Database Info

[Q] How do I root the AT&T Avail (ZTE Z990)?

What I have tried:
SuperOneClick (all versions) <-- Siege Tanks Were Doomed
Gingerbreak <-- Just sits there
Z4Root <-- doesn't do anything
Rageagainstthecage <-- doesn't work
tried flashing Clockwork mod via tcard like works for the ZTE Blade, phone pretends like it is working then reboots and no change, trying to start using the power button and vol - yields nothing.
tried cooking my own rom with the kitchen make the update.zip file
Do adb reboot recovery
the phone comes back to the android system recovery <3e>
I select the option to do update.zip from sdcard
I get:
verifying update package...
installation aborted...
I need root access to remove the AT&T preloaded apps that won't uninstall won't stay killed and are hogging all my space on the phone (limited storage). I would also like to be able to upgrade to 2.3.7 from my current 2.3.4 and possibly make my own roms.
I have emailed ZTE Chinese support to see if I can get an non pork filled rom the Indian who answered their tech support line didn't have an answer and told me not to flash the ZTE roamer rom (if I could even find it) because it will brick my phone. They have been no help!
What am I doing wrong in the android recovery (I have tried both installer scripts)? Is there a way to rebuild the system.img from the system folder that was created in the kitchen because I might be able to rebuild it into the .bin file that the phone will accept from a sdcard with the built in update feature?

Ok so I figured out how to repack the system.img I then dropped it back into the folder and used zte-pack.exe to build my .bin file. I go to the tcard update and it fails verification...is there a signature that needs to be made? I didn't see an option in zte-pack

i got the same phone with at&t....was unable to root it either, but i only tried super one click...
good luck and share, if you find a way.

Not sure if there is away as of yet. Just did a fast search and it seems no root has been done for it yet

try another time z4root

I am unable to root my XT928 either...Good Luck!

Apo11on said:
i got the same phone with at&t....was unable to root it either, but i only tried super one click...
good luck and share, if you find a way.
Click to expand...
Click to collapse
I am soooo close just need that extra little bit of help, I will get it and when I do I will definitely share. I've only had a droid for 2 weeks and I have come this far, I am not going to stop. I have a BS in Computer Science and used to be a MCSE, I don't know this tech well enough yet but I will. Just hoping someone on here has the skillset I need to help complete this,

primanka said:
try another time z4root
Click to expand...
Click to collapse
tried it multiple times as I have with all of the one click exploits and custom rom trials

We got root, just need a forum to post, and maybe anotehr tester if someone is interested.
Shoot me a pm

jcase said:
We got root, just need a forum to post, and maybe anotehr tester if someone is interested.
Shoot me a pm
Click to expand...
Click to collapse
Thank you kind Sir! jcase to the rescue again - spent a couple of hours with me and busted this thing open. I can confirm my AT&T Aveil ZTE Z990 is fully rooted now. Mad props to jcase

{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Will post instructions after I Get another tester and write it up, however I am submitting a CVE And reporting it to google/zte. It is particularly dangerous (as far as malware abusing it).

jcase said:
Will post instructions after I Get another tester and write it up, however I am submitting a CVE And reporting it to google/zte. It is particularly dangerous (as far as malware abusing it).
Click to expand...
Click to collapse
Just woke up and saw this...can't wait to test thanks. PM Sent

I can confirm it works..I am now rooted!
jcase said he will post later... was able to remove the annoying at&t apps and gain back 30mb using titanium back...now to learn how to flash a custom rom...

http://www.androidpolice.com/2012/0...e-avail-att-offer-quick-and-easy-root-access/
enjoy

There are detailed instructions for rooting, unlocking, other ROMs and more on a Russian site but I don't understand much of it. If anyone can help out it would be great!
I'm prevented from posting links here but search for zte Roamer unlock.

schoolage said:
There are detailed instructions for rooting, unlocking, other ROMs and more on a Russian site but I don't understand much of it. If anyone can help out it would be great!
I'm prevented from posting links here but search for zte Roamer unlock.
Click to expand...
Click to collapse
we know about this - i'm fluent in russian. none of their file links work - it's an old thread on 4pda forums. you can use translate.google.com or several other engines, to translate web pages in real time.

according to ZTE although they share the same model numbers they have different radios (IE GSM / CDMA) and flashing the roamer to the avail will brick it. Apparently ZTE has not gotten the concept of using distinct model numbers yet...

I was able to get root by simply entering *983*7668#. watch the screen and you will see a message that says wait a few minutes for root. I then installed superuser and Titanium Backup proceeded to remove the apps I didn't want/need, I was also able to backup everything else that I wanted to!

theloon said:
I was able to get root by simply entering *983*7668#. watch the screen and you will see a message that says wait a few minutes for root. I then installed superuser and Titanium Backup proceeded to remove the apps I didn't want/need, I was also able to backup everything else that I wanted to!
Click to expand...
Click to collapse
How did you run Titanium Backup without installing a su binary?

shimapan said:
How did you run Titanium Backup without installing a su binary?
Click to expand...
Click to collapse
It just worked, even after a fresh flashing of the T card image.bin from ZTE.
Oh and heres a little batch file with needed files to automate jcase's procedure.

ZTE N850 Root and Unroot (Gingerbread 2.3.6) No COMMANDS

{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
ZTE Root Pack:
http://z4cellforums.webs.com/Zte n850 2.3.6 Root.zip
______________________
How to install:
______________________
1) Download and unzip all apps. Place all apps on sd card.
2) Goto Settings/Application
*Check unknown sources
*In Development: Enable USB Debugging
3) Install all Apps onto the device.
4) Run Poot and install and download everything it asks.
5) Click to root.
6) Reboot after done. (There will be a error, No superuser push, ect)
7) Run z4root to check root or to unroot!
ENJOY!!!!
Still working on the recovery.img. Enjoy root though.
SetCpu offers 5 governors!!​

Will this work on ZTE V793 ?

You can try.
Mainly poot allowed the root and superusers lets you give permission.
Im hoping this will allow roms to start being build and a chance of unlocking the nvm folder.

andynroid said:
Will this work on ZTE V793 ?
Click to expand...
Click to collapse
Did it work?

Cjen1987 said:
Did it work?
Click to expand...
Click to collapse
Nope it does not..the only way I heard is voa MTK Droid Tool and FlashTool....using a PC but due to my work nature I don't have a PC and looking for a one click solution :laugh:

Recovery Image
Hey everyone I'm smartmanvartan... you can usually find me on AF. The N850 has just been released here in Canada with ICS! I don't want to buy this phone per-say but I have a N860 and they are very similar. this could help us Warp users finally get ICS and the same goes for you Fury users. Now I have a friend at Public Mobile(the carrier releasing the N850) that will let me grab a system dump from a new phone but I can't root it or flash recovery. But if someone can pull their stock recovery and post it up, I can make a CWM recovery or at the very least a adb enabled stock recovery and then BOOT into it without flashing it by using the fastboot boot command. Once I have a system dump and or a CWM recovery, I will post it up here as well. Any help would be greatly appreciated.

andynroid said:
Nope it does not..the only way I heard is voa MTK Droid Tool and FlashTool....using a PC but due to my work nature I don't have a PC and looking for a one click solution :laugh:
Click to expand...
Click to collapse
Might want to look into the mobile uncle apk.. its the go to app for china phones and since the v793 seems to be just that it may work for you. it is capable of rooting and flashing recovery... in the other thread for your phone, there is mention of a modified cwm from the zte blade. try getting the image in question and use the mobile uncle tool to flash it. the mobile uncle tool is available on google play...

Hi guys, will this work on a ZTE N850 that runs off Android 4.0.4?? Does it matter?

everytime i press the "press here to poot" the phone freezes
and I have to do a battery pull. any ideas

itsmejson said:
everytime i press the "press here to poot" the phone freezes
and I have to do a battery pull. any ideas
Click to expand...
Click to collapse
Same here... i've been trying on a US model of the N850 and it always freezes.. I've been reading around and I found some people saying that it is ministro version 9.5 and up that doesn't play well with poot.. but even with an older version of the ministro app, i have had no success...

I have a US ZTE N850 that I couldn't root. Tried everything. I gave up on it for a few months, then I guess either poot or Ministro updated themselves. I got a warning from Google Play that poot was dangerous and I should uninstall. So naturally I ignored it and ran it and this time it worked. Ministro II v9.5 if that helps.
I'm still stuck with the gingerbread os, but having superuser makes it a lot
more usable device. If any of you had poot freeze on you before, I suggest you
update Ministro and poot and give it another go.

A theory about unlocking Nokia 5.1 plus bootloader for free (for the most part)

According to this post. There are 3 partitions (efuse, sec1 and seccfg) storing the unlock status of the bootloader. So I theorize that we maybe can unlock the bootloader(without revealing the IMEI of the phone because the IMEI will be the same before and after unlocking the bootloader, so it will not show as a difference when using WinMerge). So if someone creates a full backup of the phone using SP flash tool. And then use a paid service to unlock the bootloader. And then create another full backup and compare the 3 partitions (efuse, sec1 and seccfg) before and after unlocking the bootloader using a hex diff tool like WinMerge.
1- you need to download SP flash tool from here. After the download. Install the USB driver just right click on "cdc-acm.inf" file and select "Install" in the appearing context menu.
2- open SP flash tool and select the Scatter File(PDA-0-214A-MT6771_Android_scatter.txt) and Download Agent(PDA-0-0040-0000-MTK_AllInOne_DA.bin) that exist in the same folder you downloaded.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Go to the "Read back" tab and click on "add".
And choose the location you want to save the backup. Change the length to 0x1b7800000. And then press OK.
After that click on "Read Back". Then power off your phone and connect your phone to PC with both volume keys pressed and holded.
When you see a progress bar moving, you can release both keys and wait for the procedure to complete
3- use a paid service to unlock the bootloader
4- repeat step 1 and 2 and create another backup after unlocking the bootloader
5- install and use 7-zip to extract the partition image from backups.
For the backup before unlocking the bootloader copy (efuse, sec1 and seccfg) to the folder named before-unlock. And for the backup after unlocking the bootloader copy the 3 files to after-unlock
6- download WinMerge from this link (it is a portable version) open WinMerge. After that press Ctrl+O after that click on options and change (*.bin;*.frx) to (*.bin;*.img) and then press OK
after that click on compare
7- WinMerge will look like this (this is just an example).
You can jump to the next diff using Alt+down arrow, and you can jump to the previous diff by using Alt+ up arrow
8-you just need to screenshot every diff between the 3 files and send the images to me or post it on Imgur in the replays
I will try to patch the files using a hex editor based on the hex diff screenshots. And try to flash it to see if I am able to unlock my bootloader. it may or may not work, but it is worth to try

I will consider doing that if there is any custom ROM available for Nokia 5.1 plus

I have a way to get the nokia 5.1 plus booloader to open. that is, by using the MTK client it only takes a few seconds. and it's free

RianRifaldi said:
I have a way to get the nokia 5.1 plus booloader to open. that is, by using the MTK client it only takes a few seconds. and it's free
Click to expand...
Click to collapse
Hey
Could you post a guide or email me or something
I've been looking for that for 3 years now man

RianRifaldi said:
I have a way to get the nokia 5.1 plus booloader to open. that is, by using the MTK client it only takes a few seconds. and it's free
Click to expand...
Click to collapse
Alex MostWanted said:
Hey
Could you post a guide or email me or something
I've been looking for that for 3 years now man
Click to expand...
Click to collapse
+1

General Black Shark 4 PRS-A0(china rom) convert PRS-H0(global rom) and china rom wire flash pack

2 nice developments here
First
Pay for repairs after a phone gets bricked
Successfully restored deleted flash files
This file is the Chinese version ROM
thing a few weeks ago
the second
Find and successfully convert Chinese ROM to Global ROM
just after it happened
All of the above are done using MiFlash tools
The above is almost the same operation, the difference is that the file
WARNING LOSS OF DATA AND RISK OF DAMAGE TO THE DEVICE
Any damage to the device is at your own risk
The device must be pre-unlocked BL
common preparations
1.download MiFlash tools
2.unzip MiFlash tools
3.Download the zip you want
4.unzip
5.device reboot fastboot mode
6.Connect the computer with a cable
7.Open the unzipped MiFlash tools and execute XiaoMiFlash.exe
8.Then the sequential operation of the pictures
https://imgur.com/L2g9fnx
download
china rom
Convert to global rom
If there are any deficiencies in the first posting thread, please bear with me or put forward
maybe i can do better
I'm sorry for any typos or misspellings
Because my English is not very good

Auth needed for flash
And bootloader unlocked for prevent full brick of device if chinese to global and viceversa converting

BadWolfYe said:
Auth needed for flash
And bootloader unlocked for prevent full brick of device if chinese to global and viceversa converting
Click to expand...
Click to collapse
Yes you need Unlock BL in First

j94413 said:
Yes you need Unlock BL in First
Click to expand...
Click to collapse
how to unlock bootloader?

Erushun said:
how to unlock bootloader?
Click to expand...
Click to collapse
if your device is China is pay to unlock

j94413 said:
if your device is China is pay to unlock
Click to expand...
Click to collapse
If global how to unlock?

j94413 said:
2 nice developments here
First
Pay for repairs after a phone gets bricked
Successfully restored deleted flash files
This file is the Chinese version ROM
thing a few weeks ago
the second
Find and successfully convert Chinese ROM to Global ROM
just after it happened
All of the above are done using MiFlash tools
The above is almost the same operation, the difference is that the file
WARNING LOSS OF DATA AND RISK OF DAMAGE TO THE DEVICE
Any damage to the device is at your own risk
The device must be pre-unlocked BL
common preparations
1.download MiFlash tools
2.unzip MiFlash tools
3.Download the zip you want
4.unzip
5.device reboot fastboot mode
6.Connect the computer with a cable
7.Open the unzipped MiFlash tools and execute XiaoMiFlash.exe
8.Then the sequential operation of the pictures
https://imgur.com/L2g9fnx
download
china rom
Convert to global rom
If there are any deficiencies in the first posting thread, please bear with me or put forward
maybe i can do better
I'm sorry for any typos or misspellings
Because my English is not very good
Click to expand...
Click to collapse
Hi. Where did you get it from? Do you have for Blackshark 4 pro? I need original CN ROM

chiposh said:
Hi. Where did you get it from? Do you have for Blackshark 4 pro? I need original CN ROM
Click to expand...
Click to collapse
Pay for repairs after a phone gets bricked
Successfully restored deleted flash files
I share CN rom is original oldest version(MP4)

is your unit black shark 4s?
my unit is bs4s named prs-ao
im just wondering if the rom you posted is compatible also to mine or just the black shark 4
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}

Erushun said:
is your unit black shark 4s?
my unit is bs4s named prs-ao
im just wondering if the rom you posted is compatible also to mine or just the black shark 4View attachment 5653173
Click to expand...
Click to collapse
4 code name same of 4S is penrose you can try it

Question Unbrick Nokia 2.2

Good night everyone.
I have a Nokia 2.2 TA-1188 to which I recently unlocked the bootloader successfully using the method from this guide:
[GUIDE] How to unlock the bootloader for Nokia 2.2
To content farms: DO NOT COPY AND PASTE THE ENTIRE GUIDE! Now the last piece of puzzle of Nokia x.2 series bootloader unlock line has been completed, thanks to the help of a member called Woke_World. After I read his procedure, I decided to...
forum.xda-developers.com
However, when I tried to flash the latest TWRP (v3.6.2) over stock Android 9 (the ROM used to unlock the bootloader from the guide above) following the exact procedure shown on TWRP's site, using both the recovery IMG and the vbmeta linked within the instructions (the vbmeta apparently comes direct from Google), the phone became bricked and totally unresponsive apart from periodic short vibrations whenever I try to boot in any way (system, fastboot, recovery, etc.).
What can I do to try revive it?

kevriveroc said:
Good night everyone.
I have a Nokia 2.2 TA-1188 to which I recently unlocked the bootloader successfully using the method from this guide:
[GUIDE] How to unlock the bootloader for Nokia 2.2
To content farms: DO NOT COPY AND PASTE THE ENTIRE GUIDE! Now the last piece of puzzle of Nokia x.2 series bootloader unlock line has been completed, thanks to the help of a member called Woke_World. After I read his procedure, I decided to...
forum.xda-developers.com
However, when I tried to flash the latest TWRP (v3.6.2) over stock Android 9 (the ROM used to unlock the bootloader from the guide above) following the exact procedure shown on TWRP's site, using both the recovery IMG and the vbmeta linked within the instructions (the vbmeta apparently comes direct from Google), the phone became bricked and totally unresponsive apart from periodic short vibrations whenever I try to boot in any way (system, fastboot, recovery, etc.).
What can I do to try revive it?
Click to expand...
Click to collapse
If you can connect to the phone with SP Flash Tool you should be able to flash it with Android 9 again and start over. Just download though, not format + download, because then you'll need to restore your IMEI and serial numbers.

djinc91 said:
If you can connect to the phone with SP Flash Tool you should be able to flash it with Android 9 again and start over. Just download though, not format + download, because then you'll need to restore your IMEI and serial numbers.
Click to expand...
Click to collapse
I have just tried to do so, but to to no avail. I keep getting the following error message:
STATUS_STOR_LIFE_EXHAUST (0xC003001D)
The storage on your device has reached end of life, please change to use new device to do operations
I used the DA bundled with SP Flash Tool and drivers linked in one of the folders, apparently MTK ones.
Here's a screenshot of the error message:
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}

I was able to download the firmware again after unchecking the Storage Life Cycle Check box within SP Flash Tool's options, and the phone is now up and running, no troubles up so far.
Thank you very much for your help djinc91!

Uhm Ur phones storage chip is literally dying
Thats emmc for u

areallydumbperson said:
Uhm Ur phones storage chip is literally dying
Thats emmc for u
Click to expand...
Click to collapse
I've had no trouble with my storage during all the years I've owned this phone. Never experienced slowdown, errors, loss of data, etc, not now, not before.
Even so, this is just a backup/2nd device used for nothing important, so it doesn't bother or worry me in the slightest. I'll just keep it using it as is until it dies or I just can't make it usable anymore.
Thank you for your heads up, though.