[HOWTO] AQUARIS X2 / X2 PRO - Emergency Package - QFIL / EDL Unbrick

[RawMain]

Only for

• BQ Aquaris X2 (zangya)
• BQ Aquaris X2 PRO (zangyapro)
  
  
• Vsmart Active 1 (PQ6001 - rebranded X2 PRO)

Hello,

Since BQ shut down the JSON request service in October 2020, there have been no valid free alternatives in order to recover bricked devices with locked bootloader... and there certainly won't be any more from BQ (the bankruptcy procedure of Mundo Reader S.L. - BQ started in Spain at the beginning of February).

For this reason I've released a special emergency package + related instructions, that I have put together and tested over the past few weeks.

You may find everything in :

• Web mirror on Yandex

or

• Drivers/Tools + Firmware Repository on Telegram

Spoiler: Screenshots

Stage A - Emergency Package QFIL Flash
. .

Stage A - Emergency Package - First Boot
..

Stage B - IMEI / Baseband NVRAM checks & fix
...

The unbrick process requires:

• 1 compulsory stage ( A = Unbrick Flash )
  
  
• 1 additional stage ( B = IMEI / baseband fix ), which is only required if there are IMEI and/or SIM issues after the unbrick

Note: Please keep in mind that this is NOT a trivial 5 minute process. Anyone who owns a bricked X2 / X2 PRO device must read / follow the instructions carefully and spend around 1-2 hours to fully recover his device.

---------------------


Side Note : Such Emergency Package and related A-B instructions have been assembled & tested to use them ONLY with BQ Aquaris X2 - BQ Aquaris X2 PRO - Vsmart Active 1, that were running vendor-official firmware builds or conventional-unofficial releases (LineageOS, Ubports, etc.).

It is NOT technically compatible with the same HW models, that have been tampered instead to use a so-called "secure" firmware... = if this is your situation, please read the spoiler.

Spoiler: Side Note

Side Note : There are mainly non-technical reasons why, even after Europol dismantled Encrochat network on June 2020, no users with such tampered devices are finding any helpful wipe/flash-instructions in the public domain.

Indeed, the advices for the second/new owners of such (no longer working) devices haven't changed at all.

According to their specific scenarios/behaviours, it's up to them to choose from the following available options :

• Try to return the device to the seller & get the money back
  .
• Contact the Police and provide the device & any information about the seller
  .
• Disassemble the device & resell the parts (all except the motherboard) as second-hand spare parts
  .
• Replace the motherboard with a (new or used) compatible one

 

[randomrepairtech]

wow thanks to you and the people that work on that guide !

is it suppose to work on old encrochat phone? cause i get this error with every firehose file.

 

[RawMain]

Hello @randomrepairtech

wow thanks to you and the people that work on that guide !

You're welcome .

is it suppose to work on old encrochat phone? cause i get this error with every firehose file.

Such Emergency Package and related A-B instructions have been assembled & tested to use them ONLY with BQ Aquaris X2 - BQ Aquaris X2 PRO - Vsmart Active 1, that were running vendor-official firmware builds or conventional-unofficial releases (LineageOS, Ubports, etc.) = NOT technically compatible with the same HW models, that have been tampered instead to run such "secure" firmware.

Spoiler: Side Note

Side Note : keep in mind that there are mainly non-technical reasons why, even now - more than 8 months after the dismantling of the network, no users with such tampered devices are finding any helpful wipe/flash-instructions in the public domain.

Indeed, the advices for the second/new owners of such devices (no longer working) haven't changed at all.

According to their specific scenarios/behaviours, it's up to them to choose from the following available options :

• Try to return the device to the seller & get the money back
  .
• Contact the Police and provide the device & any information about the seller
  .
• Disassemble the device & resell the parts (all except the motherboard) as second-hand spare parts
  .
• Replace the motherboard with a (new or used) compatible one
  

 

[kndfp]

Hello, I really need your help, I think I just bought one of those phones with encrochat, but I would like to be sure, could you tell me if there is any way to know if it is one of those infected phones? first of all, Thanks

Sorry if you don't understand me, but I don't speak English, what you're reading is translated

 

[kndfp]

Hello @randomrepairtech



You're welcome .




Such Emergency Package and related A-B instructions have been assembled & tested to use them ONLY with BQ Aquaris X2 - BQ Aquaris X2 PRO - Vsmart Active 1, that were running vendor-official firmware builds or conventional-unofficial releases (LineageOS, Ubports, etc.) = NOT technically compatible with the same HW models, that have been tampered instead to run such "secure" firmware.

Spoiler: Side Note

Side Note : keep in mind that there are mainly non-technical reasons why, even now - more than 8 months after the dismantling of the network, no users with such tampered devices are finding any helpful wipe/flash-instructions in the public domain.

Indeed, the advices for the second/new owners of such devices (no longer working) haven't changed at all.

According to their specific scenarios/behaviours, it's up to them to choose from the following available options :

• Try to return the device to the seller & get the money back
  .
• Contact the Police and provide the device & any information about the seller
  .
• Disassemble the device & resell the parts (all except the motherboard) as second-hand spare parts
  .
• Replace the motherboard with a (new or used) compatible one

Hello, I really need your help, I think I just bought one of those phones with encrochat, but I would like to be sure, could you tell me if there is any way to know if it is one of those infected phones? first of all, Thanks

Sorry if you don't understand me, but I don't speak English, what you're reading is translated

 

[kndfp]

Only for

• BQ Aquaris X2 (zangya)
• BQ Aquaris X2 PRO (zangyapro)

Hello,

Since BQ shut down the JSON request service in October 2020, there have been no valid free alternatives in order to recover bricked devices with locked bootloader... and there certainly won't be any more from BQ (the bankruptcy procedure of Mundo Reader S.L. - BQ started in Spain at the beginning of February).

For this reason I've released a special emergency package + related instructions, that I have put together and tested over the past few weeks.

You may find everything in :

• Web mirror on Yandex

or

• Drivers/Tools + Firmware Repository on Telegram

Spoiler: Screenshots

Stage A - Emergency Package QFIL Flash
View attachment 5232541 . View attachment 5232543 . View attachment 5232547

Stage A - Emergency Package - First Boot
View attachment 5232549.View attachment 5232551.View attachment 5232553

Stage B - IMEI / Baseband NVRAM checks & fix
View attachment 5232555.View attachment 5232557.View attachment 5232559.View attachment 5232561

The unbrick process requires:

• 1 compulsory stage ( A = Unbrick Flash )
  
  
• 1 additional stage ( B = IMEI / baseband fix ), which is only required if there are IMEI and/or SIM issues after the unbrick

Note: Please keep in mind that this is NOT a trivial 5 minute process. Anyone who owns a bricked X2 / X2 PRO device must read / follow the instructions carefully and spend around 1-2 hours to fully recover his device.

---------

Hello, I really need your help, I think I just bought one of those phones with encrochat, but I would like to be sure, could you tell me if there is any way to know if it is one of those infected phones? first of all, Thanks

Sorry if you don't understand me, but I don't speak English, what you're reading is translated

 

[xap3]

Thanks, good job.

I have a BQ Aquaris X5 Plus (gohan) in the same situation, bricked and locked bootloader.

I have stock ROM (2.7.0_20181002-1711-gohan-user-684-Fastboot-FW.zip) and BQ Firmware Flash Tool 5.0, but I don't have the JSON file to unlock it.

Qualcomm HS-USB QDLoader 9008 port is present, I could follow the instructions in this post, I can get most of the content of "EMERGENCY_PACKAGE" from the stock ROM, I only need the files for QFIL (firehose, RawProgram and Patch). I have searched long without result.

I would appreciate help.

 

[RawMain]

Hello

Thanks, good job.

You're welcome.

I have a BQ Aquaris X5 Plus (gohan) in the same situation, bricked and locked bootloader.
[...]
Qualcomm HS-USB QDLoader 9008 port is present, I could follow the instructions in this post, I can get most of the content of "EMERGENCY_PACKAGE" from the stock ROM, I only need the files for QFIL (firehose, RawProgram and Patch). I have searched long without result.

The partitions you find inside the BQ fastboot firmware packages aren't enough to make full emergency/rescue packages. Several reserved partitions are missing indeed.

You can try to make a partial QFIL/EDL package... but keep in mind that such partial packages can't solve in most cases of BQ bricked devices with locked bootloader.


So, as for any BQ device with Qualcomm SOC, if you need/want to make a full QFIL/EDL package for Aquaris X5 Plus (gohan), you'll need anyway another working X5 Plus, in order to extract :

• A full EDL dump of EMMC storage partitions, that will allow you to get those missing reserved partitions too
  .
• A QCN backup, that can be edited & used to restore/fix baseband + IMEIs of your KO device

Programmer & patch / rawprogram files for X5 Plus aren't so hard to find. Through a Google search - such as for instance this one - you can easily find the related references on Spanish and German forums.


Side note: this thread is only for messages / information exchange about the emergency package for BQ Aquaris X2 - X2 PRO & Vsmart Active 1 too (since such phone is just a rebranded X2 PRO without NFC hardware).

For any further & specific discussion/message about X5 Plus, you'd better post a new thread.

 

[xap3]

The partitions you find inside the BQ fastboot firmware packages aren't enough to make full emergency/rescue packages. Several reserved partitions are missing indeed.

...

Thanks for your answer. I have a lot to learn ...

Side note: this thread is only for messages / information exchange about the emergency package for BQ Aquaris X2 - X2 PRO & Vsmart Active 1 too (since such phone is just a rebranded X2 PRO without NFC hardware).

For any further & specific discussion/message about X5 Plus, you'd better post a new thread.

Sorry for using this thread to request help from another model.

Sincerely, thank you very much.

 

[Bushi1312]

Only for

• BQ Aquaris X2 (zangya)
• BQ Aquaris X2 PRO (zangyapro)
  
  
• Vsmart Active 1 (PQ6001 - rebranded X2 PRO)

Hello,

Since BQ shut down the JSON request service in October 2020, there have been no valid free alternatives in order to recover bricked devices with locked bootloader... and there certainly won't be any more from BQ (the bankruptcy procedure of Mundo Reader S.L. - BQ started in Spain at the beginning of February).

For this reason I've released a special emergency package + related instructions, that I have put together and tested over the past few weeks.

You may find everything in :

• Web mirror on Yandex

or

• Drivers/Tools + Firmware Repository on Telegram

Spoiler: Screenshots

Stage A - Emergency Package QFIL Flash
View attachment 5232541 . View attachment 5232543 . View attachment 5232547

Stage A - Emergency Package - First Boot
View attachment 5232549.View attachment 5232551.View attachment 5232553

Stage B - IMEI / Baseband NVRAM checks & fix
View attachment 5232555.View attachment 5232557.View attachment 5232559.View attachment 5232561

The unbrick process requires:

• 1 compulsory stage ( A = Unbrick Flash )
  
  
• 1 additional stage ( B = IMEI / baseband fix ), which is only required if there are IMEI and/or SIM issues after the unbrick

Note: Please keep in mind that this is NOT a trivial 5 minute process. Anyone who owns a bricked X2 / X2 PRO device must read / follow the instructions carefully and spend around 1-2 hours to fully recover his device.

---------

Hi, i have the Aquaris X2 but i think it is in a worse state than just bricked. The phone looks like this and can take pictures and check the time. Unrecognizable by the pc and QFIL, unable to install drivers, unable to do anything. This are all the apps the phone has. Wonder if it is even possible to fix it.

 

[Pokers Lin]

Hi, i have the Aquaris X2 but i think it is in a worse state than just bricked. The phone looks like this and can take pictures and check the time. Unrecognizable by the pc and QFIL, unable to install drivers, unable to do anything. This are all the apps the phone has. Wonder if it is even possible to fix it.View attachment 5405939

Had you success recovered your phone? I have an Aquaris X2 with the totally same problem.
Tried @RawMain 's solution but failed during load partition process. I knew it's because I have no correct programmer file, but don't know how to solve it.

 

[Pokers Lin]

Only for

• BQ Aquaris X2 (zangya)
• BQ Aquaris X2 PRO (zangyapro)
  
  
• Vsmart Active 1 (PQ6001 - rebranded X2 PRO)

Hello,

Since BQ shut down the JSON request service in October 2020, there have been no valid free alternatives in order to recover bricked devices with locked bootloader... and there certainly won't be any more from BQ (the bankruptcy procedure of Mundo Reader S.L. - BQ started in Spain at the beginning of February).

For this reason I've released a special emergency package + related instructions, that I have put together and tested over the past few weeks.

You may find everything in :

• Web mirror on Yandex

or

• Drivers/Tools + Firmware Repository on Telegram

Spoiler: Screenshots

Stage A - Emergency Package QFIL Flash
View attachment 5232541 . View attachment 5232543 . View attachment 5232547

Stage A - Emergency Package - First Boot
View attachment 5232549.View attachment 5232551.View attachment 5232553

Stage B - IMEI / Baseband NVRAM checks & fix
View attachment 5232555.View attachment 5232557.View attachment 5232559.View attachment 5232561

The unbrick process requires:

• 1 compulsory stage ( A = Unbrick Flash )
  
  
• 1 additional stage ( B = IMEI / baseband fix ), which is only required if there are IMEI and/or SIM issues after the unbrick

Note: Please keep in mind that this is NOT a trivial 5 minute process. Anyone who owns a bricked X2 / X2 PRO device must read / follow the instructions carefully and spend around 1-2 hours to fully recover his device.

---------

Many thanks for your efforts, it's really clear and detail to do the job.

But... I can't unbrick my X2 cause loading partition error. One friend posted his problem as this in another thread (about load partition error,). Though you provided 4 programmer files, where could I download more to try? Or if we can full re-write all firmwares in this phone? Such as remove all partitions and re-build/re-write them?
(I had join the TG group and not found more information...)

 

[RawMain]

Hi, i have the Aquaris X2 but i think it is in a worse state than just bricked. The phone looks like this and can take pictures and check the time. Unrecognizable by the pc and QFIL, unable to install drivers, unable to do anything. This are all the apps the phone has. Wonder if it is even possible to fix it.

Many thanks for your efforts, it's really clear and detail to do the job.

But... I can't unbrick my X2 cause loading partition error. One friend posted his problem as this in another thread (about load partition error,). Though you provided 4 programmer files, where could I download more to try? Or if we can full re-write all firmwares in this phone? Such as remove all partitions and re-build/re-write them?
(I had join the TG group and not found more information...)

Hello @Bushi1312 & @Pokers Lin

The situation of both your tampered devices is just the same as in post 3 of this thread = read the side note and related spoiler.

I have now included such note in the opening post too.

 

[Pokers Lin]

Hello @Bushi1312 & @Pokers Lin

The situation of both your tampered devices is just the same as in post 3 of this thread = read the side note and related spoiler.

I have now included such note in the opening post too.

Thanks for your answer... so, you mean that my X2 had been installed as a "secured firmware" (named "encrochat"?) ? It's a bad news for me. Anyway, thank you very much, at least I can know why it's so hard to be fix now.

 

[Bushi1312]

Hello @Bushi1312 & @Pokers Lin

The situation of both your tampered devices is just the same as in post 3 of this thread = read the side note and related spoiler.

I have now included such note in the opening post too.

So basically it is impossible to fix it, right?

 

[andikas]

So basically it is impossible to fix it, right?

to fix what ?
do install the emergency firmware and unlock the firmware with ''fastboot flashing unlock''
then re install your genuine firmware with the emergency mode.
as simple as that

 

[jORGE_SPAIN]

hello to everyone , i am in encrochat case , and i need a encrochat that was used from may 2020 .
i will buy , please can anyone help me ?
i need to prove that have a malware .
thanks in advance .

 

[caputcha]

I have a BQ X2 with private mode could this solution work on it ?