Root [HOW TO](gaining root)unlock,downgrade,and achieve s-off with htcDev

[timeisrelative]

Scotty, currently I am having a problem at the flashing of Unrevoked Forever.

I keep trying to flash it and get this: "e:unsupported radio version
e:update failed. check /sdcard/soff.log
ed:error in /sdcard/unrevoked-forever.zip
(status 42)
installation aborted."

I took out my battery after trying the second time and the entire thing freezing. I went into my software and saw that it was still showing me at 2.3.4. I went into the hboot screen and saw that is was unlocked and still had S-ON.

Any tips on how to proceed? I've looked around the net for viable ways. I tried to do the radio thing using command prompt since s has to be off in order to flash the radio and hboot on the phone, and got the message "FAILED <status malformed <1 byte>>

 

[scotty85]

You need to downgrade to froyo,wich does have a compatible baseband.

You can fasboot flash recovery with s on,unlocked. Make sure your phone is in fastboot,and not hboot(will say fastboot usb in red)

 

[Moontra]

Thanks Scotty for the clear instructions. This is my first time rooting and your help is making it really easy for me.
Everything has been working as expected so far except I am getting an error on step 3.

after clearing the two caches in the recovery menu when I attempt to
-Install zip from sd card
-choose zip from sdcard
-Superuser-3.0.7-efgh-signed/

instead of installing brings me into the subfolders
-META-INF
-system

I tried searching through both folders to install the superuser file but no matter where I go I am getting the error

"No files found."

I tried redownloading/extracting the superuser file and made sure it is on the root folder of my SD drive

I also tried installing it from the internal SD card.

Since I looked through all 11 pages and no else seems to be getting the same error I must be making some mistake.
Maybe I am putting the superuser folder in the wrong place?
In order to put it onto the root folder
1. I connect the droid to my PC (usb debugging on)
2. Choose "Mount as disk drive"
3. Place the extracted Superuser-3.07-efgh-signed folder on the top of my I: drive (my SD card)

Let me know where I'm going wrong
Thanks

INCREDIBLE XC SHIP S-ON
HBOOT-1.02.0000
MICROP-0417
TOUCH PANEL-ATMEL224_16ab
RADIO-2.15.1012.20
Dec 21 2011, 23:37:16

 

[scotty85]

Do NOT extract the zip file. Everything that's flashed in recovery(roms,superuser,forever patch) is flashed as a zipfile.

 

[Moontra]

Ha makes sense, considering the command is to "install from zip"

I'm so close. I got hung up on step 8 and accidentally pulled the usb cord during one of the commands -.- which I think really messed things up because when I tried to run it again it read FAILED

So I tried to reset to factory settings and start from step one.
However when I got to step 4 it read 3.26.605.1
me being a dumbass, assumed that I was an exception to the rule (because I am in S-Off) and proceeded to relock my bootloader.

I was able to downgrade to froyo but now I can't unlock my phone to install clockwork.

my error message looks like:

c:\miniadb_inc>fastboot devices
MB125HJ09571 fastboot

c:\miniadb_inc>fastboot flash unlocktoken Unlock_code.bin
sending 'unlocktoken' (0 KB)... OKAY [ 0.014s]
writing 'unlocktoken'... FAILED (remote: not allowed)

I should have came to you before making false assumptions. Please excuse my ignorance, but could you point me in the right direction?

INCREDIBEL XC SHIP S-OFF
HBOOT-0.92.0000
MICROP-0417
TOUCH PANEL-ATMEL224_16ab
RADIO2.15.00.07.20
Dec 21 2011, 23:37:16

 

[scotty85]

Ha makes sense, considering the command is to "install from zip"

I'm so close. I got hung up on step 8 and accidentally pulled the usb cord during one of the commands -.- which I think really messed things up because when I tried to run it again it read FAILED

So I tried to reset to factory settings and start from step one.
However when I got to step 4 it read 3.26.605.1
me being a dumbass, assumed that I was an exception to the rule (because I am in S-Off) and proceeded to relock my bootloader.

I was able to downgrade to froyo but now I can't unlock my phone to install clockwork.

my error message looks like:

c:\miniadb_inc>fastboot devices
MB125HJ09571 fastboot

c:\miniadb_inc>fastboot flash unlocktoken Unlock_code.bin
sending 'unlocktoken' (0 KB)... OKAY [ 0.014s]
writing 'unlocktoken'... FAILED (remote: not allowed)

I should have came to you before making false assumptions. Please excuse my ignorance, but could you point me in the right direction?

INCREDIBEL XC SHIP S-OFF
HBOOT-0.92.0000
MICROP-0417
TOUCH PANEL-ATMEL224_16ab
RADIO2.15.00.07.20
Dec 21 2011, 23:37:16

consider yourself lucky that your phone still boots and works,as disconnecting the usb cable during an hboot or radio flash will in most cases leave you with a fancy,high tech paperweight.

you are unable to reunlock your bootloader,becasue being s-off,the htcdev compatible 1.02 or 1.07 have been overwritten with the .92 when you flashed the froyo downgrade again,wich is not compatible and does not support the fastboot flash command to install recovery.

since you have installed the forever patch successfully,you have caused yourself alot of unneccessary agravation by starting over at step 1. once you are s-off,the phone is not doing any security checks whatsoever and you easily have continued on with installing the new hboot,radio,and flashing a new rom. the adb steps are at this point completely un-neccessary. they should not have done any damage in this particular case,but take this as a lesson learned to ask questions first when you get stuck

since you now do not have an htcdev unlock compatible hboot,you have a couple of options to getting recovery back:
1)go ahead and install the new hboot and radio. you can then re-unlock the hboot,and flash the recovery as you did in steps 2 and 6(fastboot flash recovery recovery-clockwork-5.0.2.0-inc.img)

2)you can install recovery just like i described for the hboot and radio,using the same directions:

1)update hboot/radio.
you can install the following in hboot by renaming PB31IMG,or you can place them in miniadb_inc,and flash them like you did the froyo downgrade(phone in fastboot mode):
fastboot devices

fastboot erase cache

fastboot oem rebootRUU

fastboot flash zip zipname.zip

fastboot reboot-bootloader

fastboot reboot

*whatever method you use,make sure to double check the md5s,as a bad hboot or radio flash can and will leave your device unworking and unrecoverable

where you download clockwork in a PB31IMG type file,and either flash from the sd card in hboot,or put into your mini-adb folder and use the directions above.

you can download this file from here:
http://pvillecomp.com/wp/wp-content/uploads/Clockwork/recovery-clockwork-5.0.2.0-inc_PB31IMG.zip

hope that helps

 

[Moontra]

take this as a lesson learned to ask questions first when you get stuck

Message received. On a good note, thanks to your help I am rooted, s-off, with clockwork recovery, on hboot-1.07.0000

You have been more helpful than any customer service rep I have ever worked with. I wanted to thank you not only for the well written guide, but also for the timely follow up assistance.

Your an android badass.

Final question, would you recommend that I relock my phone or am I safe to leave it unlocked?

Cheers

 

[Sobralski97]

Hi Scotty, I'm stuck on this. I try flashing to recovery but it will not work. I have tried multiple times! Help please!:/

 

[Sobralski97]

This is what it says when i try flashing the recovery
sending 'recovery' (3064 KB)...
FAILED (status malformed (1 bytes))
finished. total time: 0.002s

 

[scotty85]

Message received. On a good note, thanks to your help I am rooted, s-off, with clockwork recovery, on hboot-1.07.0000

You have been more helpful than any customer service rep I have ever worked with. I wanted to thank you not only for the well written guide, but also for the timely follow up assistance.

Your an android badass.

Final question, would you recommend that I relock my phone or am I safe to leave it unlocked?
Cheers

thanks for your kind words,it means alot to me when i am able to help folks achieve what they want.

you are perfectly safe to leave it unlocked,so you can fastboot flash your recovery if you need to.

This is what it says when i try flashing the recovery
sending 'recovery' (3064 KB)...
FAILED (status malformed (1 bytes))
finished. total time: 0.002s

theres not alot of info there to try and troubleshoot.

check the basics:
-phone is in fastboot,not hboot(correc screen will display fastboot usb on the bootloader screen)
-make sure your file is an image file,and in the adb/fastboot folder
-make sure you have an unlocked htcdev compatible hboot. (it will say unlocked across the top of the bootloader screen)
-make sure absolutely nothing is running on the pc that can talk tothe phone. htc sync,pdanet,easy tether,even itunes can all cause interfearance.
-try different usb cables and ports
-try and reboot of the PC

other than that, a copy and paste of your cmd window,and a screenshot of your miniadb-inc folder will help

 

[rockgecko17a]

working fine for me. you may need to adjust your browser/firewall/antivirus settings



no idea,sorry. im not very proficient with linux. is the phone in fastboot when you enter the command?

yes it was in fastboot

 

[carldaz]

When I try either of these pushes, 0 bytes are transfered

c:\miniadb_inc>adb push flash_image /data/local/ 1428 KB/s (0 bytes in 0.052s)

c:\miniadb_inc>adb push mtd0.img /sdcard/ 1120 KB/s (0 bytes in 0.571s)

Any suggestions anyone?

 

[Moontra]

So although I said I was rooted I just attempted to use a couple root only apps and I am getting an error message that I am not rooted, I'm guessing it must be from the factory reset. I'm guessing I probably need to reinstall the superuser file, redowngrade to froyo (I don't think I am downgraded right now), and reinstall unrovoked forever?

Any advice on which step I should start at?

INCREDIBEL XC SHIP S-OFF
HBOOT-01.07.0000
MICROP-0417
TOUCH PANEL-ATMEL224_16ab
RADIO2.15.00.07.20
Dec 21 2011, 23:37:16

 

[scotty85]

When I try either of these pushes, 0 bytes are transfered

c:\miniadb_inc>adb push flash_image /data/local/ 1428 KB/s (0 bytes in 0.052s)

c:\miniadb_inc>adb push mtd0.img /sdcard/ 1120 KB/s (0 bytes in 0.571s)

Any suggestions anyone?

the files are not a full byte in size,so this is not neccessarily an issue. the time does indicate that files were pushed. try continuing on,and see if you get other errors(check with the code box for correct responses)

So although I said I was rooted I just attempted to use a couple root only apps and I am getting an error message that I am not rooted, I'm guessing it must be from the factory reset. I'm guessing I probably need to reinstall the superuser file, redowngrade to froyo (I don't think I am downgraded right now), and reinstall unrovoked forever?

Any advice on which step I should start at?

INCREDIBEL XC SHIP S-OFF
HBOOT-01.07.0000
MICROP-0417
TOUCH PANEL-ATMEL224_16ab
RADIO2.15.00.07.20
Dec 21 2011, 23:37:16

nope... no more downgradeing,no more flashing forever. once youre s off you stay that way.

all you need to do is use recovery to install superuser,or install a custom rom(wich will be rooted )

yes it was in fastboot

not really sure then... got the sdk installed correctly? are you in the correct directory?

 

[timeisrelative]

You need to downgrade to froyo,wich does have a compatible baseband.

You can fasboot flash recovery with s on,unlocked. Make sure your phone is in fastboot,and not hboot(will say fastboot usb in red)

Scotty, I was under the impression that I was supposed to be downgraded after following your directions? I followed them up until the radio updating step when I encountered the problem with Unrevoked Forever.

Anyhow, I searched through the internet for alternative solutions to downgrade to Froyo and none of them have worked. I have a half-root, I guess, since I have clockworkmod on the SD card and Superuser, but I still have S-ON and my hboot in unlocked.

I'm so sorry that this sounds so amateur or noobish because I'm a noob in phone software.

Can you please help me understand what went wrong so I can restart from there. Thank you soooooooooo^1,000,000,000 for being so helpful thus far because I'd be absolutely no where without you.

Sidenote, my phone has been "flashed" onto Cricket via in store personnel, so maybe that is the problem? (Before it was flashed, I was still having problems but that was due to the Gingerbread thing.)

 

[sdrawkcab25]

Scotty, I was under the impression that I was supposed to be downgraded after following your directions? I followed them up until the radio updating step when I encountered the problem with Unrevoked Forever.

Anyhow, I searched through the internet for alternative solutions to downgrade to Froyo and none of them have worked. I have a half-root, I guess, since I have clockworkmod on the SD card and Superuser, but I still have S-ON and my hboot in unlocked.

I'm so sorry that this sounds so amateur or noobish because I'm a noob in phone software.

Can you please help me understand what went wrong so I can restart from there. Thank you soooooooooo^1,000,000,000 for being so helpful thus far because I'd be absolutely no where without you.

Sidenote, my phone has been "flashed" onto Cricket via in store personnel, so maybe that is the problem? (Before it was flashed, I was still having problems but that was due to the Gingerbread thing.)

If you completely follow the directions in the first post from start to finish... It will downgrade you to froyo,(to use unrevoked forever), then will upgrade you back to gingerbread.... If you have root, s-on, and unlocked, you've only followed half the directions. You just need to start at step 4 . However, I'm not sure what will happen to your cricket flash if you complete the steps, you may have to take the phone back to them to have it reflashed.

 

[spymac]

Looking for some help here after searching and not being able to find my answer.

HTC incredible hboot 1.07 s-on

completed steps 1 and 2 without issue.

step 3 is where I'm having trouble

Reboot into recovery shows an icon with a red exclamation point (not the top hat like I believe should be displayed) Also, I dont have all the options that ClockworkMod Recovery should have, only the following:

Reboot system now
Apply update from sdcard
Wipe data/factory reset
Wipe cache partition

Also have the error in yellow text:
E:Can't open /cache/recovery/command


Any ideas? Thanks all.

 

[scotty85]

Looking for some help here after searching and not being able to find my answer.

HTC incredible hboot 1.07 s-on

completed steps 1 and 2 without issue.

step 3 is where I'm having trouble

Reboot into recovery shows an icon with a red exclamation point (not the top hat like I believe should be displayed) Also, I dont have all the options that ClockworkMod Recovery should have, only the following:

Reboot system now
Apply update from sdcard
Wipe data/factory reset
Wipe cache partition

Also have the error in yellow text:
E:Can't open /cache/recovery/command


Any ideas? Thanks all.

what you are seeing is the stock recovery. apparently not everything went as smoothly as you thot somewhere along the line

if your hboot is displaying unlocked then start over at step 2,and compare your cmd lines to the ones in the code box in the OP and make sure you get the same outputs. if you still have no success with the recovery,copy and paste the contents of your cmd window and we will try and figure out where it went wrong

 

[spymac]

what you are seeing is the stock recovery. apparently not everything went as smoothly as you thot somewhere along the line

if your hboot is displaying unlocked then start over at step 2,and compare your cmd lines to the ones in the code box in the OP and make sure you get the same outputs. if you still have no success with the recovery,copy and paste the contents of your cmd window and we will try and figure out where it went wrong

Thanks! The hboot was displaying "RE-LOCKED".

Originally I had followed the instructions on HTC's site which suggested relocking the boot loader.

After I unlocked it again "fastboot flash unlocktoken Unlock_code.bin" and reloaded the recovery image in step 2, it is all working correctly.

Onward!

 

[dmsmotocross6]

so I'm on step 4, and am trying to put the PB31IMG.zip into the command prompt. however each time I do that, it says it is unable to read the file. I've gotten the other md5 sums to work, just not this one, so I think there might be something wrong with the file? also, every time I go to extract the pb31img file, it says it is invalid.

hope someone can help

EDIT:
I figured that part out, but now when I go to put in adb push mtd0.img /sdcard/ it tells me there is no space left on device.. should I clear my sdcard or something? little confused as to how to proceed here.

2nd edit: haha figured it out with a little tinkering. thanks for this walkthrough!

Hey Scotty, I am having a similar issue to the one quoted above. Everything seemed to be working fine, until I got to rewriting the misc image and downgrading. I've pasted the command prompt below. It says that there is no space left on the device, and I've tried everything I can think of... I re-formatted the sd card to FAT32, and a few other things. Is there anything I should be doing differently or another way to go about this process so that I can downgrade my phone and install custom ROMS?
Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.

C:\Users\Doug>cd c:\miniadb_inc

c:\miniadb_inc>adb devices
List of devices attached
HT07AHJ03728 device


c:\miniadb_inc>md5sums mtd0.img

MD5sums 1.2 freeware for Win9x/ME/NT/2000/XP+
Copyright (C) 2001-2005 Jem Berkes - PC-Tools.Net: Tools and utilities for Windows, Unix/Linux, DOS
Type md5sums -h for help

[Path] / filename MD5 sum
-------------------------------------------------------------------------------
[c:\miniadb_inc\]
mtd0.img 34307be744275f1db1dd16af04c37839

c:\miniadb_inc>md5sums flash_image

MD5sums 1.2 freeware for Win9x/ME/NT/2000/XP+
Copyright (C) 2001-2005 Jem Berkes - PC-Tools.Net: Tools and utilities for Windows, Unix/Linux, DOS
Type md5sums -h for help

[Path] / filename MD5 sum
-------------------------------------------------------------------------------
[c:\miniadb_inc\]
flash_image 0098a7dd6600b55fac34fc6645be5d7a

c:\miniadb_inc>md5sums PB31IMG.zip

MD5sums 1.2 freeware for Win9x/ME/NT/2000/XP+
Copyright (C) 2001-2005 Jem Berkes - PC-Tools.Net: Tools and utilities for Windows, Unix/Linux, DOS
Type md5sums -h for help

[Path] / filename MD5 sum
-------------------------------------------------------------------------------
[c:\miniadb_inc\]
PB31IMG.zip 100% 31bb1611a0fa8197d447c0438426717e

c:\miniadb_inc>adb push flash_image /data/local/
1515 KB/s (76044 bytes in 0.049s)

c:\miniadb_inc>adb push mtd0.img /sdcard/
1636 KB/s (655360 bytes in 0.391s)

c:\miniadb_inc>adb shell
$ su
su
# cd /data/local
cd /data/local
# chmod 0755 /data/local/flash_image
chmod 0755 /data/local/flash_image
# cd /data/local
cd /data/local
# ./flash_image misc /sdcard/mtd0.img
./flash_image misc /sdcard/mtd0.img
mtd: read all-zero block at 0x00000000; skipping
mtd: not writing bad block at 0x00080000
error writing misc: No space left on device


Thanks,
D

 

[scotty85]

hmm that does not look like a good error message. is your phone in functional,working order? what software build are you on?

might help to adb reboot bootloader

once in bootloader,
fastboot devices

then

fastboot getvar all

and copy/paste that output here

 

[dmsmotocross6]

Thanks for getting back to me so quickly, Scotty. It says I am still on 2.3.4. Below are the results from getvar:
"
Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.

C:\Users\Doug>cd c:\miniadb_inc

c:\miniadb_inc>adb reboot bootloader

c:\miniadb_inc>fastboot devices
HTxxxxxxxxxx fastboot

c:\miniadb_inc>fastboot getvar all
INFOversion: 0.5
INFOversion-bootloader: 1.07.0000
INFOversion-baseband: 2.15.10.12.20
INFOversion-cpld: None
INFOversion-microp: 0417
INFOversion-main:
INFOserialno: HTxxxxxxxxxx
INFOproduct: incrediblec
INFOplatform: HBOOT-8x50
INFOmodelid: PB3120000
INFOcidnum: VZW__001
INFObattery-status: good
INFObattery-voltage: 4151mV
INFOpartition-layout: Generic
INFOsecurity: on
INFObuild-mode: SHIP
INFOboot-mode: FASTBOOT
INFOcommitno-bootloader: e068cb45
INFOhbootpreupdate: 11
all: Done!
finished. total time: 0.005s

c:\miniadb_inc>

"

Thanks again,
D

 

[scotty85]

Thanks for getting back to me so quickly, Scotty. It says I am still on 2.3.4. Below are the results from getvar:
"
Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.

C:\Users\Doug>cd c:\miniadb_inc

c:\miniadb_inc>adb reboot bootloader

c:\miniadb_inc>fastboot devices
HTxxxxxxxxx fastboot

c:\miniadb_inc>fastboot getvar all
INFOversion: 0.5
INFOversion-bootloader: 1.07.0000
INFOversion-baseband: 2.15.10.12.20
INFOversion-cpld: None
INFOversion-microp: 0417
INFOversion-main: <-empty
INFOserialno: HTxxxxxxxxx
INFOproduct: incrediblec
INFOplatform: HBOOT-8x50
INFOmodelid: PB3120000
INFOcidnum: VZW__001
INFObattery-status: good
INFObattery-voltage: 4151mV
INFOpartition-layout: Generic
INFOsecurity: on
INFObuild-mode: SHIP
INFOboot-mode: FASTBOOT
INFOcommitno-bootloader: e068cb45
INFOhbootpreupdate: 11
all: Done!
finished. total time: 0.005s

c:\miniadb_inc>

"

Thanks again,
D

notice that your main version is empty this may be a fluke,that you will be able to downgrade without the adb steps. i would jump ahead to the steps to flash the froyo ruu:

adb reboot bootloader

fastboot erase cache

fastboot oem rebootRUU

etc. if you need to,relock with fastboot oem lock

if it flashes the downgrade,then just finish the directions- reunlock,reinstall recovery,flash superuser and forever patch

edit:
i also took the liberty of x'ing out your serial number... not the sort of thing you want to broadcast on the net

 

[dmsmotocross6]

Thank you very much! I'll give that a shot

 

[mrm312]

Hey Scotty85,

I just wanted to thank you for your work on this. I used your previous (non-HTC) guide to root my inc and this weekend used this one for my wife's. Both times worked as expected and I just wanted to take time to thank you (and any other devs) for putting this together.

I do have one question. I updated the hboot & radio in step 8 (no problems) and made a nandroid. I want to flash CM7.2, but wondering if the hboot & radio are ROM dependent? Would like the most recent radio and hboot for both our phones (both will run CM7.2 stable).

Thanks again,
Mike