Online
1.abrir modulo mtk
2. ir a pestaña factory reset -format user
3- selecionar 0by cpu - elbrus
4- marcar casilla emmc
5. marcar casilla bypass security flash mode
6. darle en format user
7. conectar vias test point y dejar que termine el proceso
8. cobrar bien que aveces cuesta mucho encontrar una solucion
el dispositivo se reiniciara 2 o 3 veces despues de el proceso ,solo dejen que siga no lo intenten apagar o forzar inicio
una vez encendido mandara a formatear y listo el dispositivo estara sin payjoy y ya no vuelve aunque se conecte a wifi
Action : Format UserData.
Selected 0-By CPU:ELBRUS
Exe version: Avengers Box MTK 0.7.9
Phone must be off with battery inside.
Battery must be charged
Please connect phone in brom mode
For some phones need to keep "VOL-" button untill inserting USB cable.
For some phones need to keep "VOL+ and VOL-" button untill inserting USB cable.
For some phones need to keep "VOL+" button untill inserting USB cable.
Detected(3) : MediaTek USB Port (COM3)
[3] \\?\usb#vid_0e8d&pid_0003#5&2e974963&0&4#{a5dcbf10-6530-11d2-901f-00c04fb951ed}
CPU: MT6765 CPU code: 766 Target config: e5
***********************
Secure boot enabled: true
Need serial link authorization: false
Need download agent authorization: true
SWJTAG enabled: true
EPP_PARAM at 0x600 after EMMC_BOOT/SDMMC_BOOT: false
Root cert required: false
Memory read authorization: true
Memory write authorization: true
Cmd 0xC8 blocked: true
***********************
Executing exploit, do not disconnect phone
Exploit has been executed successfully.
[3ec00]Dumping phone preloader.
Preloader: C:\ProgramData\Android_MTK_Backup_Folder\preloader_backup\preloader_k62v1_64_mex_a32.bin
Waiting for handle to become active......
Reseived active handle repply from phone......
Booting phone
Detected(3) : MediaTek USB Port (COM3)
[3] \\?\usb#vid_0e8d&pid_0003#5&2e974963&0&4#{a5dcbf10-6530-11d2-901f-00c04fb951ed}
Boot mode: Brom
Phone detected...Please wait
BBCHIP: 6765 0 ca00
Using Algo 1.
Helio MT6765 phone detected, swithing to helio api
Helio enabled DRAM in First Da: FALSE
Sending loader.....
BBCHIP MT6765
[1]Storage EMMC
Block size: 512
EMMC FW VERSION: 00:00:00:00:00:00:00:00
EMMC CID: 90014A68433861 : 000000000000000000
EMMC UA SIZE: 0xe8f800000
BOOT STYLE: EMMC BOOT
FULL LENGTH: 0xe91000000 [58.266 GB]
Status: USB_HIGH_SPEED
Detecting high speed port, wait......
If driver not installed, install high speed port driver.
If not need high speed port, disable it.
After repeat opperation.
Detected(22) : MediaTek DA USB VCOM (Android) (COM22)
[22] \\?\usb#vid_0e8d&pid_2001#5&2e974963&0&4#{a5dcbf10-6530-11d2-901f-00c04fb951ed}
Detecting format adress....wait!
Starting generic userdata format...!
Partition: cache begin: 0xb800000 length: 0x6800000
Partition: userdata begin: 0x158800000 length: 0xd36e00000
Phone can start slow at first power on
If phone stuck on logo, perform wipe from recovery.
First start can take up to 5 min on some phones.
[helio]Wait untill phone will start charging.
[0]All done.
2. ir a pestaña factory reset -format user
3- selecionar 0by cpu - elbrus
4- marcar casilla emmc
5. marcar casilla bypass security flash mode
6. darle en format user
7. conectar vias test point y dejar que termine el proceso
8. cobrar bien que aveces cuesta mucho encontrar una solucion
el dispositivo se reiniciara 2 o 3 veces despues de el proceso ,solo dejen que siga no lo intenten apagar o forzar inicio
una vez encendido mandara a formatear y listo el dispositivo estara sin payjoy y ya no vuelve aunque se conecte a wifi
Action : Format UserData.
Selected 0-By CPU:ELBRUS
Exe version: Avengers Box MTK 0.7.9
Phone must be off with battery inside.
Battery must be charged
Please connect phone in brom mode
For some phones need to keep "VOL-" button untill inserting USB cable.
For some phones need to keep "VOL+ and VOL-" button untill inserting USB cable.
For some phones need to keep "VOL+" button untill inserting USB cable.
Detected(3) : MediaTek USB Port (COM3)
[3] \\?\usb#vid_0e8d&pid_0003#5&2e974963&0&4#{a5dcbf10-6530-11d2-901f-00c04fb951ed}
CPU: MT6765 CPU code: 766 Target config: e5
***********************
Secure boot enabled: true
Need serial link authorization: false
Need download agent authorization: true
SWJTAG enabled: true
EPP_PARAM at 0x600 after EMMC_BOOT/SDMMC_BOOT: false
Root cert required: false
Memory read authorization: true
Memory write authorization: true
Cmd 0xC8 blocked: true
***********************
Executing exploit, do not disconnect phone
Exploit has been executed successfully.
[3ec00]Dumping phone preloader.
Preloader: C:\ProgramData\Android_MTK_Backup_Folder\preloader_backup\preloader_k62v1_64_mex_a32.bin
Waiting for handle to become active......
Reseived active handle repply from phone......
Booting phone
Detected(3) : MediaTek USB Port (COM3)
[3] \\?\usb#vid_0e8d&pid_0003#5&2e974963&0&4#{a5dcbf10-6530-11d2-901f-00c04fb951ed}
Boot mode: Brom
Phone detected...Please wait
BBCHIP: 6765 0 ca00
Using Algo 1.
Helio MT6765 phone detected, swithing to helio api
Helio enabled DRAM in First Da: FALSE
Sending loader.....
BBCHIP MT6765
[1]Storage EMMC
Block size: 512
EMMC FW VERSION: 00:00:00:00:00:00:00:00
EMMC CID: 90014A68433861 : 000000000000000000
EMMC UA SIZE: 0xe8f800000
BOOT STYLE: EMMC BOOT
FULL LENGTH: 0xe91000000 [58.266 GB]
Status: USB_HIGH_SPEED
Detecting high speed port, wait......
If driver not installed, install high speed port driver.
If not need high speed port, disable it.
After repeat opperation.
Detected(22) : MediaTek DA USB VCOM (Android) (COM22)
[22] \\?\usb#vid_0e8d&pid_2001#5&2e974963&0&4#{a5dcbf10-6530-11d2-901f-00c04fb951ed}
Detecting format adress....wait!
Starting generic userdata format...!
Partition: cache begin: 0xb800000 length: 0x6800000
Partition: userdata begin: 0x158800000 length: 0xd36e00000
Phone can start slow at first power on
If phone stuck on logo, perform wipe from recovery.
First start can take up to 5 min on some phones.
[helio]Wait untill phone will start charging.
[0]All done.
