Lenovo FRP remove MT6735 - GSM-Forum

ChElEuLaVi · 07-13-2017, 21:11

Code:

Card found : S/N :xxxxxxxx , v0135
Chinese Miracle II  [MTK module] v 1.58

Operation : Format FileSystem [ v1.58 ]

1. Power Off Phone , Remove battery , Insert back
2. Insert USB cable. In some cases require hold BootKey

Wait for phone...
Phone found! [ 23 ]
Sync...
Inital Boot Ok!
BB_CPU_PID : 6735
BB_CPU_NME : [MediaTek] MT6735_S00
BB_CPU_EXT : 0xCA00 , 0x8A00 , 0x0000
Processing BROM stage
Settings for BROM configured!
SecCfgVal : 0x07000000
BromVer   : 0x00FF
BLVersion : 0x0001
PreLoader : Active [ Boot with PL ]
BootLdrSS : LOCKED with SLA
Processing DA stage
DA Select done, will use MTK_AllInOne_DA_v5.1624.16.07
Sending and initialize DA ...

[DA_ERROR] : SECURITYBOOT_BOOT_NOT_ACCEPTED
Boot Error!

Operation Failed
Elapsed: 00:00:12
Reconnect Power/Cable!

how to use "DA Select done, will use MTK_AllInOne_DA_v5.1624.16.07" I can't find it

**Brka** · 07-14-2017, 02:04

And what model exactly is that ? (The one you are trying to remove FRP) ?

b.r.
Alex

alirozikin1981 · 07-14-2017, 02:22

becarefull to act if phone have boot secure brader

**Brka** · 07-14-2017, 02:24

Quote:

Originally Posted by alirozikin1981

becarefull to act if phone have boot secure brader

Nothing to be afraid of. I will post 100% working solution,
just waiting for exact phone/device model.

b.r.
Alex

ChElEuLaVi · 07-14-2017, 17:46

Quote:

Originally Posted by Brka

And what model exactly is that ? (The one you are trying to remove FRP) ?

b.r.
Alex

https://ibb.co/fTkPxv

Please check

PASSIONATE_BOYS · 07-15-2017, 08:33

Hello,
You can try other way :
download SpFlashTool v5.1624
take from it DA_SWSEC.bin
rename it to MTK_AllInOne_DA_SP.bin and put in boot folder, but save first original one somewhere.

Repeat operation.

Br.
Infinity Box Team.

ChElEuLaVi · 07-17-2017, 18:34

Quote:

Originally Posted by PASSIONATE_BOYS

Hello,
You can try other way :
download SpFlashTool v5.1624
take from it DA_SWSEC.bin
rename it to MTK_AllInOne_DA_SP.bin and put in boot folder, but save first original one somewhere.

Repeat operation.

Br.
Infinity Box Team.

I have the same result

Code:

Card found : S/N : 8BE23346 , v0135
Chinese Miracle II  [MTK module] v 1.58

Operation : Format FileSystem [ v1.58 ]

1. Power Off Phone , Remove battery , Insert back
2. Insert USB cable. In some cases require hold BootKey

Wait for phone...
Phone found! [ 23 ]
Sync...
Inital Boot Ok!
BB_CPU_PID : 6735
BB_CPU_NME : [MediaTek] MT6735_S00
BB_CPU_EXT : 0xCA00 , 0x8A00 , 0x0000
Processing BROM stage
Settings for BROM configured!
SecCfgVal : 0x07000000
BromVer   : 0x00FF
BLVersion : 0x0001
PreLoader : Active [ Boot with PL ]
BootLdrSS : LOCKED with SLA
Processing DA stage
DA Select done, will use MTK_AllInOne_DA_v3.3001.2016-06-15.11:02
Sending and initialize DA ...

[DA_ERROR] : SECURITYBOOT_BOOT_NOT_ACCEPTED
Boot Error!

Operation Failed
Elapsed: 00:00:20
Reconnect Power/Cable!

محمود الانصارى · 07-17-2017, 18:37

what model in lenovo??????

**Brka** · 07-18-2017, 00:00

Quote:

Originally Posted by PASSIONATE_BOYS

Hello,
You can try other way :
download SpFlashTool v5.1624
take from it DA_SWSEC.bin
rename it to MTK_AllInOne_DA_SP.bin and put in boot folder, but save first original one somewhere.

Repeat operation.

Br.
Infinity Box Team.

Code:

BootLdrSS : LOCKED with SLA

Phones with SLA cant be booted without AUTH file, besides normal/crypto DA agent.

Quote:

Originally Posted by ChElEuLaVi

https://ibb.co/fTkPxv
Please check

Lenovo TB3-730F, Lenovo Tab3 A7-30 , Mediatek MT8161

FRP REMOVE :

- Download : Lenovo_TB3-730F_S044_161111_ROW_FRP_Remove_by_bRkA
- Unpack archive, Start SPFT from folder \SP_Flash_Tool_v5.1552.00_SecureBoot
- Press CTRL + ALT + V in SPFT, (Advanced mode) will appear in window title
- Select "Download Agent" - DA_SWSEC_CRYPTO20.bin
- Select "Scatter Loading File" - MT6735M_Android_scatter_TB3-730F.txt
- Select "Auth File" - auth_sv5.auth
- Go to drop-down menu "Options" - "Option", "Download" - select "Usb Checksum" and "Storage checksum"
- Go to tab "FORMAT", select "Manual format flash", input :
Begin address : 0x6a00000 , Format Length : 0x100000
- Tick "Validation"
- Press "Start" (Blue PLAY button), and connect powered off device to cable
- It should finish quickly
- Disconnect device from cable and power it up.
- FRP Should be gone.

* In case that you get boot-loop, OR on display written "DL Image Failed",
Simply re-flash device with provided rom file below.

ROM File : TB3-730F_S044_161111_ROW
archive pass : lenovo-forums.ru

test and post results.

p.s. PAY ATTENTION on MANUAL FORMAT, don't do AUTO FORMAT, you will kill device !!!
p.s.2 To be 100% Sure in success, before FRP remove, reflash phone with provided ROM version.
p.s.3 CHARGE battery fully before playing with device.
p.s.4 For Flashing process, same files must be selected in SPFT - same as for FRP (DA Agent, AUTH, Scatter, USB/Storage Checksum).

b.r.
Alex

shailccna · 07-18-2017, 06:41

Superb work brka sir . U r the best in lenovo .

ChElEuLaVi · 07-18-2017, 13:28

Quote:

Originally Posted by Brka

Code:

BootLdrSS : LOCKED with SLA

Phones with SLA cant be booted without AUTH file, besides normal/crypto DA agent.

Lenovo TB3-730F, Lenovo Tab3 A7-30 , Mediatek MT8161

FRP REMOVE :

- Download : Lenovo_TB3-730F_S044_161111_ROW_FRP_Remove_by_bRkA
- Unpack archive, Start SPFT from folder \SP_Flash_Tool_v5.1552.00_SecureBoot
- Press CTRL + ALT + V in SPFT, (Advanced mode) will appear in window title
- Select "Download Agent" - DA_SWSEC_CRYPTO20.bin
- Select "Scatter Loading File" - MT6735M_Android_scatter_TB3-730F.txt
- Select "Auth File" - auth_sv5.auth
- Go to drop-down menu "Options" - "Option", "Download" - select "Usb Checksum" and "Storage checksum"
- Go to tab "FORMAT", select "Manual format flash", input :
Begin address : 0x6a00000 , Format Length : 0x100000
- Tick "Validation"
- Press "Start" (Blue PLAY button), and connect powered off device to cable
- It should finish quickly
- Disconnect device from cable and power it up.
- FRP Should be gone.

* In case that you get boot-loop, OR on display written "DL Image Failed",
Simply re-flash device with provided rom file below.

ROM File : TB3-730F_S044_161111_ROW
archive pass : lenovo-forums.ru

test and post results.

p.s. PAY ATTENTION on MANUAL FORMAT, don't do AUTO FORMAT, you will kill device !!!
p.s.2 To be 100% Sure in success, before FRP remove, reflash phone with provided ROM version.
p.s.3 CHARGE battery fully before playing with device.
p.s.4 For Flashing process, same files must be selected in SPFT - same as for FRP (DA Agent, AUTH, Scatter, USB/Storage Checksum).

b.r.
Alex

DL image fail

the ROM link that you give me is not working

thanks

PASSIONATE_BOYS · 07-18-2017, 15:50

Quote:

Originally Posted by Brka

Code:

BootLdrSS : LOCKED with SLA

Phones with SLA cant be booted without AUTH file, besides normal/crypto DA agent.

b.r.
Alex

Hello,
Correct, I really missed that-
Code:

BootLdrSS : LOCKED with SLA

Br.
Infinity Box Team.

**Brka** · 07-18-2017, 16:21

Quote:

Originally Posted by ChElEuLaVi

DL image fail

the ROM link that you give me is not working

thanks

Your isp is probably blocking that site, try with google chrome and Hola VPN, free vpn extrnsion for chrome.

B.r.
Alex

ChElEuLaVi · 07-19-2017, 20:31

Quote:

Originally Posted by Brka

Your isp is probably blocking that site, try with google chrome and Hola VPN, free vpn extrnsion for chrome.

B.r.
Alex

can upload to mega.nz please

**Brka** · 07-19-2017, 20:45

Quote:

Originally Posted by ChElEuLaVi

can upload to mega.nz please

Solution already given, but try THIS also

b.r.
ALex

07-14-2017, 02:04	#2 (permalink)
Brka Moderator Join Date: Jun 1999 Location: Serbia Age: 48 Posts: 8,206 Member: 163 Status: Offline Thanks Meter: 7,785	And what model exactly is that ? (The one you are trying to remove FRP) ? b.r. Alex __________________ Always press THANKS button if my post was helpful! Please DO NOT send me PM's for help, You can ask for help on forum Do not post THANKS posts - use thanks button ! ALWAYS use SEARCH button before posting!

07-14-2017, 02:22	#3 (permalink)
alirozikin1981 Freak Poster Join Date: Jul 2016 Location: JOMBANG, JATIM Posts: 244 Member: 2600625 Status: Offline Sonork: aly_alumni_ptc Thanks Meter: 58	becarefull to act if phone have boot secure brader

07-15-2017, 08:33	#6 (permalink)
PASSIONATE_BOYS No Life Poster Join Date: Jul 2007 Location: Infinity-Box Support- Posts: 9,321 Member: 541591 Status: Offline Sonork: 100.1611509 Thanks Meter: 7,361	Hello, You can try other way : download SpFlashTool v5.1624 take from it DA_SWSEC.bin rename it to MTK_AllInOne_DA_SP.bin and put in boot folder, but save first original one somewhere. Repeat operation. Br. Infinity Box Team.

07-17-2017, 18:37	#8 (permalink)
محمود الانصارى Freak Poster Join Date: Apr 2007 Posts: 284 Member: 497508 Status: Offline Thanks Meter: 23	what model in lenovo??????

07-18-2017, 06:41	#10 (permalink)
shailccna No Life Poster Join Date: Sep 2006 Location: some where in india Posts: 1,306 Member: 350232 Status: Offline Thanks Meter: 207	Superb work brka sir . U r the best in lenovo .