EDIT: SORRY EVERYONE - IT SEEMS THAT FOR MOST PEOPLE THE BLOATWARE IS REPLACED UPON REBOOTING THE PHONE. I AM WORKING ON A SOLUTION FOR THIS.
So, I was playing around with the Ace Hack kit, and realized that when you get to step 2, you have temporary root access in the adb shell.
Note: I had to change the USB connection type from 'Charge Only' to 'Disk Drive' for this to work.
DISCAILMER: THIS IS PRETTY EASY, BUT I TAKE NO RESPONSIBILITY IF YOU KILL YOUR PHONE
So, I mounted /system as rw and went to /system/app and removed all the bloatware apk's.
Here are the steps I followed:
Downloaded the ace hack kit found in this thread: http://forum.xda-developers.com/showthread.php?t=952352
Extracted the files and opened the README-WNDOWS file.
I skipped over step 1, because just to get this level of access a gold card is not needed, I went to step 2, and did this:
* Make sure the phone is running and adb debugging is enabled.
* Open a command prompt as administrator and navigate to the location of the extracted ace hack kit
* Run hackerize-ace setup-downgrade
This should give you a # prompt (meaning you have temporary root access)
Next mount /system as rw by typing this at the # prompt:
mount -o remount,rw -t yaffs2 /dev/block/mtdblock3 /system
once that is done, go to the app folder by tpying:
cd /system/app
do a ls to see what APK's are installed, for the most part you should be able to identify which apks are bloatware. Instead of deleting them, I renamed them just to make sure I wasn't messing anything up by typing this:
mv filename.apk filename.old
you can instantly see the apps removed from the program list.
Once you have rebooted and made sure everything is working ok, and that you have not messed anything up, you can repeat this procedure to delete the .old files, but I just left them, as its not really necessary.
ONE IMPORTANT NOTE: ONCE YOU ARE DONE RENAMING OR DELETING THE APK FILES, DO NOT TYPE EXIT AS INSTRUCTED IN THE README-WINDOWS FILE. INSTEAD, CLOSE THE COMMAND PROMPT WINDOW SO THE BATCH FILE DOES NOT TRY TO CONTINUE TO ROOT THE PHONE
Once you reboot the phone, the temporary root access is gone, and the /system is mounted again as read only.
Hope this helps someone
You should also be able to "Add" apk's in this manner!
Awesome. I'm going to try this.
Brilliant! I hope this works...
I was going to try and use VISIONary when I get mine, but if this is a proven method, then I'll give it a shot.
derekroper said:
* Make sure the phone is running and adb debugging is enabled.
* Open a command prompt as administrator and navigate to the location of the extracted ace hack kit
* Run hackerize-ace setup-downgrade
Click to expand...
Click to collapse
These are the steps I'm not quite sure about. I've never used adb so..Once I open a cmd prompt in windows how exactly do I navigate to the folder, do I have to type something like:
c/documents/apps....
Just want to be sure.
lrs421 said:
These are the steps I'm not quite sure about. I've never used adb so..Once I open a cmd prompt in windows how exactly do I navigate to the folder, do I have to type something like:
c/documents/apps....
Just want to be sure.
Click to expand...
Click to collapse
On your phone, go to Settings -> Applications -> Development and check USB debugging then plug your phone in and set it to charge only.
Find out where you have adb stored at (For me, it's C:\android\tools\adb.exe).
Open a command prompt and issue this command: cd C:\android\tools
Then you can type adb /? and it'll tell you all the available commands you can use. Push is to move files to the phone - pull is to move files to the computer.
lrs421 said:
These are the steps I'm not quite sure about. I've never used adb so..Once I open a cmd prompt in windows how exactly do I navigate to the folder, do I have to type something like:
c/documents/apps....
Just want to be sure.
Click to expand...
Click to collapse
Ok, so here:
* Make sure the phone is running and adb debugging is enabled.
(Do this on the phone by going to Settings -> Applications -> Development -> Check USB Debugging)
* Open a command prompt as administrator and navigate to the location of the extracted ace hack kit
(Depending on your OS, this is a little different, but in windows 7, click Start -> All Programs -> Accessories -> Right click on command Prompt and click Run as Administrator, then change directory to the location that you extracted the files to, this is different depending on where you extracted them, but if you extracted them in c:\files then type cd \files)
* Run hackerize-ace setup-downgrade
(Do this by typing hackerize-ace setup-downgrade)
JaysFreaky said:
On your phone, go to Settings -> Applications -> Development and check USB debugging then plug your phone in and set it to charge only.
Find out where you have adb stored at (For me, it's C:\android\tools\adb.exe).
Open a command prompt and issue this command: cd C:\android\tools
Then you can type adb /? and it'll tell you all the available commands you can use. Push is to move files to the phone - pull is to move files to the computer.
Click to expand...
Click to collapse
Following this method you dont really need to know adb commands, all the adb commands are in the hackerize batch file....
derekroper said:
Ok, so here:
* Make sure the phone is running and adb debugging is enabled.
(Do this on the phone by going to Settings -> Applications -> Development -> Check USB Debugging)
* Open a command prompt as administrator and navigate to the location of the extracted ace hack kit
(Depending on your OS, this is a little different, but in windows 7, click Start -> All Programs -> Accessories -> Right click on command Prompt and click Run as Administrator, then change directory to the location that you extracted the files to, this is different depending on where you extracted them, but if you extracted them in c:\files then type cd \files)
* Run hackerize-ace setup-downgrade
(Do this by typing hackerize-ace setup-downgrade)
Click to expand...
Click to collapse
Thanks guys, I'm going to try this in a few minutes.
Very nice write up, and I assume you still have sound at the end of this, unlike the permanent root?
Chaptop said:
Very nice write up, and I assume you still have sound at the end of this, unlike the permanent root?
Click to expand...
Click to collapse
Yep because I am not uploading a rom, I am only gaining temporary root, this makes no perm changes to your phone except for the APK files you rename or delete.
derekroper said:
Yep because I am not uploading a rom, I am only gaining temporary root, this makes no perm changes to your phone except for the APK files you rename or delete.
Click to expand...
Click to collapse
Awesome, thanks a lot man.
What am I doing wrong....
lrs421 said:
What am I doing wrong....
Click to expand...
Click to collapse
Hmm, dont know, type dir and take a screenshot so I can see the contents of that directory
im at the same position. did everything the same and ended up there also.
lrs421 said:
What am I doing wrong....
Click to expand...
Click to collapse
davwman said:
im at the same position. did everything the same and ended up there also.
Click to expand...
Click to collapse
Ah, I think you guys only downloaded the docs from the Hack kit page, you need to download the actual hack kit from here:
http://forum.xda-developers.com/showthread.php?t=952352
The link says 'Ace Hack Kit V2 Updated hack kit'
derekroper said:
Ah, I think you guys only downloaded the docs from the Hack kit page, you need to download the actual hack kit from here:
http://forum.xda-developers.com/showthread.php?t=952352
The link says 'Ace Hack Kit V2 Updated hack kit'
Click to expand...
Click to collapse
Yup, just figured it out, at the # sign now...fingers crossed.
Ok, so I see the listed apps how the hell do I erase them now
derekroper said:
Ah, I think you guys only downloaded the docs from the Hack kit page, you need to download the actual hack kit from here:
http://forum.xda-developers.com/showthread.php?t=952352
The link says 'Ace Hack Kit V2 Updated hack kit'
Click to expand...
Click to collapse
I downloaded the right thing what am I missing?
Related
This will allow you to use adb and fastboot as if they were any other DOS command by typing them in a Command Prompt window from any directory.
Thanks to MERKJONES for giving me the idea... of course it only occurred to me after he mentioned it, that this would be quite useful for a lot of people besides ourselves
There are two ways of doing this.
#1
as per MERKJONES suggestion you can just add the files to your "windows/system32" directory.
#2
I like to keep my files organized in my own folders and be able to put them on any partition that I want. So to do this we just need to add the path of your folder containing adb and fastboot files to the windows Environment path.
IN XP/WINDOWS 7/VISTA
Right click on "my computer"
Left click on "properties"
Then.........
IN VISTA/WINDOWS 7 (this is an extra step for these two OS"s ignore this if you are using XP)
Click on "Advanced System Settings" in the left hand pane.
IN ALL WINDOWS
Make sure you are on the "Advanced" tab of the System Properties Panel.
Click on "Environment Variables" button.
Look for a line/variable that says "Path" in "System variables" pane.
Double click on "Path" to open a new window that should be say "Edit System Variable" or select the "Path" variable and click on the Edit Button.
Navigate to the end of the line/value and add
;path to files (where "path to files" is the location of your adb and fastboot files)
For example for me this is
;E:\AndroidFiles
So your path should look something like this
%SystemRoot%\system32;%SystemRoot%;E\AndroidFiles
Now reboot and you can open up a DOS Command Prompt window and use these programs in any directory you want by just typing them like any other DOS command.
Awesome.... I hope this can help some folks out
or as i have mentioned to MANY people in MANY threads, place the adb and fastboot in your system32 folder and you are good. but why should you use the search function when you can just post a new thread that says the same thing many other threads say
tubaking182 said:
or as i have mentioned to MANY people in MANY threads, place the adb and fastboot in your system32 folder and you are good. but why should you use the search function when you can just post a new thread that says the same thing many other threads say
Click to expand...
Click to collapse
LOL... Was thinking the same thing. This has been talked about over and over
PS... the "other" way of doing it I think was actually written by Stericson originally
momentarylapseofreason said:
LOL... Was thinking the same thing. This has been talked about over and over
PS... the "other" way of doing it I think was actually written by Stericson originally
Click to expand...
Click to collapse
You are right of course, I probably should have checked first... so no offense to anyone there are sooooo many threads to keep up with and a search can often bring up so many threads that is easy to miss something.
Actually I am sure that although Stericson may have also written it... he is far from the first person as it is really quite a common thing ... I just wanted to help let people know there was an easier way of doing things.
or as i have mentioned to MANY people in MANY threads, place the adb and fastboot in your system32 folder and you are good. but why should you use the search function when you can just post a new thread that says the same thing many other threads say
Click to expand...
Click to collapse
No offense.... but I personally don't like throwing file after file into my system32 folder as it can get messy... hence adding it to the Environment Path
Sometimes things can be repeated over and over and still get lost in a long thread... so I tried to make it more obvious for people to find the information
pixel-painter said:
You are right of course, I probably should have checked first... so no offense to anyone there are sooooo many threads to keep up with and a search can often bring up so many threads that is easy to miss something.
Actually I am sure that although Stericson may have also written it... he is far from the first person as it is really quite a common thing ... I just wanted to help let people know there was an easier way of doing things.
No offense.... but I personally don't like throwing file after file into my system32 folder as it can get messy... hence adding it to the Environment Path
Sometimes things can be repeated over and over and still get lost in a long thread... so I tried to make it more obvious for people to find the information
Click to expand...
Click to collapse
you dont have to put it in your system32 folder.
Put your backed up img files (all files from nandroid backup) in the same folder as fastboot, then open command-prompt
you then need to change directory to the location of the folder with this command
cd c:\where ever the fastboot folder is
(if its just in the c drive then the command would look like this)
cd c:\fastboot
enter, and you will then get
C:\fastboot>
then just type these commands.
fastboot flash system system.img
fastboot flash userdata data.img
fastboot flash boot boot.img
fastboot reboot
this is how i restore and have been doing it this way everytime no problems.
^^ Sorry but I think you missed the point entirely The idea is to avoid doing that so one can use the programs from any directory.
Both #1 and #2 are really just 2 different ways of accomplishing the same thing
hi im using 5.0.1H build and would like to have root terminal control back. all my commands come back permission denied. Fastboot works for me for nandroid but when i try to follow the instructions on gaining superuser i get this
C:\Documents and Settings\Owner.YOUR-D592011E4B\Desktop\Superuser>adb push bin/s
u /system/bin
error: device not found
C:\Documents and Settings\Owner.YOUR-D592011E4B\Desktop\Superuser>adb shell chmo
d 4755 /system/bin/su
error: device not found
C:\Documents and Settings\Owner.YOUR-D592011E4B\Desktop\Superuser>adb uninstall
koushikdutta.superuser
- waiting for device -
what could i be doing wrong.
Hi,
Try doing:
adb devices see if your phone is recognized by the computer
adb remount enable read /write access
Now you can use your other commands.
maydaysos said:
hi im using 5.0.1H build and would like to have root terminal control back. all my commands come back permission denied. Fastboot works for me for nandroid but when i try to follow the instructions on gaining superuser i get this
C:\Documents and Settings\Owner.YOUR-D592011E4B\Desktop\Superuser>adb push bin/s
u /system/bin
error: device not found
C:\Documents and Settings\Owner.YOUR-D592011E4B\Desktop\Superuser>adb shell chmo
d 4755 /system/bin/su
error: device not found
C:\Documents and Settings\Owner.YOUR-D592011E4B\Desktop\Superuser>adb uninstall
koushikdutta.superuser
- waiting for device -
what could i be doing wrong.
Click to expand...
Click to collapse
I have compiled this guide from the other one posted on this forum, the discussion therein, and my own knowledge. If you have any suggestions on making it better or to correct any mistakes I may have made please let me know.
This guide is intended for Windows and includes detailed instructions. It will cover the steps necessary to root, flash the new recovery image, create a full backup. This will work with software versions 1.29.651.1 and 1.56.651.2 (aka Android 1.5). If you have updated to 2.1 please following this guide here. I am not responsible for any damage done to your phone using this guide. Root at your own risk.
I have put to together a video on YouTube for you to follow along as well. The version numbers of certain files are now outdated in the video so change file names as necessary.
If you own a non-Sprint Hero, you will need to do some extra steps. Follow the guide in the How to Root Non-Sprint CDMA Hero thread.
Step 1: Download the Android SDK from http://developer.android.com/sdk/index.html The Windows file is called android-sdk_r06-windows.zip. Extract the files to your C: drive so that you now have the folder C:\android-sdk-windows
Step 2: Download the asroot2 exploit file from http://forum.xda-developers.com/attachment.php?attachmentid=244212&d=1257621154 Extract asroot2.zip to C:\android-sdk-windows\tools folder.
Step 3: Download the Hero recovery image from http://forum.xda-developers.com/showpost.php?p=4898505&postcount=1g Place this file in C:\android-sdk-windows\tools as well.
Step 4: Make sure USB Debugging is off by going to Settings>Applications>Development. Now connect the phone to your PC via USB cable.
Step 5: Mount your sdcard; Browse to the HTC Sync folder and install HTC Sync on your pc. After it is done installing unmount the sdcard then enable your USB debugging.
Step 6: Open a command prompt by clicking the Start button and typing cmd into the search box and pressing enter or found under All Programs>Accessories.
Step 7: You will now enter a series of commands which I will place inside code boxes to indicate the entire command. You may copy and then paste them into the command prompt window by right clicking. Only enter one command at a time.
1:
Code:
cd C:\android-sdk-windows\tools
2:
Code:
adb devices
If you've been following this guide you will see your phone's serial number. If you get "device not found" error, you either need to make sure you the drivers were properly installed or make sure you enable USB debugging AFTER you connect the USB cable. Continue on once you get the proper phone serial output.
3:
Code:
adb push asroot2 /data/local/
4:
Code:
adb shell
5:
Code:
chmod 0755 /data/local/asroot2
6:
Code:
/data/local/asroot2 /system/bin/sh
You should see an output that says:
$ /data/local/asroot2 /system/bin/sh
[+] Using newer pope_inode_info layout
Opening: /proc/857/fd/3
SUCCESS: Enjoy the shell.
#Now for a few last commands.
7:
Code:
mount -o remount,rw -t yaffs2 /dev/block/mtdblock3 /system
8:
Code:
cd /system/bin
9:
Code:
cat sh > su
10:
Code:
chmod 4755 su
You are now officially rooted. A few more steps and you will have flashed the recovery image.
11:
Code:
exit
12:
Code:
exit
13:
Code:
adb push recovery-RA-heroc-v1.6.2.img /sdcard
Pushing is equivalent of copy the file to the root of your sdcard. By the time you finished reading this it should be done. You'll know its done because the ouput will say something like transferred X bytes in X secs.
14:
Code:
adb shell reboot
This will cause the phone to restart automatically. Wait till it is fully booted to continue.
15:
Code:
adb shell
16:
Code:
su
17:
Code:
cd /sdcard/
18:
Code:
flash_image recovery recovery-RA-heroc-v1.6.2.img
FLASHING TO THE RECOVERY TAKES SEVERAL SECONDS-- BE PATIENT. ENTER THE NEXT COMMAND ONLY AFTER THE COMMAND PROMPT RETURNS TO THE # (ROOT SYMBOL).
19:
Code:
reboot recovery
Step 8: This is the last command; you may now close the cmd prompt. This will cause your phone to boot into recovery mode; it should take no longer than 30 secs. The third option on the list is "- Backup/Restore"; select it. Now, select the first option "- Nand backup". The phone will prompt you to press HOME to confirm which is want you want to do. The backup will begin. You will see the screen say, "Performing backup : .........." When done, the bottom of the screen will say "Backup complete!" and you will be given the menu options again. Go back to the main menu and select reboot system. Rebooting your phone after installing the new recovery image may take several minutes.
Step 9: Once your phone is fully booted, mount the sdcard. You will see a folder called "nandroid"; I highly recommend you copy this to your pc in case you lose your sdcard data or reformat it. Your phone is rooted, 100% backed up, and ready to install a custom rom if you wish!
wow dude,
instructions worked great on Win7
i was able to download the missing usb_drivers by running SDK Setup in C:\android-sdk-windows, and selecting the usb driver from the available packages. I was unable to download the index for the SDK Setup program until I enabled "force http://" in the settings menu.
had to copy over asroot again after i ran SDK Setup (that program deleted it from the directory)
your instructions worked like a charm. total time spent rooting this thing after finding your post: 18 minutes.
(you might want to add a line there in the "mount and copy over the zip file step" to backup the nandroid folder from your SDCard to your comp just as a backup of your stock phone image)
anyway.. cheers!
izanagi said:
wow dude,
i'm about to follow these instructions. thank's for the precise list!
(btw, about to try it on Win7.. may have to change some folder pathing but we'll see)
okay.. typo on the first command in parentheses, and I'm missing the usb_drivers folder (do you have it / can sent it to me) so am unable to install the device in win7.
Click to expand...
Click to collapse
Heh, thanks for the misspell heads up. I did my rooting from Win7 pc; it automatically installed correct drivers for me. To check go to the Control Panel>View devices and printers. You see one device named "Android Phone". Otherwise as far as Ive heard installing HTC Sync installs proper drivers.
izanagi said:
*** edit had to copy over asroot again after i ran SDK Setup (that program deleted it from the directory)
**** edit: all done.. your instructions worked like a charm. total time spent rooting this thing after finding your post: 18 minutes.
(you might want to add a line there in the "mount and copy over the zip file step" to backup the nandroid folder from your SDCard to your comp just as a backup of your stock phone image)
anyway.. cheers!
Click to expand...
Click to collapse
Thank you for taking the time help make my guide better. I'm very glad to know there are little to no hiccups.
When I do step 5, instead of:
5. "/data/local/asroot2 /system/bin/sh"
You should see an output that says:
$ /data/local/asroot2 /system/bin/sh
[+] Using newer pope_inode_info layout
Opening: /proc/857/fd/3
SUCCESS: Enjoy the shell.
#
I get:
[1] Killed /data/local/asroot2 /system/bin/sh
Any suggestions? Should I just be quiet until there is an Eris specific way to do this?
When I do step 5, instead of:
5. "/data/local/asroot2 /system/bin/sh"
You should see an output that says:
$ /data/local/asroot2 /system/bin/sh
[+] Using newer pope_inode_info layout
Opening: /proc/857/fd/3
SUCCESS: Enjoy the shell.
#
I get:
[1] Killed /data/local/asroot2 /system/bin/sh
Any suggestions? Should I just be quiet until there is an Eris specific way to do this?
detox702 said:
When I do step 5, instead of:
5. "/data/local/asroot2 /system/bin/sh"
You should see an output that says:
$ /data/local/asroot2 /system/bin/sh
[+] Using newer pope_inode_info layout
Opening: /proc/857/fd/3
SUCCESS: Enjoy the shell.
#
I get:
[1] Killed /data/local/asroot2 /system/bin/sh
Any suggestions? Should I just be quiet until there is an Eris specific way to do this?
Click to expand...
Click to collapse
This guide is for the CDMA Hero not the Eris!
When I go to apply the rom I get an white screen with skateboarding androids on the bottom and the prompt to erase data yes/no. I press the home key and the Hero reboots without asking to "Apply sdcard:choose zip". This is done from the boot menu. Does the rom load automatically? Did I do something wrong? I got root with no problem. A tip; to make it easier and to avoid spelling mistakes copy and paste the rooting commands from the instructions. Made it go faster too. Thanks in advance.
Never mind. I held down Home and Power at
the same time instead of Home THEN power! ARRGH! Loading up now as I type. Sorry.
ELIMINATED said:
When I go to apply the rom I get an white screen with skateboarding androids on the bottom and the prompt to erase data yes/no.
I press the home key and the Hero reboots without asking to "Apply sdcard:choose zip".This is done from the boot menu.
Does the rom load automatically? Did I do something wrong? I got root with no problem.
A tip; to make it easier and to avoid spelling mistakes copy and paste the rooting commands from the instructions. Made it go faster too. Thanks in advance.
Click to expand...
Click to collapse
yuck... break up your sentences, that's alot of crap to throw on someone all at once... and the bold doesn't help it any.
check to see if you have the custom recovery installed....
-turn off phone
-hold vol down + power
-should search for some stuff then give three options
-press "home" to enter recovery image
do you see "!" and a phone.... does it just hang or do you see a green/yellow menu?
At the end of his post he says he figured it out. He wasn't holding down home key
None of this is working for me at all... I'm not sure what I'm doing wrong, but every time I enter ANY of the commands into the prompt all I get is "cannot find the path specified".
For reference, i have done everything in this guide to the letter, everything is downloaded, unzipped to the correct location, USB drivers installed, etc etc. Not sure what's wrong.
EDIT: I figured it out.. user error, awesome. Worked great, thanks for this!
awesomeindeed said:
None of this is working for me at all... I'm not sure what I'm doing wrong, but every time I enter ANY of the commands into the prompt all I get is "cannot find the path specified".
For reference, i have done everything in this guide to the letter, everything is downloaded, unzipped to the correct location, USB drivers installed, etc etc. Not sure what's wrong.
EDIT: I figured it out.. user error, awesome. Worked great, thanks for this!
Click to expand...
Click to collapse
"cd C:\android-sdk-windows\tools" is actually "cd C:\android-sdk_r3-windows\tools"
is that where you are stuck?
thank you TS. I've been lurking xda for a couple years now when i had the mogul and tp. First time on an android device. Thank you for your time in helping me.
someone buy this man a drink!!!
Invaluable piece of work right here, helped me get it done in no time at all....real clear concise and very helpful....REQUEST THIS BE A STICKY!!!!!
fenske09 said:
"cd C:\android-sdk-windows\tools" is actually "cd C:\android-sdk_r3-windows\tools"
is that where you are stuck?
Click to expand...
Click to collapse
That was the name of the zip file not the extracted folder.
Please help, I followed all of your instructions, I received no errors however I can't boot the recovery image. I checked and it is in the sd card, but every time it just hangs at the HTC logo
I downloaded a terminal emulator and typed su and it gave me # so I assuming I am rooted?!
newtodroid said:
Please help, I followed all of your instructions, I received no errors however I can't boot the recovery image. I checked and it is in the sd card, but every time it just hangs at the HTC logo
I downloaded a terminal emulator and typed su and it gave me # so I assuming I am rooted?!
Click to expand...
Click to collapse
Redownload the recovery image and reflash it. The one you're using probably became corrupt during DL or something.
theresthatguy said:
Redownload the recovery image and reflash it. The one you're using probably became corrupt during DL or something.
Click to expand...
Click to collapse
also make sure you have the heroc version there's a hero and heroC, i messed that up once and had similar results
new ROM
So i loaded the custom ROM, and i followed all the istructions as listed on this guide. When i rebooted my phone, a bunch of my apps started Force Closing on startup.
did i miss something, or do something wrong?
if i reinstall them on the new ROM will they work right?
thanks for any insight
kristaps said:
So i loaded the custom ROM, and i followed all the istructions as listed on this guide. When i rebooted my phone, a bunch of my apps started Force Closing on startup.
did i miss something, or do something wrong?
if i reinstall them on the new ROM will they work right?
thanks for any insight
Click to expand...
Click to collapse
you converted your sd card to fat32,ext2,swap and now the apps are looking for the program on your sd card,
turn off your phone
take out sd card
turn on phone
uninstall app
turn off phone
put in sd card
turn on phone
reinstall app
this should fix you
Ok... If your wimax isn't working and you want to downgrade to try to get it working this is how to do it...
1st get all of the files like you want to do Toast's Part-2. link: http://forum.xda-developers.com/showthread.php?t=701835
Then do this part:
STEP 2~FLASHING MTD PARTITION TO ENABLE DOWNGRADE:
- download all files posted above
- unzip the flash_image.zip and the mtd-eng.zip
- put the flash_image and mtd-eng.img on the root of your sdcard
- go into shell on ur pc and do:
adb shell
cat /sdcard/flash_image > /data/flash_image
chmod 755 /data/flash_image
/data/flash_image misc /sdcard/mtd-eng.img
- this should only take a second or two
- now put the PC36IMG.zip on the root of your sdcard
- power off the phone
STEP 3~FLASHING ENG BUILD:
- hold volume down + power to boot into hboot
- it should now find and verify the PC36IMG.zip on the root of your sdcard. itll show a blue status bar on the top right of the screen.
- after a minute or so it will ask u if u wanna flash SAY YES
- affter it flashes the PC36IMG.zip it will ask if you wanna reboot. SAY YES
After if finally boots you should see HTC quietly brilliant which hangs forever but it should eventually get past it. Once it does you will have the oldest everything. This is a beta build and has a bunch of tools but just do an upgrade to root like you normally would. I would suggest going to .6 then upgrading to the latest 47 from there.
Hope that this helps someone.
P.S. is anyone willing to dump all of the tools that are included in this rom. It might be helpful for the other devs.
Thats the hard way... but yeah it'l work.
Why is everyone so hype on adb everything...?
Tell me the easy way. I would love to do it instead.
kthejoker20 said:
Thats the hard way... but yeah it'l work.
Why is everyone so hype on adb everything...?
Click to expand...
Click to collapse
It's just easier to copy and paste stuff, even typing on a real keyboard. It's a pain in the ass doing it via terminal emulator with the lack of a physical keyboard on our Evo's.
Can anyone confirm if this helps fix the 4g issue?
krosemm said:
Can anyone confirm if this helps fix the 4g issue?
Click to expand...
Click to collapse
If you used the unrevoked, no it wont.
There is no fix for 4g from unrevoked yet.
Neotelos_com said:
If you used the unrevoked, no it wont.
There is no fix for 4g from unrevoked yet.
Click to expand...
Click to collapse
I used the toast method. And if i'm not mistaken I should flash roms w/o the 1.47.651.1 OTA update after downgrading right?
Nope, I try this method and it is not working. Some how the new OTA encrypted a code that any lower version will not over write it.
You don't have root access to even copy/paste or push the files to /data. I tried this and got a permission denied error message.
How do you input adb shell into Vista, I clicked "start", "run" and type "cmd" it bring up C:\users\XXXXX\ cd c:\android hit "enter"
then I type
c:\android>adb remount
Access is denied
Please advise what I did wrong. thanks
It worked for me... you have to make sure that when you enter the su command in adb to look at your phone. There should be a super user permission box that pops up. Accept it and youll be able to adb. It went fine for me after that.
urcboss07 said:
How do you input adb shell into Vista, I clicked "start", "run" and type "cmd" it bring up C:\users\XXXXX\ cd c:\android hit "enter"
then I type
c:\android>adb remount
Access is denied
Please advise what I did wrong. thanks
Click to expand...
Click to collapse
1) Put your phone on USB Debug
2) On your Phone make sure the Ninja(SuperUserPermission) is set to prompt you when you have a request.
3) go to your PC and type in adb shell
4) type in SU
5) Once do you that you will see a prompt from the Ninja asking for a request. Allow for it. And it will remember from that point forward.
6) Look at your cmd prompt screen for a # - if you have it you have full access.
Then so what commands you have been given to do.
It can also be done from the Android Terminal Emulator but some might not like working with a smaller screen I like it myself. Makes me feel geeky
mrmomoman said:
1) Put your phone on USB Debug
2) On your Phone make sure the Ninja(SuperUserPermission) is set to prompt you when you have a request.
3) go to your PC and type in adb shell
4) type in SU
5) Once do you that you will see a prompt from the Ninja asking for a request. Allow for it. And it will remember from that point forward.
6) Look at your cmd prompt screen for a # - if you have it you have full access.
Then so what commands you have been given to do.
It can also be done from the Android Terminal Emulator but some might not like working with a smaller screen I like it myself. Makes me feel geeky
Click to expand...
Click to collapse
This would only work if after the messup your still has root access. Some people have root and the "SU" will work but for the people w/o root will get access denied.
also
From above (I hate quoting) have you tried going to your tools folder inside your android folder and from there try your adb commands?
If you applied the OTA sent from Sprint, you lost root access. There will be no Ninja in the programs folder, because it was a new rom that the was flashed with the OTA. Root access has been closed for those that downloaded the update. If you try and type su, you will get permission denied.
Those of you that still have the root and superuser rights, DON'T DOWNLOAD THE OTA!! You are in a better position then the rest of us. I wanted the good battery life, so that's why I did it.
*******UPDATED 8/31/10 *******
This rooting method was adapted from regaw_leinad's method and toastcfh's method. By following these steps you will successfully downgrade your phone back to android 2.1 in order to gain root.
I don't trust unrevoked as I have had problems with it in the past.
I am not responsible for any damages to your phone.
special thanks to:
regaw_leinad
Sebastian Krahmer
Toastcfh
amon_ra
FILES YOU WILL NEED:
copy and paste into browser
Code:
sdx-downloads.com/sdx/evo/troot/eng-PC36IMG.zip
evo4g.me/downloads//count.php?target=evo-root.zip
files.androidspin.com/downloads.php?dir=amon_ra/RECOVERY/&file=recovery-RA-evo-v1.8.0.img
developer.android.com/sdk/index.html
You will need the Android SDK in order to communicate between your computer and your phone. Download it (last link above) and follow the setup instructions that it comes with.
Unzip the contents of the evo-root.zip and put all the files from it into the tools folder located in the android sdk folder.
Rename the eng-PC36IMG.zip to PC36IMG.zip and then put it the tools folder located in the android sdk folder. DO NOT UNZIP IT!
******* PC36IMG.zip md5sum~ fe8aba99893c766b8c4fd0a2734e4738 *******
Move the recovery-RA-evo-v1.8.0.img into the android sdk folder as well.
Make sure usb debugging is enabled on your device. To do so go to Settings > Applications > Development > and make sure the check box is checked.
Plug your phone into the computer. Select "Charge Only" from the notifications bar.
Open up terminal and navigate your way into the android sdk folder.
Code:
cd /
cd asdk
Push all the files onto your phone.
Code:
tools/adb push /asdk/tools/flash_image /sdcard/
tools/adb push /asdk/tools/rageagainstthecage-arm5.bin /data/local/tmp/
tools/adb push /asdk/tools/mtd-eng.img /sdcard/
tools/adb push /asdk/tools/PC36IMG.zip /sdcard/
tools/adb push /asdk/tools/recovery-RA-evo-v1.8.0.img /sdcard/
Note that the PC36IMG.zip will take longer than the other files to transfer to the sdcard because it is a large file.
Now we will make rageagainstthecage.bin executable.
Code:
tools/adb shell
chmod 0755 /data/local/tmp/rageagainstthecage-arm5.bin
You should see this (below) after it has made the change.
Code:
$
Now to use the rooted shell.
Code:
cd /data/local/tmp
./rageagainstthecage-arm5.bin
You will now see some text on your terminal screen describing the exploit.
Wait for the adb shell to finish the process. At this point it may or may not terminate the current shell session in terminal. If it does then it should look like this:
Code:
users-iMac:asdk user$
If it doesn't it will return to
Code:
$
in that case you need to exit the current session. To do so type
Code:
exit
Now we need initiate a new shell which should now have root permissions.
Enter the following:
Code:
tools/adb shell
and you will see you now have a
Code:
#
instead of
Code:
$
Now we need to flash the mdt-eng.img in order for it to let us install a custom recovery
Code:
adb shell
cat /sdcard/flash_image > /data/flash_image
chmod 755 /data/flash_image
/data/flash_image misc /sdcard/mtd-eng.img
That will flash your misc partition with Toast's mtd-eng.img
This should return you to
Code:
#
Now boot into hBoot
Code:
reboot bootloader
This will reboot your phone into hBoot. It will scan for the PC36IMG.img. When it asks yes or no, select yes.
It should then reflash your phone into the engineering build.
When it asks to reboot select yes.
You will need to flash custom recovery in order to be able to flash other custom roms or modifications. I use Amon_RA's recovery because it works great and has NEVER caused me any problems.
Now, open up terminal and get back into the android sdk folder
Code:
cd /
cd asdk
Since we have already pushed the recovery onto the sdcard we only need to flash the recovery onto the phone so that we can use it
Code:
adb shell
cat /sdcard/flash_image > /data/flash_image
chmod 755 /data/flash_image
/data/flash_image recovery /sdcard/recovery-RA-evo-v1.8.0.img
Now lets rename that PC36IMG.zip file again
Code:
mv /sdcard/PC36IMG.zip /sdcard/eng-PC36IMG.zip
that way your phone doesn't try to flash it when you go into recovery each time
And last but not least we need to boot into it to flash a custom rom
Code:
reboot recovery
Your phone should then reboot into Amon_RA's recovery and you may now head over to the dev forum to find your new favorite custom rom.
very nice! can anyone confirm this? my buddy wants me to root his 2.2 and i would like to try this.
To make life easier for some people add this to your post mate, and apply it yourself if you would like.
Here is how to add your sdk/tools directory to your .bash_profile file so you won't have to navigate to the folder each time.
Download this so you'll be able to see your hidden files http://www.mediafire.com/?diimft1ninn Run it, check "Show Hidden Files" then click Restart finder. Now, navigate to your home folder (/Users/UserName/) and see if there's a .bash_profile already there. If not, create with textedit.
Now add this to the file: export PATH=${PATH}:/Path/Of/Your/Sdk/Tools/Folder
Mine is /Users/bmxrider4444/Documents/Android/SDK/tools
Now do not save it as rich text. If yours is in rich text, click on "Format" in the menu bar, and click "make plain text". Now save it as .bash_profile and uncheck "if no extension is provided, use .txt".
Now you can go back to Ghost and uncheck "Show all hidden files" and restart finder again (special thanks to ajones7279 for these steps)
Enjoy!
Just as clarification as to what this does, it enables you to run adb commands and other commands without having to navigate to the /android/tools/ folder every time you want to run adb or whatever.
does this work?
seekis said:
At this point we need to push the recovery onto the sdcard
Code:
tools/adb push "location of recovery-RA-evo-v1.8.0.img" /sdcard/
Click to expand...
Click to collapse
This is great! Thanks for the guide - I am planning on rooting my Wife's EVO but have been waiting for an easier method than the other one posted. Question on the above where we write "location of recovery-ra-evo-v1.8.0.img". Is that the exact code, or should we be adding a directory or folder location into this line? I rooted my 2.1 EVO on my Mac a couple months ago and don't remember this step. Once again - very much appreciate the help.
One last question - would it make more sense to have a custom ROM already on your SD Card prior to rooting, so that you can flash it right after you flash AMON-RA for the first time? Probably doesn't matter but thought i'd ask.
^^ same question as above, plus one other n00b question - does this method unlock NAND?
[edit] I was not insinuating that randymac88 is a n00b; I, however, am
seekis said:
I don't trust unrevoked as I have had problems with it in the past.
I am not responsible for any damages to your phone.
Click to expand...
Click to collapse
Don't trust us with the unrevoked 3.x/unrevoked forever application combo that's worked for thousands of users without sideeffects on regaw's post?
You should note to everyone that your method will screw up their PRI, reverting it back to 1.34. By using unrevoked and unrevoked forever, you can keep 1.40.
randymac88 said:
This is great! Thanks for the guide - I am planning on rooting my Wife's EVO but have been waiting for an easier method than the other one posted. Question on the above where we write "location of recovery-ra-evo-v1.8.0.img". Is that the exact code, or should we be adding a directory or folder location into this line? I rooted my 2.1 EVO on my Mac a couple months ago and don't remember this step. Once again - very much appreciate the help.
One last question - would it make more sense to have a custom ROM already on your SD Card prior to rooting, so that you can flash it right after you flash AMON-RA for the first time? Probably doesn't matter but thought i'd ask.
Click to expand...
Click to collapse
Thats not the exact code no. I just put that as a place holder you are suppose to put in the location of where you have the recovery.img. For example, the exact command for me would be:
Code:
/Users/seekis/Downloads/recovery-ra-evo-v1.8.0.img
Don't trust us with the unrevoked 3.x/unrevoked forever application combo that's worked for thousands of users without sideeffects on regaw's post?
You should note to everyone that your method will screw up their PRI, reverting it back to 1.34. By using unrevoked and unrevoked forever, you can keep 1.40.
Click to expand...
Click to collapse
As far as using unrevoked, I stated that I, ME, MYSELF, has had issues with it. not that anybody else has. By all means go and use it if you would like. I will not. It is true that you will loose PRI 1.40, but seeing as how even after installing the OTA from HTC my phone still didn't update it to 1.40, I don't see the issue.
rsage said:
^^ same question as above, plus one other n00b question - does this method unlock NAND?
[edit] I was not insinuating that randymac88 is a n00b; I, however, am
Click to expand...
Click to collapse
i believe it does unlock nand seeing as how i adapted it from toasts method
Hey Seekis - question, I'm stuck here. I keep getting "permission denied", or "operation not permitted" when trying to make the exploit executable at this step:
chmod 0755 /data/local/tmp/rageagainstthecage-arm5.bin
Am I missing something? I've tried a million times and can't seem to get past this. I've successfully pushed all the files onto the sdcard.
I've also have had some trouble finding the exact root path to these files. I've been able to navigate, but I would think a lot of users would have some trouble.
Regardless, many thanks for getting this posted...
EDIT: I pushed the rageagainstthecage file to the sdcard by mistake. Will try again tomorrow.
ok i got rid of that step by moving the file into the android sdk and pushing it with all the other files
Okay now I appear to be in big trouble as I've just messed up my wife's phone, and its probably going to be unusable for a while until I get this figured out (assuming I do!).
I got through most of the process. I flashed the PC36IMG.zip file; however when it asked to reboot, it just dumped me back into the bootloader. Whenever I say reboot, it just takes me back to the bootloader. Pull the battery, same thing - bootloader. Yikes.
I don't know how to get to the next step because I can't get into a booted rom in order to flash the amon-ra recovery. Am I totally effed? Can anyone help me here?
EDIT: Okay reflashed the PC36IMG.zip file, and it rebooted into the stock ROM. Onward! Phew!!
The wife's EVO is now fully rooted running Baked Snack 1.5 w/Netarchy's kernel. Touch and go there for a minute, but it all worked out. No 1.40 PRI, but I don't really care about that right now.
Woot! Thanks Seekis!!
do u have to push the pc36img with adb every time or will drag and drop work or copy and paste work?
FoxHound630 said:
do u have to push the pc36img with adb every time or will drag and drop work or copy and paste work?
Click to expand...
Click to collapse
You can mount the card on your system and copy paste it over as well, yes.
randymac88 said:
Okay now I appear to be in big trouble as I've just messed up my wife's phone, and its probably going to be unusable for a while until I get this figured out (assuming I do!).
I got through most of the process. I flashed the PC36IMG.zip file; however when it asked to reboot, it just dumped me back into the bootloader. Whenever I say reboot, it just takes me back to the bootloader. Pull the battery, same thing - bootloader. Yikes.
I don't know how to get to the next step because I can't get into a booted rom in order to flash the amon-ra recovery. Am I totally effed? Can anyone help me here?
EDIT: Okay reflashed the PC36IMG.zip file, and it rebooted into the stock ROM. Onward! Phew!!
Click to expand...
Click to collapse
Had the same issue. When i first booked into the bootloader i had to select recovery then flash PC36IMG.zip. Then boot loop. Then i went back into the bootloader and it automagically read in the PC36IMG.zip and flashed it, then i got stock 2.1 root. Just a few minutes of "oh crap"
I'm stuck. I got as far as flashing PC36IMG.zip, which was successful, as my phone now runs 2.1, but it doesn't appear I'm rooted. When I go back into the adb shell, I'm getting the $ prompt, and running
Code:
cat /sdcard/flash_image > /data/flash_image
gives me a permission denied error. Help!
atom_jack said:
I'm stuck. I got as far as flashing PC36IMG.zip, which was successful, as my phone now runs 2.1, but it doesn't appear I'm rooted. When I go back into the adb shell, I'm getting the $ prompt, and running
Code:
cat /sdcard/flash_image > /data/flash_image
gives me a permission denied error. Help!
Click to expand...
Click to collapse
i dont know what to tell you other than try again. this happened to me the first time through as well. i dont know why. i just started from the top and it worked the second time through.
seekis said:
i dont know what to tell you other than try again.
Click to expand...
Click to collapse
So after you flash PC36IMG.zip you should automatically get a root (#) prompt when going into the shell? ie, I'll have rooted 2.1 yes?
seekis said:
this happened to me the first time through as well. i dont know why. i just started from the top and it worked the second time through.
Click to expand...
Click to collapse
Aha. Ok, I will keep trying til it gives me a root shell, I guess. I also tried unrevoked3 but that didn't seem to work.
Success!! So, I stupidly assumed that all PC36IMG.zip's were the same, and was using the one from the original 2.2 PC thread. Once I got the correct one, voila!
You might want to post the md5 of the one you are using, so there's no confusion for others. Also, you missed a tiny step when you first start up hboot - you have to select fastboot for it to start scanning for PC36IMG.zip.
Thanks!
A friend wants me to do a temp root/downgrade/root combo on his GB Shift. I am not a total noob to this but i have not done a shift. i have read numerous threads and just wondering if i could do this
HTML:
http://forum.xda-developers.com/showthread.php?t=1255474
by replacing step one with this (I would imagine so sense its in the same thread. Just making sure.)
HTML:
http://forum.xda-developers.com/showthread.php?t=1185243&page=28
I also plan on doing this right from the phone (the hboot way) and am clueless about the Terminal Emulator. I just searched "terminal" on my evos market and first one is Android Terminal Emulator. I assume that is the one i need, correct?
Plus, is this info relevant?
"SPCS_001
DeviceWarmBoot
CE Serial InUse
Debug Cable Ena
CE USB InUse
ClearAutoImage
2.76.651.4
FNOC
FNOC"
Please and thank you for your time. He is paranoid about bricking his phone, and i dont want to brick it being my first shift mod(s).
Are you referring to this post?
galaara98 said:
This zip has ADB, the exploit, the latest su and Superuser.apk [8/18/11], and the latest busybox for android.
The script is a combination of Windows PowerShell and a sh script. You Must have PowerShell installed (Google it or search Microsoft downloads), preferably version 2. (windows 7 you enable it as a feature, but i think it is on by default)
Unzip into a folder, preferably near the root of your hard drive. Like C:\TempRootEvoShift
there is a readme.txt ... it is mostly this information
Run Powershell (generally Start -> All Programs -> Accessories -> Windows Powershell -> Windows Powershell) [or Start -> Run -> Powershell, or many have an icon in the quick launch bar ... small blue greater than symbol]
IF you have never run a Powershell script you will need to enable PS1 files by typing set-executionpolicy remotesigned
CD into the folder you unzipped and run the script by typing
.\TempRootEvoShift.ps1
i have tested it on 2 computers, but i digitally signed the script and i do not know what your computers will do with that. If they do not like it, open the script in Notepad, Copy all of it down to, but not including the signature block, and paste it into Powershell (AFTER YOU Change directories into where you unzipped)
Click to expand...
Click to collapse
If so then let me start off with, how you obtain temp root doesn't matter for the exploit to downgrade hboot/android. So you can get temp root however you want, seeing as how that looks like just a packaged up fre3vo temp root, if it works, then you can replace the first fre3vo temp root in my guide with that yes.
So in short, yes you can replace getting temp root with any method you want, as long as you get it before continuing.
Yes that terminal emulator can work, or connect bot or any other terminal application.
To the users, no that isn't really relevant, it's just explaining what the exploit does to the developers(mainly aimed at ones for other devices)
Just follow the guide and you should be fine.
Also, it should be noted that it /looks/ like it errors out a few times when flashing but it isn't erroring, it's doing it's job(We made this mistake earlier but it works)
Before you go on messing with hboot, make sure hboot picks up the sdcard.
Thank you so much. ^.^
Just wanted to understand everything before trying. I figured any temp root way would be fine.
Much appreciated.