• After 15+ years, we've made a big change: Android Forums is now Early Bird Club. Learn more here.

Root [HOW TO](gaining root)unlock,downgrade,and achieve s-off with htcDev

Hey! Thank you for this tutorial but I seem to be at a standstill. When i load in to hboot and go down to recovery and press the power button to load it all i get is the HTC load screen nothing happens after this. I have a droid incredible 2. What should I do?
 
I just want to thank you kindly for this well organized guide, it was super helpful and worked like a charm. Much appreciated for keeping up with this thread a whole year later as well. I had to root an incredible for a forensic project we are working on and so this helped tremendously. I documented and took pictures the whole way through the process to include as a reference if that is okay, i will give credit and everything for the method.

Cheers,
McGeeGee
 
glad it was helpful. none of it is my origianl work,i just took htcdevs tool and things done by others and assembled in to one place,and then offered support for those having trouble making it work :)

you are more than welcome to use references or parts of it. if your project is online somewhere i defiantely wouldnt mind taking a look. pm me a link if its not something you want public :)
 
First off, let me say Thanks for having this thread...it may be the lifesaver of my DINC.

My Incredible is at Ver 2.3.4, Baseband Ver 2.15.10.12.20, Build #4.08.605.19 and HBOOT 1.07.0000. It is still locked with S-On. Recently, it started going into a bootloop, getting as far as the first white htc incredible screen and then repeating.

By using the Vol Dwn and Pwr On buttons, I can get into HBOOT, but it won't allow me to do a Recovery or a Factory Reset. However, I am able to Power Down the phone when I access the FastBoot Menu and choose Power Down. Unfortunately, USB Debugging was set at off before the bootlooping started, so even though I downloaded the HTC Sync drivers, I can't sync with the phone.

Is there any way that I can load build # 4.08.605.19 back onto the phone before I decide to root it or is the phone a brick?
 
First off, let me say Thanks for having this thread...it may be the lifesaver of my DINC.

My Incredible is at Ver 2.3.4, Baseband Ver 2.15.10.12.20, Build #4.08.605.19 and HBOOT 1.07.0000. It is still locked with S-On. Recently, it started going into a bootloop, getting as far as the first white htc incredible screen and then repeating.

By using the Vol Dwn and Pwr On buttons, I can get into HBOOT, but it won't allow me to do a Recovery or a Factory Reset. However, I am able to Power Down the phone when I access the FastBoot Menu and choose Power Down. Unfortunately, USB Debugging was set at off before the bootlooping started, so even though I downloaded the HTC Sync drivers, I can't sync with the phone.

Is there any way that I can load build # 4.08.605.19 back onto the phone before I decide to root it or is the phone a brick?
your phone doesnt sound like a brick, usb debugging doesnt need to be turned on to unlock. you can go ahead and start following the steps in the first post. once you get a working recovery, we should be able to get your phone booted up. :)
 
the drivers in the OP will get fastboot working. just enter fastboot devices and you should get a serial number back.

go ahead adn unlock,and install recovery. we can then enter the commands to lower the main version in recovery. at that point,you can run the downgrade ruu,wich hopefully will restore the phone to a booting,working order.

when folloing the guide to unlock,you will just have to skip the adb devices,and adb reboot bootloader commands,and skip right to fastboot xxx commands,and manually put the phone in fastboot by selecting fsatboot from the hboot menu. when the directions say to reboot,let it try to boot,then pull the battery when it hangs or bootloops.

once youve got a recovery installed,and can boot to it,ill give you some more specific directions :)

just holler if you have questions :)
 
Hello,

I've been following the guide to a T and up until now, everything have been fine! I got to the end of step 4 but my phone is not resetting after the "flashboot flash zip PB31IMG.zip" . The command prompt says it is finished but the HTC logo and the green bar won't go away. The directions say to factory reset in hboot but my phone is unresponsive (power button, volume, and joystick dont do anything. Do I remove my battery to do the factory reset? Some directions would be great! Also I have been waiting for about 30 minutes on it to load.
 
Hello,

I've been following the guide to a T and up until now, everything have been fine! I got to the end of step 4 but my phone is not resetting after the "flashboot flash zip PB31IMG.zip" . The command prompt says it is finished but the HTC logo and the green bar won't go away. The directions say to factory reset in hboot but my phone is unresponsive (power button, volume, and joystick dont do anything. Do I remove my battery to do the factory reset? Some directions would be great!

youre forgetting the last command in that section: fastboot reboot ;)
 
Thanks for the obvious fix from before--my bad! It worked!

Now I'm on step 8 and the directions are a little less clear about how to update the hboot/radio. Can you provide step-by-step instructions here, too? It seems based on the previous posts that this part has caused a little confusion and based on what you wrote in the OP, it seems to be the part that can brick my phone. I've made it this far and I don't want to screw it up. Sorry if it's an inconvenience!

Edit: If I had to guess I'd...

enter recovery via the hboot menu
wipe cache
wipe dalvik cache
install zip "PB31IMG-4.08.605.15-hboot-1.07.zip"
install zip "PB31IMG-4.08.605.15-radio.zip"
reboot

Is that right?
 
Thanks for the obvious fix from before--my bad! It worked!

Now I'm on step 8 and the directions are a little less clear about how to update the hboot/radio. Can you provide step-by-step instructions here, too? It seems based on the previous posts that this part has caused a little confusion and based on what you wrote in the OP, it seems to be the part that can brick my phone. I've made it this far and I don't want to screw it up. Sorry if it's an inconvenience!

Edit: If I had to guess I'd...

enter recovery via the hboot menu
wipe cache
wipe dalvik cache
install zip "PB31IMG-4.08.605.15-hboot-1.07.zip"
install zip "PB31IMG-4.08.605.15-radio.zip"
reboot

Is that right?
 
Thanks for the obvious fix from before--my bad! It worked!

Now I'm on step 8 and the directions are a little less clear about how to update the hboot/radio. Can you provide step-by-step instructions here, too? It seems based on the previous posts that this part has caused a little confusion and based on what you wrote in the OP, it seems to be the part that can brick my phone. I've made it this far and I don't want to screw it up. Sorry if it's an inconvenience!

Edit: If I had to guess I'd...

enter recovery via the hboot menu
wipe cache
wipe dalvik cache
install zip "PB31IMG-4.08.605.15-hboot-1.07.zip"
install zip "PB31IMG-4.08.605.15-radio.zip"
reboot

Is that right?

umm... no. :)

8)Finishing up
1)update hboot/radio.
you can install the following in hboot by renaming PB31IMG,or you can place them in miniadb_inc,and flash them like you did the froyo downgrade(phone in fastboot mode):
fastboot devices

fastboot erase cache

fastboot oem rebootRUU

fastboot flash zip zipname.zip

fastboot reboot-bootloader

fastboot reboot

*whatever method you use,make sure to double check the md5s,as a bad hboot or radio flash can and will leave your device unworking and unrecoverable :eek:

-software build 4.08.605.15 radio/hboot
hboot(1.07.0000)
PB31IMG-4.08.605.15-hboot-1.07.zip
md5: PB31IMG-4.08.605.15-hboot-1.07.zip db019de010ae8ef6a2c250fd8b378ba1

radio(2.15.10.12.20)
PB31IMG-4.08.605.15-radio.zip
md5: PB31IMG-4.08.605.15-radio.zip cb8b3ac72c0ae13e1f088b302135bd58

note:the bootloader may still be in ints previous state when you re-flash it(i.e.,if it was unlocked,it will still be). if you find it to be locked or relocked you can use your original unlock-code.bin to re-unlock it,if you wish. this is optional,but unlocking the bootloader does give you access to a few extra fastboot commands.

2)restore a backup or flash a stock rom with clockwork recovery

*restoring a backup of,or flashing a rom based on 4.08.605.15,is the best way to stop annoying OTA requests. alternatively,many custom roms(especially CM or other AOSP based roms) will block OTAs,there are many to chose from: Droid Incredible Android Development - xda-developers

heres a stock rom if you need it:
[ROM] Stock rooted OTA 4.08.605.15 - 06-27-2012 - xda-developers

heres some basic rom flashing directions:
http://androidforums.com/incredible-all-things-root/521423-how-flash-roms.html

*links courtesy of sdrawcab25. please keep in mind its a little beyond the scope of this thread to discuss in great detail rom flashing,tethering,bloat removal,or other root related activities. we want to help you,but there is alot of that info out there allready,and adding it here is just making the thread longer and harder for those using the guide to search.
PB31IMG is the same type of the file as the froyo downgrade,so you install it in the same manner: via the bootloader,not recovery.

you can move it to the sd card,rename "PB31IMG" and let hboot install it,but id recomend to install it just like you did the downgrade: by placing it in the miniadb-inc folder, and then runniing the fastboot commands above.

the flashes will brick your phone if you do not check,and double check the md5 sum. so download a free md5 sum checker(or check them with adb like you did the other files). just make sure you check them,and do not flash them if you get a different md5sum.
 
Okay so just to confirm:

  1. Put "PB31IMG-4.08.605.15-hboot-1.07" and "PB31IMG-4.08.605.15-radio" into the miniadb_inc folder.
  2. Open Command Prompt with phone plugged in and set on developer mode.
  3. cd c:\miniadb_inc
  4. adb devices
  5. md5sums PB31IMG-4.08.605.15-hboot-1.07 check the codes match up with OP
  6. md5sums PB31IMG-4.08.605.15-radio check the codes match up with OP
Once I've done that, then I do those commands listed above. "fastboot flash zip zipname" becomes "fastboot flash zip PB31IMG-4.08.605.15-hboot-1.07" and then "fastboot flash zip PB31IMG-4.08.605.15-radio"?

Sorry about all of my questions. I'm just really confused and feel like I don't know what all of these commands do/what I'm doing so I know what to do. I dont want to make a guess then be wrong then come back for help. I'd rather just do it right the first time. :)
 
the drivers in the OP will get fastboot working. just enter fastboot devices and you should get a serial number back.

go ahead adn unlock,and install recovery. we can then enter the commands to lower the main version in recovery. at that point,you can run the downgrade ruu,wich hopefully will restore the phone to a booting,working order.

when folloing the guide to unlock,you will just have to skip the adb devices,and adb reboot bootloader commands,and skip right to fastboot xxx commands,and manually put the phone in fastboot by selecting fsatboot from the hboot menu. when the directions say to reboot,let it try to boot,then pull the battery when it hangs or bootloops.

once youve got a recovery installed,and can boot to it,ill give you some more specific directions :)

just holler if you have questions :)
I finally got the Dinc to sync with the computer. Went into command prompt and followed the directions from fastboot devices onward, getting a serial #. Went into HTC DEV and got a Unlock_code.bin file and put it in the miniadb_inc folder. From there, I got to the screen on the phone to unlock the bootloader but when I choose Yes and hit enter, the phone went back into a bootloop, not getting past the first HTC Incredible white screen. Removed the battery several times and tried to start back up but still got the bootloop. Any thoughts on what I should try next?

I hope I did this posting right, since I was trying to reply to my original post.
 
I'm on step 2, Recovery but for some strange reason, after typing Adb devices, it won't return the serial # of the phone. Does it matter when the phone is connected if I'm on the HBOOT USB PLUG phone screen or the FASTBOOT USB phone screen?
 
I did the recovery using the FASTBOOT USB phone screen and everything went fine except when I type Fastboot Reboot, the phone goes back into the bootloop with the HTC Incredible white screen. Even though on the command line, it says that the sending of the recovery and the writing of the recovery went okay, the phone still won't reboot.
 
I'm on step 2, Recovery but for some strange reason, after typing Adb devices, it won't return the serial # of the phone. Does it matter when the phone is connected if I'm on the HBOOT USB PLUG phone screen or the FASTBOOT USB phone screen?

remember this bit from above ;)
when folloing the guide to unlock,you will just have to skip the adb devices,and adb reboot bootloader commands,and skip right to fastboot xxx commands,and manually put the phone in fastboot by selecting fsatboot from the hboot menu. when the directions say to reboot,let it try to boot,then pull the battery when it hangs or bootloops.

so:
-no response it adb devices is perfecly normal,as youre in fastboot
-you must be on the fastboot usb screen

just do the steps from fastboot devices onward in step 2
 
I did the recovery using the FASTBOOT USB phone screen and everything went fine except when I type Fastboot Reboot, the phone goes back into the bootloop with the HTC Incredible white screen. Even though on the command line, it says that the sending of the recovery and the writing of the recovery went okay, the phone still won't reboot.

right,its not going to reboot until after we run the downgrade ruu.

again,every time the directions say to reboot,just let it try,pull the battery,put it back in fastboot,and continue with the fastboot part of the directions.

when you get to step 4,after checking the md5sums,choose recovery from the hboot menu,then enter this command:
adb shell mount /data

the rest of the downgrade commands will be done in recovery since your phone wont boot. i tested it awhile ago,and it worked fine. it will look something like this:

Code:
c:\mini-adb_inc>[COLOR="Red"]adb devices[/COLOR]
List of devices attached
HT117HJ00242    recovery


c:\mini-adb_inc>[COLOR="red"]md5sums mtd0.img[/COLOR]

MD5sums 1.2 freeware for Win9x/ME/NT/2000/XP+
Copyright (C) 2001-2005 Jem Berkes - http://www.pc-tools.net/
Type md5sums -h for help

[Path] / filename                              MD5 sum
-------------------------------------------------------------------------------
[c:\mini-adb_inc\]
mtd0.img                                       34307be744275f1db1dd16af04c37839

c:\mini-adb_inc>[COLOR="red"]md5sums flash_image[/COLOR]

MD5sums 1.2 freeware for Win9x/ME/NT/2000/XP+
Copyright (C) 2001-2005 Jem Berkes - http://www.pc-tools.net/
Type md5sums -h for help

[Path] / filename                              MD5 sum
-------------------------------------------------------------------------------
[c:\mini-adb_inc\]
flash_image                                    0098a7dd6600b55fac34fc6645be5d7a
c:\mini-adb_inc>[COLOR="red"]adb shell mount /data[/COLOR]

c:\mini-adb_inc>[COLOR="red"]adb push flash_image /data/local/[/COLOR]
1485 KB/s (76044 bytes in 0.050s)

c:\mini-adb_inc>[COLOR="red"]adb push mtd0.img /sdcard/[/COLOR]
1939 KB/s (655360 bytes in 0.330s)

c:\mini-adb_inc>[COLOR="red"]adb shell[/COLOR]
/ # [COLOR="red"]cd /data/local[/COLOR]
cd /data/local
/data/local # [COLOR="red"]chmod 0755 /data/local/flash_image[/COLOR]
chmod 0755 /data/local/flash_image
/data/local # [COLOR="red"]cd /data/local[/COLOR]
cd /data/local
/data/local #[COLOR="red"] ./flash_image misc /sdcard/mtd0.img[/COLOR]
./flash_image misc /sdcard/mtd0.img
/data/local # [COLOR="red"]exit[/COLOR]
exit
 
right,its not going to reboot until after we run the downgrade ruu.

again,every time the directions say to reboot,just let it try,pull the battery,put it back in fastboot,and continue with the fastboot part of the directions.

when you get to step 4,after checking the md5sums,choose recovery from the hboot menu,then enter this command:
adb shell mount /data

the rest of the downgrade commands will be done in recovery since your phone wont boot. i tested it awhile ago,and it worked fine. it will look something like this:

Code:
c:\mini-adb_inc>[COLOR="Red"]adb devices[/COLOR]
List of devices attached
HT117HJ00242    recovery


c:\mini-adb_inc>[COLOR="red"]md5sums mtd0.img[/COLOR]

MD5sums 1.2 freeware for Win9x/ME/NT/2000/XP+
Copyright (C) 2001-2005 Jem Berkes - http://www.pc-tools.net/
Type md5sums -h for help

[Path] / filename                              MD5 sum
-------------------------------------------------------------------------------
[c:\mini-adb_inc\]
mtd0.img                                       34307be744275f1db1dd16af04c37839

c:\mini-adb_inc>[COLOR="red"]md5sums flash_image[/COLOR]

MD5sums 1.2 freeware for Win9x/ME/NT/2000/XP+
Copyright (C) 2001-2005 Jem Berkes - http://www.pc-tools.net/
Type md5sums -h for help

[Path] / filename                              MD5 sum
-------------------------------------------------------------------------------
[c:\mini-adb_inc\]
flash_image                                    0098a7dd6600b55fac34fc6645be5d7a
c:\mini-adb_inc>[COLOR="red"]adb shell mount /data[/COLOR]

c:\mini-adb_inc>[COLOR="red"]adb push flash_image /data/local/[/COLOR]
1485 KB/s (76044 bytes in 0.050s)

c:\mini-adb_inc>[COLOR="red"]adb push mtd0.img /sdcard/[/COLOR]
1939 KB/s (655360 bytes in 0.330s)

c:\mini-adb_inc>[COLOR="red"]adb shell[/COLOR]
/ # [COLOR="red"]cd /data/local[/COLOR]
cd /data/local
/data/local # [COLOR="red"]chmod 0755 /data/local/flash_image[/COLOR]
chmod 0755 /data/local/flash_image
/data/local # [COLOR="red"]cd /data/local[/COLOR]
cd /data/local
/data/local #[COLOR="red"] ./flash_image misc /sdcard/mtd0.img[/COLOR]
./flash_image misc /sdcard/mtd0.img
/data/local # [COLOR="red"]exit[/COLOR]
exit


scotty i need you...erase system don't work..help me
 
Start a thread in the dhd sub-forum and I will take a look this evening. You'll need to detail the prollem,including why you want to erase system in the first place.
 
Start a thread in the dhd sub-forum and I will take a look this evening. You'll need to detail the prollem,including why you want to erase system in the first place.
Scotty, thanks for the help that you have been providing.

I did step 3(Flash SuperUser Root Files) in the OP and when I entered recovery via the Hboot Menu, the phone went back into its bootloop. I don't know if the superuser zip file was ever installed. Since I wasn't connected to the command prompt screen on the computer, I received no feedback. Is this normal and should I mover on to Step 4 in the OP?
 
Back
Top Bottom