I know there are several methods/guides to rooting the EVO. I posted these instructions on another site and many people found them useful, so I decided to copy them here. I didn't create any of these methods. I started this because this was my first experience w/ Android and trying to root. I had some trouble because there are certain steps that are probably obvious to Android regulars or guys that did a lot of research, but it was not obvious to me.
This is written for someone who is an ANDROID n00b and has absolutely no idea where to began. If you're a PC n00b and the idea of unzipping a file is foreign to you, this thread is not for you. Just enjoy the EVO Stock. It's a great phone and you won't be disappointed. Now, if you're comfortable around a pc and can follow instructions, this guide should be helpful. I've broken down every step.
*********** F.A.Q. and Videos - See Post #2 ***********
This guide includes;
ROOTING Part I and Part II (Full Root) - Use this if you're on software version 1.32.651.1 or 1.32.651.6.
Section 1 - This part gives you basic root access.
Section 2 - This part unlocks NAND and gives you full control. There are 2 versions of Section 2. Either one works.
Version 1 - No PC needed. No ADB Shell needed.
Version 2 - Using a PC and ADB Shell
Nand Backup and Nand Restore - 2 options with Rom Manager and w/o Rom Manager
Section 3 - Rom Manager Nand Backup/Restore
Section 4 - Manual Nand Backup/Restore
ROOTING AFTER OTA 1.47.651.1 (Full Root) - Use this if your phone had the OTA done and you're on version 1.47.651.1
Section 5 - This part includes all the steps to get full root including NAND Unlock. In other words, full control.
Here's the steps written in Android n00b language for the PC.
****ROOTING Part I and Part II (Full Root)**** Thanks to toastcfh
This is for Full Root access. I dropped the instructions for partial root because they are not needed. With Full Root available, there is no need to only do a partial root. Even if all you want is permissions to load a custom rom, you'll need to have a backup in case something goes wrong and you can't use the backup if you're not fully rooted. So, follow these simple steps and you'll have everything you need.
Before you start
Before you start anything, your phone needs to be able to connect to the pc. If you haven't done so before, install HTC Sync. There is a folder on the sdcard that contains a version of HTC Sync or you can download a newer version from their site. It doesn't matter which version because you're not going to use it. We just need the drivers installed so the phone can communicate with the PC.
Next, make sure "USB Debugging" is turned ON.
Menu>Settings>Applications>Development>USB Debugging
If it's turned on, every time you connect your phone to the PC, you'll see "/!\ USB Debugging connected" in the notifications on the phone.
Items you'll need
1- PC36IMG.zip (Place this on your sdcard)
2- eng-PC36IMG.zip - Mirror 1 - (Place this on your sdcard)
3- Full Root files.zip - This zip contains 3 files you will extract to your sdcard (flash_image, mtd-eng.img, recovery.img)
Now you sdcard should look like this -
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
4- evo-recovery - Extract this folder to your C:\ drive so you should see C:\evo-recovery
5- Any custom rom you want to load. If you don't want a custom rom, then at least install the rooted version of the Sprint Rom --> here <-- (place this rom on your sdcard too)
Section 1 -
1A) Connect your EVO to the PC and select "disk drive" so that you can see your storage card from the "My Computer" window
1B) Copy the file PC36IMG.zip and eng-PC36IMG.zip to the storage card. Don't unzip it and don't put it in a folder. Just copy the files.
1C) Take the "Full Root Files.zip" you downloaded and unzip all 3 files to the storage card. Don't put them in a folder.
At this point, you should have 5 new files on your storage card as shown in the picture above under items needed.
1D) Power-off your phone by holding the power-button for several seconds. The top choice is "Power Off."
1E) While holding "Volume DOWN", push the "Power" button so the phone turns on. You don't need to hold the "Power" button, but you do need to hold the "Volume DOWN" button. This will bring you straight to the bootloader screen which says
-FASTBOOT
-RECOVERY
-CLEAR STORAGE
-SIMLOCK
-HBOOT USB
Just wait for a minute. It will read your storage card. This takes about 30secs and there is a progress bar on the top right. It's reading the PC36IMG.zip file you placed on the card.
1F) Once that's done, it says, "Do you want to start update?" Volume UP=YES Volume Down=NO. Hit "Volume UP" and then wait.
1G) Once that's done, it says, "Update Complete. Do you want to reboot device?" Volume UP=YES Volume Down=NO. Hit "Volume UP" and you will reboot.
Now just be patient. It will take a while to start up the first time, but when it's done, you'll be at the setup screen you saw the first time you turned on the device. Skip all the account setups and whatever else. You just want to get to the Home screen so you can go to the next step.
Now you're phone is partially rooted, but we're not stopping there.
Section 2 Version 1 - No PC Needed -
2A) Go to the Market and download/install EStrongs File Explorer. Just search for "EStrong" pick "Estrongs File Explorer." Then download/install Barcode Scanner by ZXing. Just search for "Barcode."
2B) Open Barcode Scanner and scan the QR code below. Select "Open Browser" then download/install. Note: This will allow you to install Android Terminal Emulator by Jack Palevich. I couldn't find it in the market, so I'm using this method.
2C) Open Estrongs File explorer. Long-press on the files to rename the file "PC36IMG.zip" --> "root-PC36IMG.zip" and then rename "eng-PC36IMG.zip" --> "PC36IMG.zip"
2D) Open "Android Terminal Emulator" that you installed in step 2B, and type the following commands.
Code:
su
cat /sdcard/flash_image > /data/flash_image
chmod 755 /data/flash_image
/data/flash_image misc /sdcard/mtd-eng.img
If you typed each line correctly, you won't see any changes, you'll just go down to the next line w/ a "#"
2E) Power-off your phone by holding the power-button for several seconds. The top choice is "Power Off."
2F) While holding "Volume DOWN", push the "Power" button so the phone turns on. You don't need to hold the "Power" button, but you do need to hold the "Volume DOWN" button. This will bring you straight to the bootloader screen which says
-FASTBOOT
-RECOVERY
-CLEAR STORAGE
-SIMLOCK
-HBOOT USB
Just wait for a minute. It will read your storage card. This takes about 30secs and there is a progress bar on the top right. It's reading the PC36IMG.zip file you placed on the card.
2G) Once that's done, it says, "Do you want to start update?" Volume UP=YES Volume Down=NO. Hit "Volume UP" and then wait.
2H) Once that's done, it says, "Update Complete. Do you want to reboot device?" Volume UP=YES Volume Down=NO. Hit "Volume UP" and you will reboot.
Skip all the account setups and whatever else. You just want to get to the Home screen so you can go to the next step.
2I) Once your back to the home screen, go back to the Market place, go to downloads, and you should still see Estrongs and Android Terminal. You need to download/install them again.
2J) Open Estrongs File explorer. Long-press on the file to rename the file "PC36IMG.zip" --> "eng-PC36IMG.zip"
2K) Open "Android Terminal Emulator" that you installed in step 2B, and type the following commands.
Code:
su
cat /sdcard/flash_image > /data/flash_image
chmod 755 /data/flash_image
/data/flash_image recovery /sdcard/recovery.img
If you typed each line correctly, you won't see any changes, you'll just go down to the next line w/ a "#"
2L) Power-off your phone by holding the power-button for several seconds. The top choice is "Power Off."
2M) While holding "Volume DOWN", push the "Power" button so the phone turns on. You don't need to hold the "Power" button, but you do need to hold the "Volume DOWN" button. This will bring you straight to the bootloader screen which says
-FASTBOOT
-RECOVERY
-CLEAR STORAGE
-SIMLOCK
-HBOOT USB
Just wait for a minute. It will read your storage card. It won't find the PC36IMG.zip file because it was renamed. When it's done searching, use "Volume DOWN" to highlight "Recovery" and "Power" button to select it.
The phone will reboot into Recovery Mode.
2N) From the list, use "Volume DOWN" to highlight "Wipe" and "Power" button to select it.
2O) In the Wipe menu you're going to use the "Volume DOWN" to highlight "Wipe data/factory reset" and "Power" button to select it, then "Power" button again to confirm. Once it's done, repeat this step so you "Wipe data/factory reset" twice.
2P) Use the "Volume DOWN" to highlight "Wipe Dalvik-cache" and "Power" button to select it, then "Power" button again to confirm. Once it's done, repeat this step so you "Wipe Dalvik-cache" twice.
Now push "Power" button to return to the previous menu.
2Q) Use the "Volume DOWN" to highlight "Flash zip from sdcard" and "Power" button to select it.
At this point every zip file on the root of your sdcard will show. Make sure you know which one you want to flash.
2R) Use the "Volume DOWN" to highlight your rom or radio file and "Power" button to select it, then "Power" button again to confirm. Sit back and wait. Mine took about 2mins.
When it's done, hit "Power" button to "Reboot system now" and enjoy your rooted EVO w/ a custom rom.
Section 2 Version 2 - Using the PC -
2A) Connect your EVO to the PC and select "disk drive" so that you can see your storage card from the "My Computer" window
2B) Rename the file "PC36IMG.zip" --> "root-PC36IMG.zip" and then rename "eng-PC36IMG.zip" --> "PC36IMG.zip"
2C) Disconnect the EVO from the USB, wait about 5seconds, then reconnect the EVO but this time select "Charge Only"
Note: Make sure you have USB Debugging turn on
Menu>Settings>Applications>Development>USB Debugging
2D) Open a "run" window by hitting the Windows key + "R" in the command line type (or cut/paste)
Code:
c:\evo-recovery\adb-windows shell
then hit "OK"
2E) In the window that opens, type (do not cut/paste this)
Code:
cat /sdcard/flash_image > /data/flash_image
chmod 755 /data/flash_image
/data/flash_image misc /sdcard/mtd-eng.img
If you typed each line correctly, you won't see any changes and the line will just repeat once when you hit enter. Each command takes a second or two.
2F) Power-off your phone by holding the power-button for several seconds. The top choice is "Power Off."
2G) While holding "Volume DOWN", push the "Power" button so the phone turns on. You don't need to hold the "Power" button, but you do need to hold the "Volume DOWN" button. This will bring you straight to the bootloader screen which says
-FASTBOOT
-RECOVERY
-CLEAR STORAGE
-SIMLOCK
-HBOOT USB
Just wait for a minute. It will read your storage card. This takes about 30secs and there is a progress bar on the top right. It's reading the PC36IMG.zip file you placed on the card.
2H) Once that's done, it says, "Do you want to start update?" Volume UP=YES Volume Down=NO. Hit "Volume UP" and then wait.
2I) Once that's done, it says, "Update Complete. Do you want to reboot device?" Volume UP=YES Volume Down=NO. Hit "Volume UP" and you will reboot.
Skip all the account setups and whatever else. You just want to get to the Home screen so you can go to the next step.
2J) Once your back to the home screen, the EVO should be connected as "Charge Only"
Note: Make sure you have USB Debugging turn on
Menu>Settings>Applications>Development>USB Debugging
2K) Open a "run" window by hitting the Windows key + "R" in the command line type (or cut/paste)
Code:
c:\evo-recovery\adb-windows shell
then hit "OK"
2L) In the window that opens, type (do not cut/paste this)
Code:
cat /sdcard/flash_image > /data/flash_image
chmod 755 /data/flash_image
/data/flash_image recovery /sdcard/recovery.img
reboot recovery
If you typed each line correctly, you won't see any changes and the line will just repeat once when you hit enter. Each command takes a second or two. The last command will reboot your phone into recovery mode.
2M) From the list, use "Volume DOWN" to highlight "Wipe" and "Power" button to select it.
2N) In the Wipe menu you're going to use the "Volume DOWN" to highlight "Wipe data/factory reset" and "Power" button to select it, then "Power" button again to confirm. Once it's done, repeat this step so you "Wipe data/factory reset" twice.
2O) Use the "Volume DOWN" to highlight "Wipe Dalvik-cache" and "Power" button to select it, then "Power" button again to confirm. Once it's done, repeat this step so you "Wipe Dalvik-cache" twice.
Now push "Power" button to return to the previous menu.
2P) Use the "Volume DOWN" to highlight "Flash zip from sdcard" and "Power" button to select it.
At this point every zip file on the root of your sdcard will show. Make sure you know which one you're using.
2Q) Use the "Volume DOWN" to highlight your rom or radio file and "Power" button to select it, then "Power" button again to confirm. Sit back and wait. Mine took about 2mins.
When it's done, hit "Power" button to "Reboot system now" and enjoy your rooted EVO w/ a custom rom.
****Nand Backup and Nand Restore****
There are 2 options for making backups and restoring.
1) The easy method is to use Rom Manager. Install Rom Manager from the Market.
2) Put your phone into Recovery Mode and do all the steps manually.
Section 3 - Rom Manager Nand Backup/Restore -
3A) Go to the Market and download/install "Rom Manager" by ClockworkMod and then open it.
There is a free one and a donation one.
3B) Once it's opened, select "Flash ClockworkMod Recovery"
3C) Confirm your phone is an HTC Evo (CDMA)
Wait a couple minutes while it does it thing. When it's finished you'll get a "Successfully flashed ClockworkMod recovery!"
3D) Select "Backup Current Rom" and you'll have the option of naming it. Default is the Date and Time (2010-06-23-22.25.19) YYYY-MM-DD-HH-MM-SS
And that's it. Rom is backed up. If you try to flash another rom and don't like it or you make changes and mess something up, you can just restore the backup you just made and be right back where you were.
3E) To restore the Rom, select "Manager and Restore Backups"
3F) Select the Rom from the list of available backups. (You'll have the option to Restore/Rename/Delete)
3G) Choose Restore and select which parts you want to restore. All of them are checked by default.
You're choices are;
Restore Boot
Restore System
Restore Data
Restore Cache
Restore SD-Ext
Selecting all them will do a complete restore of your rom. I haven't experimented to see what the different parts do.
Section 4 - Manual Nand Backup/Restore -
You'll need to put your phone into Recovery mode first.
4A) Connect the EVO to the pc and select "Charge Only"
4B) Open a "Run" window by hitting the Windows key + "R" in the command line type (or cut/paste)
Code:
c:\evo-recovery\adb-windows reboot recovery
This will reboot the phone directly into Recovery Mode if you've done Rooting Part I & II
4C) Use the "Volume DOWN" to highlight "Backup/Restore" push the "Power" button to select it.
4D) Use the "Volume DOWN" to select "Nand backup" push the "Power" button to select it.
4E) You'll be asked if you want to create a Nandroid backup. Press "Power" button to confirm any other key to abort.
While it's creating a backup, it will say "Performing Backup" and show dots "....." across the bottom of the screen. It will fill-up about 3 rows of dots before it's done.
And that's it. Rom is backed up. If you try to flash another rom and don't like it or you make changes and mess something up, you can just restore the backup you just made and be right back where you were.
4F) To restore the Rom, do steps 4A-4C (skip 4D/4E) and use the "Volume DOWN" to select "Nand restore" push the "Power" button to select it.
4G) Use the "Volume DOWN" to select "HTXXXXXXXXXXX" (this will be your device #) push the "Power" button to select it.
4H) Use the "Volume DOWN" to select "BDS-XXXXXXXX-XXXX" (this will be the date of your backup) push the "Power" button to select it and "Power" to confirm it.
When it's done restoring, push "Power" twice to reboot.
****ROOTING AFTER OTA 1.47.651.1 (Full Root)**** Thanks to SteelH
This is for Full Root access after someone has applied the OTA 1.47.651.1. If you accepted the OTA or it was done for you when you bought your phone, use this guide. To check which version you're on, go to Menu>Settings>About Phone>Software Information>Software Number. If it says "1.47.651.1" this section is for you.
If you're on version "1.32.651.1" or "1.32.651.6" then use the ****ROOTING Part I and Part II (Full Root)**** instructions in section 1 & 2.
NOTE: Yes there are a lot of steps. Read through them once before you try it. The only tricky part is step 5Q. I actually had to reboot my phone and do 5Q again because I was too slow the 1st attempt. Other than that step, it's all pretty easy.
Before you start
Before you start anything, your phone needs to be able to connect to the pc. If you haven't done so before, install HTC Sync. There is a folder on the sdcard that contains a version of HTC Sync or you can download a newer version from their site. It doesn't matter which version because you're not going to use it. We just need the drivers installed so the phone can communicate with the PC.
Next, make sure "USB Debugging" is turned ON.
Menu>Settings>Applications>Development>USB Debugging
If it's turned on, every time you connect your phone to the PC, you'll see "/!\ USB Debugging connected" in the notifications on the phone.
Items you'll need
1- eng-PC36IMG.zip - Mirror 1 - (Place this on your sdcard and rename it PC36IMG.zip)
2- Rooting OTA Files.zip - This zip contains 5 files you will extract to your sdcard (flash_image, mtd-eng.img, part1, part2, recovery.img)
Now you sdcard should have these files -
3- evo-recovery - Extract this folder to your C:\ drive so you should see C:\evo-recovery
4- Any custom rom you want to load. If you don't want a custom rom, then at least install the rooted version of the Sprint Rom --> here <-- (place this rom on your sdcard too)
Section 5 -
5A) Connect your EVO to the PC and select "disk drive" so that you can see your storage card from the "My Computer" window
5B) Copy the file eng-PC36IMG.zip to the storage card, make sure to rename it PC36IMG.zip. Don't unzip it and don't put it in a folder. Just copy the file and rename.
5C) Take the "Rooting OTA files.zip" you downloaded and unzip all 5 files to the storage card. Don't put them in a folder.
At this point, you should have 6 new files on your storage card as shown in the picture above under items needed.
5D) Select Menu>Settings>Privacy>Factory data reset>Reset phone>Erase everything
Now you're phone is being reset. Once you're back to the home screen, continue to the next step (you don't need to fill in your account info, just skip past the setup to get to the home screen)
5E) Connect the EVO to the pc and select "Charge Only"
Note: Make sure you have USB Debugging turn on
Menu>Settings>Applications>Development>USB Debugging
5F) Open a "run" window by hitting the Windows key + "R" in the command line type (or cut/paste)
Code:
cmd
then hit "OK"
5G) In the window that opens, type (or cut/paste this)
Code:
cd c:\evo-recovery
Now you should be a prompt that says "c:\evo-recovery>"
5H) Now type (or cut/paste this)
Code:
adb-windows shell
Now you should be a "$" prompt
5I) Now type (do not cut/paste this)
Code:
sh /sdcard/part1
If you typed it correctly, you won't see any changes and the line will just repeat once, when you hit enter.
Then you will get a message that says "power down your phone from the power menu and re-run"
5J) Power-off your phone by holding the power-button for several seconds. The top choice is "Power Off." At this point, DO NOT TURN THE PHONE BACK ON!
On your pc you should have the cmd window open and once the phone is off, you will be at the "c:\evo-recovery>" prompt again. This next step will help you later. Do it now, while the phone is off, and it will make things easier later on.
5K) At the "c:\evo-recovery>" prompt, type (or cut/paste this)
Code:
adb-windows shell /data/local/part2
Because the phone is off, this will not work. You should get a message that says "error: device not found"
Now turn your phone back on. Once it's on the home screen continue with the next step. You should still be at the "c:\evo-recovery>" prompt.
5L) Now type (or cut/paste this)
Code:
adb-windows shell
Now you should be a "$" prompt
5M) Now type (do not cut/paste this)
Code:
sh /sdcard/part1
If you typed it correctly, you won't see any changes and the line will just repeat once, when you hit enter.
Then you will get a message that says "visit http://bit.ly/ad0pRn in the EVO Internet browser app"
The website you visit doesn't matter. It just needs to be a flash site that will trigger the exploit. Here's what I used.
5N) Open the Internet browser on your phone and go to this website "www.tinyurl.com/evo1234"
Once the page tries to load, the info on the pc will change. It will say "refresh that page or reopen it, reboot and run part2"
On your phone's browser, you need to refresh the page.
Note: Some people get an error at this point that says:
Code:
/sdcard/part1: cannot create /data/app-cache/com.android.browser/BEC48C17295CAF9
F550BCD500A0A6F03
/data/app-cache/com.android.browser/DE25D64D198E4BF84672045F0EAEE6CE
/data/app-cache/com.android.browser/EAFCD74DF11E57A3571B1E4D0B768134/foo: directory nonexistant
reboot and run part2
If you get this error, check the FAQ in post #2 for "Getting an error on step 5N"
5O) In the address bar of your phone's browser, on the far right, is the refresh icon. (Looks like 2 arrows in a circle) Hit refresh.
After the page reloads on the phone, go back to the command prompt on your pc. Make sure you're prepared for 5Q before you do 5P.
5P) Now type (do not cut/paste this)
Code:
reboot
You're phone will reboot.
As soon as the phone turns back on, while it's still booting up and is on the "HTC EVO 4G" screen, you need to do step 5Q.
Remember in step 5K when you typed "adb-windows shell /data/local/part2" That was done so that now you don't have to type it again.
On your keyboard, you can use the "UP" arrow key to cycle through commands you previously typed in the command window. For step 5Q, you'll need to hit the "UP" arrow key until you get to "adb-windows shell /data/local/part2" that you typed earlier. Should only be "UP" arrow once or twice.
5Q) While the phone is booting up, on your keyboard hit the "UP" arrow key until you see the "adb-windows shell /data/local/part2" you typed in 5K. Once you see that, hit enter.
If you get a message that says "error: device not found" do it again. "UP" arrow once and hit enter. Keep doing this while the phone is booting up until you get a message that says "part 2 is scanning." This will not work until your phone connects to the pc. You have a very short window from the time it connects until it passes the "HTC" welcome screen. I just kept entering it over and over until it worked. I actually entered it 10x's before the phone actually connected and the command worked.
Alternately, if you have sounds enabled on your pc, you'll hear when the phone connects again and you can enter the code once it connects, but you have a small window of time.
If you miss your window, then it will just sit at the "part 2 is scanning" for a long time and your phone will go to the home screen.
Just power off the phone, and start again from this step. Remember to enter the code over and over while the phone is booting up.
If it works, you'll initially get a message that says "part 2 is scanning" then after a short time (mine took about 15secs) you'll get a message that looks similar to this
Code:
/app-cache/com.android.browser/BEC48C17295CAF9F550BCD500A0A6F03/.foo.PWsZ8k
crw-rw-rw- root root 90, 2 2010-07-05 19:37 mtd1
That was the hard part. The rest is easy.
5R) Now type (or cut/paste this)
Code:
adb-windows shell
Now you should be a "$" prompt
5S) Now type (do not cut/paste this)
Code:
cat /sdcard/flash_image > /data/local/flash_image
chmod 755 /data/local/flash_image
/data/local/flash_image misc /sdcard/mtd-eng.img
If you typed each line correctly, you won't see any changes and the line will just repeat once when you hit enter. Each command takes a second or two.
5T) Power-off your phone by holding the power-button for several seconds. The top choice is "Power Off."
5U) While holding "Volume DOWN", push the "Power" button so the phone turns on. You don't need to hold the "Power" button, but you do need to hold the "Volume DOWN" button. This will bring you straight to the bootloader screen which says
-FASTBOOT
-RECOVERY
-CLEAR STORAGE
-SIMLOCK
-HBOOT USB
Just wait for a minute. It will read your storage card. This takes about 30secs and there is a progress bar on the top right. It's reading the PC36IMG.zip file you placed on the card.
5V) Once that's done, it says, "Do you want to start update?" Volume UP=YES Volume Down=NO. Hit "Volume UP" and then wait.
5W) Once that's done, it says, "Update Complete. Do you want to reboot device?" Volume UP=YES Volume Down=NO. Hit "Volume UP" and you will reboot.
5X) Once your back to the home screen, the EVO should be connected as "Charge Only"
Note: Make sure you have USB Debugging turn on
Menu>Settings>Applications>Development>USB Debugging
5Y) Open a "run" window by hitting the Windows key + "R" in the command line type (or cut/paste)
Code:
c:\evo-recovery\adb-windows shell
then hit "OK"
5Z) In the window that opens, type (do not cut/paste this)
Code:
cat /sdcard/flash_image > /data/flash_image
chmod 755 /data/flash_image
/data/flash_image recovery /sdcard/recovery.img
reboot recovery
If you typed each line correctly, you won't see any changes and the line will just repeat once when you hit enter. Each command takes a second or two. The last command will reboot your phone into recovery mode.
5AA) From the list, use "Volume DOWN" to highlight "Wipe" and "Power" button to select it.
5AB) In the Wipe menu you're going to use the "Volume DOWN" to highlight "Wipe data/factory reset" and "Power" button to select it, then "Power" button again to confirm. Once it's done, repeat this step so you "Wipe data/factory reset" twice.
5AC) Use the "Volume DOWN" to highlight "Wipe Dalvik-cache" and "Power" button to select it, then "Power" button again to confirm. Once it's done, repeat this step so you "Wipe Dalvik-cache" twice.
Now push "Power" button to return to the previous menu.
5AD) Use the "Volume DOWN" to highlight "Flash zip from sdcard" and "Power" button to select it.
At this point every zip file on the root of your sdcard will show. Make sure you know which one you're using.
5AE) Use the "Volume DOWN" to highlight your rom or radio file and "Power" button to select it, then "Power" button again to confirm. Sit back and wait. Mine took about 2mins.
When it's done, hit "Power" button to "Reboot system now" and enjoy your rooted EVO w/ a custom rom.
F.A.Q. and Videos
***********F.A.Q.***********
Q. What is Rooting?
A. Root is the user name or account that by default has access to all commands and files on Linux, Android or other Unix-like operating system. It is also referred to as the root account, root user and the superuser.
Q. Why would I want to Root my EVO?
A. Rooting gives you full control over the phone. It allows you to run programs that require root permission, like "Wireless Tether for Root Users" or "Titanium Backup." It also allows you to backup/restore your rom and to load custom roms or different radios.
Q. Does Rooting void my warranty?
A. Yes, if you root your phone, "technically" speaking, you did void your warranty. However, if you need to return your phone to Sprint, you can put the phone back to stock/unrooted by flashing a stock rom. http://shipped-roms.com/shipped/Supersonic/
Q. My EVO has the OTA 1.47.651.1, can I still root my phone?
A. Follow the steps in ****ROOTING AFTER OTA 1.47.651.1 (Full Root)****
Q. What is Full-Root vs. just Rooting Part 1?
A. Full-Root is the steps that give you full control over all the files on the phone. Part 1 (Section 1) only gives you Superuser Permissions but Part 2 (Section 2) allows you to actually write/change system files.
Here's a PC analogy -
Part 1 would let you install apps and remove those apps (but only those apps you installed). You can't change files on the C: drive, only files on your external storage.
I.E. You could install Firefox and then remove it. But you can't remove MS Paint or Internet Explorer because they are on the C drive and you don't have access to it.
Part 2 also lets you change files that came w/ your operating system.
I.E. You could install Firefox and then remove it. You could also choose to remove preloaded programs like MS Paint or Internet Explorer. You could even go to the C drive and delete every important file on there and ruin your pc.
Q. What does Rooting Part 1 only do?
A. Part 1 (Section 1) of the Rooting process is just to give you Superuser Access. In other words, you can install/run a program that requires special permission. The problem is that it won't give you a Superuser Permission Icon. Many of the programs that need root access also need the SU Icon. Without the icon, they won't work. If you only do Part 1 (Section 1) of the tutorial, YOU WILL HAVE PROBLEMS. You need to do a full-root in order to take advantage of all the benefits of rooting.
Q. What does Rooting Part 1 only NOT do?
A. If you only did Part 1, and nothing else, then;
It does not allow you to remove OEM installed apps. Like Sprint TV or NASCAR or Sprint Navigation.
It does not allow you to install programs on your sdcard.
It does not allow you to install custom roms.
It does not allow you to install newer radios.
To do any of these things, you need to do a full-root using Section 1 & 2 or Section 5, depending on what version your EVO is on.
Q. Can I remove Sprint apps?
A. Yes, if you have full-root access. However, this tutorial is not about how to become an android chef, it's about getting root access and backing up/restoring and flashing new roms. If you don't like the Sprint apps, there are other instructions on how to get rid of them, but you will need full-root access. Or, there are several custom roms that have them removed already.
Q. How can I tell if I rooted my EVO correctly?
A. Super easy way to figure out if you're rooted.
Make sure USB Debugging is on.
Menu>Settings>Applications>Development>USB Debugging should be checked
Connect your phone using "Charge Only"
Open a "Run" window and type "c:\evo-recovery\adb-windows shell"
If you get a "$" you're not rooted
If you get a "#" you're rooted
Click -->here<-- to see a picture of this.
Additional note: If you're on 1.47.651.1 and you believe you're rooted, you'll see the "$" first, type "SU" and hit enter. You'll get a pop-up on your phone for Superuser Permissions to "Allow" or "Deny" access. Click "Allow". If it changes to a "#" you're rooted. If you get "permission denied" you're not rooted.
Q. How can I tell if I have full-root access?
A. Go to the Market and install/open "Quick Boot" by Sirius Applications Ltd. Choose "Recovery." If you're phone boots into the recovery screen w/ the menu options, you have full-root, if you get stuck at the /!\ screen, you do not have full-root access yet.
Q. Getting an error on step 5N, what should I do?
A. Some people get an error at step 5M that says:
Code:
/sdcard/part1: cannot create /data/app-cache/com.android.browser/BEC48C17295CAF9
F550BCD500A0A6F03
/data/app-cache/com.android.browser/DE25D64D198E4BF84672045F0EAEE6CE
/data/app-cache/com.android.browser/EAFCD74DF11E57A3571B1E4D0B768134/foo: directory nonexistant
reboot and run part2
tophyr figured out a solution and posted it --->HERE<---
In an attempt to keep this guide complete, I'll just copy his directions in this post.
I don't have the exact directory names, but the process to get beyond where you're stuck is this: (Type the bold parts, my comments are in the italics)
Code:
[B]cd /data/data/com.android.browser/flashlite
mv sharedobjects sharedobjects-[/B]
[I]The move command may fail - don't worry if it does[/I]
[B]ln -s /data/app-cache/com.android.browser/ sharedobjects
cd /app-cache/com.android.browser
ls[/B]
Here you should see at least one directory looking like 'BEC48C17295CAF9F550BCD500A0A6F03'. If there are multiple, repeat the following three lines for each. If there are not any, then refresh the website and/or find a new flash app (perhaps a game like mentioned above, or something) and repeat the 'ls' command after the app loads. You should then see a directory like the above.
Code:
[B]cd <long-ass-directory>[/B] [I](You can use wildcards.. if it starts with B like the above, do 'cd B*'[/I]
[B]cat /system/bin/rsync /system/bin/rsync /system/bin/rsync > foo
cd ..[/B]
These pretty much take care of what part1 tries to do, but likely fails to, if it's unable to outright delete the relevant directories. After running these commands manually, reboot the phone and follow the steps for part2 and beyond, and it *should* work. Did for me.
***********End of F.A.Q.***********
***********Videos***********
**Rooting - Full Root Parts I & II - Wipe - Flash - Without a PC or ADB Shell**
There are notes throughout the video that tell you what step of the video you are watching. If you do this, you can then use Rom Manager from the Market for any other things you need regarding roms. (i.e. Nand Backup/Restore, Flash newer roms/radios)
http://www.youtube.com/watch?v=DzEot2oYKbw
These older videos are here for reference if anyone wants to use the PC method.
The first video shows me doing the Rooting/Recovery/Nand Backup/Wipe/Flash.
After I loaded a custom rom, I use Rom Manager to load a custom rom again. Rom Manager works great, but I would suggest everyone do the manual method the first time. Once you're on a custom rom, Rom Manager is definitely the way to go.
**Rooting - Recovery - Nand Backup - Wipe - Flash - Rom Manager**
http://www.youtube.com/watch?v=Oja2a6O96wQ
The second video is my doing part 2 of the rooting process. This will give you full system access. This part is not absolutely necessary, but it does allow you to use the Nand Restore option to replace all your settings the way you had them. Plus, it gives you full control of the phone from the phone. No need to connect to pc next time you want to load a new rom.
**Full Root - Unlocking NAND Protection**
http://www.youtube.com/watch?v=tUXTB0eydwE
You are GOD..
This is for all of you that need your hand held.. hehe.. no really.. this is great stuff here..
I thought Fast's hands were tired from all the hand holding he's done at the other site, guess not
Looks great, as usual Bro.
@all new Android Friends- read, read again then watch Fast's videos. It helps. A Lot.
<3 all I can say
A quick n00b question...
I'm currently using 1.47 OTA version, but if I follow the instruction, will I be still at 1.47 or will the version be reverted to 1.32 with full root? It sounds like Simpleroot will revert the version to 1.32, but just wondering how this will result in after the full root of 1.47.
Thanks a lot for the detailed instruction!
Sweet, think I am getting somewhere. I went and checked to see if I was in fact rooted from when I tried following the first 1.47 OTA root guide. I get the # sign, thinking I should be good. But I guess I never went and took care of the superuser control. I type su in cmd and nothing prompts on my phone. Was this supposed to have happened at the very end of my root attempt? I didn't see it in the guide ... seemed as if when the guide ended it suggested that was it.
Unless something didn't properly get done ... but I got through the entire guide without any errors ... everything appeared to have been finished. superuser apk, from the market, effectively do the job, or is it all the same?
Any insight would be greatly appreciated, feel like something extremely minor is holding me back. Holding me down. -_-'
beesneazy said:
Sweet, think I am getting somewhere. I went and checked to see if I was in fact rooted from when I tried following the first 1.47 OTA root guide. I get the # sign, thinking I should be good. But I guess I never went and took care of the superuser control. I type su in cmd and nothing prompts on my phone. Was this supposed to have happened at the very end of my root attempt? I didn't see it in the guide ... seemed as if when the guide ended it suggested that was it.
Unless something didn't properly get done ... but I got through the entire guide without any errors ... everything appeared to have been finished. superuser apk, from the market, effectively do the job, or is it all the same?
Any insight would be greatly appreciated, feel like something extremely minor is holding me back. Holding me down. -_-'
Click to expand...
Click to collapse
If you are seeing the # then you should be all set.
The current Market version of Superuser is not the most up to date I believe.
whitslack has a flashable zip in his thread about fixing 4G that allows you to install the most up to date version.
This would only be needed I would think if you are staying on rooted stock. Most chefs include the SU app.
Hope that answers your question.
Edit:Come to think of it-even rooted stock should have the latest su app. So my question to you is after completing the root what ROM did you jump to?
Like I said above, if you have a # you should be all set but I don't *think* you are on 1.47 after this process, check your software #.
@st0921-this would apply to your question too. Since at the end of the process you flash the eng-PC36 my guess is that you are not on 1.47.
I say "guess" because I was safely rooted before the OTA and not run this process.
CLARIFICATION-As I state below eng-PC36 unlocks NAND so while you may be on 1.47 it is not a rooted ROM. You'll need to flash a rooted version of 1.47.
This is awesome! Thanks for sharing
If we are adding a custom rom, do we just add the zipped rom file to the sd card, or do I unzip it, then add to sd card?
Thank you.
winmonewbie said:
If you are seeing the # then you should be all set.
The current Market version of Superuser is not the most up to date I believe.
whitslack has a flashable zip in his thread about fixing 4G that allows you to install the most up to date version.
This would only be needed I would think if you are staying on rooted stock. Most chefs include the SU app.
Hope that answers your question.
Edit:Come to think of it-even rooted stock should have the latest su app. So my question to you is after completing the root what ROM did you jump to?
Like I said above, if you have a # you should be all set but I don't *think* you are on 1.47 after this process, check your software #.
@st0921-this would apply to your question too. Since at the end of the process you flash the eng-PC36 my guess is that you are not on 1.47.
I say "guess" because I was safely rooted before the OTA and not run this process.
Click to expand...
Click to collapse
Thanks a lot for the response, am also getting a little assistance from another forum member (vballboarder) and I think I get what the problem might be. Am going to try it in a minute.
Thing is, and I'll try to word this as best I can, is that I went through the guide, no problems, got to the end and it all seemed to go. At the end of the post it linked to Toast's 2nd part so I thought that was, naturally, the next step. I guess I was under the impression that the superuser icon would show up when I booted back into the phone. It wasn't there so I didn't want to proceed and possibly mess something up.
FW version: 2.1-update1
Baseband version: 1.36.00.04.02
Kernel version: 2.6.29-as94cf60 / [email protected] #1
Build number: 1.17.651.1 CL160858 test-keys
Software number: 1.17.651.1
Browser version: WebKit 3.1
PRI version: 1.34_003
PRL version: 60662
Like I said, I didn't want to proceed with fear of doing something irreversible. Things have changed, no doubt.
"forum user": "So, did you not do the 1.47 ROM? You just rooted and stopped? If you do the 1.47 rooted rom you won't have any problems at all, and it includes the superuser app."
^^^ Is this seriously all I need to do now? I am confusing the hell out of myself I think.
I CANT COMPLETE STEP 5Q! :S i have successfully completed all the previous steps and everything comes out as instructed.... any tips?
JuggZaPoppiN said:
If we are adding a custom rom, do we just add the zipped rom file to the sd card, or do I unzip it, then add to sd card?
Thank you.
Click to expand...
Click to collapse
Do not unzip. Just place it on your card in its zipped form.
beesneazy said:
Thanks a lot for the response, am also getting a little assistance from another forum member (vballboarder) and I think I get what the problem might be. Am going to try it in a minute.
Thing is, and I'll try to word this as best I can, is that I went through the guide, no problems, got to the end and it all seemed to go. At the end of the post it linked to Toast's 2nd part so I thought that was, naturally, the next step. I guess I was under the impression that the superuser icon would show up when I booted back into the phone. It wasn't there so I didn't want to proceed and possibly mess something up.
FW version: 2.1-update1
Baseband version: 1.36.00.04.02
Kernel version: 2.6.29-as94cf60 / [email protected] #1
Build number: 1.17.651.1 CL160858 test-keys
Software number: 1.17.651.1
Browser version: WebKit 3.1
PRI version: 1.34_003
PRL version: 60662
Like I said, I didn't want to proceed with fear of doing something irreversible. Things have changed, no doubt.
"forum user": "So, did you not do the 1.47 ROM? You just rooted and stopped? If you do the 1.47 rooted rom you won't have any problems at all, and it includes the superuser app."
^^^ Is this seriously all I need to do now? I am confusing the hell out of myself I think.
Click to expand...
Click to collapse
Ah, gotcha. Yup, pick the ROM of your choosing and flash it.
I'm trying to unroot and run this process so I have a better understanding but I'm having RUU issues.
I think the process is giving you root access on your non-rooted ROM. In general this is not a good idea as things won't gel, even if you install SU.
So flash custom or rooted stock and you should be fine.
Toast Part 2 unlocks NAND, it doesn't install a ROM per se.
winmonewbie said:
@st0921-this would apply to your question too. Since at the end of the process you flash the eng-PC36 my guess is that you are not on 1.47.
I say "guess" because I was safely rooted before the OTA and not run this process.
CLARIFICATION-As I state below eng-PC36 unlocks NAND so while you may be on 1.47 it is not a rooted ROM. You'll need to flash a rooted version of 1.47.
Click to expand...
Click to collapse
Thanks for the clarification. So, if I want a rom with 1.47 update built-in, then i can flash a custom rom at step 5AD) after i save the zip file into the sd card?
Ahh ok, reading comprehension has taken a serious hit lately. Or something.
So when flashing this ROM, I then proceed to the second step, nand backup for future purposes, and then it's go time?
cw269484 said:
I CANT COMPLETE STEP 5Q! :S i have successfully completed all the previous steps and everything comes out as instructed.... any tips?
Click to expand...
Click to collapse
From what I know that step is tricky as it requires good timing/ What exactly are you seeing?
st0921 said:
Thanks for the clarification. So, if I want a rom with 1.47 update built-in, then i can flash a custom rom at step 5AD) after i save the zip file into the sd card?
Click to expand...
Click to collapse
You got it!
beesneazy said:
Ahh ok, reading comprehension has taken a serious hit lately. Or something.
So when flashing this ROM, I then proceed to the second step, nand backup for future purposes, and then it's go time?
Click to expand...
Click to collapse
You COULD Nand backup at that point thought I'm not sure of the point of having that ROM backed up, like I said (and could be wrong) you have a non-rooted version of 1.47.
I would flash the next ROM, set it up, and back THAT up.
winmonewbie said:
You COULD Nand backup at that point thought I'm not sure of the point of having that ROM backed up, like I said (and could be wrong) you have a non-rooted version of 1.47.
I would flash the next ROM, set it up, and back THAT up.
Click to expand...
Click to collapse
Well, about to run through this thread;
http://forum.xda-developers.com/showthread.php?t=715915
Sounds like it would also fix my WiMAX radio which hasn't been working since going through the initial root process. And then, as I'm told, this will give me my superuser access? That's the idea I'm getting, then I could set everything back up. Back it up, and if I wasn't feeling future ROMs I could go back if I chose, or try another. Apps and such? I didn't really "set" things up the first time around as I was expecting to go through this and get it going.
Or, once again, am I wrong? LOL I hate to clutter the thread. -_-'
beesneazy said:
Well, about to run through this thread;
http://forum.xda-developers.com/showthread.php?t=715915
Sounds like it would also fix my WiMAX radio which hasn't been working since going through the initial root process. And then, as I'm told, this will give me my superuser access? That's the idea I'm getting, then I could set everything back up. Back it up, and if I wasn't feeling future ROMs I could go back if I chose, or try another. Apps and such? I didn't really "set" things up the first time around as I was expecting to go through this and get it going.
Or, once again, am I wrong? LOL I hate to clutter the thread. -_-'
Click to expand...
Click to collapse
It's all good my Friend. You are on the right track for sure.
I dont have 4G but I did run through whitslacks steps. That will give you a rooted stock ROM with the updated wimax and radio. (and SuperUser once you flash the included zip) It will work as long as your mac address isnt busted.
If you run that and everything is ok then backing that up would be a good idea.
Whether you back it up immediately post flash or after you have all your settings and apps the way you like them is completely up to you.
"OMFG."
Thank you, good sir.
I guess I thought this was where I was sitting after doing the initial root.
Your help is greatly appreciated. On with LeBron ... I guess. Not sure why I'm watching this ... disappointment is sure to follow.
finally completed step 5q, but now after i type
/data/local/flash_image misc / sdcard/mtd-eng.omg
i get:
"error writing misc: permission denied"
help!
:s
I received my transformer today and looked on google for how to root it.
I followed these instructions posted by UBRock on androidforums.com: (as I'm new I cannot post outside links, so I copied the instructions at the end)
After step 4a, my TF booted up like it normally would, with the EE pad screen. Then my screen went to what is shown in the attachment.
I'll turn the screen off, and it will turn on and off by itself.
I've googled and haven't found any issues with rooting this device.
Did I just kill this thing in a few hours? I followed every instruction and had no issues until this.
I bought it off amazon if that matters in case I have to return it. I really hope there's a solution, I got it for a vacation I'm leaving for on Monday.
instructions:
I used this to root my Transformer after the official 3.1 update and it works great. Fast and easy!
The only thing you have to do with ADB is to make sure you have adb installed properly on your computer. Everything is done via scripts.
xda-developers - View Single Post - [ROM] Transformer 3.1 pure root
Quote:
Originally Posted by fone_fanatic View Post
Ok, just did this and worked flawlessly, have root and CWM in under 10 minutes!
I'll replay step by step what i did to help those that are still confused. (it looks long but its really not, i was just very detailed causing this to be more of a "take my hand and i'll walk you through it")
Some background info. Highly recommend reading these if you don't know what either is!
Rooting Explained + Top 5 Benefits of Rooting by androidpolice.com
What is ClockWorkMod recovery and how to use it by addictivetips.com
STEP 1. Make sure you have all the correct asus drivers installed. Not sure if this is necessary but i had them all installed previously and i didn't run into a single issue.
1a. Head over to Asus Support/download page for the transfomer
1b. Select your PC's operating system from the drop down box.
1c. Download and install the USB driver, Asus Sync, and EEE Pad Pc Suite (don't think this one is needed but i installed them all when i first got my tf).
Step 2. Verify that you have adb running properly.
Since adb.exe is included in the download, you really don't need the sdk or adb from elsewhere.
2a. connect your tf via USB to your PC after installing the driver and other apps from step 1.
2b. Open Command prompt on your pc (win key+R) and open (and extract) Tf_rootkit_31 (link at bottom of post).
2c. Navigate to /tf_rootkit_31/root_app/ folder from the downloaded and extracted file, drag "adb.exe file to the open command prompt window.
(it should read something like C:\....\tf_rootkit_31\adb.exe)
2d. After the "adb.exe" press space bar and type "devices" (w/o quotes ofcourse) press enter.
If it says "List of Devices attached" and under that a 15 mixed numbers and letters (serial number) followed by device then adb is working!
If NOT, look at the stickies or search on google on getting adb to work on your OS.
STEP 3. Now the fun begins Here we will put the TF in APX mode and install the APX driver.
3a. Shut your TF off and while plugged into your PC, hold the volume UP and Power button until your PC makes that USB device plugged in sound and there is a notification about installing drivers.
3b. Open up the driver install thing in status bar and press on cancel (or whatever it is to get it to stop searching online for the driver).
3c. Open Device manager, scroll down to "Other Devices" (might be named something else in xp or vista) and you should see APX something with a small exclamation mark in a yellow triangle.
3d. Right click it, select "Update Driver Software..." -> "Browse my computer for driver software" -> "let me pick from list ..." -> click next -> "have disk" -> Browse -> navigate to the downloaded tf_rootkit_31 folder, open usbpcdriver folder and select "NvidiaUsb.inf" -> open, and all it to install, Ignore the unsigned error, let it install anyway.
STEP 4. Get to installing! Now your TF should be in APX Mode (if memory serves me right the screen should turn on.
4a. Go to the downloaded tf_rootkit_31 folder and double click on root.bat (on the TF screen it should say something along the line of "...update successful..."
4b. (OPTIONAL) if you want clockwork mod recovery, then go ahead and double click cwm.bat [Follow STEP 6 to update CWM]
4c. Restart TF, once rebooted make sure USB Debugging is enabled (Settings->Applications->Development)
4d. double click root_app.bat (this installs su and superuser.apk via adb, so command prompt will open up and do its adb thing and reboot your TF)
STEP 5. Confirm completion and CELEBRATE!
5a. Open your app drawer up after reboot and check to see if the Superuser app is there, if so install an app that requires root access (root explorer, adfree, titanium backup etc) and once you open it up, if you get a box requesting super user permission the you got it working!
5b. do a naked/underwear dance!
STEP 6. Update CWM recovery!! You will need a microSD card
6a. Go over to the CWM thread and download latest version of CWM recovery
6b. Place that downloaded .zip (DO NOT UNPACK) on your microSD card
6c. power TF off, then hold voume down + power button, when you see white writing in the top left of the screen press volume up and you should now bee in CWM recovery. Use volume up/down to move through the options and power button to select.
6d. Scroll down to "Install zip from sdcard" press power button then select "Choose zip from sdcard" and now it should list what is on your microsd, Scroll down and select the .zip you downloaded (as of this writing latest version is named recovery-3.1.0.1-solarnz-R3-240511-1908.zip)
6e. Follow instructions on screen, should be straightforward. And now your CWM is updated!
Tf_RootKit_31: Megaupload AND dropbox mirror: Dropbox (thanks tharonald1981)
Click to expand...
Click to collapse
well after running the NVFlash back to stock it went back to what it was when i opened the box and seems to be working with no issues. I'm definitely scared to flash again
MoldyPoldy said:
well after running the NVFlash back to stock it went back to what it was when i opened the box and seems to be working with no issues. I'm definitely scared to flash again
Click to expand...
Click to collapse
how did you do this becuase i followed the same instructions as you and all i was left with the the asus startup splash screen but won't boot further..
gtaguy said:
how did you do this becuase i followed the same instructions as you and all i was left with the the asus startup splash screen but won't boot further..
Click to expand...
Click to collapse
I can't post links, but it's the thread "Asus Transformer NVFlash Stock 3.1 Recovery Roms" on transformerforums.com
You guys extracting the 3 img files and putting it in the NVFlash root folder?
after sweating it for alittle while i was able to do as you guys said above.. downloaded the files placed them in the nvflash folder and recovered the system back to original state. Happy to say that im back to 3.1 now i have to work on trying to get the 3.2 pushed ota.. I do think this rom i just pushed into it is not factory original cuase now i can see the post and the 3.1 rom is rooted.. but im just glad to be back up and running with this amazing tablet..
Hello. Has anyone rooted the Ulefone Power 6 yet? Im looking to have TWRP installed onto my new Power 6. My goal is to figure out a way to add user profiles, as it currently does not have them activated. I read online that you could edit the .prop to have any android activate the user profiles, but i cannot do this without my phone being rooted. Thanks in advance.
Start Here
Dvalin21 said:
Start Here
Click to expand...
Click to collapse
Sorry, This is for the original Ulefone Power, not the Power 6. Different phones. The instructions didn't lead me to anything useful. I have since update my phone to the latest firmware via the stock update app. I still haven't found a successful way to root the Power 6. There is this thread (https://www.getdroidtips.com/root-ulefone-power-6/), but the ADB commands to not work, and does not fastboot my phone to install the patched image. But either way, the instructions do not include a TWRP, so Im back to square one. HELP!
How to root Ulefone Power 6 (Build Power_6_SF1_V07) Updated 9/22/2019
OK. It was tough, but I finally found a way to root the Ulefone Power 6. I still haven't figured out a way to install TWRP, but that's because i have to build a custom recovery, and that's too advanced for me. So, anyone is welcomed to help out with building a custom recovery for TWRP. As for the root, This is what you will need:
Pre-Requirements:
Device battery charged up to 50%.
Developer Options enabled with OEM Unlocking and USB Debugging enabled
Remember to take a full backup of device data (Internal Storage, SMS), it will get formatted.
A Windows or Mac PC/Laptop is necessary to flash Magisk
A USB cable to connect your device with your PC
Download Links:
Download Minimal ADB Fastboot 1.4.3 (Portable). Extract it to your desktop.
It's best to give administrator privileges to the tools before you use them. To give them admin privileges:
Right click on adb.exe and select "Properties" at the bottom of the menu. Click on the "Compatability" Tab and check the "Run this program as an Administrator" box. Click on the "Apply" button and then the "OK" button to close the properties window.
Repeat the same process for the "cmd-here.exe" and the "fastboot.exe" files.
Ulefone USB Drivers. Extract it to your desktop and make sure you install the drivers.
MTK USB Drivers. Extract it to your desktop and make sure you install the drivers.
Latest Ulefone Power 6 Stock ROM. Or you could make a back up yourself. (latest rom as of 2/25/20 is GQ3081SF1_M860B1_Ulefone_20190921_V07(Non-EU) ).Extract it to your desktop.
MTK SP Multi Port Download Tool. This will be used to flash the most recent Ulefone rom on your device. Extract it to your desktop.
Download Magisk Manager
After downloading the Stock ROM (will be a .ZIP file), extract it to your PC.
Connect your device via USB cable
Find the "boot.img" file inside the Stock Rom folder you just extracted and copy only the "boot.img" file to your devices storage.
Copy Magisk Manager.apk to your devices storage
Using your device, install Magisk Manager
Open the Magisk Manager on your device.
Select "Install" from the first option next to "Magisk is not installed" and again select install.
Now, tap on "Select and Patch a File".
Go to your devices storage where you have copied the "boot.img" file earlier and select it.
Magisk will start patching the boot image.
Once the boot image is patched, Magisk will save the image on your "Download" folder located on your devices storage.
Locate the patched image (magisk_patched.img) and copy the "magisk_patched.img" to your PC. Make sure the patched image (magisk_patched.img) is inside the same folder as the extracted ADB and Fastboot tool folder on your desktop.
Open/run MTK SP Multi Port Download Tool
Click on File from the Menu located at the top right and select "Open Download Agent File"
Locate and select "MTK_ALLInOne_DA.bin", located in the same folder as the MTK SP Multi Port Download Tool folder.
Press the "Open buton" to select the file and close the window.
Now, click on the "Scatter File" button located at the top left.
Locate and select the XXXXXXXX_scatter.txt file located inside the extracted Ulefone Power 6 Stock Rom folder.
Press the "Open buton" to select the file and close the window.
Now, tick the "BootRom+PreLoader COM Sel All" check box located under the "scatter file" button.
Now, Click on the "Scan" button located at the bottom right.
Select Yes from the pop up window
Now, power off you device and disconnect your device from your PC by removing the USB cable from your device.
Now, reconnect the USB cable to your device while it is powered off.
MTK SP Multi Port Download Tool should detect your device and a green bar should appear confirming the connection with the words "Scan Success!" to the left of the green bar.
Press the "Stop all" button located at the bottom right
Disconnect and reconnect your device from your PC
Uncheck the "BootRom+PreLoader COM Sel All" box and check only the line with the green bar.
Click on the tiny "Start" button located to the right of the green bar.
You can confirm the flash was successful when the words "PASS" is visible to the right of the tiny "Start" & "Stop" buttons
Once the flashing is complete, you can close MTK SP Multi Port Download Tool and power on your device.
Configure your device to get to the home screen (skipping as many options as you can. You will have to format one more time) and enable Developer Options, OEM Unlocking and USB Debugging again.
Make sure your device is connected to your PC.
Now, you need to open up a command window (cmd window) inside the Minimal ADB Fastboot 1.4.3 (Portable) folder. To do this, open the "cmd-here.exe" file.
Next, enter the following command in the cmd window:
adb devices
(this command will confirm your device is connected to your PC via ADB )
Your device will show a pop up window asking for permission to connect via ADB. Click on the "Always Trust This Device" and Accept the connection
If successful, you should see the word "Device" to the right of your devices name on the list that the cmd window created.
Next, enter the following command:
adb reboot-bootloader
(This command will boot your device into fastboot/bootloader mode. It will turn off and the device will have a black lit screen)
Check that your device is connected to your pc by entering the following command:
fastboot devices
(this command will confirm your device is connected to your PC via fastboot/bootloader mode ) If successful, you should see the word "Device" to the right of your devices name on the list that the cmd window created.
Next, enter the following command:
fastboot flashing unlock
(if nothing happens, press the Volume up+ on your phone to start the unlocking of the bootloader)
(this will unlock your bootloader)
Next, enter the following command:
fastboot getvar unlocked
(this will confirm you have unlocked your bootloader. It will say "unlocked: yes")
Next, enter the following command:
fastboot flash boot magisk_patched.img
(This will replace your stock image with the patched image you created using Magisk Manager)
Next, enter the following command to reboot your phone:
fastboot reboot
Install magisk manager using your file manager. Make sure to follow directions when it asks you to give special permissions to install.
Open Magisk Manager and click on "OK" when it starts up and asks you for "additional setup".
Congratulations! Your device is rooted.
Extra notes:
If you come across a red watermark with the Chinese words and "Tee Keys" and/or "Google Keys" on the top right of your devices screen, this is how you fix it.
make sure your device is turned on and connected to your PC.
Open "cmd-here.exe" located in the Minimal ADB Fastboot 1.4.3 (Portable) folder.
Next, enter the following command:
adb shell pm uninstall -k --user 0 com.mediatek.factorymode
(This command will not do anything at the moment, but will remove the watermark after you reboot your device)
Next, enter the following command to reboot your device:
adb reboot
The watermark should be removed when your device restarts again.
ENJOY!
19Henry83 said:
OK. It was tough, but I finally found a way to root the Ulefone Power 6. I still haven't figured out a way to install TWRP, but that's because i have to build a custom recovery, and that's too advanced for me. So, anyone is welcomed to help out with building a custom recovery for TWRP. As for the root, This is what you will need:
. . . . .
. . . . . . . . . . .
. . . . . . . . . . . . . . .
ENJOY!
Click to expand...
Click to collapse
Thanks a heap for all these instructions, would not have been able to do this without them.
Just a few extra pieces of information for anyone else caryring out the above steps:
- If you your stock ROM doesn't have a file manager in order to open/execute the MagiskManager APK file then using Chrome to download the APK file will allow you to execute it.
- in the SP Multi Port Tool, after checking the line with the green bar and clicking start you'll notice the time in seconds counting next to the start button. At this point you may need to unplug your USB cable and replug it in order for the SP Multi Port Tool to detect the devices and actually start properly
- If the SP Multi Port Tool requires a checksum.ini file you can follow the instructions on the hovatek site (Google 'checksum.ini generatemediatek hovatek' I'm a new user so can't post links):
Note there is a download link for the CheckSum_Gen.zip file which will require you to register for an account on the hovatek website. You can create a junk/throw away account with a fake email as it doesn't require email confirmation. Also all of the files inside the CheckSum_Gen.zip folder need to be placed inside of the stock ROM folder where the scatter file is located.
- The watermark can only be removed after the MagiskManager carries out its additional setup and after root access is complete.
Still hoping to find a compatible TWRP recovery. If anyone builds one please let us know!
Hi, 19Henry83
I did try your method and it works great. I rooted my Power 6. The thing is I did this in hope to fix a freezing touchscreen issue. Touch screen frezzes and I need to lock/unlock my phone constantly to fix it. Now I'm convinced this is not a software issue and I will return the phone to the seller. So I wanted to get back to the original firmware. When I do that however there is still that red watermark and my IMEI is deleted. Is there any way to get back to the factory software and not have the red watermark, as I assume it will void my warranty.
I Need help please ,, I need the TWRP Recovery, Tool / Utility for the Ulefone Power 6, I have looked for it in many web pages and I cannot find it, all the ones I find have the same name "3.3.1 Power 6" and not It works for me when I install them, I get the same recovery that I had when I try to enter
jiroscop said:
Hi, 19Henry83
I did try your method and it works great. I rooted my Power 6. The thing is I did this in hope to fix a freezing touchscreen issue. Touch screen frezzes and I need to lock/unlock my phone constantly to fix it. Now I'm convinced this is not a software issue and I will return the phone to the seller. So I wanted to get back to the original firmware. When I do that however there is still that red watermark and my IMEI is deleted. Is there any way to get back to the factory software and not have the red watermark, as I assume it will void my warranty.
Click to expand...
Click to collapse
Hello Jiroscop. I had the same problem and only noticed after i read your post. Now, a couple months later, i managed to use an IMEI changer to insert my IMEI found on my original box where my phone came in. It should have two IMEIs. I don't know if i can explain on this forum. Try researching it on your own and get back to me if you cannot find a way to fix your phone.
NOTE: you will need your original IMEI's, changing the IMEI's with anything other than the original ones will brick your phone.