Database Info

permroot for S-off MyTouch 4G Slide

How i got perm root on my MT4GS (does not give S-off just permroot of an S-off device)
YOU NEED TO HAVE A S-OFF device!
1)Start off with a fresh install of the TMO 1.28 ROM
2)Used temp root from MT4GSROOT.zip Thanks TeamWin for the temproot method Here is thread for orgnial files)
open MT4GSROOT\ADB (on pc)
Make sure that you have USB debugging turned on (on phone) and drivers installed to PC
Run Fre3voMT4gS.bat (from MT4GSROOT\ADB)
3)check in ternimal ((on phone) need to install from market)) and see if you have root (I got permission denied)
4)ran superonclick with Gingerbreak exploit (thanks CLShortFuse for making this tool) (on pc) - S1C thread
open MT4GSROOT and click on Superoneclick.exe
change exploit to Gingerbreak
hit root
Installed busybox when asked by S1C
Run Su test and looked on phone and Superuser asked for permission
5)Tried opening a app that uses root (root explorer) and SU FC on me
6)go to market and make sure you had latest version Installed (i had an update I needed)
7)Update binary when opening SU for the first time
Allow the SU app SU priviliages (funny I know)
8)Open a root app (root explorer again) and SU asked for permission
Test for permroot
turned off fastboot
deleted a system/app file (in this case htcfmwidget and htcfmwidge.obex) -using the r/w option in root explorer
Rebooted phone and reopened root explorer and looked for removed files and they were not there
None of the tools that I included were made by me they were made by the people I thanked. I just wrote the script for the tools to work. go to their threads and thank them.
Disclaimer I am not responsible for breaking your phone, melting it, or anything that may happen when doing this. Remember this is your choice
I have been able to use Root explorer, Titanium backup, terminal emulator and was able to remove APKs from the system folder that I do not want.

This is awesome!
So how did you get s-off? Did it ship that way?

raycaster3 said:
So how did you get s-off? Did it ship that way?
Click to expand...
Click to collapse
Mine was shipped s-off ordered online
Sent from my HTC Sensation Z710e using XDA App

crackeyes said:
Mine was shipped s-off ordered online
Click to expand...
Click to collapse
That's awesome that we've acheived perm root already.
If you don't mind me asking, did you do the preorder process from t-mobile?
I am extremely interested in this, but I hate preorders

crackeyes said:
Mine was shipped s-off ordered online
Sent from my HTC Sensation Z710e using XDA App
Click to expand...
Click to collapse
Killer. Mine is being shipped the 27th. I can't wait to give this a try. Now all we need is miui for this phone and we're all set! Haha
Sent from my demonSPEED Glacier

raycaster3 said:
Killer. Mine is being shipped the 27th. I can't wait to gibe this a try. Now all we need is miui for this phone and we're all set! Haha
Sent from my demonSPEED Glacier
Click to expand...
Click to collapse
Oh no, I just realized he is probably talking about the DoubleShot.
For some reason I have a feeling that the delay for T-Mobile USA customers is due to HTC installing a S-On bootloader

poormanq45 said:
That's awesome that we've acheived perm root already.
If you don't mind me asking, did you do the preorder process from t-mobile?
I am extremely interested in this, but I hate preorders
Click to expand...
Click to collapse
I didn't preorder I acquired at a meet and greet where they gave me place to get it
Sent from my HTC Sensation Z710e using XDA App

Please don't ask for ETA's people would start coming in MT4GS section soon It come's with stock 2.3.4 so all we need is a custom ROM & were fine . I will be creating a TouchWiz 4.0 ROM w/Sense w/ MIUI icon's .
raycaster3 said:
Killer. Mine is being shipped the 27th. I can't wait to give this a try. Now all we need is miui for this phone and we're all set! Haha
Sent from my demonSPEED Glacier
Click to expand...
Click to collapse

No S-OFF on retail devices folks.
P

I cant get to get my computer to find it, is asking for the driver.... I try but I need the drivers it only appears as android phone on the management.
Update the driver comes on the original SD card, i swapped it which I didn't realized till now
Update 2: After finding the driver I still cant get root access.... anyone done it already?

waiting89 said:
I cant get to get my computer to find it, is asking for the driver.... I try but I need the drivers it only appears as android phone on the management.
Click to expand...
Click to collapse
Install htc sync but make sure it is not running
Sent from my HTC Sensation Z710e using XDA App

I got it working and follow the step of rooting, but I still dont get any root access...

is it possible to extract the s-off boot-loader from a device with s-off already? My understanding of these procedures is rudimentary at best, but if my understanding is correct, the boot-loader is a specific partition on the device, if someone with an s-off device could copy that image to their computer or just a folder on their sd-card, it should be possible then to share that with others who could then write that image to their boot-loader partion using fastboot. or can you not use fastboot until s-off is achieved? i hate that i always forget these things once i have my device running the way i want it to.

shizenyasuya said:
is it possible to extract the s-off boot-loader from a device with s-off already? My understanding of these procedures is rudimentary at best, but if my understanding is correct, the boot-loader is a specific partition on the device, if someone with an s-off device could copy that image to their computer or just a folder on their sd-card, it should be possible then to share that with others who could then write that image to their boot-loader partion using fastboot. or can you not use fastboot until s-off is achieved? i hate that i always forget these things once i have my device running the way i want it to.
Click to expand...
Click to collapse
The Stupid Noob wants to know...
What the heck is "S-off"??

shizenyasuya said:
is it possible to extract the s-off boot-loader from a device with s-off already? My understanding of these procedures is rudimentary at best, but if my understanding is correct, the boot-loader is a specific partition on the device, if someone with an s-off device could copy that image to their computer or just a folder on their sd-card, it should be possible then to share that with others who could then write that image to their boot-loader partion using fastboot. or can you not use fastboot until s-off is achieved? i hate that i always forget these things once i have my device running the way i want it to.
Click to expand...
Click to collapse
In order to flash the s-off bootloader you would have to have a eng bootloader. to put that on you would need s-off dont you love loop 22
As for s-off it means you can flash what ever you want to your device and it will not check to see if HTC signed it and approved it for you

thanks for that works great!!!!!!!!! also mine is from a retail store same day it came out

is it possible to build a PG59IMG file and pack the S-Off hboot into there?? possibly use HexEdit to make sure the version numbers match so that the phone will think it's just a factory reset/update file??

DJAeroX26 said:
is it possible to build a PG59IMG file and pack the S-Off hboot into there?? possibly use HexEdit to make sure the version numbers match so that the phone will think it's just a factory reset/update file??
Click to expand...
Click to collapse
I think just by making that one hexedit you instantly invalidate the sign on the the zip. Mainly because hashing the new file would give you a different result.
This mechanism actually prevents OTA updates from flashing if the file was changed due to (for example) corruption.
Not entirely sure but I think it's how it works.
That being said I was wondering what would happen if someone with an S-OFF hboot were to dump it and someone with S-ON would simply DD the right partition after achieving temp root.
On any normal computer that process would work. Wondering what secret HTC things happen under the hood though.

Akujin said:
I think just by making that one hexedit you instantly invalidate the sign on the the zip. Mainly because hashing the new file would give you a different result.
This mechanism actually prevents OTA updates from flashing if the file was changed due to (for example) corruption.
Not entirely sure but I think it's how it works.
That being said I was wondering what would happen if someone with an S-OFF hboot were to dump it and someone with S-ON would simply DD the right partition after achieving temp root.
On any normal computer that process would work. Wondering what secret HTC things happen under the hood though.
Click to expand...
Click to collapse
There's only one way to find out.
Sent from a Western Union telegram.

Akujin said:
I think just by making that one hexedit you instantly invalidate the sign on the the zip. Mainly because hashing the new file would give you a different result.
This mechanism actually prevents OTA updates from flashing if the file was changed due to (for example) corruption.
Not entirely sure but I think it's how it works.
That being said I was wondering what would happen if someone with an S-OFF hboot were to dump it and someone with S-ON would simply DD the right partition after achieving temp root.
On any normal computer that process would work. Wondering what secret HTC things happen under the hood though.
Click to expand...
Click to collapse
Oh ok. Thanks for clarifying that. I thought it would work because last time I did a warranty exchange, I had to return to stock but I had an ENG hboot and I was scared of bricking by using a factory image, so I took the factory image zip, unpacked it, "injected" the original hboot (which I hex edited to match the version number so that it'll take it as an update) and rezipped it and named it PC10IMG.zip. and yea I have a G2 but I want this phone :]
Sent from my T-Mobile G2 using XDA App

[Q] Stock/Signed T-Mo roms to downgrade - Obtaining S-Off

Hello all, just got the MT4GS I have latest boot loader and update previous owner did it right before I purchased.
I thought we should get together and see what works and what doesn't.
I have tried the temp root method and SuperOneClick and the official HTC unlocker to no avail.
I know on some phones its possible to downgrade using some sort of official package or signed update. Is there such thing for our phone?
Threads I used for reference:
[APP]SuperOneClick v2.3.2 - Better LG Phone Support!
permroot for S-off MyTouch 4G Slide
Anyone notice the MT4GS Bootloader Unlockable?
Poking at latest OTA update for fun and profit
[TOOL] PERMANENT-ROOT (NEW!) & Temp-Root (v2) for any MT4GS (Windows)

There has to be a way to get this done. I found a signed and stock firmware and instructions
Originally Posted by yogi2010 View Post
sure Blue, it is pretty much the usual...
To undo the update/restore the stock firmware that came with the phone:
(Note: this will only work if you are still S-OFF even tho you have the new HBOOT version. If you are S-ON with the new HBOOT, then at this time there is no known way to revert... hopefully we can get the devs. of Revolutionary, etc, to update the root methods. Also, if you want to update just to check it out, make sure to turn S-OFF first if you'd like to give yourself the option to revert later.)
1. Download the stock firmware package from here: http://forum.xda-developers.com/show....php?t=1178082
2. Rename it PG59IMG.zip and put it on the root of your sdcard.
3. Boot into the bootloader('adb reboot bootloader' or power down the phone then hold volume down + power), let it read the update package, and press 'volume up' to update when prompted.
4. At the end it will prompt you to press Power to reboot. It scared me because when i pressed Power, the screen went off and seemed to not come back on, so i pressed power once again, and it booted into the system.
That's it! Just remember that if you do this, it will of course erase all your data... your phone will be like it was out of the box.
Click to expand...
Click to collapse
It won't work because the version is too old obviously. These are specially crafted archives with data in the beginning of the archive. You can't modify the android-info.txt because it throws off both winrar and 7zip.
I tried changing the version number in a hex editor. This makes the crc fail. Is there a way to just alter the crc to the new CRC? This way when HBOOT checks for the checksum it will pass and downgrade. I know for Unreal Tournament based games hackers would use a method called bytehacking where they are able to change certain values without upsetting CRC checks. Would something like this be possible?
I found a tool that recovers it and fixes it I have to try flashing in HBOOT but I doubt it will work I'm afraid the important data in the beginning. Maybe if I sign it, it will work?
The latest idea I had was using the OTA update, it contains a firmware.zip what if we modify the contents of firmware.zip with the contents of the stock firmware? You can flash using fastboot (i hope) as it will be formatted as an update and will downgrade the hboot as well.

are you S-ON? i mentioned in that post that it will only work if you happened to have S-OFF from before, which i did. but so far no one has been able to do anything with S-ON and the newest update. have you tried Tacoroot?

The search button is your friend ._., there are 5+ threads that share information and methods none of which work but the people on said threads are putting information and ideas out there.

Sorry noob question, just got the Mt4gs and It's updated to newest, how do I check if I am s-off or s-on? Also in short what does s-off/on mean? Thanks in advance.
Doubleshot on XDA App

Power the phone off with fastboot turned off. Or pull the battery when you power on hold the lower volume key and power simultaneously to boot into hboot. It will tell you S-OFF /S-ON. If you have latest OTA you're most likely S-ON.
S-Off: This term is used when describing the security radio. With S-on only signed ROMs may be flashed, when S-off unsigned ROMs may be flashed IE custom ROMs.
Click to expand...
Click to collapse
Also check out this thread it will answer some of your questions.
Read this before posting. MT4G Slide Compendium
revo420 said:
HYUH at team revolutionary has discovered that the new bootloader from latest OTA has hboot protection similar to Evo 3D. HYUH has also written a version of misc_version that writes to the correct partition for our doubleshot. Link here. Downgrade still doesn't work because when it checks hboot version it realizes its older and will abort.
PLEASE DONATE TO TEAM REVOLUTIONARY TO MOTIVATE THEM TO RELEASE MORE GREAT TOOLS, EXPLOITS, AND MORE!
Click to expand...
Click to collapse

My hboot is 1.45:0013 so I'm guessing I can't root my phone
Sent from my myTouch_4G_Slide using XDA App

wellingtonarmelin said:
My hboot is 1.45:0013 so I'm guessing I can't root my phone
Sent from my myTouch_4G_Slide using XDA App
Click to expand...
Click to collapse
correct. the only possible way to root is if your HBOOT happens to be S-OFF, in which case you could downgrade and then root. there is some work being done, but i don't know that anything has quite worked yet.

How do I downgrade software
Sent from my myTouch_4G_Slide using XDA App

wellingtonarmelin said:
How do I downgrade software
Sent from my myTouch_4G_Slide using XDA App
Click to expand...
Click to collapse
Are you trying to root and if so just root the old way. I tried it and it works.

Yeah I'm trying to root but at the top of my hboot it says locked and I'm not on the h boot everyone else has
Sent from my myTouch_4G_Slide using XDA App

wellingtonarmelin said:
Yeah I'm trying to root but at the top of my hboot it says locked and I'm not on the h boot everyone else has
Sent from my myTouch_4G_Slide using XDA App
Click to expand...
Click to collapse
Does it day S-ON or S-OFF? If S-ON then you're stuck for now, until one of the tools comes thru.

Lol I'm stuck for now dang that sucks
Sent from my myTouch_4G_Slide using XDA App

wellingtonarmelin said:
Lol I'm stuck for now dang that sucks
Sent from my myTouch_4G_Slide using XDA App
Click to expand...
Click to collapse
lol, yeah it does. we're definitely bugging all the people we can to get something happening tho.

Lol please do I kind of regret sending my old my touch back it was rooted
Sent from my myTouch_4G_Slide using XDA App

There are extremely capable people working on it. Team revolutionary are aware of what's going on. Now its just a matter of being patient.
Sent from my myTouch_4G_Slide using XDA App

That's cool with me
Sent from my myTouch_4G_Slide using XDA App

I'm guessing its still not away to root your phone if you have the new hboot with s on?
Sent from my myTouch_4G_Slide using XDA App

[Q] is there a way to downgrade hboot 1.45.0013??

i was wondering if there is a way to do this. ??
im tired of my MTS4G, i want to install a good rom!

Amen to that
Sent from my myTouch_4G_Slide using Tapatalk

As of right now no, were all basically stuck. Htc say they'll release a update at the end of the month to allow unlocking but that will void your warranty. Im just waiting for a crack for this version. Shouldn't Be too long i hope.
Sent from my myTouch_4G_Slide using Tapatalk

I did not realize that this phone still had an unlocked bootloader when I purchased it a few days ago. It's unfortunate how the HTC Unlocker was glitchy with the MT4GS; it might be why there's such a lack of development right now, haha.

ac3theone said:
As of right now no, were all basically stuck. Htc say they'll release a update at the end of the month to allow unlocking but that will void your warranty. Im just waiting for a crack for this version. Shouldn't Be too long i hope.
Sent from my myTouch_4G_Slide using Tapatalk
Click to expand...
Click to collapse
i hope!! i dont care about the warranty, i hate the stock the sence , is so slow and i hate the interface, im comming from a vibrant runing ics passion v12, you can only imagine my frustration .

Limewirelord said:
I did not realize that this phone still had an unlocked bootloader when I purchased it a few days ago. It's unfortunate how the HTC Unlocker was glitchy with the MT4GS; it might be why there's such a lack of development right now, haha.
Click to expand...
Click to collapse
I think we can start shelving the idea that there's a lack of dev for the device - some definite strides being made in that direction now.
We could always use more people helping make stuff, though.
----
I need a copy of an S-ON bootloader that has not been unlocked.
I need both S-ON 1.44.0007 and S-ON 1.45.0013 - if anyone can get either to me that would be great.
They are only 1MB in size and can be attached to a post in the forum.
If you can get it - attach it as a reply to this post:
http://forum.xda-developers.com/showthread.php?t=1254518
The terminal command to back up a copy of it is:
Code:
dd if=/dev/block/mmcblk0p12 of=/sdcard/hboot.img
That will place a copy of your hboot on your sdcard, called hboot.img, if run from a terminal.
Nlarge got his unlocked S-ON bootloader added to that thread, now we need some regular S-ON ones to compare them to. If anyone can figure out how to get one to us it would be helpful.
We are trying to work the S-ON issue, but it's not exactly an easy nut to crack and we've mostly just started.
Thanks for any help that can be provided. This may not be all we need, but it's a start.

Hasn't anyone been able to flash the original PG59IMG.zip via the OTAbootloader patch?
Delivered via candygram for Mr. Mongo.

Blue6IX said:
I need a copy of an S-ON bootloader that has not been unlocked.
I need both S-ON 1.44.0007 and S-ON 1.45.0013 - if anyone can get either to me that would be great.
They are only 1MB in size and can be attached to a post in the forum.
If you can get it - attach it as a reply to this post:
http://forum.xda-developers.com/showthread.php?t=1254518
The terminal command to back up a copy of it is:
Code:
dd if=/dev/block/mmcblk0p12 of=/sdcard/hboot.img
That will place a copy of your hboot on your sdcard, called hboot.img, if run from a terminal.
Click to expand...
Click to collapse
I'll see if I can figure out how to get that to you. If I can't code, at least I can help with other things.

Cool, we'll look it over and see what we come up with. No promises, just gonna look and see what we see and hope it leads to something.
The hboot may or (more likely) may not be the whole problem for s-off/s-on, but the more we have to play with the more we are learning.

Blue6IX said:
Cool, we'll look it over and see what we come up with. No promises, just gonna look and see what we see and hope it leads to something.
The hboot may or (more likely) may not be the whole problem for s-off/s-on, but the more we have to play with the more we are learning.
Click to expand...
Click to collapse
I tried to copy it with (adb shell <command>) but it says I have permission denied.

Limewirelord said:
I tried to copy it with (adb shell ) but it says I have permission denied.
Click to expand...
Click to collapse
Okay, we are working on that, etn4off is leading the charge on adb through stock recovery, so hold that thought.
Meantime, i've whipped up a new version of the stock restore .zip file, that should work on the new OTA.
( Make sure you have a full battery first!)
Edit - didn't work
What you have to do is rename the file to:
PG59IMG.zip
...then place on the main directory of your sdcard.
Make sure fastboot is turned off in settings on the phone, and then power off.
Hold Volume Down and press Power to turn it on, booting into hboot. The installer will take over from there and guide you through it.
It will load itself, then ask you to press Volume UP to install - then does it's thing and will tell you to press power to reboot when it is done.
This is basically the same restore file you get from here: Thread Link updated for the new OTA.
This should solve the version mismatch problem people were having, but won't know until someone tries to install it.
Afterwards you can run Revolutionary to S-OFF your 1.44.0007 hboot.
You will no longer be on the newest OTA, but then you can apply it if you want and go back - as long as you run the Revolutionary process on the 1.44.0007 hboot before you do.

I'm going to try this asap
Sent from my myTouch_4G_Slide using Tapatalk

Blue6IX said:
Okay, we are working on that, etn4off is leading the charge on adb through stock recovery, so hold that thought.
Meantime, i've whipped up a new version of the stock restore .zip file, that should work on the new OTA.
( Make sure you have a full battery first!)
Stock_Retail_OTA_1-55-531-3_downgrade_PG59IMG.zip
Download link
MD5: c7ea224be738b14824a003fd9c9b4b19
What you have to do is rename the file to:
PG59IMG.zip
...then place on the main directory of your sdcard.
Make sure fastboot is turned off in settings on the phone, and then power off.
Hold Volume Down and press Power to turn it on, booting into hboot. The installer will take over from there and guide you through it.
It will load itself, then ask you to press Volume UP to install - then does it's thing and will tell you to press power to reboot when it is done.
This is basically the same restore file you get from here: Thread Link updated for the new OTA.
This should solve the version mismatch problem people were having, but won't know until someone tries to install it.
Afterwards you can run Revolutionary to S-OFF your 1.44.0007 hboot.
You will no longer be on the newest OTA, but then you can apply it if you want and go back - as long as you run the Revolutionary process on the 1.44.0007 hboot before you do.
Click to expand...
Click to collapse
Has anyone tried this? Not that im saying its bad i just dont want to mess up my newest toy...lol
Sent from my myTouch_4G_Slide using Tapatalk

izzy001 said:
Has anyone tried this? Not that im saying its bad i just dont want to mess up my newest toy...lol
Sent from my myTouch_4G_Slide using Tapatalk
Click to expand...
Click to collapse
No. That's why I said we won't know until someone tries.
I've run the package on both of my devices, so can attest to it working - but they are both s-off.
I've run it from the device in the newest OTA form, and it brought me back, but the old package did too - seems no version check on my devices (probably any s-off devices)
I've run from all versions of the hboot - 1.44.0006, 1.44.0007, 1.44.1107, and 1.45.0013, but they were all s-off.
As for what happens with an s-on device... ...? I updated the version because in another thread that was pinpointed as the problem for it not installing on the newest OTA.

Blue6IX said:
No. That's why I said we won't know until someone tries.
I've run the package on both of my devices, so can attest to it working - but they are both s-off.
I've run it from the device in the newest OTA form, and it brought me back, but the old package did too - seems no version check on my devices (probably any s-off devices)
I've run from all versions of the hboot - 1.44.0006, 1.44.0007, 1.44.1107, and 1.45.0013, but they were all s-off.
As for what happens with an s-on device... ...? I updated the version because in another thread that was pinpointed as the problem for it not installing on the newest OTA.
Click to expand...
Click to collapse
Well i tried it... But it didnt even see it as an update... It just checked it and went straight to the hboot menu
Sent from my myTouch_4G_Slide using Tapatalk

izzy001 said:
Well i tried it... But it didnt even see it as an update... It just checked it and went straight to the hboot menu
Sent from my myTouch_4G_Slide using Tapatalk
Click to expand...
Click to collapse
Okay thanks, it was pretty much an 'it will do it or it won't' situation, so we'll have to try something else.
I wish I could get an s-on device in my hands that I could try stuff on - for now it's test and test and test on the s-off, then try on the s-on ...
Sorry it didn't work, we'll have to try another way.

I'll give this a try as well, even though it supposedly doesn't work. Better try than not.
Is what you're trying to do make the older ROM (with the 1.44.0007 HBOOT) appear as an update to the newer update so we can, in a way, downflash to the older HBOOT that's compatible with the Revolutionary tool?
I'm kind of new to the whole Android scene and am just curious as to how things work.

Limewirelord said:
I'll give this a try as well, even though it supposedly doesn't work. Better try than not.
Is what you're trying to do make the older ROM (with the 1.44.0007 HBOOT) appear as an update to the newer update so we can, in a way, downflash to the older HBOOT that's compatible with the Revolutionary tool?
I'm kind of new to the whole Android scene and am just curious as to how things work.
Click to expand...
Click to collapse
If this flashes it should revert the phone back to retail launch - but it's probably not going to. Finding a way to force it could have a less then desirable outcome.
If it doesn't take, don't try to force the issue with it unless you know what you're doing and why.

Well I tried it as well and it got a check, but it didn't install anything. I wish I had the know-how to mess around with this stuff.

Limewirelord said:
Well I tried it as well and it got a check, but it didn't install anything. I wish I had the know-how to mess around with this stuff.
Click to expand...
Click to collapse
When it checks and oks it go to recovery in hboot menu
Sent from my myTouch_4G_Slide using Tapatalk

[Q] no bootloader, s-off, root under android 4.1.1

Hello,
I bought me a used evo shift 4g with android 4.1.1. Is there a possibility, to get s-off or root? I can't even get into bootloader (volume down and power). I already tried different methods, but nothing seems to work. Can anybody help me please?

derkleinebroicher said:
Hello,
I bought me a used evo shift 4g with android 4.1.1. Is there a possibility, to get s-off or root? I can't even get into bootloader (volume down and power). I already tried different methods, but nothing seems to work. Can anybody help me please?
Click to expand...
Click to collapse
Yes you can get s-off, look in the development section, there is a one click root. Since you have 4.1 on there I am guessing you are S-ON rooted?

derkleinebroicher said:
Hello,
I bought me a used evo shift 4g with android 4.1.1. Is there a possibility, to get s-off or root? I can't even get into bootloader (volume down and power). I already tried different methods, but nothing seems to work. Can anybody help me please?
Click to expand...
Click to collapse
If you can't get into bootloader, try enabling usb debugging ( Settings > Development), then connect your phone to your computer and download the Android Debug Bridge (ADB) from HERE
Open a command window in the place where you extracted the adb files and type "adb devices"
If your device is not recognized, download and install the drivers from HERE
After that, try "adb devices" again, if something like "HT8472JW76 device" shows up, then that's good
Now type "adb reboot-bootloader" and see if that gets you into bootloader
This is kind of a lot of work, but it definitely helps in the long run. Also, I would not run my utility until you have downgraded to 2.2 by running an RUU (all of them can be found HERE, 2.2 is the one that has the number "1.17.651") or by flashing a PG06IMG.zip through bootloader. The utility checks what version you are using, and if its anything other than 2.2 or 2.3.4 it throws an error, so just downgrade to 2.2 directly and then use the utility.
If you have any questions or if anything does not make sense, don't be afraid to ask
Sent from my PG06100 using xda premium

bilgerryan said:
Yes you can get s-off, look in the development section, there is a one click root. Since you have 4.1 on there I am guessing you are S-ON rooted?
Click to expand...
Click to collapse
Nevr heard about s-on rooted - but i'm no expert. What I can say is, that i have no super-user rights.

CNexus said:
If you can't get into bootloader, try enabling usb debugging ( Settings > Development), then connect your phone to your computer and download the Android Debug Bridge (ADB) from HERE
Open a command window in the place where you extracted the adb files and type "adb devices"
If your device is not recognized, download and install the drivers from HERE
After that, try "adb devices" again, if something like "HT8472JW76 device" shows up, then that's good
Now type "adb reboot-bootloader" and see if that gets you into bootloader
This is kind of a lot of work, but it definitely helps in the long run. Also, I would not run my utility until you have downgraded to 2.2 by running an RUU (all of them can be found HERE, 2.2 is the one that has the number "1.17.651") or by flashing a PG06IMG.zip through bootloader. The utility checks what version you are using, and if its anything other than 2.2 or 2.3.4 it throws an error, so just downgrade to 2.2 directly and then use the utility.
If you have any questions or if anything does not make sense, don't be afraid to ask
Sent from my PG06100 using xda premium
Click to expand...
Click to collapse
OK! Thanks a lot. I will tell you, if I was sussesful.

derkleinebroicher said:
Nevr heard about s-on rooted - but i'm no expert. What I can say is, that i have no super-user rights.
Click to expand...
Click to collapse
Do you have superuser installed? Or ROM Manager? You're problem is strange. Check out ROM Manager after you install superuser and see if it will let you install a recovery... I have never had S-On root I just know it's out there and you have to have some kind of root because you are not on stock. I am S-Off and most of the people on here are, so root that baby and get to flashing.

bilgerryan said:
Do you have superuser installed? Or ROM Manager? You're problem is strange. Check out ROM Manager after you install superuser and see if it will let you install a recovery... I have never had S-On root I just know it's out there and you have to have some kind of root because you are not on stock. I am S-Off and most of the people on here are, so root that baby and get to flashing.
Click to expand...
Click to collapse
well, I know these things from my wildfire. I have installed superuser and also ROM manager but can'tget superuser permissions or install a recovery. But when I start the phone, there is not the original HTC-screen, but a custom-screen. So I agree with you, that I am not on stock - some kind of very strange. It seems to me, that all the root-tools only work with 2.3.x, so if i could downgrade, that might help as well.

derkleinebroicher said:
well, I know these things from my wildfire. I have installed superuser and also ROM manager but can'tget superuser permissions or install a recovery. But when I start the phone, there is not the original HTC-screen, but a custom-screen. So I agree with you, that I am not on stock - some kind of very strange. It seems to me, that all the root-tools only work with 2.3.x, so if i could downgrade, that might help as well.
Click to expand...
Click to collapse
The shift was shipped with 2.2 and 2.3.x so if you have anything other then that it was rooted to get to where you are. How you lost root is beyond any of us. And maybe beyond the guy that sold it to you. Pull the battery and place it back in hold volume down and power, that should be a sure shot at getting to bootloader, then take a picture and post that
Sent from my myTouch_4G_Slide using Tapatalk 2

He said he couldn't get to the bootloader with power and volume down

derkleinebroicher said:
well, I know these things from my wildfire. I have installed superuser and also ROM manager but can'tget superuser permissions or install a recovery. But when I start the phone, there is not the original HTC-screen, but a custom-screen. So I agree with you, that I am not on stock - some kind of very strange. It seems to me, that all the root-tools only work with 2.3.x, so if i could downgrade, that might help as well.
Click to expand...
Click to collapse
Like strapped365 said, this is definitely a weird situation and I've never come across it myself. The best option would probably be to just run a 2.2 RUU and root from there. You can also check for root by downloading "root checker" from the play store, its by joeykrim (the free version will work fine)
strapped365 said:
The shift was shipped with 2.2 and 2.3.x so if you have anything other then that it was rooted to get to where you are. How you lost root is beyond any of us. And maybe beyond the guy that sold it to you. Pull the battery and place it back in hold volume down and power, that should be a sure shot at getting to bootloader, then take a picture and post that
Sent from my myTouch_4G_Slide using Tapatalk 2
Click to expand...
Click to collapse
He had said earlier that that didn't work for him, that's why I suggested the adb route
derkleinebroicher said:
OK! Thanks a lot. I will tell you, if I was sussesful.
Click to expand...
Click to collapse
No problem, post if any issues :good:
Sent from my speed-y

If he can't get into boot loader its probably because fastboot is checked. In 2.3x its in settings/power at the bottom. I don't know about his though.

Chad The Pathfinder said:
If he can't get into boot loader its probably because fastboot is checked. In 2.3x its in settings/power at the bottom. I don't know about his though.
Click to expand...
Click to collapse
Hmm, my understanding was that fastboot is only on HTC roms?
Sent from my PG06100 using xda premium

Chad The Pathfinder said:
If he can't get into boot loader its probably because fastboot is checked. In 2.3x its in settings/power at the bottom. I don't know about his though.
Click to expand...
Click to collapse
He said he was on 4.1 there are only two choices for JB before yesterday... Evervolv or deck's CM10

bilgerryan said:
He said he couldn't get to the bootloader with power and volume down
Click to expand...
Click to collapse
Bootloader don't just do a houdini its there somewhere
Sent from my myTouch_4G_Slide using Tapatalk 2

I was thinking broken volume button cuz I couldn't come up with anything else lol

Bootloader don't just do a houdini its there somewhere
Sent from my myTouch_4G_Slide using Tapatalk 2
Click to expand...
Click to collapse
Hmm, thats interesting. So its not possible to delete the bootloader at all?
Sent from my PG06100 using xda premium

It's me again. I just connected the guy, who sold me this phone. Perhaps he can help. If not, i will try the adb-method. If I get problems with that, I'll ask for help again here - i'f never tried this method. But thanks to all you guys so far for your interest and support. i'll keep you informed.
P.S. Root checker told me "no root". And because some one asked me, this is the bootscreen. there is no HTC-screen before that. ATTACH]1532658[/ATTACH]

derkleinebroicher said:
It's me again. I just connected the guy, who sold me this phone. Perhaps he can help. If not, i will try the adb-method. If I get problems with that, I'll ask for help again here - i'f never tried this method. But thanks to all you guys so far for your interest and support. i'll keep you informed.
P.S. Root checker told me "no root". And because some one asked me, this is the bootscreen. there is no HTC-screen before that. ATTACH]1532658[/ATTACH]
Click to expand...
Click to collapse
No problem, keep us posted :good:
Sent from my PG06100 using xda premium

CNexus said:
Hmm, thats interesting. So its not possible to delete the bootloader at all?
Sent from my PG06100 using xda premium
Click to expand...
Click to collapse
Check what was quoted.... Did I say that? no I did not, i said it don't just disappear. And before that I said the guy that sold it to him would know what was wrong.
Now if you delete your bootloader that's on you, and if you did it and didn't tell anyone then sold said phone, you would be the only one who could help someone in that situation. After you hangout here more you will notice a redundancy of posts because 90% of rooted users don't even deserve to have a smartphone let alone a rooted one, so they never know what their talking about so we try to push the core troubleshooting methods to get them to where they need to go. It's like calling sprint what's their first step? Factory data reset to give you a level playing field, here I just told the guy how to get into bootloader if there was a fastboot checked. Also I've seen so many users get the version of Sense mixed up with the version of Android so again we fall back to the core known methods of solving a problem. I've been with the shift since release so I've seen every failed ota by HTC and every moronic thing that can be done with this phone. But no matter how I told him to get somewhere all you new guys just take over like no oldies but goodies know......btw if bootloader is missing adb reboot bootloader wouldn't work either right? So again with the redundant instructions to get the the same place
Sent from my myTouch_4G_Slide using Tapatalk 2

bilgerryan said:
He said he was on 4.1 there are only two choices for JB before yesterday... Evervolv or deck's CM10
Click to expand...
Click to collapse
Just forget about me....
btw, there are alot more sites then XDA that may have ROMS for the shift.

[ROOT] [TOOL] Easy Ace Root Tool

WARNING!!
THIS WORKS ON STOCK DEVICES ONLY.
Disclaimer (borrowed from Cyanogemod): Use this tool at your own discretion. I am not responsible for bricked devices, dead SD cards, thermonuclear war, or you getting fired because the alarm app failed. Please do some research if you have any concerns about features included in this tool before running it! YOU are choosing to make these modifications, and if you point the finger at me for messing up your device, I will laugh at you. Hard. A lot./
UNLOCKING THE BOOTLOADER WILL FACTORY RESET THE DEVICE AND YOU WILL LOSE DATA
Introduction
Now the Hack Kit is gone for good, S-OFF is not an easy task to achieve. However, root access can be gained unlocking the bootloader with HTCDEV tool.
If you are skilled enough, then you can gain S-OFF by following this: http://tau.shadowchild.nl/attn1/?p=411
This tool WILL NOT S-OFF, get superCID or unlocksim your device but help you to unlock the bootloader, flash CWM recovery and flash SU to get root privileges .
Instructions
Disable your Antivirus or any other protection software in your PC
Uninstall HTC Sync
Download the EasyAceRootTool
Extract the zip file
Install the Drivers in the tools\windrivers folder WITH THE PHONE UNPLUGGED!!
Plug the phone and let the drivers install properly
Run the EasyAceRoot.cmd as Admin
Follow instructions on screen
Enjoy!!
IF YOUR BUILD VERSION IS NOT SUPPORTED TO UPDATE THEN:
Create a goldcard using this tool: http://d-h.st/VMw, once you have the .img file patch it using the SimpleGoldCard Tool included in the tools folder. (you need a working phone for this)
Find a RUU which main version is supported and higher than yours and flash it in the PD98IMG.zip way, that is what is the goldcard for. If you have a .exe RUU, then extract the rom.zip file using this method: http://www.xda-developers.com/xda-tv-2/how-to-take-apart-an-ruu-xdatv/
Re run the tool and you will be able to update the hboot and unlock it
Downloads
Script Convention name is EasyAceRootTool_ddmmyyy
EasyAceRootTool_21112013: http://d-h.st/8fc
MD5sum: 601e2674123ebd4210c7882555f02237
Changelog
EasyAceRootTool_21112013 - Fixed my rectal cranial stupidity
EasyAceRootTool_18082013 - Included the Goldcard IMG creation in the script
EasyAceRootTool_18032013 - Final Edition. Fixed some typos and enhance performance
EasyAceRootTool_07032013 - Fixed typo in the script. Added SU flashing in CWM for those with issues to gain perm root.
EasyAceRootTool_02032013 - Fixed the perm root code in the script.
EasyAceRootTool_28022013_v2 - Added funcionality for unlocking bootloader or flashing CWM only.
EasyAceRootTool_28022013_v1 - Fixed bugs and typos in the script. Added CWM Touch recovery (rectal-cranial inversion is BACK!!).
EasyAceRootTool_28022013 - Initial release.
If you have issues or get stuck find support here: http://webchat.freenode.net/?channels=AceRoot

UPDATE
Ok, v1 is now online. Fixed the flashing recovery issue and replaced CWM for CWM touch. Enjoy!

stuck in white then black screen
I run the AAHK and stucki in black screen, anyone getting this issue? will this EAR help resolve my issue?
I tried running again, and it just no device. Please help.

Aphang22 said:
I run the AAHK and stucki in black screen, anyone getting this issue? will this EAR help resolve my issue?
I tried running again, and it just no device. Please help.
Click to expand...
Click to collapse
Hack kit Is not supported in this thread. In fact Hack kit has been retired for Good. Look for help in the thread in My signature.

Easy Ace Root Tool su not working
hello,
thank you for this tool. For me unlock and clockwork recovery installs successful. But I have no success with su. Could you pls make a special point su in the menu. I have in meantime up to tenfold tryed to go through the unlock, the recovery and the su install without success for su.
pls have a look on the error message in the uploaded picture.
thank you for your work!
Heinz

pc4heinz said:
hello,
thank you for this tool. For me unlock and clockwork recovery installs successful. But I have no success with su. Could you pls make a special point su in the menu. I have in meantime up to tenfold tryed to go through the unlock, the recovery and the su install without success for su.
pls have a look on the error message in the uploaded picture.
thank you for your work!
Heinz
Click to expand...
Click to collapse
fre3vo is missing in the tools\tmp folder. That is the exploit that gains temp root. Try downloading the tool again and make sure that you disable the Antivirus first. Then, check that fre3vo is there...

Thank you for the quick respond. Sorry to say, but still no success. I had already made a copy of fre3vo from the AAHK-tools to your Easy Ace Root Tool and got the mentioned error. On my Netbook is no malware scanner running.
With a new download of your tool, including fre3vo, the error is still here. After copying the directory "tool" to the root of my PC I got a new exploit error 21.
My DHD has rom 2.3.5 and sence 3.0 and I found a link with the advice to downgrade this ROM. Can it be that this downgrade is necessary?
So I think something is not finaly settled.
Regards
Heinz

pc4heinz said:
Thank you for the quick respond. Sorry to say, but still no success. I had already made a copy of fre3vo from the AAHK-tools to your Easy Ace Root Tool and got the mentioned error. On my Netbook is no malware scanner running.
With a new download of your tool, including fre3vo, the error is still here. After copying the directory "tool" to the root of my PC I got a new exploit error 21.
My DHD has rom 2.3.5 and sence 3.0 and I found a link with the advice to downgrade this ROM. Can it be that this downgrade is necessary?
So I think something is not finaly settled.
Regards
Heinz
Click to expand...
Click to collapse
Downgrade Is not necesary To gain root access

I'm pretty new to this phone, I was hoping to put CM10.1 on it for my girlfriend. Will using this tool be enough to do that, or will I also need to gain S-Off? Thanks!
Sent from my Paranoid Nexus 4 using Tapatalk²

kcls said:
I'm pretty new to this phone, I was hoping to put CM10.1 on it for my girlfriend. Will using this tool be enough to do that, or will I also need to gain S-Off? Thanks!
Sent from my Paranoid Nexus 4 using Tapatalk²
Click to expand...
Click to collapse
Yes. S-OFF will only be useful if you want to flash radios.
Sent from my GT-N7100 using xda app-developers app

glevitan said:
Yes. S-OFF will only be useful if you want to flash radios.
Sent from my GT-N7100 using xda app-developers app
Click to expand...
Click to collapse
Alright. I probably don't need to do that. I have no idea what that does anyway.
So basically my steps are, use this tool and I'll have root+cwm, back everything up with TiB or something, and wipe and flash CM+inspiremod? And everything will be good, no need to change radios, whatever that does?
Seems easy enough
Thanks!
Sent from my Paranoid Nexus 4 using Tapatalk²

kcls said:
Alright. I probably don't need to do that. I have no idea what that does anyway.
So basically my steps are, use this tool and I'll have root+cwm, back everything up with TiB or something, and wipe and flash CM+inspiremod? And everything will be good, no need to change radios, whatever that does?
Seems easy enough
Thanks!
Sent from my Paranoid Nexus 4 using Tapatalk²
Click to expand...
Click to collapse
Yep, those are the steps...no radio needed.

Nice work bro well i want to gain s-off on my I4G
I have unlocked boatloader with 4ext recovery on it and pacman
V20.1 so should I proceed with this tool?
Basically i just want s-off my device
Sent from my Desire HD using xda premium

amanvishnani said:
Nice work bro well i want to gain s-off on my I4G
I have unlocked boatloader with 4ext recovery on it and pacman
V20.1 so should I proceed with this tool?
Basically i just want s-off my device
Sent from my Desire HD using xda premium
Click to expand...
Click to collapse
Read the OP. This is a root tool only. There is no S-OFF at the moment, if you are skilled you do it manually following the link in the OP.

UPDATE
New update. SU flashing in CWM for those who are experiencing issues with the perm root. Flashing is done manually but file is pushed to sdcard by the script.

You might want to add to the OP that unlocking the bootloader will wipe the internal memory. I didn't know this and ran the tool on my girlfriend's phone earlier today and now all her apps, contacts, messages, everything is gone. She's just a tad bit pissed at me. Oops.
Other than that though, the tool worked great!
Sent from my Paranoid Nexus 4 using Tapatalk²

kcls said:
You might want to add to the OP that unlocking the bootloader will wipe the internal memory. I didn't know this and ran the tool on my girlfriend's phone earlier today and now all her apps, contacts, messages, everything is gone. She's just a tad bit pissed at me. Oops.
Other than that though, the tool worked great!
Sent from my Paranoid Nexus 4 using Tapatalk²
Click to expand...
Click to collapse
Yeah, I never mentioned it supposing that people knows what they are doing!!..I will now. Thanks

glevitan said:
Yeah, I never mentioned it supposing that people knows what they are doing!!..I will now. Thanks
Click to expand...
Click to collapse
Lol no problem. I should've assumed it would do that... It did on my Nexus, and everything got wiped. I just assumed that was a Nexus only thing.
Needless to say I'm in the doghouse now. No fun for me tonight
Sent from my Paranoid Nexus 4 using Tapatalk²

Just as a friendly notice the included touch recovery did not work for me and one other user that I seen. The non-touch version works just fine. I do not have this phone but was just helping a friend.
Have a great day
Sent from my SAMSUNG-SGH-I747 using xda premium

Error
When I run the script i am getting this error
your build version is 1.80.502.3
Your will reboot in fastboot again to continue the process
* server not running *
Obtaining Unlock Token
< waiting for device >
... INFO[ERR] Command error !!!
OKAY [ 0.009s]
finished. total time: 0.057s
Any idea on how to fix this? Thank you.