Installation menu

To enter Installation menu from the remote control, you need: 1. Press and hold MENU button on the remote control until TV's menu dissapears and channel info appears. 2. Quickly release MENU button, enter 1105 and press OK. In the installation menu, you can change the following parameters: LG Hotel mode setup (setting restrictions for hotels) TV Link-Loader (load/save configuration (TLL file) from/to USB drive) Password Change Set ID Setup

Remote control service key combination for entering Installation menu (All models)

Press and hold MENU on the remote control for 5 seconds, then enter 1105 and press OK - Installation menu

Remote control service key combinations for all 2009 and some 2010 year models (Saturn 6 based)
Press MENU on the remote control and select(highlight) Options (don't press OK): Press "FAV" 7 times - firmware upgrade from USB Press "1" 7 times - firmware upgrade from USB (file LG6000) Press "7" 7 times - upgrade u-boot bootloader from USB (file u-boot-spi.epk) Press "9" 7 times - revert to backup firmware (WARNING: If your tv never has been updated the following procedure may brick it!) Enter OPTION, select briefcase icon but make sure you will not enter the menu (nothing must be selected on the right side if yes use left arrow to deselect) Press the FAV or Mark key 7 times - firmware upgrade from USB

Patches to access service menu

To enter EZAdjust or InStart menu via Installation menu, enter following patches in telnet or in LGMOD WebUI->Tools->Execute shell command:

Firmware version 3.67 LH serties

To enter EZAdjust window via Installation menu: devmem 0x7397458 32 0x8F992120 To enter InStart window via Installation menu: devmem 0x7397458 32 0x8F999368

Firmware version 3.28 PK/PJ serties

To enter EZAdjust window via Installation menu: devmem 0x77CB3A0 32 0x8F998938 To enter InStart window via Installation menu: devmem 0x77CB3A0 32 0x8F991354

Firmware version 3.20.19 Broadcom based models

To enter EZAdjust or InStart menu on 3.20.19 firmware (on Broadcom based models) via Installation menu, enter following patches in telnet, ssh or in OpenLGTV BCM WebUI->Shell command to execute: To set Debug Mode to DEBUG in InStart menu via Installation menu: devmem 0x26E9AE4 32 0x24020003 To set Debug Mode to EVENT in InStart menu via Installation menu: devmem 0x26E9AE4 32 0x24020004

To set Debug Mode to RELEASE in InStart menu via Installation menu: devmem 0x26E9AE4 32 0x24020005 To enter EZAdjust window via Installation menu: devmem 0x2912124 32 0x0C214EC9 To enter InStart window via Installation menu: devmem 0x2912124 32 0x0C2141D9 To execute InStop command via Installation menu (resets TV configuration to factory default): devmem 0x2912124 32 0x0C1C206B

Combinations for broadband 2010 years models

Menu - select Options (but don't enter): Press "2" 7 times - show text "Forced update has been set". Dissapear in few seconds. Press "3" 7 times - shows: Upgrade TV software current version : .AN-WL100x`OLD` update version : .AN-WL100x`NEW` File:/mnt/usb1/Drive1/wireless_baseband.alf Press "4" 7 times - shows: Upgrade TV software current version : .AN-WL100x`OLD` update version : .AN-WL100x`NEW` File:/mnt/usb1/Drive1/wireless_rx_stmhost.bin Press "5" 7 times - shows: Upgrade TV software current version : .AN-WL100x`OLD` update version : .AN-WL100x`NEW` File:/mnt/usb1/Drive1/wireless_rx_stmboot.bin Press "6" 7 times - shows: Upgrade TV software current version : .AN-WL100x`OLD` update version : .AN-WL100x`NEW` File:/mnt/usb1/Drive1/wireless_rx_irblaster.bin

Combinations for broadband 2011 years models

Enter OPTION, select briefcase icon but make sure you will not enter the menu (nothing must be selected on the right side if yes use left arrow to deselect) Press the FAV or Mark key 4 times

How to activate USB player via serial

Was tested on 42PQ1000 plasma but should work on any LG LCD/PDP(plasma) TV too:

1. Switch on your TV, go to the option menu and Set ID to 1. 2. Connect PC via COM port or USB2COM (USBtoRS232) adapter into RS232 connector on the TV 3. Run any terminal program on the PC (hyperterminal or putty for example) 4. Set following parameters for COM port: speed 9600, flow control: none. All other leave at the defaults. 5. In terminal enter: "ab 1 ff" and press "Enter". You should get following response "01 ok????x", where ???? is the Tool option number. Remember it or write on the piece of paper. 6. To activate USB media player enter: "ab 1 6" and press enter. 7. Switch off/on the TV. Menu submenu USB should appear in the main TV menu. If anything goes wrong, just restore the Tool option number.

Was tested on 32LD420:

To see original Tool option value: "ab 0 ff". Response: "00 OK134dx" To activate player: "ab 0 134e"

Was tested on M2362D monitor/TV:

To see original Tool option value: "af 0 ff". Response: "f 00 OK05A4x" To activate player: "af 0 0cc 040"

Was tested on 32LH3000 (firmware 3.55):

To see original Tool option value: "af 0 ff". Response: "f 00 OK8c04x" To activate player: "af 0 0c5 0a4"

If your TV supports debug mode:

1. Press F9 to enable debug messages 2. Press F10 to enter to debug prompt 3. At the debug prompt type: call SUMODE_CreateEZAdjustWin Alternatively you can run EZ-ADJUST via UI Remote control test menu in debug shell. To do that, at debug prompt type: exit, press ENTER, then press 'u', then press 'l', press ENTER.

1 Introduction 2 by playing a special wav file through the LED from an old TV remote 3 using a mobile phone with Symbian S60v3 4 This is from the taken down wiki 5 LG TV USB IR-Hack

5.1 Frequently Asked Questions 5.2 Other FAQs will be answered here.

Introduction
There are two ways to enter the menu: 1. by playing a special wav file through the LED from an old TV remote 2. using a mobile phone with Symbian S60v3

by playing a special wav file through the LED from an old TV remote

1.

The LED is connected to the output of any MP3 player. LED is brought to the TV. Starts playing the Media:Lg-Service-menuAll.zip. Empirically set the desired volume. You should see the menu.

2. Proceed as described in the LG USB Port Hack. using a mobile phone with Symbian S60v3 1. 3.
download a trial version or buy IRremote by Psiloc from Psiloc website Download the IN-Start menu profile for LG TV's from here and transfer the file on your phone. The IRremote should automatically 2. install IRremote on your S60v3 device launch the profile you just donwloaded for LG. 4. Run the program. ress 2 and keep it pressed until the password form comes up on your tv (remember to press ctrl if you're using a qwerty phone)

5.

Proceed as described in the LG USB Port Hack.

This is from the taken down wiki

LG TV USB IR-Hack
Requirements: European LG LF/LG/LH tv with USB service port, S60v3 smartphone with internet connection Notes: using this method you will not void your warranty as you're not going to flash any firmware, you'll be using the same infrared impulses that the LG 105-201M service remote controller sends your device to open the EZ Adjust / IN-Start menu used by LG technicians; just make sure you don't change anything beyond the EMF and DivX settings or your chances to brick your set get instantly higher. Disclaimer: am I a LG technician? No, I'm not. Am I responsible for the damage you could cause to your set? No, I'm not. Am I telling you this is a surefire way to get your DivX playback no matter what? No, I'm not. This is what I'm telling you: this way is safer than reflashing your firmware and it's not going to void your warranty since you can rollback your changes if you need to. Also, it's the only way to enable DivX playback onto newer models shipping with firmware revisions v3.47 and v3.48. Anything else on this sets will brick it. let's get started.

1. 2. 3. 4. 5. 6. 7. 8. 9.

download a trial version or irRemote buy IRremote by Psiloc from Psiloc website install IRremote on your S60v3 device Image:71335591.th.jpg launch IRremote on your S60v3 device Image:51805265.th.jpg select menu, add device Image:48520619.th.jpg select TV Image:94803844.th.jpg select LG Image:49209931.th.jpg refresh the list Image:54604693.th.jpg type START and select the IN-START Service Menu profile Image:41637214.th.jpg refresh the list and select mon Image:48088075.th.jpg

10.select the profile just downloaded Image:40070178.th.jpg 11.press 2 and keep it pressed until the password form comes up on your tv (remember to press ctrl if you're using a qwerty
phone) Image:22849293.th.jpg

12.use your remote to type 0000 (or 0413 on new firmwares) as the password Image:68064085.th.jpg 13.select Tool Option3 Image:84624825.th.jpg 14.set EMF to 1 and DivX to HD. Don't modify anything else or you will brick your tv. Image:64449937.th.jpg 15.exit the menu, turn off your tv, locate the usb port on the rear panel and connect an USB drive or hard
disk Image:45411893.th.jpg

16.turn on the tv and enter the menu, select USB if your device isn't recognized
automagically Image:62293876.th.jpg or Image:dcxxeu.th.jpg

17.select movie list Image:57894267.th.jpg 18.use the integrated media browser to navigate your drive and choose your file Image:90319377.th.jpg 19.watch the movie Image:51263242.th.jpg 20.when done, exit the browser and open the quick menu to remove your usb device before disconnecting it or turning off the tv.
This has to be done to prevent data loss on your drive. Image:33705908.th.jpg

Frequently Asked Questions

I don't have a S60v3 Nokia Smartphone, therefore I'm not able to use Psiloc IrRemote If you have a Windows Mobile 5/6 you can do the trick using Novii Remote Deluxe for PPC and this codebase, thanks to jpan. Use it to open the service menu and continue as needed. I don't have neither a S60v3 Nokia Smartphone nor a Windows Mobile 5/6 device You can still use Novii Remote for Symbian S60v2 (eg: Nokia 6600) with this codebase thanks to me. I don't have neither of the above but I have access to a PlayStation Portable, model PSP-1000 (1st Generation of PSPs). Then you are lucky. You can use it to reproduce the IR hack providing your PSP-1000 has been enabled to execute homebrew. There is a homebrew application called Universal Remote v1.2 that can reproduce LIRC codes. This process has been explained at the Hack/26463619 discussion forums by WaKaRu.

I don't have any of the above, just my PC. If you don't own any S60v2 or v3 device with IrDA port or any PPC Windows Mobile 5/6 device, you can still try using your own PC to send the IR impulses. You'll have to buy an IR transmitter or build your own, then use LIRC or WinLIRC to send the impulses you need. You can find the LIRC code dump here, and the winlirc compiled dump here, thanks to me. Use it on your IR transmitter or put it / convert it on your universal remote. I don't know how to use the LIRC tool to hack my TV. I'm sorry, the LIRC method is experts only. If you can't figure it out, it'd be better if you stopped here. Can I enable Bluetooth, IntelliSense or THX mode? It'd be better if you didn't; if your TV doesn't support neither Bluetooth nor IntelliSense, you risk bricking the set. THX mode is just a locked Cinema video profile, THX Cinema, that is. I can't switch profiles while watching a movie, and if I open the menu the media player closes. Use the quick profile button on your remote to cycle thru the Media Player profiles. Note that they're slightly different from the regular ones, I've got the best results with Cinema Minimum Power Managment for darker movies (backlight 74%), Cinema no power managment for brighter movies (backlight 47%). Some files show up as 0:00:00 The file is either damaged or encoded in a way that the media player can't recognize it. This usually happens with high reference frames x264 movies or broken avi containers. Updating the firmware could solve this, adding more multimedia support. Some movies play mute and "Unsupported audio" comes up The media player doesn't support DTS audio. Please refer to this guide and tool or the internet on how to convert DTS audio into AC3. How can I switch audio/subtitle languages? Press the RED button on your remote. What kind of USB drives can be used? Basically, any USB 2.0 drive will do the job. 1.0 or 1.1 drives won't cut it, since the data rate is too low and you would suffer from frameskips and jittering. I'm fine using a puny 9MB/s 4GB USB 2.0 drive for stuff up to 720p, and an USB hard drive (26-30MB/s) for 1080p stuff. TV limit is 20Mbits of video bitrate anyway, that translates to 2.5MB/s - so basically anything will do. My TV doesn't recognize the drive Make sure it's formatted as FAT32 (to use the Delete function in the media browser) or NTFS. Make also sure you're using an external power source if it's a large hard drive. When I press the button to open the EZ Adjust menu, nothing happens. Make sure you're keeping it pressed and move your phone away from the IR receiver a bit. Also try entering the settings menu in IrRemote and change the transmission method.

Other FAQs will be answered here.

This is for all Universal Remotes to easily access the service menus EZ Adjust & In Start with existing firmware.

Remotes - Any Universal Remote that can send NEC 1 device 4 codes on the fly : Eg. All One for All/Radio Shack universal remotes. Codes: For older remotes whcih use 3 digit Extended Functional Codes (EFCs) 1. EZ-Adjust = 018 2. IN-Start = 019 3. IN-Stop = 015 (factory reset) For Newer remotes which use 5 digit EFCs 1. EZ-Adjust = 00018 2. IN-Start = 00019 3. IN-Stop = 00015 Some remotes use 2 digit EFC codes, so the numbers might exclude zero at the beginning: 18, 19 or 15. Take a look at comparision chart to check which remote supports which codes. Procedure for One 4 All series (not all have this function, confirmed to work: URC-7720, URC-3940) remote: 1. 2. 3. 4. 5. 6. Press the device key (TV, VCR, SAT, CD, AUD or DVD). Press and hold the MAGIC key until the device keys blinks twice (the device key will blink once then twice). Press 9 9 4. The device key will blink twice. Press the MAGIC key once. Enter the 3-digit (or 5-digit) function code (see above) Press the key to which the function will be assigned. The device key will blink twice.

"Magic" button can be named as "P", "S", "Setup" or on some remotes there's need to simultaneously press and hold "REW" and "FFWD" buttons as "Magic" button.

All other NEC1 device 4 conforming universal remotes please refer to the user manual to execute these codes on the fly. Users feel free to add for specific brands.

Credit: Thanks to Vicky2003 from the JP1/Hifi remote.com forums who decoded these remote control EFCs from the LIRC/IR Hack codes in this wiki

You can find more codes for LG on this thread on the hifi-remote.com forums. More supported remotes thread.