yashsingh1/xdaforums huggingface dataset:
[HTC Desire S] newrad67:
Warning! I don't recommend this to users who are new to Android since there is a possibility of bricking your device. I will not be responsible if this happens.

It will downgrade everything even the HBoot using a HTC signed ROM. I've downgraded RUU_Saga_Telstra_WWE_1.36.841.3 with HBoot 0.98.0002 to Hboot 0.98.0000 of RUU_Saga_HTC_Thailand_1.35.1113.2.

First you need below tools and applications. I will not explain everything since I'm assuming you already know how to use it and make it.

1. ADB tool to access you device thru shell.

2. ADB driver - you may install HTC Sync since it has ADB driver in it.

3. HEX Editor - I used HxD.

4. Spare micro SD with Goldcard.

5. Card reader to make your life easier.

6. Update.zip ROM you will use to downgrade(rename it to PG88IMG.zip).

6. GingerBreak-v1.20.apk to temp root our device.

Step 1: Copy GingerBreak-v1.20.apk to your spare micro SD and insert it into your phone.

Step 2: Enable USB debugging in your device and connect it to your PC(Charge only). Make sure the drivers are installed properly. If not, install HTC Sync.

Step 3: Install and run GingerBreak-v1.20.apk. It will force close other apps(this is normal just close it). The gingerbreak application will promp that something goes wrong with the rooting(can't remember the actual spiel) but actually we already have our temp root.

Step 4: Run you ADB tool and issue command su to have root access. You can now see in your device that Superuser app is prompting you to allow the ADB root access. Accept it.

Step 5: On the # prompt, issue command dd if=/dev/block/mmcblk0p17 of=/mnt/sdcard/mmcblk0p17.img (to copy mmcblk0p17 to your SDcard). Power off your device and copy mmcblk0p17.img to your PC.(You can also use the command shell to copy it into your PC if you know how to do it).

Step 6: Open mmcblk0p17.img using your Hex editor. On the 11th line(I think), modify the current version to 1.28.401.1(since this is the lowest version I know). Save it and copy back to SDcard. Insert the sdcard and turn your phone on.

Step 7: Run GingerBreak-v1.20.apk again and follow step 3 to 4.

Step 8: On the # prompt, issue command dd if=/mnt/sdcard/mmcblk0p17.img of=/dev/block/mmcblk0p17 (to copy back mmcblk0p17.img to your phone). Do this as quickly as possible since the temp root access sometimes loose its effect.

Step 9: Power off your device and remove your SDcard. Using your card reader, delete everything(not format) in your microSD(with Goldcard) and paste your PG88IMG.zip.

Step 10: Hold volume down + power to boot to recovery and the phone will do the installation itself. Wait until you have your downgraded ROM.

This is how I do it. Hope you won't encounter any problem with this procedure. Good luck!

I want to give thanks to all the XDA members for the knowledge I acquired for this procedure and to the developer of Gingerbreak.

You may also check sonikz procedure on post #4. I think his procedure is faster. You may use which one is easier for you to follow.
[HTC Desire S] panosfx:
Downgrade to what?To Froyo?

And for what reason?

Sorry for that noob question...
[HTC Desire S] Lacuna666:
Good question i think, if i remember well, on the desire (or HD?) sometimes downgrading was a way of getting to a version of software where you then could get root again !From that point on you could get a recovery installed and install some nice roms. I dont know if thats whats going on here, i wouldn't dare to hope that ...?
[HTC Desire S] sonikz:
Me n00b me downgrade

Newrad67, I have compiled a n00b way to achieve very similar results:

First off you need to create a Gold Card

Use the memory card that came with the phone, may as well hey!

Install Goldcard helper from market, run it and copy the CID for MMC2

This number has already been reversed so go to here, fill out the required fields.

That will then email you an image file. You can then using Gold Card Tool flash your image file to your phones SD card via the phones USB cable.

Next for the actual downgrade

You'll need this unzipped

in a command prompt, goto the directory you unzipped to

connect the phone via USB

then:

This copies the files to the phone and changes the permissions so they will function

This will enter the terminal for the phone

This will then temp root the phone you should now have # at the terminal prompt instead of $, which means you have higher privileges

From this point you can then run misc_version (Thanks to Blezz for the version number) This changes the version reported by the phone to 1.27.405.6, you cannot check this on the phone tho, as it will still report the other number.

From here you can then install the update/downgrade from the exe, no need to dump zip files or anything. As with anything here, results may vary and I won't be buying new hardware if it breaks yours! But it works a treat on mine.
[HTC Desire S] brokenworm:
This can be used with paulobriens test signed RUU HTC update to get root/boot/recovery installed on s-on .

If it just were public ;)
[HTC Desire S] newrad67:
This is why I recommend this only to advance users. :)

Our Desire S with S-On was released with Gingerbread ROM and Hboot that still not possible(as of now) to have custom boot recovery. Since we are on S-On, it is still not possible to be rooted and use custom ROM.

As far as I know, we don't have any official ROM except for Gingerbread. Correct me if I'm wrong. The list can be seen in this post. http://xdaforums.com/showthread.php?t=1002506

I'm just sharing this to people who wants to change their ROM if they want to change to a different one. Like me who installed the latest ROM from TELSTRA and find the bloatware annoying. I've done this to get back to the ROM I'm more comfortable using.
[HTC Desire S] sonikz:
Yeah I'm pretty much with you mate, no way to do anything more practical than flash a clean European Rom currently..... Not really a vast amount of progress either. Anything we should be doing to help get permanent root? Anyone?
[HTC Desire S] abo.saud:
Thankkssssss

It works on my s-on DS

Thanks a lot
[HTC Desire S] Blezz:
i really like it how sonikz is doing now like it was his idea how to downgrade it using adb gingerbreak and misc_version lol

i'm gonna stop my rooting tries + supporting here for the desire s, hating such people like him ;)
[HTC Desire S] sonikz:
I never said it was my idea and I have in a posted my thanks to the relevant people in other threads, I didn't mean to rub anyone the wrong way... I hadn't seen a adb version of gingerbreak until Friday and I'm sure you know the apk is very unpredictable or at least it is on my phone so I couldn't use misc_version, it just kept kicking errors.... Hey I just threw it out there, my bad
[HTC Desire S] Blezz:
okay

no it isnt the apks fault, maybe u forgot to use "su" in adb shell after using the apk, which u dont need for the command line version

anyway, maybe there is a way to get past the s-offf

in titanium backup there's a recovery exploit to remove files from s-on phones

we just need to know how the exploit is working and if it still working with 2.3

2nd option is i am getting a 2nd desire s soon.. it's a bugged on, radio destroyed and he don't get it repalced so he gives it me

maybe i can get the desire hd bootloader running somehow.. even if i am sure it will be a lot of work to get in
[HTC Desire S] brokenworm:
Plz guys... Get a grip.. we share.. whocares about credit.. come on..

Keep sharing.
[HTC Desire S] Rexton270:
Worked :-)
[HTC Desire S] pastynko:
@Rexton270: what worked?

@brokenworm: what you meant by the paulobriens test RUU?
[HTC Desire S] Blezz:
@brokenworm:

it's not paul's ruu, the files he published been released 1 day before at 911snipers blog

sadly without ruu too
[HTC Desire S] smarti13:
what ROM to get root

after doing that, what ROM is it better to download in order to

become root

?

thanks
[HTC Desire S] newrad67:
If you are on S-ON, none as of now.
[HTC Desire S] smarti13:
> 2 hours

running for more than 2 hours now, normal ?
[HTC Desire S] Blezz:
no not normal, restart your phone and try again

cause it's s-on nothing can happen to your system so don't worry and just restart
[HTC Desire S] smarti13:
same thing with this log:

$ ./GingerBreak

./GingerBreak

[**] Gingerbreak/Honeybomb -- android 2.[2,3], 3.0 s

[**] (C) 2010-2011 The Android Exploid Crew. All rig

[**] Kudos to jenzi, the #brownpants-party, the Open

[**] Zynamics for ARM skills and Onkel Budi

[**] donate to 7-4-3-C@web.de if you like

[**] Exploit may take a while!

[+] Plain Gingerbread mode!

[+] Found system: 0xafd17fd5 strcmp: 0xafd38065

[+] Found PT_DYNAMIC of size 232 (29 entries)

[+] Found GOT: 0x00014360

[+] Using device /devices/platform/goldfish_mmc.0

[*] vold: 25104 GOT start: 0x00014360 GOT end: 0x000

[*] vold: 25104 idx: -1024 fault addr: 0xfffb2284

[*] vold: 25162 idx: -2048 fault addr: 0xfff4e284

[*] vold: 25212 idx: -3072 fault addr: 0xffeea284

[*] vold: 25262 idx: -4096 fault addr: 0xffe86284

[*] vold: 25312 idx: -5120 fault addr: 0xffe22284

[*] vold: 25363 idx: -6144 fault addr: 0xffdbe284

[*] vold: 25414 idx: -7168 fault addr: 0xffd5a284

[*] vold: 25466 idx: -8192 fault addr: 0xffcf6284

etc ....

and sometimes:

[+] fault address in range (0x000132b4,idx=-3072)

[+] Calculated idx: -2005

[-] sendmsg() failed?

[-] sendmsg() failed?

[-] sendmsg() failed?

:-(
[HTC Desire S] nickh07:
Sorry for the noob questions, but I just wanted to clarify my understanding.

This process will allow me to put a 'stock' HTC Rom on my phone, getting rid of all the crappy stuff vodafone has put on the handset? But is not a form of rooting. Will I be able to reclaim my SD Card once the process has completed?
[HTC Desire S] Dr.Romca:
Yes, it lets you install any unrooted ROM extracted from RUU. Nothing else...but it can help you get rid of the crap carrier puts to the ROM...
[HTC Desire S] Blezz:
looks like u got no memory card in your phone when running gingerbreak, which is a requirements to use it

if u got a memory card in your phone, try using a different card
[HTC Desire S] smarti13:
there is ! ?

I can "see" it throw a file explorer.

I've mount it "Charge only".

i'll try to re format it .... and re Gold Card it ...
[HTC Desire S] Blezz:
goldcard is not neccessary for gingerbreak at first, ignore the APK part its only for his apk version of gingerbreak
[HTC Desire S] smarti13:
worked but

it FINALY worked after reformating

but impossible to install "RUU_Saga_Telstra_WWE_1.36.841.3_Radio_20.28d.30.0805U_3805.04.02.01_M_release_184558_signed.exe"

:-(
[HTC Desire S] Blezz:
reason? whats the RUU or bootloader screen telling you?
[HTC Desire S] smarti13:
- Desire S: blocked on HTC white on black logo

- PC: "Waiting for Bootlloader" then "Error [171]: USB connexion error"

Do I have to install HTC Drivers ?

(I Thought they where reinstalled by RUU"

thanks
[HTC Desire S] Blezz:
no they are installed with HTC sync
[HTC Desire S] smarti13:
I'm installing HTC Sync (provided on the SD Card by HTC....)

work a little better BUT "ID Error" :-(
[HTC Desire S] Blezz:
good luck with downgrading then mate
[HTC Desire S] Rexton270:
Great job pal :D

nevermind that buzcock :D :D :D
[HTC Desire S] kerrance76:
Thanks to every one involved.

Just replaced a vodafone rom with the stock euopean rom.

Tried 3 times with first gold card number and failed but worked first time with other number
[HTC Desire S] smarti13:
id ERROR WHILE INSTALLING RUU

id ERROR WHILE INSTALLING "RUU_Saga_Telstra_WWE_1.36.841.3_Radio_20.28d.30.0 805U_3805.04.02.01_M_release_184558_signed.exe"

( same with "RUU_Saga_HTC_Thailand_1.35.1113.2_Radio_20.28d.30.0805U_3805.04.02.01_M_release_183327_signed.exe"

I also tried to "./misc_version -s 1.36.841.3" ....

AND while in root, I've tried to copy an apk in /system/app/ BUT i've got the message:

cp: not found (like if the command is unknown ? pwd, cd work...)

thanks
[HTC Desire S] Blezz:
ID error means your gold card isn't working

and your misc version is wrong, simply use the lowest (1.27.0.0) so it will work 100%

copy isnt working cause of temp root there is no busybox installed
[HTC Desire S] smarti13:
THANKS :)

BUT: ./misc_version -s 1.27.405.6 DID work

how do I make my gold card working :-(

I've reformat it ...
[HTC Desire S] juergen_90:
Could someone post the softwarenumber after the downgrading?

greets
[HTC Desire S] Blezz:
HTC ruu flashed, software number = 1.28.401.1

@pdageek: i had it too, i used another memory card and then it worked

didn't worked with my 2gb card so i used desire s original 8gb card, reformatted it and goldcarded it and worked
[HTC Desire S] smarti13:
thanks

where did it blocked, what was the error message ?

thanks
[HTC Desire S] Drag0nXP:
Is the any successful perm root or/and s-off after downgrade? if no, so where is the goal of downgrading?
[HTC Desire S] newrad67:
If you are using unroot DS with S-On, and has the latest firmware version but lots of annoying application with it, will you stick with it? or use an older unbranded clean version?

We are just informing people that it is possible to downgrade to a clean older ROM.

I've read a lot just to achieve this coz there is still no posted procedure for DS. Sharing this makes it easier to people who wants the same goal.

Sent from my HTC Wildfire
[HTC Desire S] Drag0nXP:
thx, understood
[HTC Desire S] juergen_90:
Are the command prompts an the tools for the downgrade by sonikz windows only? or do I ned Linux or mac for some parts? How did you format the SD Card? Fat 32 etc. or did you format it with the phone.
[HTC Desire S] smarti13:
only Windows

FAT32 from PC
[HTC Desire S] Blezz:
same like u, ID error so i am very sure its cause of a faulty goldcard, like i said try another goldcard and it should work

there is adb for linux and mac too, the commands are adb specific and not windows specific so it's not only windows ;)

oh sorry misunderstood the question of juergen

well yes you are right pda it's only windows in this case, but working with all other os too :D
[HTC Desire S] smarti13:
other memory card ==> still the ID pb .. :-(

ERROR [130]: MODEL ID ERROR

I'll wait until UNREVOKED work :-(
[HTC Desire S] juergen_90:
Whats the difference between this method and "unrevoked"?
[HTC Desire S] smarti13:
UNREVOKED is not yet available for Desire S

http://www.unrevoked.com/recovery
[HTC Desire S] adridu59:
Will Unrevoked support the Desire S ? That's the question...

Try using the memory card coming with the phone :)
[HTC Desire S] juergen_90:
What kind of steps have to be done in the tutorial of sonikz where he says you can now downgrade with the exe?

I redad with the Desire HD was a Problem if you downgraded to the HTC Firmeware because the OTA Updates didn't work aftwerwards. Whats here with the Desire S? Would I have to change somethng which would cost me my guarantee ?

Whats if my Software id is like this: 1.32.163.1 20.28b.30.0805U_38.03.02.15_M

but the official rom is like this: RUU_Saga_HTC_Europe_1.28.401.1_Radio_20.28b.30.080 5U_38.03.02.11_M_release.

Is there a Problem if the HTC Version has a lower Number than the A1 Version?
[HTC Desire S] smarti13:
I did, I'm fed up, I quit !!! :)

I'v try with a PG88IMG.zip in recovery mode ==> CID ERROR

I've made my goldcard (format, patch) throw the phone in USB, do you think it is better to do it on a PC via a card reader ?

thanks ?
[HTC Desire S] juergen_90:
After reading I now understand the whole procedure.

But can anyone tell me if there will be problems with the OTA Update aftterwards like with the Desire HD?

And will there also be problems by downgradeing because of the lower versionnumber of the HTC device?

A1: 1.32.163.1 20.28b.30.0805U_38.03.02.15_M

Official: RUU_Saga_HTC_Europe_1.28.401.1_Radio_20.28b.30.080 5U_38.03.02.11_M_release.

greets
[HTC Desire S] sonikz:
This still sounds like a goldcard issue, you need to use the CID from Goldcard Helper
[HTC Desire S] smarti13:
I've used the 2 reverse CID from "Gold Card helper" to make the goldcar.img from http://psas.revskills.de/?q=goldcard

Card: mmc2:b368

Reverse CID: 00b3004cf119021030303030304d531b

Card: mmc0:0001 => NOK

Reverse CID: 00bd423503d20345443247344d000115

none worked :-(

I've previously used the CID from "Gold card Tool 0.0.5" on the PC:

MMC0 because MMC1 didn't worked

00BD423503D20345443247344D000115

NONE OK :-(
[HTC Desire S] smarti13:
THANKS it finally worked with the 8Gb original CARD and the mmc2 reverse CID from "Gold Card helper" from the Market :-)

I'm in RUU_Saga_HTC_Thailand_1.35.1113.2_Radio_20.28d.30.0805U_3805.04.02.01_M_release_183327_signed.exe then
[HTC Desire S] akbardotinfo:
one my stupid question:

where to get the PG88IMG.zip ? :)

and what to do with the exe file from thailand ? which one should I use ? the exe downgrade method or the zip method ?

Thank you !
[HTC Desire S] juergen_90:
You can use every method you want. But like the author of the zip method describes, it wil be a bit easier if you choose the exe downgrade method because it will work with every version number!
[HTC Desire S] craig1965:
Hi I just tried to downgrade the easy way firsty time round all went well till i got error 140 bootloader error now i cannot perform tempoary root the $ will not change ive tried rebooting the phone rebboting the laptop all i get is permisson denied where am i going wrong
[HTC Desire S] luca2006:
$ cd /data/local/tmp

$ rm*

and repeat injection (all steps)
[HTC Desire S] craig1965:
Thanks all worked 2nd time around now dow downgraded from T mobile uk ver 1.30 to open European 1.28 i owe you beers for that
[HTC Desire S] luca2006:
ohh happy for you that works :D

if u would to offer me beers, help me to find XTC clip to s-off my ds

here no way to get it because can't pay with local money :(

I am working on (software) but no way with usb port, I can't reach deeper couche for engineering
[HTC Desire S] Blezz:
well there is no way we need to set the s-off / chip read/write flag in the radio to make us able to flash a new hboot and i think we lack skilled developers for that
[HTC Desire S] pastynko:
even if we will have such radio, there will be problem how to flash that radio :(
[HTC Desire S] Blezz:
its every radio, we just have to find a bug which we can use to inject code to power off the security functions
[HTC Desire S] faddys123:
My desire s is shipped with hboot 0.98.00000 is that good?
[HTC Desire S] sonikz:
Only if its already S-off and its an ENG HBOOT....
[HTC Desire S] luca2006:
have u find a way to temp root /system/app and system/framework

on s-on device??
[HTC Desire S] Keon91:
will a downgrade make it able to root perm root a s-on desire s?
[HTC Desire S] sonikz:
Not at the moment
[HTC Desire S] nissl:
It wont work for me =(

Phone is S-ON

HBOOT 0.98.0000

Radio 38.03.02.11_M

any solution to make it working ?
[HTC Desire S] sonikz:
What error do you get would be a good place to start.
[HTC Desire S] nissl:
I can do all the steps on the phone like changing the version etc. but if i try to start the RUU.exe it starts to process and aborts with the error (USer-ID-Error)
[HTC Desire S] sonikz:
What rom are you trying to flash? If you can post the full filename it would be a bonus!
[HTC Desire S] nissl:
i try to flash

RUU_Saga_HTC_Europe_1.28.401.1_Radio_20.28b.30.0805U_38.03.02.11_M_release_177977_signed =)
[HTC Desire S] nissl:
Any solution? or more info needed?
[HTC Desire S] newrad67:
You are using miniSD with goldcard? If yes, try using different SD or the one that comes with your phone when you bought it.

Sent from my HTC Desire S
[HTC Desire S] ciselko:
problem with downgrade

I have 1.47.950.3 ROM installed, H-BOOT 0.98.0002.

I tryied to downgrade wit both versions:

http://xdaforums.com/showpost.php?p=13779557&postcount=1

and

http://xdaforums.com/showpost.php?p=13780422&postcount=4

but wib both metods temp rooting starts but never finished...

any solution please?
[HTC Desire S] madator:
I have 1.47.950.3 ROM installed, H-BOOT 0.98.0002. this not work help me
[HTC Desire S] xiaozhi2000:
where to get the mmcblk0p17.img ?

Thank you !
[HTC Desire S] davidreece:
just read on another forum that you need to factory reset at some point during these procedures and also have to do one section real quick, i havnt had any success getting post 4 to work, it gets to the actual gingerbreak bit then just keeps flashing a cursor, no # sign, i have tried 3 diffrent goldcards and tried about 6 times so i am ready to give up now, but i hope i havnt failed because the instructions are incomplete and not clear enough
[HTC Desire S] davidreece:
i am at the end of my tether :( i have tried everything to get gingerbreak to give me temp root and nothing works, method 4 just stays on the flashing cursor after the line found start, end etc, the apk on my phone just stays on the will reboot on success screen i have tried about 20 times with each method, i have left them running for over an hour just incase, i have factory reset my phone i have used 4 different goldcards, i am on a uk vodafone with 002 hboot can anyone help me before i go crazy, neither of the methods ever gets any further so i cant use alpharevx arrrghhhhhhhh :mad:
[HTC Desire S] newrad67:
Looks like you are stuck at getting temp root right? If Gingerbreak will not be updated or there is no new exploit, there is nothing we can do for now.

This was already noted by Chainfire on the Gingerbreak Apk thread.

NOTICE: Gingerbreak is an exploit that has been fixed in many of the latest Android versions and releases. If it does not work, it does not work. I can't "fix" the exploit, you will have to wait for a new exploit to come out, or root a different way!
[HTC Desire S] ben_pyett:
Can you not look for an XTC clip to perform the soff function, I was under the impression that from version 1.3.6 that supported all hboot versions on the (saga) desire s, although you should confirm this first

Search the general forum for "xtc" there is a thread started by me, with links to other owners that may be of help
[HTC Desire S] ben_pyett:
Apology for accidental double post
[HTC Desire S] davidreece:
if thats the case thats fine i can live with that, but everyone else here is on the same hboot etc as me so i am a bit confused as to why it works for everyone else
[HTC Desire S] nccorion:
same problem here, also vodafone (ger) device and temproot doesnt work =(

is there no other way to get temproot 4 the Desire S?

is there perhaps a chance alpharevx will work without downgradeing?
[HTC Desire S] davidreece:
fraid not i think we will just have to wait till they add 002 hboot support into alpharevx, it is still in beta so fingers crossed, to be honest the sense interface is fast and nice anyway so its not the end of the world :) still a great phone, just wish i had given the update a miss :(
[HTC Desire S] juergen_90:
The first OTA updates are out now and it would be very interesting if the OTA Updates still work after the downgrade, so please let me know for all of these who already downgraded their phone

greets
[HTC Desire S] EbiEre:
Same problem here, updated to the latest version 2 days ago, Gingerbreak just stays at the Rooting... Running exploit... screen.

That is ****ed up, i like this phone, but i want root! =)

Does anyone know if some devs are working to solve the problem with the latest ota update?

Cheers
[HTC Desire S] juergen_90:
Is it now possible to downgrade the Desire S if I already installed the A1 (vodafone) update?

To the guys who already downgraded, are you able to update OTA after the downgrade process?

greets
[HTC Desire S] Skanob:
I haven't read all of the posts on this thread but could someone please upload the "misc_version" file from this post. Link is dead. Thanks.
[HTC Desire S] Silverbullet09:
@skanob

here is the file inside ...

http://xdaforums.com/attachment.php?attachmentid=661216&d=1311237785
[HTC Desire S] Skanob:
is this the same misc_version file from the original post?

Thanks man.
[HTC Desire S] Silverbullet09:
yes it is the same!!;)