yashsingh1/xdaforums huggingface dataset:
[G2 and Desire Z General] catherall:
Temp root on Desire HD (Ace) with Sense 3.x

Hello,

we

rooted a Desire HD with Android 2.3.5 (Sense 3) successfully in IRC channel #G2ROOT

this week. The phone was bought about an year before, but updated (with OTA). Fre3vo and zergRush did not work at all!

Attention: All information provided in this post are "as is", no warranties, use at your own risk!

Some advice from Justin Case (developer of the Taco Root script): "While the phone will be highly unstable, and may not fully boot, you will have a root shell with adb. This gives you the ability to patch misc, and downgrade your phone."

Note: Dan Rosenberg discovered the Taco Root exploit first, earlier than Case.

Taco Root proved to work for temp root on the updated HTC Desire HD (Ace)!

However, it is difficult to use as the phone will not fully boot as long as Taco Root is active. This makes end users insecure.

To use Taco Root just download the Taco Root script from https://github.com/CunningLogic/TacoRoot/zipball/master.

Steps to use Taco Root:

The following steps assume that you know how to install and use adb.

Download Taco Root script tacoroot.sh and extract it into your platform-tools folder (or wherever you have adb).

Boot phone into recovery:

adb reboot recovery

Reboot phone into Android by pushing the buttons Volume down, Trackpad and Power simultaneously for about 10 seconds.

Put the script on the phone and setup Taco Root:

adb push tacoroot.sh /data/local/tmp
adb shell chmod 777 /data/local/tmp/tacoroot.sh
adb shell
cd /data/local/tmp
./tacoroot.sh --setup

The script reboots your phone automatically into recovery.

Reboot into Android (phone will most probably not boot fully, you might even see no splash screen).

Root the phone:

adb shell
cd /data/local/tmp
./tacoroot.sh --root

Don't be surprised, you phone will be booted into recovery again.

Reboot it to Android and connect to the phone shell.

adb shell

Now you should see the prompt "#" which indicates that you got root access now. :cool:

You can set the version string of your phone using misc_version or make other modifications.

Of course you do not have S-OFF yet, so writing to partitions like /system, /recovery or /boot is not possible.

After setting the version string your phone is ready to downgrade.

If you want to uninstall Taco Root then use the script again:

adb shell
cd /data/local/tmp
./tacoroot.sh --undo

This will reboot you phone.

To remove the script use the following command:

adb shell rm /data/local/tmp/tacoroot.sh

Best regards,

Catherall
[G2 and Desire Z General] Setherio:
*EDITED POST*

Did you rename the ROM you downlaoded "StockRom.zip"? Was it in the platform-tools folder?

~ Setherio
[G2 and Desire Z General] Setherio:
The myTouch 4G filename should be "PD15IMG.zip" not "PB15IMG.zip". Either you made a typo in the above post or while renaming the rom. Also, try the fastboot method if that doesn't work. I just (yesterday) helped someone who had a myTouch 4G and for some reason Bootloader wouldn't recognize the PD15IMG.zip file at all. So we used the fastboot method and it worked like a charm.

Good luck. :)

~Setherio
[G2 and Desire Z General] Nipqer:
King-J_80s made a few errors in the process.

First off, you didn't manage to push misc_version to the device. misc_version was not in your platform-tools folder.

Next you pushed the flashgc folder, not the file, so its actually at /data/local/tmp/flashgc/flashgc, so you either need to repush, or navigate there and chmod and run it.

Then fastboot couldn't find StockRom.zip, so it wasn't in platform-tools either.

-Nipqer
[G2 and Desire Z General] minimalist83:
I'm confused, I have mytouch 4 g I have to unlock it, first rooting and then unlock , I just have looked for downgrade guide but Nipqer have directed me to here for it, as you have , what am I supposed to do firstly? lock bootloader? how to do it? or?

Thanks
[G2 and Desire Z General] Setherio:
What Nipqer is saying is that if you used to HTC Unlocker from http://www.htcdev.com then, in order to actually downgrade to load a custom rom, you have to re-lock your phone. Then use the guide to unlock. Nipqer provided instructions on how to relock your phone because HTC Unlocker doesn't provide S-Off.

After that, follow the guide.

~Setherio
[G2 and Desire Z General] minimalist83:
@Setherio

I appreciate your help, but my phone is neither unlock nor rooted, it's running with gingerbread therefore I dont know whether it's bootloader lock or unlock, how to check it?
[G2 and Desire Z General] Setherio:
If you haven't used HTC Unlocker - and you would know if you have - then just start the guide ignoring the above step. What Nipqer mentioned was a precautions step for those whom have unlocked their phones via HTC Unlocker.

~Setherio
[G2 and Desire Z General] minimalist83:
@Setherio

Ok I got it right now. I should follow steps are downgrade > root > unlock?

Pls excuse me that first time using HTC branded celly

Thanks
[G2 and Desire Z General] Setherio:
No worries. We all start somewhere and at sometime :) Plus it's better to ask then to assume and mess up. ^_^

Basically if your goal is to load a custom rom this would be your procedure:

Follow the guide -> Once in Froyo, Root -> Load custom ROM.

Unlocking usually is part of the rooting process.

~Setherio
[G2 and Desire Z General] minimalist83:
@Setherio

So after rooting, my phone would be unlocked?

Unfourtunatly bad news;

I have bad chip is M4G2DE any way to have it rooted and unlocked?
[G2 and Desire Z General] King-J_80s:
do i extract them in there then try the downgrade
[G2 and Desire Z General] Nipqer:
Yes, rooting and unlocking is done at the same time.

You can still unlock/root with the M4G2DE chip, its just that some of those chips are known to have broken, though I'm fairly certain all the 'bad' ones will have died by now.

Yes, extract all the files needed into platform-tools.

If you get any 'cannot stat <file>' messages, it means adb can't find them

-Nipqer
[G2 and Desire Z General] Nipqer:
Are you sure misc_version is in your platform-tools folder?

Can you run 'dir' in cmd (not in adb shell) when you're in platform-tools?

I wanna see whats in your platform-tools folder

-Nipqer
[G2 and Desire Z General] minimalist83:
I have been waiting for 15 minutes flashig stock rom is it normal and not what to do?

it's stucked in "sending "zip" <319593 KB>...

following error says ; FAILED <data transfer failure <too many links>

FAILED <satatus read failed <too many links>>

Thanks
[G2 and Desire Z General] King-J_80s:
Yea ill post it a lil later

---------- Post added at 03:22 PM ---------- Previous post was at 03:08 PM ----------

C:\Program Files (x86)\Android\android-sdk\platform-tools>dir

Volume in drive C is HP

Volume Serial Number is 08F1-D5C5

Directory of C:\Program Files (x86)\Android\android-sdk\platform-tools

04/18/2012 02:28 AM <DIR> .

04/18/2012 02:28 AM <DIR> ..

04/11/2012 10:05 PM 824,832 aapt.exe

04/11/2012 10:05 PM 162,816 adb.exe

04/11/2012 10:05 PM 96,256 AdbWinApi.dll

04/11/2012 10:05 PM 60,928 AdbWinUsbApi.dll

04/11/2012 10:05 PM 220,672 aidl.exe

04/11/2012 10:05 PM <DIR> api

04/11/2012 10:05 PM 132,608 dexdump.exe

04/11/2012 10:05 PM 2,618 dx.bat

04/14/2012 12:16 PM 992,202 fastboot-windows.exe

04/11/2012 10:05 PM 70,144 fastboot.exe

04/14/2012 12:55 AM <DIR> flashgc

04/18/2012 02:25 AM 671,798 flashgc.zip

04/14/2012 12:43 AM <DIR> fre3vo

04/18/2012 02:27 AM 11,342 fre3vo.zip

04/11/2012 10:05 PM <DIR> lib

04/11/2012 10:05 PM 19,318,784 llvm-rs-cc.exe

04/18/2012 02:23 AM <DIR> misc_version_01

04/18/2012 02:36 AM 20,439 misc_version_01.zip

04/11/2012 10:05 PM 377,618 NOTICE.txt

04/12/2012 01:47 AM <DIR> psneuter

04/14/2012 12:41 AM <DIR> renderscript

04/11/2012 10:05 PM 207 source.properties

04/15/2012 01:10 AM 129,303,247 StockRom.zip

04/17/2012 08:30 PM <DIR> Vision-fre3vo-temp-root

04/18/2012 02:29 AM 1,077,998 Vision-fre3vo-temp-root.zip

04/12/2012 01:47 AM <DIR> vision.hboot-0.76.2000

17 File(s) 153,344,509 bytes

11 Dir(s) 260,984,852,480 bytes free

C:\Program Files (x86)\Android\android-sdk\platform-tools>
[G2 and Desire Z General] Nipqer:
What you could try, is doing it without an sdcard inserted. This has worked for a few people.

No idea what causes the problem though

Notice how it has

04/18/2012 02:23 AM <DIR> misc_version_01

04/18/2012 02:36 AM 20,439 misc_version_01.zip

So misc_version will be in misc_version_01

So you could do

'adb push misc_version_01\misc_version /data/local/tmp'

or move the misc_version file from misc_version_01 into the platform-tools folder.

-Nipqer
[G2 and Desire Z General] King-J_80s:
ill try that thanx
[G2 and Desire Z General] dzefas:
Hello, I use DOWNGRADE_GUIDE_V3.pdf method.

When I 4.Run the following commands

>adb push fre3vo /data/local/tmp

answer

Can not stat 'fre3vo': No such file or directory

what's wrong?
[G2 and Desire Z General] tyshon6:
when i try to change the version number to 1.00.000.0 it keeps say version denied what do i do ?
[G2 and Desire Z General] tuffCookie:
won't scan past first region...

$ /data/local/tmp/fre3vo -debug -start FAA90000 -end FFFFFFFF
/data/local/tmp/fre3vo -debug -start FAA90000 -end FFFFFFFF
fre3vo by #teamwin
Please wait...
Attempting to modify ro.secure property...
fb_fix_screeninfo:
id: msmfb
smem_start: 2fd00000
smem_len: 300000
type: 0
type_aux: 0
visual: 2
xpanstep: 0
ypanstep: 1
line_length: 1920
mmio_start: 0
accel: 0
fb_var_screeninfo:
xres: 480
yres: 800
xres_virtual: 480
yres_virtual: 1600
xoffset: 0
yoffset: 0
bits_per_pixel: 32
activate: 16
height: 80
width: 48
rotate: 0
grayscale: 0
nonstd: 0
accel_flags: 0
pixclock: 0
left_margin: 0
right_margin: 0
upper_margin: 0
lower_margin: 0
hsync_len: 0
vsync_len: 0
sync: 0
vmode: 0
Frame Buffer handle: 4
Buffer offset: 002ee000
Buffer size: 8192
Scanning region aa900000...

i let it sit for 15 min and it never went beyond scanning region aa900000.

any ideas?
[G2 and Desire Z General] policeman0077:
i only have one sd card can I just use one sd card to achieve down grade?

1. i got cid error everytime so I wonder how to determine the golden card is made correctly.

2.if I get a cid error and reboot, do I need redo the tmp root and change version step?

---------- Post added at 08:44 PM ---------- Previous post was at 08:41 PM ----------

---------- Post added at 08:57 PM ---------- Previous post was at 08:44 PM ----------

put this file in same folder as adb
[G2 and Desire Z General] Nipqer:
fre3vo isn't in the current working directory, adb cannot see it.

Have a look at a few posts above yours, I talked someone else through the same issue

Version denied? or permission denied?

Could be a whole bunch if issues, you don't have temp-root, you didn't chmod properly, you didn't push properly, etc.

Try a different temp-root, maybe zergRush or tacoroot

just use your 1 sdcard, the data on it won't be affected.

How did you make the goldcard? if you used flashgc, it will work.

if cid fails, you just need to temp-root and retry the goldcard, misc_version will stick.

-Nipqer
[G2 and Desire Z General] dzefas:
every time i get to get to fastboot and click on bootloader, it scans PC10IMG.zip or PC10IMG or PCtenIMG.zip or PCtenIMG ... and then it says wrong image or no image.

i've tried all the different mirrors. still nothing works.

what's wrong?
[G2 and Desire Z General] Nipqer:
Have you put it on your sdcard?

Sometime's hboot just doesn't want to read it properly, so use the fastboot downgrade method.

-Nipqer
[G2 and Desire Z General] dzefas:
C:\Users\Zuikiai>fastboot-windows flash zip StockRom.zip

sending 'zip' (291447 KB)... OKAY

writing 'zip'... INFOadopting the signature contained in this image...

INFOsignature checking...

INFOzip header checking...

INFOzip info parsing...

INFOchecking model ID...

INFOchecking custom ID...

INFOchecking main version...

FAILED (remote: 43 main version check fail)

i used fastboot method...what's wrong?
[G2 and Desire Z General] Nipqer:
You didn't run misc_version properly

-Nipqer
[G2 and Desire Z General] dzefas:
successful downgrade, after that successful root and then custom rom. Thank you all ;)
[G2 and Desire Z General] Kelevro:
Stuck at splash screen?

I let it update, after going through the whole guide, and you said it took "5-10 minutes," and I let it sit for 40, with no avail. I thought, "maybe it's done and the screen's just frozen." So, I removed the battery and tried to turn it back on --

-- I couldn't. It got stuck at the splash screen, and no where else. Am I boned?

---------- Post added at 08:11 PM ---------- Previous post was at 07:59 PM ----------

I got it into the H-boot screen, and retried the update, but all the things on the side say "FAIL". What do?
[G2 and Desire Z General] cooldudesunny:
Hey Bud,

Can you help me with this, I tried downgrading after temp root by running the RUU file on my computer too and there also it failed for the same reason i.e. "Signature Verify Fail"?

Mine is a Desire HD on Orange UK.
[G2 and Desire Z General] Nipqer:
Did you try making a goldcard? I don't see you running flashgc in that log.

-Nipqer
[G2 and Desire Z General] cooldudesunny:
Hi Nipqur,

Thanks for your speedy response. I did make the gold card, when i try with zip file on the SD Card, bootloader doesnot recognize the file. So i tried running RUU from Windows and fastboot method!

Sorry for the stupid question, but what is flashgc? Does it mean flash goldcard?
[G2 and Desire Z General] Nipqer:
flashgc is the file in this guide that creates a goldcard.

how did you make yours?

-Nipqer
[G2 and Desire Z General] villeban:
Constant Reboot after trying fastboot install with stockrom. Please Help!

C:\Users\Officer>cd android

C:\Users\Officer\Android>cd sdk

C:\Users\Officer\Android\sdk>cd tools

C:\Users\Officer\Android\sdk\tools>adb reboot bootloader

C:\Users\Officer\Android\sdk\tools>fastboot-windows devices

SH0AXT704731 fastboot

C:\Users\Officer\Android\sdk\tools>fastboot-windows oem rebootRUU

... OKAY

C:\Users\Officer\Android\sdk\tools>fastboot-windows flash zip StockRom.zip

sending 'zip' (319593 KB)... OKAY

writing 'zip'... INFOadopting the signature contained in this image...

INFOsignature checking...

FAILED (status read failed (Too many links))

C:\Users\Officer\Android\sdk\tools>
[G2 and Desire Z General] j0e_ahm:
TYPE THE COMMAND AGAIN

fastboot-windows flash zip StockRom.zip

IT HAPPEN TO ME AS WILL AND GOT SCARED LUCKY FOR ME I READ THE INSTRUCTIONS...
[G2 and Desire Z General] noe1002:
(First, sorry for my english... If anyone speak french...) :o

My DZ is root, S-on

Hboot 0.85.0015 / Android 2.3.3 / Build 2.42.405.2

I want to S-off my DZ and flash a new rom, so I follow your thread step by step but the manual downgrade seems not work (the Zip is downloaded but nothing happen after: the DZ reboot and anything has changed), so I try the 'fastboot downgrade' and I have the following error:

I tried three times again with the same result.

I don't undersand why (and how) my DZ can be root (with SU and Rom Manager working in it) but can't be S-off.

Can I flash a new rom if I'm S-on?

Thanks for your help and very sorry for my froggy english :D

EDIT: If my DZ is rooted, it's thanks to HTCDEV... Therefore, I suppose I had to try to relock it before retry this thread. So, I follow the new thread I've found (how to get root with HTCDEV unlock) and I re-come here after (right?)
[G2 and Desire Z General] Nipqer:
You had used HTCDEV, which prevents flashing new official roms.

Which is what the 99 unkown fail is

So yes, as per your edit. you can relock then do this method followed by gfree to have a totally unlocked phone.

-Nipqer
[G2 and Desire Z General] wez89:
Might want to put in the OP that flashgc is optional, new people will try to push that file if they don't have a goldcard and get a file and directory error
[G2 and Desire Z General] alltime:
It seems even after scrolling through the 40+ pages and trying different solutions, I'm still receiving the same permission denied error when attempting to change the misc_version.

C:\android-sdk-windows\tools>adb shell chmod 777 /data/local/tmp/*
C:\android-sdk-windows\tools>adb shell
# cd /data/local/tmp
cd /data/local/tmp
# chmod 755 ./misc_version
chmod 755 ./misc_version
# ./misc_version -s 1.00.000.0
./misc_version -s 1.00.000.0
./misc_version: permission denied
# chmod 777 ./misc_version
# ./misc_version -s 1.00.000.0
./misc_version: permission denied

Is there anything that can be done here? I really hope that I didn't mess anything up with previous root attempts.

Mytouch 4g

Bootloader: .89.0006

Version: 2.3.4
[G2 and Desire Z General] noe1002:
I dit it !!!!!

YESSS! I DID IT! :D

After relock hboot, re-root, S-off, flash recovery and a new rom (andomadus ICS... super fine and works great in a basic DZ!).

Note, in the (touch) recovery (after fastboot), it's not Vol and power to navigate and validate, but ONLY the trackpad of the DZ (I've searched for a couple of hour before find it).

If you know this soluce, the Gapps are easy to flash (why they aren't installed yet?)

Thanks for everyone and great job (I love you!) :cool:
[G2 and Desire Z General] Nipqer:
Chances are you pushed the misc_version directory.

in adb shell, after 'cd /data/local/tmp' run 'ls -l' (note: thats Ls -L (small L's) not 1s -1)

if the line that misc_version is on starts with:

drwxrwxrwx; it means you pushed the directory, in which case you need to:

cd misc_version

chmod 777 *

./misc_version -s 1.00.000.0

cd ..

Gapps aren't pre-installed by default because the gapps are proprietary code, so you need a licence to include them in open sourced roms.

Sense based roms are allowed to have them because Sense includes them by default.

-Nipqer
[G2 and Desire Z General] aerotec:
Hey all,

Looking for some help. I have rooted and s-offed using strawmetals guide (which worked great) but when I install ILWT or CM7.1 and reboot it just sticks on the boot up animation. I left ILWT for 10 mins before I pulled the battery. Running the recovery version off the microSD and it boots just fine.

Anything I can check as really keen to get ILWT running.
[G2 and Desire Z General] Nipqer:
Did you wipe data/factory reset?

-Nipqer
[G2 and Desire Z General] wyvernwaddell:
Followed to a t..here's what happens

Not sure why the flash is failing-I made SURE I had the correct files (I tried all 3 for the G2) and everything goes fine until I try to downgrade..

Here's what fastboot says..

wyvern@wyvern-laptop:~$ fastboot flash zip StockRom.zip

sending 'zip' (126272 KB)...

OKAY [ 21.876s]

writing 'zip'...

(bootloader) adopting the signature contained in this image...

(bootloader) signature checking...

(bootloader) zip header checking...

(bootloader) zip info parsing...

(bootloader) checking model ID...

(bootloader) checking custom ID...

(bootloader) checking main version...

FAILED (remote: 43 main version check fail)

finished. total time: 51.113s

wyvern@wyvern-laptop:~$

Scrolling back, I did notice this

./flashgc

Backing up sd-card MBR to file "./sdcardMbr-backup.img".

Making sd-card golden.

Writing gold-card to sd-card (/dev/block/mmcblk1) ...

SUCCESS: SD-card is golden.

# sync

# dd if=/dev/block/mmcblk0p17 bs=1 skip=160 count=10

2.16.531.510+0 records in

10+0 records out

10 bytes transferred in 0.003 secs (3333 bytes/sec)

It looks like flashgc is not doing something? 2.16.531.510+0 is not what I think it's supposed to say?

Anyone have any ideas?
[G2 and Desire Z General] Setherio:
That "2.16.531.510+0 records in" tells you what version you're running (or if you modify it, tells you what version it thinks it's running). Try running the misc_version command again.

# /data/local/tmp/misc_version -s 1.00.000.0

Then run the dd command like you did and it should return:

1.00.000.010+0 records in
[G2 and Desire Z General] wyvernwaddell:
Help and thanks..

Tried that..no luck.. and now it looks like I have no recovery..hmm think I need to temp root, restore the original recovery and start over, only this time go do the htc oem unlock first.

Anyone have a copy of the latest stock recovery image I could use?

NM-Damn file name mismatch...grrrr
[G2 and Desire Z General] Setherio:
Wait... Now I'm a bit confused... No recovery - at all - are you sure? o.O;

And yeah, you need to be temp rooted to change version number, sorry, I should of been more clear on that. Run the first couple steps in the guide again. the fre3vo and misc_version ones. Feel free to join #g2root on irc.freenode.net

http://webchat.freenode.net

channel: #g2root

And we can help you in real time if you'd prefer.

~Setherio
[G2 and Desire Z General] Nipqer:
How didn't it work? That's what you need to do.

You should already have stock recovery (red triangle, exclamation mark?), I don't know why you're bothering with that mode anyway.

Don't use htcdev to unlock, its absolutely terrible.

-Nipqer
[G2 and Desire Z General] wyvernwaddell:
Thank you to the folks over in G2root in irc...you got me going when I was beginning to lose hope :-) I will be hitting all the relevant thanks buttons. The install worked out great and she loves it!!! Chalk up one more fan of the android rooting community:-)
[G2 and Desire Z General] lamenaceQC:
Im having a little problem....after trying this command

/data/local/tmp/fre3vo -debug -start 10000000 -end 1FFFFFFF

I got all thse thing :

fre3vo by #teamwin

Please wait...

Attempting to modify ro.secure property...

fb_fix_screeninfo:

id: msmfb

smem_start: 802160640

smem_len: 3145728

type: 0

type_aux: 0

visual: 2

xpanstep: 0

ypanstep: 1

line_length: 1920

mmio_start: 0

accel: 0

fb_var_screeninfo:

xres: 480

yres: 800

xres_virtual: 480

yres_virtual: 1600

xoffset: 0

yoffset: 800

bits_per_pixel: 32

activate: 16

height: 80

width: 48

rotate: 0

grayscale: 0

nonstd: 0

accel_flags: 0

pixclock: 0

left_margin: 0

right_margin: 0

upper_margin: 0

lower_margin: 0

hsync_len: 0

vsync_len: 0

sync: 0

vmode: 0

Buffer offset: 00000000

Buffer size: 8192

and then nothing happens....Can someone help me with this please !:)

UPDATE => Just needed to reboot phone !
[G2 and Desire Z General] King-J_80s:
i dont think this works for 2.3.3

i followed this guide word for word and every time i get the same result especially when trying to get it to do this (# ./misc_version -s 1.00.000.0

--set_version set. VERSION will be changed to: 1.00.000.0

Patching and backing up partition 17...)but it doesn't i keep getting something else
[G2 and Desire Z General] Setherio:
What do you keep getting? Is your SDCARD in? And are you in "Charge Mode"?