• After 15+ years, we've made a big change: Android Forums is now Early Bird Club. Learn more here.

Root How to downgrade and root 2.43.661.1 and up

I can not get this to work, it always sits at
adb shell /data/local/tmp/fre3vo
How can i fix this, been trying for over an hour, could it be a gold card issue or what:confused:
 
I can not get this to work, it always sits at
adb shell /data/local/tmp/fre3vo
How can i fix this, been trying for over an hour, could it be a gold card issue or what:confused:

Reboot your device, let it load up, so everything is all fresh
make sure debugging is enabled and that your goldcard is properly made and ready to be used with the image on it.
Type the following (and only the following. each line is a new line)

adb push fre3vo /data/local/tmp
adb push misc_version /data/local/tmp
adb shell chmod 777 /data/local/tmp/fre3vo
adb shell chmod 777 /data/local/tmp/misc_version
adb shell /data/local/tmp/fre3vo -debug -start FBB00000 -end FFFFFFFF


After the exploit is found, it may kill the adb process
disconnect your device, and plug it back in.
then continue...

adb shell /data/local/tmp/misc_version -s 1.32.405.6
adb reboot bootloader

it will now check the PD98IMG.zip and ask if you would like to update by pressing volume up. If the goldcard was made incorrectly, it will give you a model id error.
 
Reboot your device, let it load up, so everything is all fresh
make sure debugging is enabled and that your goldcard is properly made and ready to be used with the image on it.
Type the following (and only the following. each line is a new line)

adb push fre3vo /data/local/tmp
adb push misc_version /data/local/tmp
adb shell chmod 777 /data/local/tmp/fre3vo
adb shell chmod 777 /data/local/tmp/misc_version
adb shell /data/local/tmp/fre3vo -debug -start FBB00000 -end FFFFFFFF


After the exploit is found, it may kill the adb process
disconnect your device, and plug it back in.
then continue...

adb shell /data/local/tmp/misc_version -s 1.32.405.6
adb reboot bootloader

it will now check the PD98IMG.zip and ask if you would like to update by pressing volume up. If the goldcard was made incorrectly, it will give you a model id error.

The above works a treat.

I was receiving CID Errors after trying relentlessly with a Goldcard. I used 3 different SD's, all Scandisk 1GB, 2GB or 8GB.

What made it work for me was using the 'MMC01' reverse number and creating a Goldcard from that.

As default, Goldcard reader and Goldcard Tool will only read the 'MMC00' and I was hitting a brick wall.

So, thats the downgrade done and carrier bloatware gone, still more to do :)
 
Now I have a little problem.

The downgrade went well and I have checked the software number which is 1.32.405.6.

However, since installing visionary r14 I cannot temp root. I choose the 'set system r/w after root' and press temp root only for the screen to flash with the visionary logo and nothing....no temp root.

Any ideas as to other ways I can do this?

Thanks :)
 
Reboot your device, let it load up, so everything is all fresh
make sure debugging is enabled and that your goldcard is properly made and ready to be used with the image on it.
Type the following (and only the following. each line is a new line)

adb push fre3vo /data/local/tmp
adb push misc_version /data/local/tmp
adb shell chmod 777 /data/local/tmp/fre3vo
adb shell chmod 777 /data/local/tmp/misc_version
adb shell /data/local/tmp/fre3vo -debug -start FBB00000 -end FFFFFFFF


After the exploit is found, it may kill the adb process
disconnect your device, and plug it back in.
then continue...

adb shell /data/local/tmp/misc_version -s 1.32.405.6
adb reboot bootloader

it will now check the PD98IMG.zip and ask if you would like to update by pressing volume up. If the goldcard was made incorrectly, it will give you a model id error.

Ok i got passed the point I was stuck on but now it is not going passed
Buffer offset: 00000000
Buffer size: 8192

Edit: So i got it working, i ran the fre3vo.cmd in the HTC ACE TOOLKIT.
 
Now I have a little problem.

The downgrade went well and I have checked the software number which is 1.32.405.6.

However, since installing visionary r14 I cannot temp root. I choose the 'set system r/w after root' and press temp root only for the screen to flash with the visionary logo and nothing....no temp root.

Any ideas as to other ways I can do this?

Thanks :)

reload the 1.32.405.6 rom, skip through the setup after it reboots and loads up, enable usb debugging, try it again.

Only install (with the shortcut in the toolkit), run on the device, choose temproot, wait, then attempt perm root, and wait.

It will probably reboot.
Its now perm rooted, and you can now use the Radio s-off and Eng s-off one click tools.
 
reload the 1.32.405.6 rom, skip through the setup after it reboots and loads up, enable usb debugging, try it again.

Only install (with the shortcut in the toolkit), run on the device, choose temproot, wait, then attempt perm root, and wait.

It will probably reboot.
Its now perm rooted, and you can now use the Radio s-off and Eng s-off one click tools.

Thank you very much for your help. The reload of 1.32.405.6 did the trick.

Did the install with the shortcut, did both s-off and now a happy owner of a rooted and HD Revolution ROM Desire HD.

One thing I did come across. As I had a branded phone (3UK) I had to create a Goldcard. No matter what I used, whether it be a 1GB, 2GB or 8GB card I could not trick the phone. What the goldcard helper was doing is copying the mmc0 Reverse CID to the clipboard and not the mmc2. After doing it manually I had no problem with all 3 cards as I tested them all.

Happy Days & Thank You Again :)
 
hi everyone,
i am very new to android.
i hv problems trying to create a gold card for my dhd
links that are provided in the forums are all broken and there's really no way i can find out how to create 1.. can somebody kindly advise if there is any alternatives pls?? thanks
android: 2.3.3
bulid number: 2.37.707.3
webkit/ 533.1
S-ON
 
Got issues let me know. I will try my best to help. This worked for me on my DHD with the software ver 2.43 less that a week ago. Fre3vo works I tell ya or I would not be rooted now. As you can see from my multiple other posts I was having issues trying to downgrade until I found this lil loophole. Wish I would have took screen shots to show my progress.

Hi aswethinkweiz,

I'm working through your guide, but when I take the PD image, its found on the memory card but I get an error that the file is corrupt in the RUU. Any ideas?

Cheers, and thanks in advance for the assistance!

Drew
 
Hi, what does it mean when after the blue loading bar completes while loading PD98IMG.zip, I dont get a prompt to update, or an error, but instead I get a much quicker gold progress bar that says 'checking PD98IMG.zip' and then when it completes it boots me back to hboot with no error at all, but not loaded... I've tried with gold cards with both mmc0 and mmc2 of my Telus 2.43 DHD... not really sure where else to go from here.

All the steps previous to this have completed without a hitch a number of times.
 
If it checks the image and goes back to the main menu, then it means the image has been altered or corrupted and isnt matching the crc checks. Redownload the image.
 
Hi everyone new Android owner i just jumped over from my iPhone 4, now one of the features I was really looking forward to on an Android phone was rooting it and I consider myself rather tech savvy but I am having a world of issues with downgrading and rooting by any method. I have a Desire HD from telus obviously running 2.3.3 and i am attempting to root the device on a XP machine SP3, every method I've tried I can't get the command prompt to either A. start up in this case, or B. in another method I tried it doesn't do anything as though it isn't connected to the phone.... I've begun to get rather frustrated and don't know what to do next so any help would be appreciated. Thanks!
 
Hi everyone new Android owner i just jumped over from my iPhone 4, now one of the features I was really looking forward to on an Android phone was rooting it and I consider myself rather tech savvy but I am having a world of issues with downgrading and rooting by any method. I have a Desire HD from telus obviously running 2.3.3 and i am attempting to root the device on a XP machine SP3, every method I've tried I can't get the command prompt to either A. start up in this case, or B. in another method I tried it doesn't do anything as though it isn't connected to the phone.... I've begun to get rather frustrated and don't know what to do next so any help would be appreciated. Thanks!

First: You need to install the latest version of HTC Sync (not so much for the sync program, but rather the drivers for the device that come with it)

Second: You're definately going to need a goldcard (this is probably the trickiest part), as our phones are heavily branded by Telus.

If you just want to downgrade (since you just got the device and dont really have much on it yet, so no need to backup), you may want to use my 9 Easy Step method, as for the most part, its just point click / run on device.

As you progress further in knowledge of your new device, and learn how to flash radio's and such, I recommend a combination of the Radio from 2.52 korean build and the Ril's from Our 2.43 build.

If you have any issues, just hit me up with a PM & I'll get your questions all sorted out.
 
While I do this process do I have to put the goldcard in the phone while performing the downgrade?

If I understand right, the gold card must be in the phone while performing the downgrade and after the process is done I can change the sd card to use my other 16 gig sd card?
 
hello all .. i am from italy and i have a desire hd .. with the 2.50.405.2 build . whit your guide i've downgrade it to 1.32.404.6 , root my phone . TNX A LOOOTTTT
 
Hi everyone. I've performed the steps with my Telus branded Desire HD with the latest OTA update to Gingerbread.
I can gain temp root, however when the phone automatically reboots, then checks my PD98IMG.zip, it checks it for approximately 2 minutes, then says Model ID incorrect!
, then indicates to hit the power button the reboot the phone.

Any ideas here? I followed every step 100% correct, however I cannot get past this step to load the rootable original rom onto the phone.
 
Hi everyone. I've performed the steps with my Telus branded Desire HD with the latest OTA update to Gingerbread.
I can gain temp root, however when the phone automatically reboots, then checks my PD98IMG.zip, it checks it for approximately 2 minutes, then says Model ID incorrect!
, then indicates to hit the power button the reboot the phone.

Any ideas here? I followed every step 100% correct, however I cannot get past this step to load the rootable original rom onto the phone.

That's an issue with your gold card apparently. Make sure the SD Card is formatted to FAT32 and try creating it again. When created, try the rest of the process again.
 
Hey guys, been at this for like 4hrs straight and no luck :-(

Here is where the problem happens.
It checks for the

PD98IMG.nbh
not found
PD98IMG.img
not foundPD98IMG.zip

Blue progress bar finishes
then it will validate the zip

Yellow/golden progress bar

The pops up the below error.

CID incorrect!
Update Fail!
Press power to reboot.

Phone is not locked to a carrier/branded.

Tried the whole Goldcard thing and my my, still no luck... Please help?
 
I figured out my issues myself.
I saw a reference to a telus friendly PD98IMG in the "Telus Desire HD" download package located here. :
xda dev
called : [GUIDE] Telus Desire HD - Rooting and Flashing
Located in Desire HD Android Development section.
I just dont have enough posts to post the direct link.

It worked 100% for me. I was able to perform all commands easily then load CoreDroid Desire HD V8.

Now I love the phone even more now. :)
 
Back
Top Bottom