Related
Ok guys, first of all Scotty2 gets all the credit for the program R&D. I used my device as a test bed and have tried a couple different kernels (Gr8Gorilla's O/C Kernel and the stock kernel).
Now for the boring stuff ...
This is a very invasive way of rooting your device but the benefit is TRUE S=Off and root privileges throughout the system. As such, you do this at your own risk and if you brick your device neither Scotty2 nor myself are responsible, YOU ARE!!! Do this at your own risk!!!
This is not for the faint of heart and if you have any reservations about doing things like this do not do it.
This process will do three things for your device. I will explain them here:
1. It will set up Super CID on your device allowing you to flash any carriers rom (not just tmobile). Giving you more freedom with your choice of software. The software still needs to be device specific to the glacier for compatability reasons though. Like vodafone glacier roms etc.
2. It will subsidy unlock your device. In other words, it will SIMUNLOCK your phone allowing you to use an AT&T sim card and so on in your device without needing the unlock code from HTC.
3. Most important of all it will turn the RADIO S=Off. This is the ultimate S=Off because the radio is what controls the security flag in the first place. Once you turn it off here it is off everywhere and will allow you pure unadulterated access to your device.
This process will not change your bootloader (unless your on 0.86.0000 and you follow the optional steps).
Now, you may be asking "Why do this? I already have root from your other guide and it has given me r/w access to system and recovery. I thought this meant we had permanent S=Off." This is only partially true. We have had an engineering bootloader and "Label" s=off not radio s=off. When you turn the security off in radio it is off permanently no matter what hboot you have installed engineering or otherwise. However, it is optional but you can still copy the engineering hboot over and it will allow you to flash whatever you like without (as much) fear of bricking your device.
This guide assumes you know how to use ADB. If you do not there are guides all over XDA to show you how. There is even a really good one in this forum. Also here is a video on how to setup adb discovered by topgun303: http://www.youtube.com/watch?v=1UF5w1dKe2U
*NOTE*
For some reason this process can bork your recovery. If you notice after following the steps below that in order to reboot from recovery you have to uninstall/reinstall the battery and hit the power button, just install/reinstall clockwork recovery through Rom Manager in the android market and it will fix your problem.
CONFIRMED: Guide does work for pre-OTA devices!!! Thanks xanz!
Here we go:
If you are already permarooted per the other guide just follow the first 11 steps.
Make sure you have visionary installed on your device. (If you were already permarooted w/s=off ignore this step.)
Download this file:
http://www.mediafire.com/?s7afymwe2wb3x60 New version of gfree with more options! See below.
md5sum: b73c56ca0e21664c5756d4ad295063c5
1. Now unzip the file into your SDK tools directory.
2. Plug your device into your computer.
3. Now open explorer and hold down shift at same time you right mouse click on your SDK tools directory (platform-tools if you have the R8 version of the SDK). Select open command window here. If you are in linux (ubuntu) right mouse click on your SDK tools folder, choose actions, and choose open command window(or whatever it's called). Otherwise, open a command prompt and cd your way to your SDK tools directory.
4. Type "adb push gfree /data/local" and hit enter.
Optionally, you could dl the file to your phone use androzip or something like it to unzip the file and then use root explorer to move the file named gfree to /data/local. Not the gfree.h file. All the other files are source code inlcuded for the gnu license. This would skip the first 4 steps.
5. Now unplug your device from the computer.
6. Run visionary to gain temp root. (If you were already permarooted w/s=off ignore this step.)
7. Open terminal emulator on your device, type "su", and hit enter to gain root privileges.
8. Type "cd /data/local" and hit enter.
9. Now type "chmod 777 gfree" and hit enter to make the program executable.
10. Type "./gfree -f" and hit enter.
New features in gfree.
gfree usage:
gfree [-h|-?|--help] [-v|--version] [-s|--secu_flag on|off]
-h | -? | --help: display this message
-v | --version: display program version
-s | --secu_flag on|off: turn secu_flag on or off
-c | --cid <CID>: set the CID to the 8-char long CID
-S | --sim_unlock: remove the SIMLOCK
With the new features you can turn off one thing at a time. You can also turn security back on and set the CID back to stock if you wish. To turn simlock back on you still have to follow the revert procedures on this page as the information that is patched to turn the lock off is encrypted and we can't write back to it other than restoring the entire image.
So, if you wanted to leave simlock on but turn security off and set super CID the command would be "./gfree --secu_flag off --cid 11111111" + enter. The -f switch after ./gfree that is now in the above step (./gfree -f) just tells gfree to patch everything.
11. Wait for the program to finish and then reboot into HBoot to see if S=Off. Also, check your bootloader version. If it says s=off and has bootloader version 0.86.0000 it worked.
If you already had hboot 0.85.2007 you can check it through the hboot menu. It gives you an option for "system info" in the hboot menu. Highlight it and hit power. It should say CID = 11111111 or something like that. If it does your golden.
Congratulations!
12. If this is the first time you have rooted your device you will need to run visionary again (temproot w/set system r/w after root checked and then attempt permroot) to make root privileges permanent and then reboot again. Now "su" should work properly for you.
Gfree writes a backup of the file that it patches named Part7backup-numbers.bin on your sdcard. I suggest putting this file in a safe place as it is the only way to revert if you need to.
[Optional] Steps to flash engineering bootloader.
1. Restart your phone and plug it back into your computer.
2. Download this file: http://www.megaupload.com/?d=NN5726Z8
md5sum: df4fd77f44993eb05a4732210d2eddc6
3. Copy the file to your SDK tools directory.
4. Open a command prompt again and cd into your SDK tools directoty (platform-tools if your on the new R8 SDK).
5. Type "adb push hboot_dhd.nb0 /data/local" and hit enter.
6. Now open terminal on your device and type "su" and enter to gain root priviliges.
7. Type "cd /data/local" and enter.
8. Now type "dd if=hboot_dhd.nb0 of=/dev/block/mmcblk0p18" and hit enter.
9. You should see something like: 2048 bytes in 2048 bytes out 1048576 bytes copied blah blah blah.
10. Now restart the device into hboot and check if your bootloader version is 0.85.2007. That is what you want to see.
Congratulations, you now have a TRUE root and engineering bootloader on your shiny MT4G!!!
Procedure to revert
1. Rename the part7backup file that you already have to something just so you know that it is the original backup.
2. Open up terminal emulator or adb shell and type "su" + enter to get root privileges.
3. Type "cd /data/local" and hit enter.
4. Now type "./gfree -f" + enter to run gfree again. It will disable wp on the emmc and remove the brq filter in the kernel. (as well as make another backup, which you can delete if you wish)
5. Now run the "dd if=/where/your/part7backup-numbers.bin of=/dev/block/mmcblk0p7" and it should show the output:
xxxx bytes in
xxxxbytes out
xxxxxxxxxx copied in blah blah blah
6. Run "sync" and then reboot. (I didn't do this and it worked fine but it won't hurt either. )
If you have the engineering hboot 0.85.2007 installed you will still be showing s=off when you do the above revert steps. Follow these steps to reflash the stock hboot and turn s=on:
Download this file and unzip it to /sdcard on your device.
unroot.rar
http://www.mediafire.com/?12oi5elu7v2y8og
md5sum: aad4e64126cf8d92d7e8b5abb48fdadd
Terminal Emulator Method
1. Open up terminal editor on your device.(I prefer this method b/c you can see the output.)
a. Type "su" + enter to gain root privileges.
b. Type "cd /sdcard/unroot" + enter.
c. Type "sh unroot.sh" + enter.
d. Follow the onscreen prompts.
File Explorer Method
2. Open root explorer, sufbs, or some other file browser with root access.
a. Navigate to /sdcard/unroot.
b. Click on unroot.sh and allow it to run. Some file browsers ask permission before they execute scripts.
c. Wait 18 to 20 seconds and reboot your phone into the bootloader to check if S=on.
You now have S=ON again.
Here is a pic of the stock HBoot 0.86.0000 with S=Off to prove it.
If already on ENG bootloader, S-OFF, and perm rooted via your other guide would we be able to just run gfree for the "radio/sim" unlock?
Genocaust said:
If already on ENG bootloader, S-OFF, and perm rooted via your other guide would we be able to just run gfree for the "radio/sim" unlock?
Click to expand...
Click to collapse
Yes, that's what I did. Good call btw! I wrote the guide in a hurry just before heading to work and knew I would miss something.
My MyGlacier 4G MINE!!!
u could use root explorer to place the gfree file in data local couldn't u?
Yes you could use root explorer. I am going to revise this as soon as I get time. I'm at work right now.
As for the optional steps, you wouldn't need to do them if you already followed the other permroot guides successfully b/c you should alread have hboot 0.85.2007 installed.
My MyGlacier 4G MINE!!!
so is the 0.85.2007 is the one we want to be on?
mrpanic7 said:
my bootloader is 0.85.2007 is this the sweet one i want or the stock one?
Click to expand...
Click to collapse
Good to go. You have the engineering hboot.
Should work from either one as long as you have some kind of root access.
But ... Keep that one.
My MyGlacier 4G MINE!!!
sweet thanks, and the whole talk about subsidy unlock and flashing other device roms, is that part of the hboot im running, or the gfree file ?
Hey grankin01 this is what i have on my screen. Bec i just got this phone from warranty claim.
GLACIER PVT ENG S -OFF
HBOOT-0.85.2007 (PD1510000)
MICROP-0429
RADIO-26.03.02.26_M
eMMC-boot
oct 11 2010, 12:44:14
@mrpanic7, no its part of the gfree patch.
@topgun303, what kernel version are you running? Stock?
My MyGlacier 4G MINE!!!
sweet thanks will test tonight and comment when everything is done! how do we know if hte gfile goes thru successfully? since im already permarooted
grankin01 said:
@mrpanic7, no its part of the gfree patch.
@topgun303, what kernel version are you running? Stock?
My MyGlacier 4G MINE!!!
Click to expand...
Click to collapse
Kernal version: I have not flashed anything other kernal yet. This is what came with my phone.
2.6.32.21-g899d047
[email protected] #1
tue oct 26 16:10:01 CST 2010
Hey grankin01 I dont have adb steup, can you provide workaround for that. Meaning without adb.
Awesome man. Great job. Just to be clear. After unzipping the file, all of them need to go in the data/local folder yes?
So we can use root explorer to oaste the file, then the termunal steps?
Sent from my rooted w/s=off HTC Glacier on Iced Glacier Dark Froyo Themed 1.1.1 using XDA App
You should be able to use root explorer and yes put all files in /data/local including the hboot_dhd.nb0 file if you are going to do the optional steps.
Edit: Added mention of root explorer method between steps 4 and 5.
My MyGlacier 4G MINE!!!
hey grankin01 my phone is on engineer bootloader right now. what are the advantages of engineer bootloader vs bootloader version 0.86.0000?
Also if i flash bootloader version 0.86.0000, can i go back to engineer bootloader.
u r the maaan
after trying everything i got s=off thanx to you...but 1 lil isue the root did not stick for me after checking hboot to see if i got s=off
topgun303 said:
hey grankin01 my phone is on engineer bootloader right now. what are the advantages of engineer bootloader vs bootloader version 0.86.0000?
Also if i flash bootloader version 0.86.0000, can i go back to engineer bootloader.
Click to expand...
Click to collapse
Eng hboot will let you flash anything you want. Stock hboot will still limit your choices.
Yes you can just do the optional steps from the OP to go back to eng hboot. Actually having stock hboot will let you see if it worked without having to do anything special.
My MyGlacier 4G MINE!!!
wadie said:
after trying everything i got s=off thanx to you...but 1 lil isue the root did not stick for me after checking hboot to see if i got s=off
Click to expand...
Click to collapse
So this did work w/stock device and kernel?
Try running visionary r14 and doing permroot option. Being a stock rom you may still have to fiddle with it a little. Not quite an exact science.
My MyGlacier 4G MINE!!!
So the bootloader version 0.86.0000 provides simunlock correct? If i read correct from the first page of op. For now i think i will stay on engineer hbootloader.
Also one more thing op, I found a great video on how to setup adb. I have already got my adb setup using this. If u like you can post it in the op section. http://www.youtube.com/watch?v=1UF5w1dKe2U
Hello all,
I've had a DZ for nearly 2 weeks now, and have been holding off on installing roms, overclocking etc until there were clear, reversible guidlines available.
A few days ago I was being curious and ended up doing this the UBERROOT guide.
Essentially I temprooted using Visionary then executed the gfree script on my PC:
adb push gfree /data/local
adb shell
su
cd /data/local
chmod 777 gfree
./gfree
sync
This went well, and when I got to the bootloader I could see indeed that my S was OFF.
However, before I go any further I want to know how to reverse what I've done. This is mentioned at the bottom of the UBERROOT guide:
'run gfree, which will create a new backup of partition 7 in its unlocked state.
this will disable wp on the emmc, as well as remove the brq filter from the kernel.
at this point, you can dd if=/wherever/your/partition7-relock.img of=/dev/block/mmcblk0p7
sync; reboot'
I found the backup, although it was a .bin file not .img
I entered in the command above, but my phone rebooted before I could enter the 'sync' command. My S is still off, it would seem.
So my question to you fine people, having typed all this is:
How can I use the gfree backup to return my phone back to stock?
nofixio said:
How can I use the gfree backup to return my phone back to stock?
Click to expand...
Click to collapse
You can use the "dd" command to copy back the image of that original partition, as you mention.
However, the latest version of gfree now includes some new options to un-do that stuff, e.g. you can switch S-ON back on and change your SID via options. See the Wiki on this - http://forum.xda-developers.com/wik...Phone.2C_Set_SuperCID.2C_and_Turn_Radio_S-OFF
nofixio said:
Hello all,
I've had a DZ for nearly 2 weeks now, and have been holding off on installing roms, overclocking etc until there were clear, reversible guidlines available.
A few days ago I was being curious and ended up doing this the UBERROOT guide.
Essentially I temprooted using Visionary then executed the gfree script on my PC:
adb push gfree /data/local
adb shell
su
cd /data/local
chmod 777 gfree
./gfree
sync
This went well, and when I got to the bootloader I could see indeed that my S was OFF.
However, before I go any further I want to know how to reverse what I've done. This is mentioned at the bottom of the UBERROOT guide:
'run gfree, which will create a new backup of partition 7 in its unlocked state.
this will disable wp on the emmc, as well as remove the brq filter from the kernel.
at this point, you can dd if=/wherever/your/partition7-relock.img of=/dev/block/mmcblk0p7
sync; reboot'
I found the backup, although it was a .bin file not .img
I entered in the command above, but my phone rebooted before I could enter the 'sync' command. My S is still off, it would seem.
So my question to you fine people, having typed all this is:
How can I use the gfree backup to return my phone back to stock?
Click to expand...
Click to collapse
When you run gfree, it creates a bin file in your sd card. That bin file you shall rename it to "whatever".img, to be more specific rename it to partiiton7-relock.img.
Now once you did this, just run gfree again:
adb push gfree /data/local
adb shell
su
cd /data/local
chmod 777 gfree
./gfree
sync
Once done the above, just download terminal emulator and from there run:
su
dd if=/sdcard/partition7-relock.img of=/dev/block/mmcblk0p7
sync
exit
And reebot the phone, Now you can go and see you are S-ON.
This method above works without a problem as myself have tried several times, however as steviewevie mentioned, the new version of gfree does this easier.
buzmay said:
When you run gfree, it creates a bin file in your sd card. That bin file you shall rename it to "whatever".img, to be more specific rename it to partiiton7-relock.img.
Now once you did this, just run gfree again:
adb push gfree /data/local
adb shell
su
cd /data/local
chmod 777 gfree
./gfree
sync
Once done the above, just download terminal emulator and from there run:
su
dd if=/sdcard/partition7-relock.img of=/dev/block/mmcblk0p7
sync
exit
And reebot the phone, Now you can go and see you are S-ON.
This method above works without a problem as myself have tried several times, however as steviewevie mentioned, the new version of gfree does this easier.
Click to expand...
Click to collapse
How to get that file (partition7-relock.img)? Because I formated the card after g-free method and I runned the official Ruu, so now I have that stupid S-Off, I need it S-On...
Niiceg said:
How to get that file (partition7-relock.img)? Because I formated the card after g-free method and I runned the official Ruu, so now I have that stupid S-Off, I need it S-On...
Click to expand...
Click to collapse
You don't need the backup for that. Just check the Wiki to find the options for gfree that will set it back to S-ON
Sent from my HTC Desire Z
steviewevie said:
You don't need the backup for that. Just check the Wiki to find the options for gfree that will set it back to S-ON
Sent from my HTC Desire Z
Click to expand...
Click to collapse
I don't find anything more than this guide:
Turning S-On
If you are returning your Vision to stock, you will want to flash your stock ROM and Recovery image before starting this, as root permissions and S-Off are required for both of those processes.
Remove Gfree (turn back S-On):
When you first ran Gfree, it automatically backed up your stock partition 7 (with S-On) and placed it on your microSD card as a file named part7-(something).bin and you will need to rename this file to: partition7-relock.img
Open up your ADB command prompt on your computer (with your phone plugged in) and type the following exactly as shown:
Code:
adb shell
su
cd /data/local
chmod 777 gfree
./gfree
dd if=/sdcard/partition7-relock.img of=/dev/block/mmcblk0p7
sync
reboot bootloader
Your phone will reboot into bootloader. Look at the first line. The end should now say "S-On".
steviewevie said:
You don't need the backup for that. Just check the Wiki to find the options for gfree that will set it back to S-ON
Sent from my HTC Desire Z
Click to expand...
Click to collapse
I think they removed the automatic option for some reason, I beleive it was in version v.3 and now v.2 is back up. I was looking for that option for someone else early yesterday and noticed its not on the Wiki anymore, unless I missed it, but Im prettty sure I didn't. So I think were back to using the "dd if=/sdcard/partition7-relock.img of=/dev/block/mmcblk0p7" command.
Update: On fattire's thread they said they took down v3 because people were having problems with it and are now advising using v2 and the old restore method.
joemm said:
I think they removed the automatic option for some reason, I beleive it was in version v.3 and now v.2 is back up. I was looking for that option for someone else early yesterday and noticed its not on the Wiki anymore, unless I missed it, but Im prettty sure I didn't. So I think were back to using the "dd if=/sdcard/partition7-relock.img of=/dev/block/mmcblk0p7" command.
Click to expand...
Click to collapse
Where to get that file if i already formated the card?!
Niiceg said:
Where to get that file if i already formated the card?!
Click to expand...
Click to collapse
There is no where to get the file if you erased/formatted your sdcard without saving it somewhere else, the instructons on gfree tell you to do this:
"gfree created a backup of your original partition 7 at /sdcard/part7backup-<time>.bin you might consider copying this to a safe location on your computer."
So if you didnt do this I really dont know what you can do. I have my part7backup but I dont know if its specific to my device or if anyone can use it.
joemm said:
There is no where to get the file if you erased/formatted your sdcard without saving it somewhere else, the instructons on gfree tell you to do this:
"gfree created a backup of your original partition 7 at /sdcard/part7backup-<time>.bin you might consider copying this to a safe location on your computer."
So if you didnt do this I really dont know what you can do. I have my part7backup but I dont know if its specific to my device or if anyone can use it.
Click to expand...
Click to collapse
Well, What device you have? Z or G2? I think that it's not specific, because all phones are the same ;D
Niiceg said:
I don't find anything more than this guide:
Turning S-On
Click to expand...
Click to collapse
Look at http://forum.xda-developers.com/wik...Phone.2C_Set_SuperCID.2C_and_Turn_Radio_S-OFF
Scroll down to the bit that shows you the usage message for gfree and check out the "-s" option
joemm said:
I think they removed the automatic option for some reason, I beleive it was in version v.3 and now v.2 is back up. I was looking for that option for someone else early yesterday and noticed its not on the Wiki anymore, unless I missed it, but Im prettty sure I didn't. So I think were back to using the "dd if=/sdcard/partition7-relock.img of=/dev/block/mmcblk0p7" command.
Update: On fattire's thread they said they took down v3 because people were having problems with it and are now advising using v2 and the old restore method.
Click to expand...
Click to collapse
The latest gfree 0.03 had problems, yes, so they went back to 0.02 in the Wiki. But as my previous post shows, you can still un-do things with gfree 0.02.
The only reason to use the backup of partition 7 that I can think of is if you don't know what your original CID was to reset to, or if you want to SIM Lock your phone again (there doesn't seem to be an undo option for the SIM Unlock).
steviewevie said:
The latest gfree 0.03 had problems, yes, so they went back to 0.02 in the Wiki. But as my previous post shows, you can still un-do things with gfree 0.02.
The only reason to use the backup of partition 7 that I can think of is if you don't know what your original CID was to reset to, or if you want to SIM Lock your phone again (there doesn't seem to be an undo option for the SIM Unlock).
Click to expand...
Click to collapse
Ok, I see the option for sec-flag on/off but does that also restore the sim lock?
Sent from my T-Mobile G2 using XDA App
joemm said:
Ok, I see the option for sec-flag on/off but does that also restore the sim lock?
Click to expand...
Click to collapse
No it doesn't as far as I know, but that's why I said restoring SIM lock was the only real use for that part7 backup that I could think of.
steviewevie said:
No it doesn't as far as I know, but that's why I said restoring SIM lock was the only real use for that part7 backup that I could think of.
Click to expand...
Click to collapse
I wasn't sure myself, thanks.
Sent from my T-Mobile G2 using XDA App
steviewevie said:
No it doesn't as far as I know, but that's why I said restoring SIM lock was the only real use for that part7 backup that I could think of.
Click to expand...
Click to collapse
Okey, can you tell how to do everything? Because I don't know anything with that gfree... And there is no instruction... Please, help me get the S-On
I have PM'd the author of gfree about an option for SIM re-lock, because that would be useful. I guess you will still need some sort of carrier string which it needs re-locking to though ? Would be handy if perhaps gfree told you what that was before you unlocked it.
Im in the same boat as niiceg, I cannot find my backup and have had no luck in my searchs. Any Idea's what I can do from here?
Thanks in advance..
ps I'm guess my next step is to re root and do
su
cd /data/local
chmod 777 gfree
./gfree -s on
sync
???
bildo said:
Im in the same boat as niiceg, I cannot find my backup and have had no luck in my searchs. Any Idea's what I can do from here?
Thanks in advance..
ps I'm guess my next step is to re root and do
su
cd /data/local
chmod 777 gfree
./gfree -s on
sync
Click to expand...
Click to collapse
Yes, you just need to run "gfree -s on" as root to go from radio S-OFF to S-ON, no need to find/restore that backup.
Hi there.
I have a unbranded DHD on 2.3- 2.36.405.8. It's the official leaked version.
I'd like to root & install leeDroids new Rom based upon the official leaked one.
Could you guys possibly help me out?
I don't want to do anything major, but would like to make my phone better now as I can't see much happening after the gingerbread update. Thanks people.
Sent from my Desire HD using XDA App
Had you rooted previously before you installed the update?
Suggest you google gingerbreak to root your phone, then downgrade your phone to an earlier version so you can S-Off and you can then install custom ROMs.
Guide to downgrade http://forum.xda-developers.com/showthread.php?t=905003
Hi guys. Thanks for your response. It means a lot.
I've never actually rooted any device before, never really had the b*lls lol.
I'll check these threads out & give it a shot.
Thank you very much.
There's not much to get your berries shaking, it's just the radio replacement you should be careful with.
First thing you should do is backup your device with either Titanium or ClockworkMod, though you probably need to root in order to do this, and then anything you might do, you can always revert back to what you had.
When you get to replacing the radio version, read instructions extra careful and be sure to do everything by the book (guide) and to check the checksum on the downloaded files. This could brick your device so no extra precaution is unnecessary..
Happy flashing
Hi guys. Cheers for getting back to me.
Before I start could you tell me whether the following procedures that im going to take will or will not be the right ones please?
1st obtain gingerbreak apk and install on my phone using the downgrade guide on xda
once ive done that use file (http://xdafil.es/DesireHD/RUU/RUU_Ac...032_signed.zip) and put on my sd card..... do I rename this file?
2. Once ive downgraded to this, must i perform a ROOT again to be able to flash a new rom?
3. I want to use this ROM - [ROM&KERNEL] LeeDrOiD HD V3.0.2 GB >EPIC!< |5th May | Official GB Sense 2.1 | TV Anim
4. on the 1.32xxx version do I root and use cwm 2 or 3 and just flash the above rom?
5. When exactly do i use the easy radio off tool please? EasyS-OFF_05.zip (747.4 KB, 20804 views)
Sorry for all the questions, but would be very grateful if someone could help
Edit* also after I write this in cmd
adb push misc_version /data/local/tmp adb shell chmod 777 /data/local/tmp/misc_versi adb shell su
Do I write it exactly as it is? Or does misc_version get replaced with the name of the file?
Cheers.
ok.........
so installed and did gingerbreak, it said didnt work, but asked if i would allow super user permissions to which i said yes.
I opened up a cmd and went to downgrade folder ie; c:\users\ajay\desktop\downgrade
this is where the .zip for 1.36.405.6 is kept.
typed in that code adb etc.... and it said unrecognised command batch etc...
Could someone help us out alittle?
Im pretty dumb at this sort of stuff so my apologies guys.
Hope I manage to install a custom rom, but if i cant then thats cool too.
cheers
Here is my guide i have made and compiled together, follow that and you are done.
---------------------------------------------------------------------------------
HOWTO FLASH CUSTOM ROM ONTO GB DEVICE
Downgrade First!
You might need to format your SD card first before installing Gingerbreak, make a backup of your SD card by copying the files to a safe
place on your PC and then goto Settings - SD and Phone Storage - Click Umount SD card - Click Erase SD card - Click Mount SD card after erasing and formating the card has been
completed.
Gingerbreak help thread for problems:
http://forum.xda-developers.com/showthread.php?t=1044765
1. Download Gingerbreak from http://forum.xda-developers.com/attachment.php?attachmentid=578771&d=1303829207 and install it. Then tap root button.
2. You might get force close errors, just click the force close button and let Gingerbreak do it's job
3. Gingerbreak will in the end, usually say that something went wrong that you need to reboot etc, don't reboot! Just leave it open in your phone, and connect your phone to a PC. Charge only, USB Debugging enabled!
4. Download Android Terminal from the Market and after you installed it you can check if you are rooted, by typing su in the terminal, accept the Superuser request if it shows up and Press "Allow", if you get a "#" you are rooted and the Gingerbreak hack worked.
5. Now open up a terminal window(cmd) on your PC and go to the Downgrade folder on your PC where you downloaded the ADB files from at http://forum.xda-developers.com/attachment.php?attachmentid=483902&d=1294492245 , execute the following commands:
adb push misc_version /data/local/tmp
adb shell chmod 777 /data/local/tmp/misc_version
adb shell
su
!Now allow SuperUser in phone when dialog comes up!
If you got "#" in the result, you have temporary root! Proceed with commands:
Now type in terminal:
cd /data/local/tmp
./misc_version -s 1.31.405.6
1. Close the terminal window on your PC and set USB connection to disk drive in your phone and download PD98IMG.zip from http://www.multiupload.com/BTJ8KY0KH9 and place it on your SD card, don't extract the zip file!! Do not put the file into a folder of any kind on your SD card.
PLEASE NOTE!! If you can't set USB connection to disk drive you have to reboot the DHD, now you will be able to set USB connection to disk drive and transfer PD98IMG.zip file to SD from your PC.
2. Reboot while holding volume down, it will go to the Bootloader
3. Follow the instructions and Press "Yes" when it asks you if you want to flash PD98IMG.zip (start the update)
4. Done and reboot.
5. Proceed below with the two S-OFF methods and remove the PD98IMG.zip from your SD.
RADIO S-OFF
1. Install and download latest Visionary r14 from http://www.mediafire.com/?xhwc5m7f273l7b2
2. Open Visionary and tap temproot, then attempt permroot now. Your device will reboot.
3. Connect your phone to a computer (make sure you have USB Debugging enabled, Connect charge only!
4. Extract the Radio S-OFF zip file you dowloaded into a folder on your computer from http://forum.xda-developers.com/showthread.php?t=857537
5. Open my "Desire HD easy radio tool.exe" (Windows 7, right click & run as Administrator).
Choose the first option (RADIO S-OFF, Super-CID and Sim Unlock)
Click "Do it". There may be a SuperUser request on your phone, allow it.
6. Done.
ENG S-OFF(You need this enabled to be able to flash RADIO.IMG later)
1. Download and Extract the eng s-off zip file into a folder on your computer from http://forum.xda-developers.com/showthread.php?t=855403
2. Connect the phone to your computer in "Charge only" mode
3. Run "Desire HD easy s-off.exe" from the extracted folder
4. Click "I have RADIO S-OFF" (as you already done RADIO S-OFF earlier), IMPORTANT!
5. Click in "S-OFF" it
6. Your phone is now ENG S-OFF
7. Done
Flashing your ROM
1. Connect your phone using "Disk drive" to the computer.
2. Copy both your full-wipe-1-3.zip from http://dl.dropbox.com/u/15057375/mero01-xda/Wipe/FULL-WIPE-1.3.zip and your CUSTOM ROM zip file to your SD Card
3. Check again that both files are on your SD card because once you full wipe, you won't have a ROM anymore.
4. Disconnect your phone from your computer
5. Install and open Rom Manager from the market
6. Tap on Flash ClockworkMod Recovery and download version 3.0.2.6
7. Wait for it to download (You need a wi-fi or data connection)
8. After it is done press "Reboot into recovery"
9. If you get an icon with a phone and an exclamation mark in a triangle, remove the battery from your phone, reboot and then flash the clockworkmod recovery again
10. Once you are in the clockwork mod recovery, you may use the volume keys as directional keys (up and down) and the power button may be used as Enter.
11. I recommend you do a nandroid back-up. You must have at least 1 gb of free space.
12. Goto Backup and Restore and make a backup of current ROM if something would fail during flash.
13. Select "Install Zip from sdcard"
14. Select "Choose zip from sdcard"
15. Select full-wipe-1-3.zip (It's right under those folders)
16. Confirm by selecting the Yes option in between those "NO"s
17. Wait for it to finish
18. DO NOT REBOOT!!! In case you were not aware, you now have no rom installed
19. Once again select "Install Zip from sdcard"
20. Select "Choose zip from sdcard"
21. Select your rom zip file
22. Confirm your selection (just like with the wipe)
23. Wait for it to finish
24. Please reboot from the recovery menu and flash nothing else before you have rebooted.
Flash recommended Radio for your custom ROM:
1. Download "Radio Flash.zip" from http://www.mediafire.com/?b172o4ftj1mcpn1 and extract it contents on your PC.
2. Put the radio.img file you downloaded for your custom ROM and put it in the same folder as you extracted the "Radio flash.zip" file to.
3. Make sure USB debugging is enabled in your Desire HD before proceeding.
4. Connect your DHD to your PC with the USB cable and make sure you select USB Charge Only!
5. Now goto the Radio flash folder on your PC and execute "Start here.exe"
6. In the terminal window that comes up you will type:
adb reboot bootloader
Your DHD now goes into Bootloader state, when it is in bootloader state you will type:
fastboot flash radio radio.img
When the terminal says that the process is done you will type:
fastboot reboot
7. Now the DHD reboots and everything is done.
!!GOOD TO KNOW!!
TESTING BEFORE FLASHING ANYTHING
Testing Root
1. Download Android Terminal Emulator from the Market
2. Run it and type in "su"
3. Accept the Superuser request if it comes
4. A "#" should appear if nothing is wrong with your root!
Testing Eng S-off and Radio S-OFF
1. Power Down Your Device
2. Go to Bootloader
3. If it says Ace PVT ENG S-OFF your phone is ENG S-OFF.
4. use Volume down to get to system info and tap power button to select
5. check CID for CID-11111111 (if you have this all is done 100%)
6. Reboot
Checking the device state:
1. Go to the bootloader (turn fastboot off, turn off phone, hold vol- and power)
2. If it says ACE PVT SHIP S-OFF in the first line, your device is Radio S-OFF
3. If it says ACE PVT ENG S-OFF, you have ENG S-OFF, go to System info
4. If system info CID is 11111111, your device is SuperCID5.
5. And if you can verify either Radio S-OFF or SuperCID (and you did both), it worked fine and you have both of them
6. You can check your original CID by going to radio tool folder with cmd and typing: "adb shell getprop ro.cid"
To go back to RADIO S-ON:(If you want to go back to RUU stock ROM again)
1. Flash stock ROM (RUU)
2. Temproot using Visionary
3. Use my tool, do Stock CID and S-ON (enter brand CID if you had a branded device, see second post)
4. Enjoy your factory-state phone
Prodelin said:
Here is my guide i have made and compiled together, follow that and you are done.
---------------------------------------------------------------------------------
HOWTO FLASH CUSTOM ROM ONTO GB DEVICE
Downgrade First!
Install Gingerbreak v1.2 apk which is latest, you might need to format your SD card first before installing Gingerbreak, make a backup of your SD card by copying the files to a safe
place on your PC and then goto Settings - SD and Phone Storage - Click Umount SD card - Click Erase SD card - Click Mount SD card after erasing and formating the card has been
completed.
http://forum.xda-developers.com/show....php?t=1044765
Click to expand...
Click to collapse
THIS LINK IS BROKEN.. can you check it please?
Hi thanks very much
Ill follow this guide now, and hopefully be sorted.
just quickly, where do i get recommended radio? and during...
4. Open up a cmd and go to Downgrade folder, execute commands:
adb push misc_version /data/local/tmp
adb shell chmod 777 /data/local/tmp/misc_version
adb shell
su
do i press enter after each line of text?
ajay83 said:
Hi thanks very much
Ill follow this guide now, and hopefully be sorted.
just quickly, where do i get recommended radio? and during...
4. Open up a cmd and go to Downgrade folder, execute commands:
adb push misc_version /data/local/tmp
adb shell chmod 777 /data/local/tmp/misc_version
adb shell
su
do i press enter after each line of text?
Click to expand...
Click to collapse
Yes enter after each line
For recommended Radio look into the thread of the custom ROM you will flash, it will say what radio they recommend to their ROM
Hi there.
1st thank you for being so patient with me mate, I appeciate it.
after i typed the 1st line of those commands it wouldnt have any of it. It said....
'adb' is not recognised as an internal or external command, operable program or batch file.
I think I should just leave it. Ill have all the guys on here pulling their hair out coz i cant do the simplest thing lol.
Thanks for your time anyway bud.
Revised my guide to make it easier to read and understand.
ajay83 said:
Hi there.
'adb' is not recognised as an internal or external command, operable program or batch file.
Thanks for your time anyway bud.
Click to expand...
Click to collapse
You need to type adb in the folder you have adb.
If you have adb.exe in folder c:\Downgrade you must go to that folder first and the type adb.
ahh ok.
Thank you very much bud. Legend =)
and where could i get Radio_12.54.60.25_26.09.04.11_M2 please? I read the forum and it seems to be a good recommended one.
I'll give it ago tonight or tomorrow morning and let you know how i got on.
Thanks for all your help and for being patient bud.
ajay83 said:
and where could i get Radio_12.54.60.25_26.09.04.11_M2 please? I read the forum and it seems to be a good recommended one.
Click to expand...
Click to collapse
From the Radio's thread in the development forum.
[EDIT] @Andy: Sorry, not today.
ajay83 said:
ahh ok.
Thank you very much bud. Legend =)
and where could i get Radio_12.54.60.25_26.09.04.11_M2 please? I read the forum and it seems to be a good recommended one.
I'll give it ago tonight or tomorrow morning and let you know how i got on.
Thanks for all your help and for being patient bud.
Click to expand...
Click to collapse
You can get that particular radio from:
http://tinyurl.com/6ynbecn
Mr_JMM said:
From the Radio's thread in the development forum.
[EDIT] @Andy: Sorry, not today.
Click to expand...
Click to collapse
Don't worry you have to be nice all the time. Sometimes It hurts my head being nice. I would of answered the same TBH. Its not like it isn't in a sticky.
Hi there.
gingerbreak worked!
Followed the codes and got superuser access.
I had formatted my sd card prior to doing this btw
I closed the terminal and went to change usb from charge to disk drive and the option had gone. took it out and reinserted and still it wouldnt find it for me to put .zip file on???
It would not show my sd card was there until i re booted?
Its a shame we cant just temproot it with gingerbreak and flash the rooted GB 2.3 leedroid, but then i guess this is where all this -s off stuff comes in right?
I havent got a clue now let alone to begin with lol.
Lads I think i give up =( . Thanks for all the help and advise and patience but your dealing with abit of a numpty here and we could be here a very very long time.
I appreciate all the help & Ill keep my eyes open if a way comes out to permroot 2.3 without downgrading etc...
ajay83 said:
Hi there.
I closed the terminal and went to change usb from charge to disk drive and the option had gone. took it out and reinserted and still it wouldnt find it for me to put .zip file on???
It would not show my sd card was there until i re booted?
Click to expand...
Click to collapse
Same thing happened me, i had to reboot to make SD card show up again, but that is no problem as you have already changed misc_version with adb, you can now just put the PD98 file to the SD card and reboot and flash from bootloader.
Easy.
You have come along way now, just do as i said earlier, the rest is easy, don't give up now
Hi guys. I have a brand new Desire HD, T-mobile (uk) branded.
Running Android 2.2.1
Build number 1.84.110.3 CL334589 Release-Keys
I am trying to downgrade to 1.32 so that i can root. I have made a goldcard, using various methods (HxD, goldcard helper, and goldcard tool)...Following the guides, everything seems to go to plan, no error messages or anything.
I then go through the process of....
adb push psneuter /data/local/tmp
adb push misc_version /data/local/tmp
adb shell chmod 777 /data/local/tmp/psneuter
adb shell chmod 777 /data/local/tmp/misc_version
adb shell /data/local/tmp/psneuter
adb shell
cd /data/local/tmp
./misc_version -s 1.31.405.6
Again no problems there.....When phone is rebooted into bootloader, it loads the PD98IMG.zip file, and after checking it, I always get the error "update failed, incorrect cid" I don't know where I'm going wrong, the goldcard tools are reversing the CIDs for me.....Any tips ?
Thanks
mrmcox said:
Hi guys. I have a brand new Desire HD, T-mobile (uk) branded.
Running Android 2.2.1
Build number 1.84.110.3 CL334589 Release-Keys
I am trying to downgrade to 1.32 so that i can root. I have made a goldcard, using various methods (HxD, goldcard helper, and goldcard tool)...Following the guides, everything seems to go to plan, no error messages or anything.
I then go through the process of....
adb push psneuter /data/local/tmp
adb push misc_version /data/local/tmp
adb shell chmod 777 /data/local/tmp/psneuter
adb shell chmod 777 /data/local/tmp/misc_version
adb shell /data/local/tmp/psneuter
adb shell
cd /data/local/tmp
./misc_version -s 1.31.405.6
Again no problems there.....When phone is rebooted into bootloader, it loads the PD98IMG.zip file, and after checking it, I always get the error "update failed, incorrect cid" I don't know where I'm going wrong, the goldcard tools are reversing the CIDs for me.....Any tips ?
Thanks
Click to expand...
Click to collapse
it can be by several thinks...
i would try to format the sd-card and re-do the goldcard again (goldcard tool works well) be sure about you have the correct CID in the sd card
SERGI.3210 said:
it can be by several thinks...
i would try to format the sd-card and re-do the goldcard again (goldcard tool works well) be sure about you have the correct CID in the sd card
Click to expand...
Click to collapse
I have tried the goldcard tool a few times now, with various micro SD cards (8GB samsung that was bundled with phone. 2gb sandisk. and 2gb kingston)
when I run it, selecting "mmc0" I get CID value as....
45010053454D3034479022CD0AA93E10
and it reverses it to...
003EA90ACD22904734304D4553000145 ...
Is that correct ? Then i fill in the details on PSAS and get my image emailed and load/patch the card with goldcard tool. If I try and get cid using "mmc1" I get messgae...
* daemon started successfully *
/sys/class/mmc_host/mmc1/mmc1:*/cid: No such file or directory
------------------------
Could not locate CID in output
And with gold card created, I o through the motions again, and keep getting Update failed, incorrect CID.
u can obtain temporary root???
i checked the commands of the first post and are ok...
really all the issues like this was solved formatting the sd again.. FAT for -2gb and fat 32 for 8gb sd card...
your troubble is weird...
mrmcox said:
when I run it, selecting "mmc0" I get CID value as....
Click to expand...
Click to collapse
Hmm, it might be useful to read the Downgrade guide again, mate Especially the bolded part after goldcard link..
jkoljo said:
Hmm, it might be useful to read the Downgrade guide again, mate Especially the bolded part after goldcard link..
Click to expand...
Click to collapse
Thanks for the reply. I tried to make the gold card again, using mmc2 with the gold card helper tool on the handset.
I get the reversed CID as
00b2003be96a721030303030304d531b Tired making gold card with HxD and with the gold card tool, but each time when I boot into bootloader on the phone, it loads the PD98IMG file and after checking it I get
CID incorrect!
Update fail
Press <power> to reboot
Any idea where I can be going wrong ?
Are you selecting physical disk and making sure write access is ticked in the hex editor?
Sent from my Motorola Startac running Atari 2600 software!
hey, need some help here.. i'm on stock froyo. the software version is 1.84.707.2. i downloaded the 2.36 and 1.32 version . but couldn't seem to flash both RUU at all. its an exe file. my phone entered into BOOTloader and while sending signature, the screen on pc says CID error 131. ask me to get the correct utility. my desire hd is unbranded and unrooted. its still new.. it is still S-ON. I had never rooted it or done anything to it . just wanted to make sure i have a functional RUU in backup in case i want to send for warranty.what should i do? i'm from malaysia btw
Any problems regarding CID Error mean you need a goldcard. If you've made one and you still get this error, your card isn't gold. Try using a different card.
thanks guys for all the help and replies.
I finally got my goldcard to work, ended up buying a new card and using that, and it worked first time.
I now have downgraded to 1.32, have perm root, radio s-off, and eng s-off. I've just upgraded radio to latest version, and I'm about to upgrade to android revolution HD 5.1.7.
Thanks again for all the help
andyharney said:
Any problems regarding CID Error mean you need a goldcard. If you've made one and you still get this error, your card isn't gold. Try using a different card.
Click to expand...
Click to collapse
Thanks. Even if my phone is unbranded and new, I still need a goldcard??
Sent from my HTC Desire using XDA App
dunstan92 said:
Thanks. Even if my phone is unbranded and new, I still need a goldcard??
Sent from my HTC Desire using XDA App
Click to expand...
Click to collapse
if your phone is unbranded you don't need a gold card
I will repeat what I said just incase there is any confusion.
Any CID related errors while trying to downgrade mean you need a goldcard. No if's no but's, a goldcard will be required. Remember there are unbranded builds that will not have the WWE CID.
One example is builds found in the East. WWE = x.xx.405.x Indian = x.xx.720.x
They are both unbranded, however a goldcard is required to flash from 720 to 405. I hope I've cleared things up.
andyharney said:
I will repeat what I said just incase there is any confusion.
Any CID related errors while trying to downgrade mean you need a goldcard. No if's no but's, a goldcard will be required. Remember there are unbranded builds that will not have the WWE CID.
One example is builds found in the East. WWE = x.xx.405.x Indian = x.xx.720.x
They are both unbranded, however a goldcard is required to flash from 720 to 405. I hope I've cleared things up.
Click to expand...
Click to collapse
Thank you
Sent from my HTC Desire using XDA App
Yes, you have cleared things up. Thank you very much. So if I create a goldcard and flash the ruu 1.32.405.x ,will it cause any problem if I send it for warranty service? Because I can't find the ruu with 1.84.707.2 for my phone. Is there any ruu for Malaysia or Asia yet?
Sent from my HTC Desire using XDA App
Sent from my HTC Desire using XDA App
I'm pretty sure the 405 version WWE (World Wide English) will be Ok to return as it is an official HTC build.
Alright. Thanks. So do I still need to downgrade my stock rom even with a goldcard? Am planning to flash the 2.36.405.x ruu over my current rom.
Sent from my HTC Desire using XDA App
i need some help here, im getting to section B step 23 of the guide to rooting and flashing and then something not so good is happening with my phone.
In getting "process stopped unexpectedly" messages from (android.process.acore)
they are constantly popping up.
i've previously had the problem of incorrect CID as well, but it solve after i format the MMC to FAT 32 and redo the goldcard steps
Hi guys I am currently new to this forum,
Firstly, I would like to apologize if i am somewhat lacking in knowledge in the Android OS
Currently I am moving from a jailbreak-ed iPhone 4 to a HTC Desire HD, which I want to install a custom ROM on it, as its only limited to 2.3.5 which is quite old, ( Currently on Android 2.3.5 and HTC Sense 3.0 )
I firstly downloaded the 'EasyAceRootTool from this link:
forum.xda-developers.com/showthread.php?t=2221039
I sort of deviated off the guide and sort of found out what to do, using various over guides, so the device is currently rooted ( also flashed with the a ROM which is a rooted stock ROM that came from the thread above ), which came with Superuser and 4EXT, I later installed ClockworkMod,
Next I tried flashing ROMs such as PACman, Cyanogenmod ( I picked the correct versions for the Desire HD ), using the Recovery Menu and the apps 4EXT and Clockworkmod to flash, afterwards I rebooted the phone and it is stuck on the HTC boot screen, my only option after is to restore to a backup.
One thing to note is the device isnt S-OFF, not sure if that the cause of the phone being stuck on the boot screen
Am i doing anything wrong? have I missed a step?
Your help is appreciated :good:
(Urghh just noticed i badly titled the threat)
Pindrop said:
Hi guys I am currently new to this forum,
Firstly, I would like to apologize if i am somewhat lacking in knowledge in the Android OS
Currently I am moving from a jailbreak-ed iPhone 4 to a HTC Desire HD, which I want to install a custom ROM on it, as its only limited to 2.3.5 which is quite old, ( Currently on Android 2.3.5 and HTC Sense 3.0 )
I firstly downloaded the 'EasyAceRootTool from this link:
forum.xda-developers.com/showthread.php?t=2221039
I sort of deviated off the guide and sort of found out what to do, using various over guides, so the device is currently rooted ( also flashed with the a ROM which is a rooted stock ROM that came from the thread above ), which came with Superuser and 4EXT, I later installed ClockworkMod,
Next I tried flashing ROMs such as PACman, Cyanogenmod ( I picked the correct versions for the Desire HD ), using the Recovery Menu and the apps 4EXT and Clockworkmod to flash, afterwards I rebooted the phone and it is stuck on the HTC boot screen, my only option after is to restore to a backup.
One thing to note is the device isnt S-OFF, not sure if that the cause of the phone being stuck on the boot screen
Am i doing anything wrong? have I missed a step?
Your help is appreciated :good:
(Urghh just noticed i badly titled the threat)
Click to expand...
Click to collapse
More than likely your getting stuck at the boot screen because your not S-Off. You need to flash the boot.img also with the rom which your recovery cannot due because your not S-Off I believe. (Dont Quote me on it) If im not mistaken you must first be s-off to flash a kernel, or you could try via fastboot
Yeah I have looked in to the fastboot option, cant due to the ROMs being zips, will have to look into the S-OFF stuff.
Is this suppose to happen on CMD
C:\ace-tools>adb shell dd if=/dev/block/mmcblk0p22 of=/data/local/tmp/boot.img
adb server is out of date. killing...
* daemon started successfully *
/dev/block/mmcblk0p22: cannot open for read: Permission denied
Currently doing these steps of the ACE TOOLS
In cmd:
•fastboot recovery1.img
5.boot into recovery through bootloader and Install the ROM you placed on the SD card, (via install zip fileselect the rom zip)
6.Reboot the phone, ensure the rom is working fine and you have root access you can test this by turning on usb debugging then:
•Adb shell
•Su
You should see the $ turn into a #. If this happens, congrats you have root access.
Then type this:
•Exit
Then again:
•Exit
Then:
•Adb push boot.img /data/local/tmp
•adb shell dd if=/dev/block/mmcblk0p22 of=/data/local/tmp/boot.img Currently up to here when that Permission Denied thing happens
•adb pull /data/local/tmp/boot.img
•adb push goldcard /data/local/tmp
•adb shell chmod 775 /data/local/tmp/goldcard
•adb shell cat /sys/class/mmc_host/mmc2/mmc2:*/cid
take note of the string of numbers and letters that appear.
then:
•adb shell /data/local/tmp/goldcard -c <string of numbers and letters should go here> -o /data/local/tmp/goldcard.img
•adb shell dd if=/data/local/tmp/goldcard.img of=/dev/block/mmcblk1
•adb push misc_version /data/local/tmp
•adb shell chmod 775 /data/local/tmp/misc_version
•adb shell /data/local/tmp/misc_version -s 1.11.111.1
thekool said:
More than likely your getting stuck at the boot screen because your not S-Off. You need to flash the boot.img also with the rom which your recovery cannot due because your not S-Off I believe. (Dont Quote me on it) If im not mistaken you must first be s-off to flash a kernel, or you could try via fastboot
Click to expand...
Click to collapse
You do not need to be S-Off to flash a kernel. With S-On, you can't flash to the boot partition from recovery, but you can flash it with fastboot.
Pindrop said:
Yeah I have looked in to the fastboot option, cant due to the ROMs being zips, will have to look into the S-OFF stuff.
Click to expand...
Click to collapse
No, you don't understand. You don't need to flash the whole ROM from fastboot, only the boot.img, which is in every ROM zip.
ALRIGHT, that did the trick currently now i am running on PAC 22.3.0.
Thanks for the help guys , hopefully I can handle things for now on.