Related
This procedure applies to both flyers and view
Required downloads
First download the Gingerbread RUU for your device from this thread.
If you don't have adb and fastboot on your PC
Get fastboot and adb tool for windows here
Get Fastboot and adb for linux here
I don't have a simple bundde for Mac, would welcome a link if anyone has one.
Download my universal misc_version and unzip to obtain the misc_version file.
Download tacoroot
Place both the misc_version and tacoroot.bin files in the same directory as adb
Procedure
Check the version number for your gingerbread RUU
In my example I am using this RUU: RUU_Flyer_HTC_WWE_2.00.405.3_R_Radio_20.3501.30.08 9BU_3809.05.04.10_M_release_194964_signed.exe
The version is the part highlighted in red.
Boot your flyer up to android if it's not already on, with usb debugging enabled and connect it to the PC.
Run the following adb commands
Code:
adb push tacoroot.bin /data/local/
adb push misc_version /data/local/
adb shell chmod 755 /data/local/tacoroot.bin
adb shell chmod 755 /data/local/misc_version
adb shell /data/local/tacoroot.bin --setup
At this point your device will reboot to recovery
Simultaneously press Volume Up, Volume Down and Power
Reboot your device
Run the following command
Code:
adb shell /data/local/tacoroot.bin --root
Your device will reboot, do not worry if it does not boot fully, it doesn't matter for this procedure, and it is a side effect of this root exploit.
Run the following command:
Code:
adb shell /data/local/misc_version -s [COLOR="Red"]2.00.405.3[/COLOR]
Note that the number in RED is the version number retrieved in step 1.
Reboot to fastboot:
Code:
adb reboot bootloader
Relock the bootloader:
Code:
fastboot oem lock
Go back to fastboot mode ( lock causes the device to reboot )
Run your RUU ( if on linux or mac, see other similar threads from me on how to RUU on those OSes )
Special Thanks
jcase for the tacoroot.
s*** too late!!!!
Yesterday I unlocked my Tab via HTC Unlock, hopefully I'll never need the warranty ...
But thanks for your detailed and very helpful instructions in this forum, don't know where I would be without you.
globatron said:
7. Run the following command:
Code:
adb # /data/local/misc_version -s [COLOR="Red"]2.00.405.3[/COLOR]
Click to expand...
Click to collapse
I think there is a mistake, it should be:
Code:
adb shell /data/local/misc_version -s [COLOR="Red"]2.00.405.3[/COLOR]
But: it doesn't work. The device hangs in the boot process after flashing the RUU.
Tutmanichtun said:
I think there is a mistake, it should be:
Code:
adb shell /data/local/misc_version -s [COLOR="Red"]2.00.405.3[/COLOR]
But: it doesn't work. The device hangs in the boot process after flashing the RUU.
Click to expand...
Click to collapse
The typo correction is correct but that it doesn't work is not. I've done this multiple times with both my own and other peoples devices and it works just fine. Make sure you used a gingerbread RUU and the it flashed completely. AND that you not doing this on an S-OFF device.
globatron said:
AND that you not doing this on an S-OFF device.
Click to expand...
Click to collapse
Thats the fault. My Flyer is S-OFF. Is there a possibility to get back to GB anyway?
Edit: Found a Solution. It cost me the whole day, but now it works.
The bad note: I don't know the Link with the solution. But it was in this Forum.
I got to it by Flashing a 3.2.1 ROM, and after that a 2.3.4 ROM via Goldcard-Method. (Via the SD-Card.)
During the process the Bootloader creates a message, that the installed hboot version isn't downgradeable or something like that. I hacked that into Google and it throws out a Thread in this Forum with the Solution.
Might be a little off topic, but the title:
[Pocedure]No HTC unlock HC-GB downgrade for official HC OTA
"[Pocedure]" is missing a letter r
echaru said:
Might be a little off topic, but the title:
[Pocedure]No HTC unlock HC-GB downgrade for official HC OTA
"[Pocedure]" is missing a letter r
Click to expand...
Click to collapse
Cool. someone who actually reads
Thanks echaru, fixed.
Im on the HC leak - can I use this method flash the RUU for US WIFI HC Release or do I need to go back to GB first?
Back to gingerbread I believe is your only option
Sent from my HTC Flyer P510e using xda premium
mcord11758 said:
Back to gingerbread I believe is your only option
Sent from my HTC Flyer P510e using xda premium
Click to expand...
Click to collapse
That's Correct.
Tutmanichtun said:
Thats the fault. My Flyer is S-OFF. Is there a possibility to get back to GB anyway?
Edit: Found a Solution. It cost me the whole day, but now it works.
The bad note: I don't know the Link with the solution. But it was in this Forum.
I got to it by Flashing a 3.2.1 ROM, and after that a 2.3.4 ROM via Goldcard-Method. (Via the SD-Card.)
During the process the Bootloader creates a message, that the installed hboot version isn't downgradeable or something like that. I hacked that into Google and it throws out a Thread in this Forum with the Solution.
Click to expand...
Click to collapse
What you say does not make sense to me. This thread specifically says this is for official HC upgrade which implies you have to be S-ON and locked.
If you are S-OFF you need to follow Globatron's other thread http://forum.xda-developers.com/showpost.php?p=19607833&postcount=3
cnewsgrp said:
What you say does not make sense to me. This thread specifically says this is for official HC upgrade which implies you have to be S-ON and locked.
If you are S-OFF you need to follow Globatron's other thread http://forum.xda-developers.com/showpost.php?p=19607833&postcount=3
Click to expand...
Click to collapse
Thats what I said: I've made a mistake.
hi
I try this method ... but something is wrong
adb push msc_version /data/local
error : cannot stat msc_version : No such file or directory
your file is misc_version
rename misc_version to msc_version? or ?!
plz help
nader1450 said:
hi
I try this method ... but something is wrong
adb push msc_version /data/local
error : cannot stat msc_version : No such file or directory
your file is misc_version
rename misc_version to msc_version? or ?!
plz help
Click to expand...
Click to collapse
Typo in the procedure, fixed now.
Hi
I followed the instruction and at this point:
adb shell /data/local/misc_version -s 2.00.405.3
I have a message: error opening input file.
I assume it is for the RUU.. where do I need to copy the RUU file to my SD or to the same folder where ADB is?
That is not the ruu. It is the misc file and all files should not be on your ad unless you are trying to flash the zip through hboot. They should be in your adv folder
Sent from my HTC Flyer P510e using xda premium
mcord11758 said:
That is not the ruu. It is the misc file and all files should not be on your ad unless you are trying to flash the zip through hboot. They should be in your adv folder
Sent from my HTC Flyer P510e using xda premium
Click to expand...
Click to collapse
Thx for your answer. I have the misc file in the ADB folder the sameone I downloaded from the instruction.. any other idea?
Right the whole message is after I enter the command:
Finding misc partition
misc partition found: /dev/block/mmcblk0p28!
backing up misc partition to /data/local/miscBackup-1325954343.bin and determing
version length...
Error opening input file.
You failed to get root with tacoroot.
Start again from the last command in step 3.
globatron said:
You failed to get root with tacoroot.
Start again from the last command in step 3.
Click to expand...
Click to collapse
I think this would be the problem then after i run this:
C:\Android>adb shell /data/local/tacoroot.bin --root
Rebooting into root.
cannot create /data/local.prop: permission denied
globatron said:
Type in the procedure, fixed now.
Click to expand...
Click to collapse
thanks
i try again ... but:
adb shell /data/local/misc_version -s 2.27.707.1
have error (i don't remember error but something like that): misc only 11 number but this is 10
any way, restart and come htc boot and didn't go to android.
i flash HC ... and go to android ... but adb cannot connect device
error is: devices not found
i try:
adb kill-server
but still problem
plz help me
The hope of this thread is to centralize downgrade questions and also make the resources more accessible.
It is important to know your status.
-are you stock ota
-are you htc dev unlock hc
-are you s off hc
If you can not figure this out, god help you. To figure this out get into hboot the top will say
-s on
-unlocked
-s off
Don't know how to get into hboot? Wow! Novice. Hold power and volume down until flyer boots into white screen with androids on skateboards. Ta da!
Now that we know our status how do you downgrade? I take no credit for any of these methods.
Ota stock hboot
http://forum.xda-developers.com/showthread.php?t=1428104
Htc dev unlock
http://forum.xda-developers.com/showthread.php?t=1307759
S off hc
Third post of this thread
http://forum.xda-developers.com/showthread.php?t=1358758
If you have a question ask here or downgrade thread, do not start your own thread. Read the other questions asked first, the hope is that after a little while most scenarios will be covered. If a question is repeated multiple times it will be ignored.
Why bother doing this? I have an odd compulsion to help. I remember when I got my first android device and I rooted it and deleted gtalk. My market stopped working. I went into newbie panic and others helped me even though my issue was pathetic. I remember what that felt like and how cool it was that someone helped me. So, I hope this helps
Need help
Hello,
After a few weeks trying I still have problems downgrading to GB.
My Flyer is Relocked and S-on.
HTC__001
Softwareno. 3.55.1114.31
S-on
HBoot 1.11.0011
Radio-3822.10.08.07_M
I have the following RUU: RUU_Flyer_HTC_WWE_Wifi_2.27.1114.31_Radio_20.3504.30.089BU_3809.07.04.06_M_release_204727_signed
I have used Globatrons guide.
The problem appears when I type the command:
adb shell /data/local/tacoroot.bin --root
I get the following message:
cannot create /data/local.prop: permission denied
And after this i cannot go on.
Can someone tell me what to do, I think I have tried everything now.
thx Driesman
*EDIT: globatron has already mentioned this, but just to confirm, it does not work if you have already unlocked your bootloader through htcdev.com. it does not work if you have obtained CWM recovery through htc unlock. it does not work if you have root through htc unlock. it will only work if you have unmodified stock HC. at least this was my experience.
Have you unlocked before?
I have unlocked and relocked the flyer.
Globatron has to guides; one with unlocked and one with locked flyer.
Is there another way to go back to GB?
I think you should unlock your hboot again. Flash a recovery and super user. Then follow the thread I linked in the op for htc dev unlock
Okay I will try.
Can you tell me step by step how to do: "I think you should unlock your hboot again. Flash a recovery and super user"
Maybe I am doing something wrong.
Follow this site to unlock bootloader
http://htcdev.com/bootloader/
Then get into fastboot mode, I assume you have adb and fastboot commands on your PC. Place this in same folder as command
https://www.box.com/shared/9bb9ba944ea6f301afe8
Open commands on PC then enter command
Fastboot flash recovery "name of file you downloaded"
Place this on your external SD
https://www.box.com/shared/b51a527355d7fba5dca3
Get into recovery and select install zip from Sd. Select this file
Flyer
Everything seems to work ok until I type the following command:
adb shell
$ su
# chmod 777 /data/local/misc_version
# /data/local/misc_version -s 2.27.1114.31
Then I get the error below:
D:\Adb>adb shell
$ su
# chmod 777 /data/local/misc_version
# /data/local/misc_version -s 2.27.1114.31$ $ su
$: permission denied
$ # chmod 777 /data/local/misc_version
$
See also uploaded screenshot
Am I doing something wrong?
What to do now?
You flashed super user in recovery
Flyer
Is that a question?
Yes.
Yes I did.
Can I copy, paste the command below or do I have to run each line seperately?
adb shell
$ su
# chmod 777 /data/local/misc_version
# /data/local/misc_version -s 2.27.1114.31
Each line seperate
Make sure when you enter in su to have your flyers screen on and to allow sufficient access when prompted
Flyer
Yes, I think it is working now??
See attachment
Now I will try to finish it....
The next step is to Reboot to fastboot.
Do I have to enter the command (adb reboot bootloader) into the dos screen or do I choose the option on the Flyer (REBOOT BOOTLOADER)?
However you want
Flyer
YES........It worked!
After all these hours trying.
How can I thank you?
There is a button for that. Glad to hear it worked. Enjoy
Where is the THANKS button?
Have searched for it before but cannot find it.
Depends if you are using app. Or Web page. no worries
Flyer
I have unlocked the booatloader via HTV website, installed CWMRecovery, installed su-3.0.3...zip
It took a while for me to be able to get any root at all but now I managed to be able to su from adb shell however, Titanium Pro or any other application still can't get root.
I never get the prompt asking to accept root... I tried also change to auto accept root requests but nothing...
Any tips?
Running SU 3.0.3
ICS
HBoot 1.53.007
HELP!
Managed to get it working ... I found a packaged on another forum that did re-flash the kernel and everything is working now...
File was: root-OTA-ICS.zip
Found at http://www.htcmania.com/showthread.php?t=421641
Thanks
frviana said:
I have unlocked the booatloader via HTV website, installed CWMRecovery, installed su-3.0.3...zip
It took a while for me to be able to get any root at all but now I managed to be able to su from adb shell however, Titanium Pro or any other application still can't get root.
I never get the prompt asking to accept root... I tried also change to auto accept root requests but nothing...
Any tips?
Running SU 3.0.3
ICS
HBoot 1.53.007
HELP!
Click to expand...
Click to collapse
One month after i bought it, my ShooterU has got a MB replacement (RMA)
And now it's impossible for me to unlock bootloader with the htcdev method.
Is there another way to make it possible (Evo3d with stock ICS) ?
Thank you for helping me, i'm furious with it.
Post in q&a not development !
crossmanbx said:
One month after i bought it, my ShooterU has got a MB replacement (RMA)
And now it's impossible for me to unlock bootloader with the htcdev method.
Is there another way to make it possible (Evo3d with stock ICS) ?
Thank you for helping me, i'm furious with it.
Click to expand...
Click to collapse
HTCDev unlock method doesn't work on phones with replaced motherboards. You're out of luck, sorry.
it's called bad blocks. nothing you can do about it ...
Can't you use juopunutbear and do the wire trick?
00mpollard said:
Can't you use juopunutbear and do the wire trick?
Click to expand...
Click to collapse
I think it's a good idea to try the juopunutbear, but i need to have temp root at least.
And all temp root i find are made for Gingerbread.
Does anyone know a temp root method for ICS ?
Thank you
Questions and non-development related should be posted in the appropriate sections. This thread is not dev related, so I'm moving it.
So there isn't another method to unlock my bootloader ? Htcdev is the only way to do this ? What does it mean ?
My evo 3d is unrootable ? The bootloader still be blocked forever ?
Please help me not to sell it ! Thank you
crossmanbx said:
So there isn't another method to unlock my bootloader ? Htcdev is the only way to do this ? What does it mean ?
My evo 3d is unrootable ? The bootloader still be blocked forever ?
Please help me not to sell it ! Thank you
Click to expand...
Click to collapse
Unless Unlimited.io releases a version of controlbear that works on just temp root, nothing can be done.
Such a method already exists for the HTC Sensation.
kgs1992 said:
Unless Unlimited.io releases a version of controlbear that works on just temp root, nothing can be done.
Such a method already exists for the HTC Sensation.
Click to expand...
Click to collapse
I don't believe there's a temp root technique that works on the Evo 3D anyway, but if you know of one some users here have been looking for it for other reasons, especially one that works with ICS.
The Evo 3D is definitely not the same phone as the Sensation and has different capabilities and limitations.
ramjet73
ramjet73 said:
I don't believe there's a temp root technique that works on the Evo 3D anyway, but if you know of one some users here have been looking for it for other reasons, especially one that works with ICS.
The Evo 3D is definitely not the same phone as the Sensation and has different capabilities and limitations.
ramjet73
Click to expand...
Click to collapse
I agree. Only speculating.
Doesn't TPSparkyRoot work?
Try this:
To root:
Code:
adb shell "rm /data/local/tmp.orig"
adb shell "mv /data/local/tmp /data/local/tmp.orig"
adb shell "rmdir /data/local/tmp"
adb shell "ln -s /data /data/local/tmp"
adb shell "rm /data/local.prop"
adb shell "chmod 777 /data/local/"
adb shell "echo ro.kernel.qemu=1 > /data/local/local.prop"
adb reboot
adb shell "chmod 777 /data/local/local.prop"
adb shell "mv /data/local/local.prop /data/local.prop"
adb reboot
It's okay if the "adb shell rm" or "adb shell rmdir" commands fail.
To unroot:
Code:
adb shell "rm /data/local.prop"
adb shell "rm /data/local/tmp"
adb shell "mv /data/local/tmp.bak /data/local/tmp"
kgs1992 said:
I agree. Only speculating.
Doesn't TPSparkyRoot work?
Click to expand...
Click to collapse
Never heard of that for the Evo 3D. If you can post a link I'll give it a try if it's compatible with the CDMA Evo 3D. Mostly people are looking for it so they can backup a stock unrooted ROM with Titanium Backup before they root and S-OFF.
ramjet73
ramjet73 said:
Never heard of that for the Evo 3D. If you can post a link I'll give it a try if it's compatible with the CDMA Evo 3D. Mostly people are looking for it so they can backup a stock unrooted ROM with Titanium Backup before they root and S-OFF.
ramjet73
Click to expand...
Click to collapse
Instructions are above. But it needs to be tried on LOCKED S-ON E3D.
Temp root is unstable, the only thing you can see on the phone is the statusbar.
You can't use the phone till temproot is removed, only use adb commands.
You can probably adb pull /data & restore it later.
kgs1992 said:
Instructions are above. But it needs to be tried on LOCKED S-ON E3D.
Temp root is unstable, the only thing you can see on the phone is the statusbar.
You can't use the phone till temproot is removed, only use adb commands.
You can probably adb pull /data & restore it later.
Click to expand...
Click to collapse
I'm out of thanks right now, but appreciate your posting that.
Being S-OFF already via JuopunutBear I'm not as anxious to try it since it requires going back to S-ON, but maybe someone who is currently S-ON on an Evo 3D would be willing to test. I'm assuming that it shouldn't matter if the phone is a GSM or CDMA model based on the commands above.
ramjet73
ramjet73 said:
I'm out of thanks right now, but appreciate your posting that.
Being S-OFF already via JuopunutBear I'm not as anxious to try it since it requires going back to S-ON, but maybe someone who is currently S-ON on an Evo 3D would be willing to test. I'm assuming that it shouldn't matter if the phone is a GSM or CDMA model based on the commands above.
ramjet73
Click to expand...
Click to collapse
Yes, that's right, it doesn't matter.
That is basically the TPSparkyRoot exploit, but I've modified it slightly.
Hope it does work.
If it doesn't, whoever tries it, please post the error message.
kgs1992 said:
I agree. Only speculating.
Doesn't TPSparkyRoot work?
Try this:
To root:
Code:
adb shell "rm /data/local/tmp.orig"
adb shell "mv /data/local/tmp /data/local/tmp.orig"
adb shell "rmdir /data/local/tmp"
adb shell "ln -s /data /data/local/tmp"
adb shell "rm /data/local.prop"
adb shell "chmod 777 /data/local/"
adb shell "echo ro.kernel.qemu=1 > /data/local/local.prop"
adb reboot
adb shell "chmod 777 /data/local/local.prop"
adb shell "mv /data/local/local.prop /data/local.prop"
adb reboot
It's okay if the "adb shell rm" or "adb shell rmdir" commands fail.
To unroot:
Code:
adb shell "rm /data/local.prop"
adb shell "rm /data/local/tmp"
adb shell "mv /data/local/tmp.bak /data/local/tmp"
Click to expand...
Click to collapse
i am willing to test this.i have gsm evo 3d with hboot 1.5(OTA ICS),LOCKED S-ON.but i have some questions:
1)when i execute those commands should i be in fastboot usb or just connect the phone in charging mode and with usb debugging checked?
2)if i sucesfully temp root what can i do in order to perm root my phone?
THANKS!!!
johnmarshton said:
i am willing to test this.i have gsm evo 3d with hboot 1.5(OTA ICS),LOCKED S-ON.but i have some questions:
1)when i execute those commands should i be in fastboot usb or just connect the phone in charging mode and with usb debugging checked?
2)if i sucesfully temp root what can i do in order to perm root my phone?
THANKS!!!
Click to expand...
Click to collapse
1) adb access required. Hence, charging mode with USB Debugging enabled.
2) You cannot permanently root without an unlocked bootloader or S-OFF.
kgs1992 said:
1) adb access required. Hence, charging mode with USB Debugging enabled.
2) You cannot permanently root without an unlocked bootloader or S-OFF.
Click to expand...
Click to collapse
then,if i succesfully obtain temp root,what can i do?can i unlock my bootloader,downgrade hboot?what can i do?thanks!
johnmarshton said:
then,if i succesfully obtain temp root,what can i do?can i unlock my bootloader,downgrade hboot?what can i do?thanks!
Click to expand...
Click to collapse
Very little. You can probably make backup of your data.
You can get root access via adb shell. But what you can do is limited.
The most this will establish is whether or not the E3D can be temprooted or not.
kgs1992 said:
Very little. You can probably make backup of your data.
You can get root access via adb shell. But what you can do is limited.
The most this will establish is whether or not the E3D can be temprooted or not.
Click to expand...
Click to collapse
Could he push an "su" binary to the system partition while he has temp root?
ramjet73
Hello again,
I am trying to S-Off a HTC One Max. So I'm using firewater. However, when i write adb shell then su, nothing happens, I'm not getting the SuperSU permission on my phone.. I've tried different ports and everthing, YES I did adb reboot and i did push firewater, both worked. just this weird thing about the su that isn't working, i tried supersu 1.94, 1.99 and now I gotthe 2.02 and yet, nothing.
any help?
PampaZiya said:
Hello again,
I am trying to S-Off a HTC One Max. So I'm using firewater. However, when i write adb shell then su, nothing happens, I'm not getting the SuperSU permission on my phone.. I've tried different ports and everthing, YES I did adb reboot and i did push firewater, both worked. just this weird thing about the su that isn't working, i tried supersu 1.94, 1.99 and now I gotthe 2.02 and yet, nothing.
any help?
Click to expand...
Click to collapse
Which carrier are you on? What happens when you open the SU app? What ADB/fastboot are you using?