After my new Desire updated by OTA to 2.2, my HBoot upgraded to 0.93.001
As a result, I am no longer to root it again or flashing any cooked rom.... It is such a nightmare for me. So I decided went to HTC service center and asking for a factory restore to Android 2.1, unfortunately the guy stated that due to my personal's fault - to hack the bootloader, there is no way to downgrade the software anymore. I need to pay extra money for a circuit board replacement. I am so angry with the replied, my phone actaully working fine with OTA 2.2 version (it is official release for Taiwan), all I want to do is requested for downgrade to official 2.1, why I need to replace a circuit board????
Anyway after a few hours, I figure out a solution and now working fine with Hboot 0.8 and then re-flashed to customized cooked FroYo rom
Here is the steps: (be careful, I am not responisable for any demage due to these procedures, also you need to have basic knowledge on using Android adb tools)
0.) Download this good program: http://evo4g.me/downloads/evo-root.zip (Credit goes to djR3Z)
Download this file to "PB99IMG.zip" http://shipped-roms.com/shipped/Bra...8U_4.06.00.02_2_release_126984_signed_txt.zip
1.) Make a NEW Goldcard (best using FAT32 format micro SD 4GB or 2GB)
http://www.klutsh.com/dlfiles/GoldCardTool-0.0.5.rar
2.) Find your CID ==> e.g HTC__622 (someone said all 11111111 also worked, but if you can query, why not to input your own?)
fastboot oem boot <--- run this command, will show your own CID
3.) http://ks33673.kimsufi.com/misc/
and Create your own "mtd0.img"
>adb push flash_image /data/local/
>adb push rageagainstthecage-arm5.bin /data/local/tmp/
>adb push mtd0.img /sdcard/
>adb push PB99IMG.zip /sdcard/
>adb shell
chmod 0755 /data/local/tmp/rageagainstthecage-arm5.bin
chmod 0755 /data/local/flash_image
cd /data/local/tmp
./rageagainstthecage-arm5.bin
If you see:
[*] CVE-2010-EASY Android local root exploit (C) 2010 by 743C
[*] checking NPROC limit ...
[+] RLIMIT_NPROC={3319, 3319}
[*] Searching for adb ...
[+] Found adb as PID 74
[*] Spawning children. Dont type anything and wait for reset!
[*]
[*] If you like what we are doing you can send us PayPal money to
[*] [email protected] so we can compensate time, effort and HW costs.
[*] If you are a company and feel like you profit from our work,
[*] we also accept donations > 1000 USD!
[*]
[*] adb connection will be reset. restart adb server on desktop and re-login.
$
> adb shell
# <---- you will see this good prompt
cd /data/local
./flash_image misc /sdcard/mtd0.img <---- make sure your connected to PC not in Disk drive mode
5.Shutdown your device
6.Hold volume DOWN and press power button
7.Wait until PB99IMG.ZIP was found and verfied. If that fails, check if you named the file the right way and it’s located in the root of your SD.
8.Press volume UP to start the update.
9.Wait until all steps are done. DON’T POWER OFF YOUR DEVICE!
10.After the downgrade progress has finished press volume UP to reboot.
Now you back to 2.1 with HBoot 0.80
(Please remember to delete the file PB99IMG.zip from your SDcard / folder)
If you want root again:
Navigate to http://www.unrevoked.com for rooted as usual
Interesting, a root exploit for froyo has been found? Though any downgrade of hboot is unnecessary. The rooting allows you to fix the misc partition which will let you flash any RUU you want.
My Desire show : Main Version is older! Update Fail!
setupspeed said:
My Desire show : Main Version is older! Update Fail!
Click to expand...
Click to collapse
what is the issue?
tell me what steps being failed...
hkfriends said:
what is the issue?
tell me what steps being failed...
Click to expand...
Click to collapse
read PB99IMG.ZIP finish , then checking PB99IMG.ZIP => fail
setupspeed said:
read PB99IMG.ZIP finish , then checking PB99IMG.ZIP => fail
Click to expand...
Click to collapse
Have u flashed Mtd0.img ok?
hkfriends said:
Have u flashed Mtd0.img ok?
Click to expand...
Click to collapse
Mtd0.img ok , pursuant step => still fail
better add some screenshoot bro
I have got hboot 0.93 with vodafone froyo and an amoled-display (no slcd).
Do the method of
android-tutorials.org/dev/?page_id=78
work (sorry, can't post the hole link because I an new registered, add www)?
Or do I have to use the method from post #1 in this thread?
cordezz said:
I have got hboot 0.93 with vodafone froyo and an amoled-display (no slcd).
Do the method of
android-tutorials.org/dev/?page_id=78
work (sorry, can't post the hole link because I an new registered, add www)?
Or do I have to use the method from post #1 in this thread?
Click to expand...
Click to collapse
Try teppic74's tool, i think it will be more easy and the same as mine too!
http://forum.xda-developers.com/showthread.php?t=768256
C:\adb>adb push flash_image /data/local/
adb server is out of date. killing...
* daemon started successfully *
774 KB/s (26172 bytes in 0.033s)
C:\adb>adb push rageagainstthecage-arm5.bin /data/local/tmp/
478 KB/s (5392 bytes in 0.011s)
C:\adb>adb push mtd0.img /sdcard/
1807 KB/s (655360 bytes in 0.354s)
C:\adb>adb push PB99IMG.zip /sdcard/
1550 KB/s (144169877 bytes in 90.807s)
C:\adb>adb shell
$ chmod 0755 /data/local/tmp/rageagainstthecage-arm5.bin
chmod 0755 /data/local/tmp/rageagainstthecage-arm5.bin
$ chmod 0755 /data/local/flash_image
chmod 0755 /data/local/flash_image
$ cd /data/local/tmp
cd /data/local/tmp
$ ./rageagainstthecage-arm5.bin
./rageagainstthecage-arm5.bin
[*] CVE-2010-EASY Android local root exploit (C) 2010 by 743C
[*] checking NPROC limit ...
[+] RLIMIT_NPROC={3319, 3319}
[*] Searching for adb ...
[+] Found adb as PID 671
[*] Spawning children. Dont type anything and wait for reset!
[*]
[*] If you like what we are doing you can send us PayPal money to
[*] [email protected] so we can compensate time, effort and HW costs.
[*] If you are a company and feel like you profit from our work,
[*] we also accept donations > 1000 USD!
[*]
[*] adb connection will be reset. restart adb server on desktop and re-login.
$
C:\adb>adb shell
adb server is out of date. killing...
* daemon started successfully *
# cd /data/local
cd /data/local
# ./flash_image misc /sdcard/mtd0.img
./flash_image misc /sdcard/mtd0.img
# exit
exit
C:\adb>
-------------------------------------------------------------
my step , correct?
Yes, seems corrected..
have you made gold card?
what is your phone? OEM or branded?
what is the original Hboot version?
setupspeed said:
C:\adb>adb push flash_image /data/local/
adb server is out of date. killing...
* daemon started successfully *
774 KB/s (26172 bytes in 0.033s)
C:\adb>adb push rageagainstthecage-arm5.bin /data/local/tmp/
478 KB/s (5392 bytes in 0.011s)
C:\adb>adb push mtd0.img /sdcard/
1807 KB/s (655360 bytes in 0.354s)
C:\adb>adb push PB99IMG.zip /sdcard/
1550 KB/s (144169877 bytes in 90.807s)
C:\adb>adb shell
$ chmod 0755 /data/local/tmp/rageagainstthecage-arm5.bin
chmod 0755 /data/local/tmp/rageagainstthecage-arm5.bin
$ chmod 0755 /data/local/flash_image
chmod 0755 /data/local/flash_image
$ cd /data/local/tmp
cd /data/local/tmp
$ ./rageagainstthecage-arm5.bin
./rageagainstthecage-arm5.bin
[*] CVE-2010-EASY Android local root exploit (C) 2010 by 743C
[*] checking NPROC limit ...
[+] RLIMIT_NPROC={3319, 3319}
[*] Searching for adb ...
[+] Found adb as PID 671
[*] Spawning children. Dont type anything and wait for reset!
[*]
[*] If you like what we are doing you can send us PayPal money to
[*] [email protected] so we can compensate time, effort and HW costs.
[*] If you are a company and feel like you profit from our work,
[*] we also accept donations > 1000 USD!
[*]
[*] adb connection will be reset. restart adb server on desktop and re-login.
$
C:\adb>adb shell
adb server is out of date. killing...
* daemon started successfully *
# cd /data/local
cd /data/local
# ./flash_image misc /sdcard/mtd0.img
./flash_image misc /sdcard/mtd0.img
# exit
exit
C:\adb>
-------------------------------------------------------------
my step , correct?
Click to expand...
Click to collapse
hkfriends said:
Yes, seems corrected..
have you made gold card?
what is your phone? OEM or branded?
what is the original Hboot version?
Click to expand...
Click to collapse
gold card => yes
My phone => HTC Desire
Hboot version => 0.93.0001
i have this error "error writing misc: Permission denied"
in this step: "./flash_image misc /sdcard/mtd0.img"
Noob question
Using your method wont brick my phone right? My phone details are below:
Unit: HTC Desire
ROM: FroYo OTA (Unbranded)
BOOTLoader: 0.93
Software:2.13.707.1
Kernel:2.6.32.15
Just use my tool instead, it's much easier.
Doesn't Unrevoked3, the tool that is used to root phones, support hboot 0.93 on unbranded / unlocked phones? So this step is un-necessary on unbranded / unlocked phones?
Did it work at all?
Hi,
I too want to downgrade my HTC Desire from 2.2 to 2.1 because after the upgrade to 2.2 with hboot 0.93 my desire has stopped connecting to the H or 3g network.
Did this guide work for anyone at all?
HI
CAN SOME HELP ME TO GET THE ROM IMAGE VERSION 2.13.707.1 I NEED THE EXE. FILE THATS THE ONLY WAY I KNOW TO INSTALL THE ROM!!!!
MY PHONE TRIED TO UPGRADE FROM THE PHONE SOMETHING WENT WRONG AND IT SWITCH ON AND GET STUCK IN WHITE SCREEN WITH htc GREEN LOGO . . . I TRIED TO INSTALL THE ROM FROM MY COMPUTER THE LATEST BUT THE IMAGE ON THAT IS 2.10.405.2 . I REALLY APPRECIATE IF SOMEONE CAN HELP ME
black screen
I got a black screen after downgrade. Also after restart the phone
Desire
I've been trying to root my phone but as i'm a n00b I just dont know where i'm going wrong. this superoneclick method seemed super-b but its just giving me error.(please read below)
"Killing ADB Server...
* server not running *
OK
Starting ADB Server...
* daemon not running. starting it now on port 5037 *
* daemon started successfully *
OK
Waiting for device...
OK
Pushing rageagainstthecage...
94 KB/s (5392 bytes in 0.056s)
OK
chmod rageagainstthecage...
OK
Running rageagainstthecage...
ROOTED
Getting mount path...
/dev/block/mtdblock3
OK
Remounting system with read-write access...
OK
Pushing su...
135 KB/s (26264 bytes in 0.189s)
OK
Pushing superuser.apk...
65 KB/s (196521 bytes in 2.933s)
OK
chmod su...
OK
Remounting system with read-only access...
mount: Device or resource busy
OK
Remounting system with read-only access...
OK
Device was not rooted!
FAILED
I've tried putting phone in recovery mode and then click root but it just stays on "waiting for device"
Any help would be much appreciated
TIA
(I apologise if this have been discussed before)
same like me
Did you enable usb debugging first?
Sent from my ADR6300 using XDA App
rooting phone soc 1.7 when it gets to this point:
SuperOneClick v1.7.0.0
Killing ADB Server...
OK
Starting ADB Server...
* daemon not running. starting it now on port 5037 *
* daemon started successfully *
OK
Waiting for device...
OK
Pushing rageagainstthecage...
159 KB/s (5392 bytes in 0.033s)
OK
chmod rageagainstthecage...
OK
Running rageagainstthecage...
do i wait for the last one (Running rageagainstthecage...) to say ok? it has been over 20 min and it still sit there i wanna make sure before making any move.
Djveneko said:
rooting phone soc 1.7 when it gets to this point:
SuperOneClick v1.7.0.0
Killing ADB Server...
OK
Starting ADB Server...
* daemon not running. starting it now on port 5037 *
* daemon started successfully *
OK
Waiting for device...
OK
Pushing rageagainstthecage...
159 KB/s (5392 bytes in 0.033s)
OK
chmod rageagainstthecage...
OK
Running rageagainstthecage...
do i wait for the last one (Running rageagainstthecage...) to say ok? it has been over 20 min and it still sit there i wanna make sure before making any move.
Click to expand...
Click to collapse
Try the psneuter option, It works fine for me.
fknfocused said:
Try the psneuter option, It works fine for me.
Click to expand...
Click to collapse
+1
Rage against the cage seemed to hang on me too when I first rooted my sgs4g. I just stopped it after it ran for a while and switched to psneuter method. Psneuter worked for me--and quickly. Good luck.
Sent from my SGH-T959V using XDA Premium App
Thanks!!
Sent from my SGH-T959V using XDA App
Psnueter works no problems.newbie here been tryin for 2 days to root. Just came from iphone so thats what I'm used to.any help greatky appreciated
Sent from my SGH-T959V using XDA App
My pc removed 1.7 because rage showed up as a virus. There is a 1.8 on cnet
Sent from my SGH-T959V using XDA Premium App
Either options work, I've tried both ways and they work, not always the first run but it's all trial and error =)
Sent from my SGH-T959V using XDA Premium App
Rooting SGS4G
I ran DoomLord v4 script. But i ran into a small problem. I am on 2.3.6 gingerbread.
---------------------------------------------------------------
Easy rooting toolkit (v4.0)
created by DooMLoRD
using exploit zergRush (Revolutionary Team)
Credits go to all those involved in making this possible!
---------------------------------------------------------------
[*] This script will:
(1) root ur device using latest zergRush exploit (21 Nov)
(2) install Busybox (1.18.4)
(3) install SU files (binary: 3.0.3 and apk: 3.0.6)
(4) some checks for free space, tmp directory
(will remove Google Maps if required)
[*] Before u begin:
(1) make sure u have installed adb drivers for ur device
(2) enable "USB DEBUGGING"
from (Menu\Settings\Applications\Development)
(3) enable "UNKNOWN SOURCES"
from (Menu\Settings\Applications)
(4) [OPTIONAL] increase screen timeout to 10 minutes
(5) connect USB cable to PHONE and then connect to PC
(6) skip "PC Companion Software" prompt on device
---------------------------------------------------------------
CONFIRM ALL THE ABOVE THEN
Press any key to continue . . .
--- STARTING ----
--- WAITING FOR DEVICE
--- creating temporary directory
mkdir failed for tmp, File exists
--- cleaning
rm failed for *, No such file or directory
--- pushing zergRush
562 KB/s (23060 bytes in 0.040s)
--- correcting permissions
--- executing zergRush
[**] Zerg rush - Android 2.2/2.3 local root
[**] (C) 2011 Revolutionary. All rights reserved.
[**] Parts of code from Gingerbreak, (C) 2010-2011 The Android Exploid Crew.
[+] Found a GingerBread ! 0x00000118
[+] Found a Samsung, running Samsung mode
[*] Scooting ...
[*] Sleeping a bit (~40s)...
[*] Waking !
[*] Sending 149 zerglings ...
[+] Zerglings found a way to enter ! 0x10
[+] Overseer found a path ! 0x0001d338
[*] Sleeping a bit (~40s)...
[*] Waking !
[*] Sending 149 zerglings ...
[+] Zerglings caused crash (good news): 0x40219cd4 0x0054
[*] Researching Metabolic Boost ...
[+] Speedlings on the go ! 0xafd19403 0xafd390ef
[*] Sleeping a bit (~40s)...
[*] Waking !
[*] Popping 24 more zerglings
[*] Sending 173 zerglings ...
+++ LOG: write failed (errno=14)
+++ LOG: write failed (errno=14)
+++ LOG: write failed (errno=14)
****REMOVED 160 or so lines of this "+++ LOG: write failed (errno=14)"
[+] Rush did it ! It's a GG, man !
[+] Killing ADB and restarting as root... enjoy!
--- WAITING FOR DEVICE TO RECONNECT
if it gets stuck over here for a long time then try:
disconnect usb cable and reconnect it
toggle "USB DEBUGGING" (first disable it then enable it)
--- DEVICE FOUND
--- pushing busybox
1564 KB/s (1075144 bytes in 0.671s)
--- correcting permissions
--- remounting /system
--- checking free space on /system
28 KB/s (439 bytes in 0.015s)
df: /mnt/.lfs: Function not implemented
--- Free space on /system : 76744 bytes
--- no cleanup required
--- copying busybox to /system/xbin/
2099+1 records in
2099+1 records out
1075144 bytes transferred in 0.280 secs (3839800 bytes/sec)
--- correcting ownership
--- correcting permissions
--- installing busybox
--- pushing SU binary
986 KB/s (22228 bytes in 0.022s)
--- correcting ownership
--- correcting permissions
--- correcting symlinks
--- pushing Superuser app
1739 KB/s (785801 bytes in 0.441s)
--- cleaning
--- rebooting
ALL DONE!!!
Press any key to continue . . .
My problem is "+++ LOG: write failed (errno=14)" and "df: /mnt/.lfs: Function not implemented" does all these errors means the script partially failed? My other error is in Root Check it says "ADB Shell Default User:
ADB shell setting for standard access, stored in default.prop, is configured as: shell (non root) user - ro.secure=1" besides a few other minor things. If you want i can post the root check log as well. I loved doomlord script. went smoothly except for those small minor bugs. Can that all be fixed or should i run SuperOneClick? Thanks for any help.
Do you have Superuser on your phone?
Yes superuser is there. Here's a Root Check log. As you can see there seems like a few errors including "ADB shell setting for standard access, stored in default.prop, is configured as: shell (non root) user - ro.secure=1" so i am trying to figure out if i need to rerun the batch file, try superoneclick or if its fine left alone. I have superuser cause i opened it. But its 3.06, i used Doomlord's root v4, which uses superuser 3.06 and busybox 1.18.4. SuperOneClick uses more recent one. Thats why im not sure if it's ok or not. Thanks for the response
Congratulations! You have root access!
Superuser Application Status:
Superuser application - version 3.0.6 - is installed!
System File Properties for Root Access:
Alternative Location
Check Command: ls -l /sbin/su:
Result: /sbin/su: No such file or directory
Analysis: File /sbin/su does not exist.
Alternative Location
Check Command: ls -l /system/xbin/sudo:
Result: /system/xbin/sudo: No such file or directory
Analysis: File /system/xbin/sudo does not exist.
Standard Location
Check Command: ls -l /system/bin/su:
Result: -rwsr-sr-x root root 22228 2011-11-10 12:53 su
Analysis: Setuid attribute present and root user ownership present. Root access is correctly configured for this file! Executing this file can grant root access!
Standard Location
Check Command: ls -l /system/xbin/su:
Result: lrwxrwxrwx root root 2012-04-14 22:28 su -> /system/bin/su
Analysis: File: su is a symbolic link pointing to another file: /system/bin/su
Root User ID and Group ID Status:
Root user id:
uid=0(root)
Root group id:
gid=0(root)
System Environment PATH: /sbin /vendor/bin /system/sbin /system/bin /system/xbin
ADB Shell Default User:
ADB shell setting for standard access, stored in default.prop, is configured as: shell (non root) user - ro.secure=1
You're good to go.
What about all those errors and the ro.secure=1? Do i have a lower access root or just normal to get errors? Cause i was thinking of trying superoneclick but if it seems fine i can leave it alone. Thanks for the very quick response.
What is your ultimate goal? Do you want a custom ROM or Kernel? If so, none of this matters as it will be overwritten when you flash.
I just wanted to be sure i got full root access, ATM i just want stock firmware with full root. But i did want to upgrade to a custom rom. Preferably CM9 if it ever shows up for the SGS4G. I have cyanogen on my tablet. Do you know if they will release that to this phone? Since i doubt samsung will ever release Ice Cream Sandwich for this. Thanks
CM7 will come first and we have some intelligent dedicated devs working on it for all of us. But our current custom ROM's are awesome and beat the hell out of stock I must say!
My phone models: sharp 003SH
Use superoneclick v1.9.1 root, problems.
SuperOneClick v1.9.1.0
Checking drivers...
Killing ADB Server...
OK
Starting ADB Server...
* daemon not running. starting it now on port 5037 *
* daemon started successfully *
OK
Waiting for device...
OK
Getting OS Version...
2.2
OK
2.2
Pushing psneuter...
1906 KB/s (585731 bytes in 0.300s)
OK
chmod psneuter...
OK
Running psneuter...
OK
***IF IT KEEPS LOOPING, TRY DISABLING USB DEBUGGING NOW***
Killing ADB Server...
OK
Starting ADB Server...
* daemon not running. starting it now on port 5037 *
* daemon started successfully *
OK
Waiting for device...
OK
Running psneuter...
ROOTED
Pushing busybox...
2011 KB/s (1062992 bytes in 0.516s)
OK
chmod busybox...
OK
Getting mount path...
/dev/block/mtdblock5
OK
Remounting system with read-write access...
OK
Pushing su-v2...
failed to copy 'F:\SuperOneClickv1.9.1\Root/su-v2' to '/system/bin/su': Out of memory
OK
chmod su...
Unable to chmod /system/bin/su: No such file or directory
OK
Pushing Superuser.apk...
failed to copy 'F:\SuperOneClickv1.9.1\Root/Superuser.apk' to '/system/app/Superuser.apk': Out of memory
OK
Creating /system/xbin...
mkdir failed for /system/xbin, Out of memory
OK
Checking for busybox
Remounting system with read-only access...
OK
Running a SU test...
Test failed!
FAILED
Detailed information: sharp softbank 003SH
System: Android2.2
Someone also met me this question?
Nobody will?
I'm needing root so I can figure out what APN my 005SH connects to so I can use its SIM card. Can you at least see your APN info on your 003SH since they're sisters?
Well, I would personally try GingerBreak and not bother with this one.
Please pose in pre existing thread http://forum.xda-developers.com/showthread.php?t=803682 on that note thread closed.
Hi guys when i try to unroot my lg g2x i get the following error
SuperOneClick v1.9.5.0
Killing ADB Server...
* server not running *
OK
Starting ADB Server...
* daemon not running. starting it now on port 5037 *
* daemon started successfully *
OK
Waiting for device...
OK
Pushing GingerBreak...
966 KB/s (16830 bytes in 0.017s)
OK
chmod GingerBreak...
chmod: no such tool
OK
Running GingerBreak...
ROOTED
Pushing busybox...
1422 KB/s (1062992 bytes in 0.730s)
OK
chmod busybox...
chmod: no such tool
OK
Getting mount path...
mount: no such tool
FAILED
how am i supposed to unroot?
please help, my root has been having a lot of issues. for example a my wifi doesn't work along with some other options on my phone.