[Q] true S-Off check - G2 and Desire Z Q&A, Help & Troubleshooting

Can anybody tell me how to check if you have true S-Off or not ??

what do you mean with "true s-off"? eng-bootloder?

Run this command
Code:
dd if=/dev/block/mmcblk0p7 bs=1 count=2 skip=2559 | hexdump -C
if the output is '00000000 ff 00' you are S-OFF
if the output is '00000000 ff 01' you are S-ON
-Nipqer

Nipqer said:
Run this command
Code:
dd if=/dev/block/mmcblk0p7 bs=1 count=2 skip=2559 | hexdump -C
if the output is '00000000 ff 00' you are S-OFF
if the output is '00000000 ff 01' you are S-ON
-Nipqer
Click to expand...
Click to collapse
Ran in adb shell, works perfectly, many thanks!

Nipqer said:
Run this command
Code:
dd if=/dev/block/mmcblk0p7 bs=1 count=2 skip=2559 | hexdump -C
if the output is '00000000 ff 00' you are S-OFF
if the output is '00000000 ff 01' you are S-ON
-Nipqer
Click to expand...
Click to collapse
I ran this command in terminal and came up with ff 01'
When I hboot it says that I have S-Off.

You have fake S-OFF then.
The eng hboot ignores the S-ON flag.
If your hboot ever gets overwritten by a ship one, then you'll have to go through heaps of steps to get back to root
-Nipqer

So, how do we get true s-off then?

You have to use gfree to gain true S-OFF, however gfree only works on certain kernels.
You have to use a stock kernel from roms 1.34 or lower, or this kernel should work
I think there is an experimental version of gfree that works on clockwork recovery 3.0.2.4, but I'm not sure if the arguments differ for it.
-Nipqer

GinoAMelone said:
So, how do we get true s-off then?
Click to expand...
Click to collapse
I had fake s-off (used rage to root). I installed gfree today to gain true s-off.
1) I installed froyo 2.2 tmobile stock rooted rom (link below)
2) Flashed radio 26.03.02.26 zip (gfree works only with certain radios, see wiki. You can re-flash to your current radio after you are done gaining true s-off. Just remember your current radio version.)
3) Followed the g2 hacks guide/video (or use the G2 XDA wiki if you want, last link.)
4) I Installed fresh copy of G-Lite rom, re-flashed my current radio, made new backup with CWM.
http://forum.xda-developers.com/showthread.php?t=836042 <-- i flashed OTA odex rom.
DO NOT INSTALL THE TMOBILE SYSTEM UPDATE that comes up when you boot into froyo.
http://forum.xda-developers.com/showthread.php?t=970809 <-- G2 Radios
http://g2hacks.com/g2-hacks/how-to-unlock-sim-on-your-g2-phone/ <-- G2Hacks.com Guide
http://forum.xda-developers.com/wiki/HTC_Vision#Got_it._Next--_what_is_this_.22SuperCID.22_thing.3F
(scroll down to "Unlock the Phone, Set SuperCID, and Turn Radio S-OFF " and start from there)

Thanks for the info and help!

didn't work
Nipqer said:
Run this command
Code:
dd if=/dev/block/mmcblk0p7 bs=1 count=2 skip=2559 | hexdump -C
if the output is '00000000 ff 00' you are S-OFF
if the output is '00000000 ff 01' you are S-ON
-Nipqer
Click to expand...
Click to collapse
i tried this in TE and it says "unknown operand cont"
anybody have an idea what i need to do? i have no idea how to use ADB shell and it's been years since i've played DOS.
---------- Post added at 04:03 PM ---------- Previous post was at 03:50 PM ----------
Nipqer said:
Run this command
Code:
dd if=/dev/block/mmcblk0p7 bs=1 count=2 skip=2559 | hexdump -C
if the output is '00000000 ff 00' you are S-OFF
if the output is '00000000 ff 01' you are S-ON
-Nipqer
Click to expand...
Click to collapse
toquer said:
i tried this in TE and it says "unknown operand cont"
anybody have an idea what i need to do? i have no idea how to use ADB shell and it's been years since i've played DOS.
Click to expand...
Click to collapse
ok so i found a guide on how to use ADB shell and tried the command and here is what was returned...
"cannot open for read: Permision denied"
so what do i have to do before i type this command?

First off I assume you have adb installed on you computer. From here you either need to edit the path in environmental variables or change directories to the proper place. If your in vista or windows 7 open the folder adb is located in, hold the shift key and right click, choose open command here.
Now to test, have your phone plugged in and have debugging activated on your device (under application settings, development settings)
In cmd type
Adb devices
If a few numbers and letters pop up your good, that's your devices, if it says waiting or no device or something then you did something wrong and we can go from there
Sent from my HTC Vision using xda premium

toquer said:
i tried this in TE and it says "unknown operand cont"
anybody have an idea what i need to do? i have no idea how to use ADB shell and it's been years since i've played DOS.
---------- Post added at 04:03 PM ---------- Previous post was at 03:50 PM ----------
ok so i found a guide on how to use ADB shell and tried the command and here is what was returned...
"cannot open for read: Permision denied"
so what do i have to do before i type this command?
Click to expand...
Click to collapse
This may sound like a dumb question, but did you allow superuser permission to Terminal Emulator? If not you will get "cannot open for read: Permision denied" . Open Terminal Emulator and type in su and hit enter, you should get a message saying superuser permision granted. Then just type or paste the command to check for true s-off.
$ su
# dd if=/dev/block/mmcblk0p7 bs=1 count=2 skip=2559 | hexdump -C
Sent from my T-Mobile G2

Related

[Q] Unrooting for warranty return

I rooted my phone using the gfree method outlined in the wiki, but made a Nandroid backup of stock before I started anything. I restored the backup; is there anything else I need to do before sending it back?
I noticed that still have the Superuser app in my app drawer, and I wasn't able to follow the instructions for S-OFF here (http://forum.xda-developers.com/wiki/index.php?title=HTC_Vision#Turning_S-On) as it said "Permission denied" when I type cd /data/local (I also noticed that I don't have the /data/local folder anymore on my sd card).
Gfree gives you an option to turn S-off or S-on, go back to the wiki and re-read it, the code below is copied from the Wiki and I highlighted the options in red for you, just run gfree again with the -s option
Code:
gfree usage:
gfree [-h|-?|--help] [-v|--version] [-s|--secu_flag on|off]
-h | -? | --help: display this message
-v | --version: display program version
-s | --secu_flag[COLOR="red"] on|off[/COLOR]: turn secu_flag [COLOR="Red"]on[/COLOR] or [COLOR="red"]off[/COLOR]
-c | --cid <CID>: set the CID to the 8-char long CID
-S | --sim_unlock: remove the SIMLOCK
-f | --free_all: same as --secu_flag off --sim_unlock --cid 11111111
As far as superusers app, just go into the app manager and remove it.
Sorry, I should've clarified that I don't have gfree anymore. I tried again and this is the prompt I get:
$ su
su
# cd data/local
cd data/local
# chmod 777 gfree
chmod 777 gfree
Unable to chmod gfree: No such file or directory
# ./gfree
./gfree
./gfree: not found
#
Push the gfree file back to data/local and rerun the commands except with -s option read the wiki again and use the right commands.
Sent from my HTC Vision using XDA App
All right, got my phone back to stock unrooted and with S-ON. Here's what I did (note that my circumstances my be different than yours so try this at your own risk):
I rooted and S-OFFed using the rage (v 0.03-this will come into play later) method on the wiki (http://forum.xda-developers.com/wik...sion#Rooting_the_Vision_.28G2.2FDZ.29_and_DHD). I did this right when I got the phone, so no OTA update (I had 1.19). Downloaded ROM Manager and did a Nandroid backup at this point (in my above post I said I made a backup right at the beginning which I was mistaken on). Then I went ahead and flashed CyanMod.
Phone earpiece broke, so I had to get the phone back to stock. First I restored my backup ROM (so back to 1.19 again). Used the unroot guide (http://forum.xda-developers.com/showthread.php?t=835971), and during step one, I got the following error:
E:Board does not support mtd utils.E:Failure at line 344:
write_raw_image PACKAGE:boot.img BOOT:
Installation aborted.
Failure at line 6:
install_zip SDCARD:/stock_root.zip​Some others seemed to get this error as well and it looked benign. Continued and rebooted the phone. Figured this would be a failure, so I followed the HexEditor steps. Turns out the misc.img file was already the right version, but I renamed it and ran dd if=/sdcard/miscnew.img of=/dev/block/mmcblk0p17 just in case.
Step 2 ran without any problems, so now I had a stock phone with S-OFF. To turn it back on, I temp rooted the phone (just follow the TEMP Root steps in the wiki). I then tried to follow the S-ON directions on the wiki (http://forum.xda-developers.com/wiki/index.php?title=HTC_Vision#Turning_S-On), but the phone would automatically reboot after the dd line while not changing S-OFF.
Then I realized that I could use ./gfree -s on to turn S-ON since I was using 0.03, which worked perfectly. Rebooted to remove the temp root, and did a factory restore for good measure, and I believe I have a fairly pristine G2 ready for replacement.
Thanks to all the wikis and threads for their help!
I have a question about restoring to factory settings. Cant you just use the RUU from HTC (if you have a Desire Z that is) and just run that? Wont that just put it back to factory settings?

[Q] Unable to unlock TMobile G2

Hi all,
I recently obtained the TMobile G2 and its unlock code.
I inserted a foreign SIM and entered the unlock code.
However during the unlock reboot process, i manually rebooted it.
Since then it has not asked for any Unlock code no matter what.
I have also tried factory reset as well but it did not help. Please support!!
But the sim is still not showing any network? Make sure the sim is not old/out of date/.... make sure it is working in another handset. If it is, then you will need to gfree root and super Cid as there have been issues regarding network unlock codes.
I tried two sim cards which worked fine on the other phone, however did not work on my G2 - showed up as no network.
what is gfree root and super cid? any pointers on that?
Just use gfree, it will SIM unlock as well as giving you full radio S-OFF and SuperCID. See http://forum.xda-developers.com/wik...Phone.2C_Set_SuperCID.2C_and_Turn_Radio_S-OFF . You will need at least temp root to run it.
Thanks folks...
After i use gfree/ do a temp root. How to i verify if the phone is unlocked?
nd how to revert back from that root?
zengelbaddie said:
After i use gfree/ do a temp root. How to i verify if the phone is unlocked?
nd how to revert back from that root?
Click to expand...
Click to collapse
To verify it is unlocked you will need to put in a different SIM card from the network that the phone was locked to, and see if it will recognise it.
If you only did a temp root, then if you reboot you shouldn't have root any more.
I temp root the phone- i try to insert new SIM i need to reboot rite and ill loose the root.
http://forum.xda-developers.com/wiki/index.php?title=HTC_Vision#Rooting_the_G2
this page says- "......
@CID: 11111111 <--- this response means you have superCID!
@SIMLOCK= 00 <--- this means your simlock is off.
@secu_flag: 0 <--- this means your radio is S-OFF.
....."
now what should the value be for "@SIMLOCK="??
zengelbaddie said:
I temp root the phone- i try to insert new SIM i need to reboot rite and ill loose the root.
http://forum.xda-developers.com/wiki/index.php?title=HTC_Vision#Rooting_the_G2
this page says- "......
@CID: 11111111 <--- this response means you have superCID!
@SIMLOCK= 00 <--- this means your simlock is off.
@secu_flag: 0 <--- this means your radio is S-OFF.
....."
now what should the value be for "@SIMLOCK="??
Click to expand...
Click to collapse
You can run gfree without a SIM or with your old SIM in, you don't need to put in the new one that the phone won't recognise whilst it's locked.
I'm not sure I understand your last question. I don't know what the value will be before you run gfree to unlock it, it will have some sort of value which will equate to the network it's locked to. After unlocking with gfree it should set that value to 00 as it shows.
Oh! my mistake.. if i unlock that means the SIMLOCK=00.
Ill try it out now
Thanks for the help steviewevie and wileykat as well!!
zengelbaddie said:
Oh! my mistake.. if i unlock that means the SIMLOCK=00.
Ill try it out now
Thanks for the help steviewevie and wileykat as well!!
Click to expand...
Click to collapse
Just run "gfree -f". There's no point in only unlocking part of it. Might as well own your phone... it is yours, right?
yes.. what does that command do?
-f | --free_all: same as --secu_flag off --sim_unlock --cid 11111111
Click to expand...
Click to collapse
from http://forum.xda-developers.com/wiki/index.php?title=HTC_Vision#Rooting_the_G2
Neat!! Thanks..
This is what i should do -
Unzip the gfree_temp-root.zip files to a folder.
And using adb-
$ adb push su /sdcard/su
$ adb push Superuser.apk /sdcard/Superuser.apk
$ adb push rage /data/local/tmp/rage
$ adb push busybox /data/local/tmp/busybox
$ adb push root /data/local/tmp/root
$ adb shell chmod 0755 /data/local/tmp/*
ON The PHONE:
Launch Terminal Emulator
$ /data/local/tmp/rage
Wait for the message: "Forked #### childs."
Menu > Reset Term - Terminal Emulator will exit.
Launch Terminal Emulator, it Force Closes. Launch a second time, and you'll have a root shell.
Now i have temporary root:
then in the terminal emulator
# ./gfree -f
:: This should unlock for all networks and after reboot the phone would be unrooted.
Is this correct?
zengelbaddie said:
Neat!! Thanks..
This is what i should do -
Unzip the gfree_temp-root.zip files to a folder.
And using adb-
$ adb push su /sdcard/su
$ adb push Superuser.apk /sdcard/Superuser.apk
$ adb push rage /data/local/tmp/rage
$ adb push busybox /data/local/tmp/busybox
$ adb push root /data/local/tmp/root
$ adb shell chmod 0755 /data/local/tmp/*
ON The PHONE:
Launch Terminal Emulator
$ /data/local/tmp/rage
Wait for the message: "Forked #### childs."
Menu > Reset Term - Terminal Emulator will exit.
Launch Terminal Emulator, it Force Closes. Launch a second time, and you'll have a root shell.
Now i have temporary root:
then in the terminal emulator
# ./gfree -f
:: This should unlock for all networks and after reboot the phone would be unrooted.
Is this correct?
Click to expand...
Click to collapse
You left out some commands, like the really important one where you set the permissions on gfree, just make sure to follow the guide to a "T" and you should be good. If something happens, I'm sure that one of us can help you.
EDIT: And the point of using GFree is so that its rooted not unrooted. If you don't understand it fully, I wouldn't do it, bad things happen when people try things that they don't fully understand.
Edit - never mind, didn't notice the other answers from my phone.
Sent from my HTC Desire Z

[HELP] Desire z Rooting

Hi! Could someone help me with desire Z phone on how to root?
*On this step I do got an error saying "/data/local/tmp/root not found" I already got S-Off.
Code:
# On the computer, open terminal and type the following commands:
adb push gfree /data/local
adb shell chmod 777 /data/local/gfree
# Launch the Terminal Emulator & run the following command:
/data/local/gfree -f
sync
/data/local/tmp/root
*Also after installing CWM3 when boot to recovery I got the red triangle and explamation icon.
*My Software number 1.34.707.5 do I need to downgrade this to 1.34.707.3?
Anyone got a link to a good guide for rooting Desire Z, lots of guild but some of them are different and kind of confusing. Very new to android system.
Thanks!
EDIT:
I have done this http://forum.xda-developers.com/wiki/index.php?title=HTC_Vision#Rooting_the_Vision_.28G2.2FDZ.29_and_DHD except for the HBOOT.
When reboot to recover on ROM manager I still get red triangle icon.
This are all ok.
Code:
gfree verify_cid returned:
@CID: 11111111
OK
gfree verify_secu_flag returned:
@secu_flag: 0
OK
gfree verify_simlock returned:
@SIMLOCK= 00
OK
check and see if you have superuser in your app tray.
bratboo said:
When reboot to recover on ROM manager I still get red triangle icon.
Click to expand...
Click to collapse
It's a known issue on the G2 that you need to flash the CWM multiple times. Try flashing it about 3 times, then reboot into recovery.

[Q] gfree -y: unknown operation... why?

Hi,
I had to return to stock rom for warranty and now i am trying to root it again. i have completed root and s-off operations but i can't enter recovery. when i select recovery from bootloader menu, i only see exclamation mark with black screen...
i entered these commands but second command gave me "gfree -y: unknown operation". how can i solve this?
Code:
4.a.2. gfree, install hboot and clockworkmod recovery
In the root shell (indicated by the #) that you got in the Temporary root section execute the following commands:
# cd /data/local/tmp
[B][U]# ./gfree -f -b hboot-eng.img -y recovery.img[/U][/B]
# ./root_psn
# sync
Means you are running an older version of gfree.
Only gfree 0.7 supports the -y arg.
You can find it here
(to find out what version of gfree you have, use ./gfree -v )
-Nipqer
Nipqer said:
Means you are running an older version of gfree.
Only gfree 0.7 supports the -y arg.
You can find it here
(to find out what version of gfree you have, use ./gfree -v )
-Nipqer
Click to expand...
Click to collapse
Thank you for your help but now the same command is giving me "./gfree: permission denied". why should it be?
Did you use the chmod command? Check the wiki, but it will probably be something like "chmod 755 /path/to/gfree"
chmod 755 /data/local/tmp/*
Also the command might have to be:
/data/local/tmp/gfree -v
to run gfree, unless you cd to /data/local/tmp (or wherever you pushed gfree to), in which case the '.' in './gfree' means 'this directory'
-Nipqer
Thank you all for help. Everyday i had another error. For example today i got psneuter error but i finally installed recovery...
Sent from my HTC Vision using xda premium

Gaining superCID (required for s-off)

1) Unlock device
2) root device with means of your choice
3) adb shell
4) su
5) echo -ne "22222222" | dd of=/dev/block/mmcblk0p5 bs=1 seek=20
6) reboot bootloader
7) fastboot oem readcid
confirm change of cid
This is interesting! Hopefully we will get s-off too still much needed a custom recovery thanks for this
I also thought super Cid consists of "1111111" least it did for the sensation and other phone
ilostchild said:
This is interesting! Hopefully we will get s-off too still much needed a custom recovery thanks for this
I also thought super Cid consists of "1111111" least it did for the sensation and other phone
Click to expand...
Click to collapse
check the OG dev. its posted and I posted picture.
ilostchild said:
This is interesting! Hopefully we will get s-off too still much needed a custom recovery thanks for this
I also thought super Cid consists of "1111111" least it did for the sensation and other phone
Click to expand...
Click to collapse
supercid can be 11111111 or 22222222 and probably 333333333 etc
I posted the supercid guide so i could post the s-off here http://forum.xda-developers.com/showthread.php?p=38346549, i wanted them separate as not everyone may want both.
jcase said:
supercid can be 11111111 or 22222222 and probably 333333333 etc
I posted the supercid guide so i could post the s-off here http://forum.xda-developers.com/showthread.php?p=38346549, i wanted them separate as not everyone may want both.
Click to expand...
Click to collapse
yea just found this out when i went back to main forum page thanks for this, this should push more deving for this phone too!
I just recently switched to HTC. What exactly does superCID do?
Sent from my HTC One VX using Tapatalk 2
puts your phone in a region free form, so you can and will be able to flash other roms from different region(debrand)
normall the output would be ATT_01 for USA or something along the lines thats letting the phone now to only accept roms that have region of Att_01
it worked for me too
thanks .. now to s off
Oh okay does that completely unlock the phone to use on other carriers as well?
Sent from my HTC One VX using Tapatalk 2
No this is only the cid. The cid is what region the phone is for. It is also what the ruu checks for compatibility
Sent from my HTC One X+ using xda premium
sorry for this question but how do i exactly use this command?
echo -ne "22222222" | dd of=/dev/block/mmcblk0p5 bs=1 seek=20
i have changed cid on other phones but never like this
TD4 said:
sorry for this question but how do i exactly use this command?
echo -ne "22222222" | dd of=/dev/block/mmcblk0p5 bs=1 seek=20
i have changed cid on other phones but never like this
Click to expand...
Click to collapse
Code:
1) Unlock device
2) root device with means of your choice
3) adb shell
4) su
says it right there bud... htc dev unlock device
then root your device once rooted go to cmd prompt (windows) or Terminal (mac/linux)
type adb shell
hit enter
type su
enter
then type the following command
echo -ne "22222222" | dd of=/dev/block/mmcblk0p5 bs=1 seek=20
enter
got it thanks!
i was asking because some phones require to be on fastboot mode, just wanted to make sure before doing anything
ilostchild said:
Code:
1) Unlock device
2) root device with means of your choice
3) adb shell
4) su
says it right there bud... htc dev unlock device
then root your device once rooted go to cmd prompt (windows) or Terminal (mac/linux)
type adb shell
hit enter
type su
enter
then type the following command
echo -ne "22222222" | dd of=/dev/block/mmcblk0p5 bs=1 seek=20
enter
Click to expand...
Click to collapse
When I do that it says the comands are not valid none of them. Maybe I do something wrong. I am htc unlocked and rooted. Maybe I need to do different then plug the phone and open comand prompt? Thanks
Sent from my HTC One VX using xda app-developers app
grigoriisi said:
When I do that it says the comands are not valid none of them. Maybe I do something wrong. I am htc unlocked and rooted. Maybe I need to do different then plug the phone and open comand prompt? Thanks
Sent from my HTC One VX using xda app-developers app
Click to expand...
Click to collapse
download this http://developer.android.com/sdk/index.html then go to cmd and cd to C:\Users\(user)\(where you downloaded it to)\adt-bundle-windows-x86_64\sdk\platform-tools the commands should now work :victory:
did that
deleted
---------- Post added at 05:31 PM ---------- Previous post was at 05:20 PM ----------
nathanleagan said:
download this http://developer.android.com/sdk/index.html then go to cmd and cd to C:\Users\(user)\(where you downloaded it to)\adt-bundle-windows-x86_64\sdk\platform-tools the commands should now work :victory:
Click to expand...
Click to collapse
can u please tell me step by step how am i suppose to do it? i do it and when i get to adb shell command it says its not a valid comand nor su or anything else.
grigoriisi said:
deleted
---------- Post added at 05:31 PM ---------- Previous post was at 05:20 PM ----------
can u please tell me step by step how am i suppose to do it? i do it and when i get to adb shell command it says its not a valid comand nor su or anything else.
Click to expand...
Click to collapse
when you did adb shell did it connect or did it say wrong command?
it said not recognised command
nathanleagan said:
when you did adb shell did it connect or did it say wrong command?
Click to expand...
Click to collapse
it said not recognised command
grigoriisi said:
it said not recognised command
Click to expand...
Click to collapse
look inside the folder i said to cd to is there a file called adb?
yes it is and works with only adb command not adb shell
nathanleagan said:
look inside the folder i said to cd to is there a file called adb?
Click to expand...
Click to collapse
yes it is and works with only adb command not adb shell

Categories

Resources