not access recovery or anything. Bro what do you think the problem is?

Lukesh Nimkar
Reply to  Ustabas Osman
6 years ago

Oneplus.net roms asks to go recovery mode. Which I am not able to. Is my phone is unbrickable now?

Lukesh Nimkar
Reply to  Ustabas Osman
6 years ago

You don’t get it. Do you?

I have used your MSMDownload Tool, this (http://www.technobuzz.net/unbrick-oneplus-3/) tool and https://forums.oneplus.net/threads/unbrick-guide-oneplus-3t.481214/ this MSMDownloadTool, they all showed “Download Complete”. And then my boots to fastboot mode with following message:

START (Green)
Restart bootloader (Red)(Vol Down)
Recovery mode (Red) (Vol Down)
Power off (White) (Vol Down)

Press volume key to select, and press power key to select.

PRODUCT_NAME – msm8996
SERIAL NUMBER – 9fbc1152
SECURE BOOT – enabled
I can not go to recovery mode which is asked in one plus download support (http://downloads.oneplus.net/oneplus-3t/oneplus_3t_oxygenos_4.1.6/)

In fastboot mode if I give any command from Command Prompt it says Not Allowed.

Lukesh Nimkar
Reply to  Ustabas Osman
6 years ago

Oh Okay. Thanks for your reply and wonderful job you did on OnePlus 3T that helped many many other users.

Lukesh Nimkar
Reply to  Ustabas Osman
6 years ago
Lukesh Nimkar
Reply to  Ustabas Osman
6 years ago

It says FAILED (remote: oem unlock is not allowed)

Roy Klik
6 years ago

When i run msmdownloadtool it sees my device and downloads parts but it fails at
rawprogram0.xml: FAILED… the phone will reboot and now stock bootloader is available but everything is still locked.. (bootloader, recovery not available.. and usb debugging is off..). do you have any tips ?

Roy Klik
Reply to  Ustabas Osman
6 years ago

Oneplus X, brought in 2015.

Roy Klik
Reply to  Ustabas Osman
6 years ago

yeah i run the program in administrator mode.. and i click start, everything goes fine until it shutdown mid way.. (my phone reboots but it isnt finished.. When i try it again it starts over and shutdown at the same moment.. currently bricked. (cant flash on fastboot, bootloader locked, adb debugging off..) i cant enable bootloader either.

6 years ago

merhaba, one plus 3 t ye nasıl imei tamiri yapabilirim?

Jonathan Dieter
7 years ago

Just wanted to say a huge thanks! I stupidly did fastboot oem lock when a custom ROM was installed, and my OnePlus 3T was stuck in a bootloop. This guide saved me.

I did keep getting the same “Sahara Communication Failed£¬Please…” failures that others have mentioned, so I tried using the MiFlash utility. When it complained that something else was using the COM port, I checked and MsmDownloadTool was busily installing system.img in the background.

The install succeeded and I’m now in the process of getting my phone working again.

Gregory Parker
7 years ago

Hi, I’m having trouble with Msm8974DownloadTool.exe – my OnePlus one is hardbricked. I was able to sort the drivers so that it appears as Qualcomm HS-USB Qdloader 9008. Upon running Msm8974DownloadTool.exe, it stops and the word “Sahara” appears in the garbled Chinese text. Are you able to help?

Gregory Parker
Reply to  Ustabas Osman
7 years ago

I’ve done all that to no avail. I moved onto using MiFlash (specifically the 2012.11.06 version) and followed the steps as detailed here – http://www.androidbrick.com/ultimate-qualcomm-snapdragon-unbrick-guide-snapdragons-are-unbrickable-qhsusb_dload_qpst_qfil_edl/

It started flashing earlier and then said I needed to go into test mode, so I rebooted, went into Test Mode and ran MiFlash as admin. After this I get the error “An attempt was made to load a program with incorrect format(0x8007000b: Load Programmer {PATH TO MPRG8974.mbn})”

I wonder if this is because the Advanced menu defaulted to asking for .hex files?

Any more ideas?

Haim Peretz
Reply to  Gregory Parker
4 years ago

I have the same issue with the OnePlus 5t.. 🙁
I always get the “Sahara” error is it can be unbricked?
Try with msmDownloadTool v4 and was able to sort the drivers so that it appears as Qualcomm HS-USB Qdloader 9008.

Haim Peretz
Reply to  Ustabas Osman
4 years ago

Thanks, I still get the “Sahara” error 🙁

Michael Jamestong
7 years ago

i cannot access the fastboot on the ColorOS as everytime i try it always went to the recovery mode

John John Santos
7 years ago

8974_msimage.mbn: FAILED cannot be done pls help

John John Santos
7 years ago

8974_msimage.mbn: FAILED cannot continue pls help

John John Santos
7 years ago

Currently, this hardware device is not connected to the computer. (Code 45)

To fix this problem, reconnect this hardware device to the computer. find7

John John Santos
7 years ago

i coonot done my download port line is red not green and the dowload restart and restart again but its done pls help thanks

Steven Wieser
7 years ago

Ran the unbricker for the 3t, and now it’s green. now what?

Felipe Ana Marcia
7 years ago

Sorry for the typing. I’m using google translator ….. I can finish the (msn getting green) then I turn on the phone (start md5 checksum)

Felipe Ana Marcia
7 years ago

I go to wherever msn is green, and download complete .ai I take the cable from the pc and the cell phone starts giving error. This way ( start md5 checksun)

Would love your thoughts, please comment.x