yashsingh1/xdaforums huggingface dataset:
[HTC Sensation] dexter93:
We are proud to announce that the Sensation is now UNbrickable. Users with the QHSUSB_DLOAD issue can now fully recover their phones and get them fully functional.

​

Note: This will fix

only

devices which were bricked by turning S ON. And bricks caused by a damaged hboot via interrupted OTA update/RUU flash on a S-ON device. Any devices bricked with other ways are currently *not* supported. We are working on it

The "core" of the unbricking project dev team

:

MOVZX

RussianBear

Fuses

Dexter93

Testing stuff and irc support

:

globatron

Deceptivechaos

dburgd84

Snake_skw

Other stuff

:

dmcb123

xIndirect

Hawke84​

Thanks to trevE, xHausx and the rest of the evo3d team that gave us the basic info to work on and made us curious to see if we could get something out of it. Also thanks to ief and his team @revolutionary for helping us understand the bootloaders better. We should also not forget to thank cxb01 of malshenzu.com and xda members arthurire and untrueparadox who helped in translation.
[HTC Sensation] RussianBear:
awesome!

any people that know chinese, we need your help:

a chinese forum where a member posted a guide on how to de-brick a phone (zte u960) from qhsusb_mode:

http://bbs.malshenzu.com/read-htm-tid-38591-page-1.html

http://bbs.malshenzu.com/read-htm-tid-41957-page-1.html ( Sales MultiDL tool guide)

they use an additional tool (Sales MultiDL) that backs up alot of .mbn and .img files that we don't have (yet), so i'm not sure if we can pull those files out of the phone manually, or what?

translation per untrueparadox:

1. choose program mode

2. select the .hex and .mbn files from the included package

3. load the .xml included in the package

____ the path to xml file will show here

4. after selecting everything, click download to revive the brick

the files they used to flash:

anyone knows Chinese (google chrome translator is ok for basic understanding, but nothing more than that)? :)

i did pm the op of those threads to see what he thinks.
[HTC Sensation] dmcb123:
Yes a devs thread :)

So now we basically just have to wait to find out how to get the mbn files?
[HTC Sensation] RussianBear:
Dex, i'm on gb build of insert coin and diag works for me :)
[HTC Sensation] dexter93:
thanks. fixed it

it wouldnt work on ics insertcoin for me. it was missing some files( probably those werent even in the test ruu, or baad removed them)
[HTC Sensation] RussianBear:
if somebody doesn't like this thread (the one star rating), then contact a moderator or the op with your concerns. i don't see what is there not to like?
[HTC Sensation] dmcb123:
Found this. not sure if it helps but it's worth a look :)

http://www.scribd.com/doc/19215998/Qualcomm-Qpst-27-Users-Guide-2006

Some stuff about creating an mbn.
[HTC Sensation] RussianBear:
search for "amss" in that pdf- seems like they've already had mentions of dual core msm chips back in 2006 (page 60). this guide is pretty cool! look up page 155-onwards as well.

need to find a newer version of this guide as well.
[HTC Sensation] dexter93:
the new version is included in the qpst download. check it
[HTC Sensation] RussianBear:
http://tjworld.net/wiki/Android/HTC/Vision

very cool stuff there. the guy dissects everything!

---------- Post added at 04:28 PM ---------- Previous post was at 04:27 PM ----------

i skimmed thru it last night, will do again tonight :)
[HTC Sensation] dmcb123:
Damn that is pretty comprehensive :P
[HTC Sensation] RussianBear:
another translation request, please.

http://wenku.baidu.com/view/5da95a6ba98271fe910ef9a2.html

---------- Post added at 05:41 PM ---------- Previous post was at 05:34 PM ----------

check this: http://android.modaco.com/topic/351690-zte-firmware-package-for-v11a-aka-vodafone-smarttab10/

i'll try to find a ruu or some kind of firmware for sensation to see if it has anything similar.

i think the phone's partition layout gets erased and we need the xml file to re-map it again. just a guess...
[HTC Sensation] dexter93:
Guys we have to abandon it too... there is no fix with the way we are trying

I finally found IEF on the revolutionary irc and he told me that all these bricks happened because people went s on with modified, unsigned by htc, hboots. He also told me that under s on, we cant try anything, not even via QSPT, cause we would gain nothing. The only way of fixing that is by flashing the eMMC externally, using JTAG.

here is the conversation

As you see there is no hope. And from a quick google search, JTAG is not available yet for our devices. That means only HTC RMA can deal with it...
[HTC Sensation] RussianBear:
i don't know, man. those chinese guys seem to be on it. check this pdf:

http://www.docin.com/p-323426686.html

page 30.
[HTC Sensation] AndroidNeophyte:
Well fix or not... Thank you for all the efforts you guys put in for the community... You guys are awesome...

Sent from my HTC Sensation 4G with Beats Audio
[HTC Sensation] untrueparadox:
hope this helps guys. the link above shows similar stuff except if you dont see the setmode command and if you have a virtual cd drive from joinme or any other service, disable it.

and if you guys need this too

1. choose program mode

2. select the .hex and .mbn files from the included package

3. load the .xml included in the package

____ the path to xml file will show here

4. after selecting everything, click download to revive the brick
[HTC Sensation] cpittman:
i think you're missing ief's point. most if not all sensation bricks aside from failed eMMC, are caused by flashing a non signed hboot during the process of returning to s-ON. Once you are s-ON the eMMC becomes write protected meaning even if you did manage to write anything it wouldn't stick.
[HTC Sensation] RussianBear:
appreciate all the constructive criticism.

from here: http://android.modaco.com/topic/335078-retrieving-mbn-files/page__view__findpost__p__1642041

and also, how do you explain Chinese guys successfully (allegedly) de-bricking their phones?

either way, once we can get something similar to this (same msm chip as ours):

http://android.modaco.com/topic/351724-flashing-zte-unsigned-roms/page__p__1902193#entry1902193

or

and have a person with a brick try it out, then i will admit that this either failed or succeeded.
[HTC Sensation] dexter93:
As I told you in the pm, we could unbrick that way only S OFF phones -really rare cases to be bricked that way. Also the Chinese guys were messing with ZTE bootloaders, which I doubt that they have the security of HTC's . If you insist and we find a volunteer with a bricked device, I guess we could try it... The worst case scenario is to stay bricked.
[HTC Sensation] V1k70r:
Guys, this means that you can make your device S-OFF with just overwriting the bootloader right? So maybe it can be done on other HTC devices too? That would be really cool.
[HTC Sensation] Dragula3012:
Somehow I am only able to connect the phone via Download Mode, even if new connected, in Windows or in Linux.

I just can't access the EMMC.

I bricked the phone via the S-ON switch. Could it be that something else is wrong with the phone or am I just doing it wrong ?
[HTC Sensation] RussianBear:
connect to qpst and then hit "program mmc device only." see if that helps. if not, take the battery out, hold the volume down and then connect to pc.

like in this pic:
[HTC Sensation] Dragula3012:
I tried it with qpst, and nothing happens after I hit "program mmc device only"

Then I tried it with the Volume Down method and got only the "Qualcomm HS-USB QDLoader 9008" installed, nothing changed in minitool. I only head 1 connect sound, then the disconnect sound and nothing else.

Before I bricked the phone i flashed successfully to 1.50.401.1_r with hboot 1.18. The phone booted correctly till the first time usage screen. I finished the setup then rebooted the phone to S-ON it, and it bricked right after "fastboot reboot-bootloader".
[HTC Sensation] RussianBear:
did you keep holding the volume down? movzx and the other person are the only 2 people so far that got it to stay in the emmc mode.
[HTC Sensation] Dragula3012:
I held it down for at least 1 minute. And I have to correct my post, I heard 2 connect sounds, 1 right after i plugged the phone in, the second 5 to 10 seconds after.
[HTC Sensation] duy_ctytvxdkg:
I have the same issue with the others, all partition just flash in a few seconds then gone away. How to get the stable connection?
[HTC Sensation] MOVZX:
I have my devices turned on @ HBOOT with S-ON.

So, how do I reflash a ROM (stock ROM maybe). Because my devices just can't boot into the Android itself.
[HTC Sensation] ren777:
HTC Sensation Unbricking by Riffbox ;))

Open serial port...OK

Connecting to the RIFF Box...OK

Firmware Version: 1.31, JTAG Manager Version: 1.41

Selected Resurrector: [HTC Sensation V1.0.4455.2026]

Connecting to the dead body...OK

Detected dead body ID: 0x104210E1 - CORRECT!

Set I/O Voltage reads as 1.82V, TCK Frequency is RTCK

Adaptive Clocking RTCK Sampling is: [Sample at MAX]

Settings Code: 0x000001000000002000

Resurrection sequence started.

Establish communication with the phone...OK

Initializing internal hardware configuration...OK

Uploading resurrector data into memory...OK

Starting communication with resurrector...OK

Detected an Initialized FLASH1 Chip, ID: 0x0015/0x0000 (MLL00M, 0x000090000000 Bytes = 2.25 GB)

Detected an Initialized FLASH2 Chip, ID: 0x0015/0x0000 (MLL00M, 0x000000080000 Bytes = 0.50 MB)

Reading FLASH1 address space from 0x000000000000 to 0x000000001FFF

Completed in 00:00:00.125 (Average Transfer Rate: 64.00 kB/s)

Release is expected for next week, tuesday.

LINK : http://forum.gsmhosting.com/vbb/f63...nyone-have-hw-dead-board-1437249/#post8225555

Need riffbox... ??? Here : http://xdaforums.com/showthread.php?t=1350134
[HTC Sensation] Dragula3012:
Have you tried it with the rom inside the ruus ? (rename rom.zip to PG58IMG.img and copy to root of SD)
[HTC Sensation] duy_ctytvxdkg:
Can you tell me after success load all partition, what next will do to get it back (just go to this stage I also feel very happy)
[HTC Sensation] d3vilskid:
What region is your device? Try flashing the specific ruu for your device and would love to know are you supercid?
[HTC Sensation] RussianBear:
he is from Singapore. His main ver is 1.50.707.1. I don't think there is a newer ruu than this. He can't supercid from fastboot for some reason.

edit: he was able to change his cid.
[HTC Sensation] MOVZX:
I'm from Indonesia BTW :o

If I copy rom.zip from RUU and rename it to PG58IMG.zip and flashed via HBOOT it always said that the main version wrong/missmatch.

How to do now?
[HTC Sensation] Dragula3012:
Tried it now on Windows XP 32Bit (before was Windows 7 64bit).

When I plugged the phone in for the first time (with held down Volume-Down button)

and installed the drivers, i only heard connect and disconnect sounds (still Volume-Down) After i released the button the connect and disconnect sounds stopped and in the Device-Manager was the Qualcom driver installed. While i got those sounds i couldnt see any partition info in MiniTool.

Dont hope that my phone is beyond repair -.-" I am not so sure if Arvato will repair it for free (warranty).
[HTC Sensation] RussianBear:
sorry, man, too much info today :)

see this post: http://xdaforums.com/showpost.php?p=21758526&postcount=175

pm movzx and see how he was able to do it.
[HTC Sensation] shinglers:
I'm no developer by any means but I have been following this post. Rock on exciting stuff...congrats on your progress!!
[HTC Sensation] tegezan:
how about stock ruu.exe with htc sync...? I did once from hboot - fastboot mode..
[HTC Sensation] d3vilskid:
Missed the part from Singapore, so his cid is changed but it gives errors on running ruu. He hasn't run pg58.zip files yet correct. If that don't work I wonder is there more than just hboot, like spl1, spl2 or tbz.
[HTC Sensation] d3vilskid:
Edit: sorry just read you're from Indonesia. Have you tried supercid?
[HTC Sensation] dexter93:
@ movzx: crazy idea of the day: since you are on hboot, you will probably have access to fastboot. Try writing a secuflag 0 instead of 3. That could unlock the hboot. Remember that the sensation has radio s off, meaning that it might be possible to turn bootloader s off with that command
[HTC Sensation] Hawke84:
Perhaps he needs to do rev s-off process from start? Not sure if he's tried that?
[HTC Sensation] dmcb123:
Awesome work here guys :)

@Movx try dexter's idea it seems pretty simple but it sounds like iit might actually work :)

if that doesnt work you could try extract the radio from the ruu and inject it into the correct partition in emmc mode and try booting then? just an idea
[HTC Sensation] Snake_skw:
great news guys,i knew you can do it :)

now,if i'm not wrong,in emmc mode we should overwrite hboot(or is it neccesary if we overwrite radio thus changing from s-on to s-off???),radio(you say that's the location of secuflag so we need to dump it from a phone that already has s-off) and recovery(to be able to restore the functioning rom)...

what do you guys think about this idea?
[HTC Sensation] miamivice:
please, can anyone tell me, how to get drivers for QUALCOMM CDMA TECHNOLOGIES MSM installed, i think, this might be the problem, why with win7 my emmc mounts and unmounts some seconds later again -.-

greetz miami
[HTC Sensation] MOVZX:
fastboot oem writesecureflag 0 (doesn't work, permission denied)

fastboot oem writecid 11111111 (doesn't work, looks like it's requesting sdcard or so)

Revolutionary S-OFF - It needs a phone which is booted right into the Android OS, mine just stucked at bootloader.

Any ideas? Or is there any Revolutionary that works with a phone on fastboot mode?

Or what should I do to make it bricked again? Because with wire trick I can't access eMMC like before.

PS: Do not even said to Me to run adb because I have described that my phones stucked at bootloader with fastboot as the only option, no recovery at all.
[HTC Sensation] RussianBear:
we need to find your ruu for 1.50.707.1, as that will most likely work for you. i wasn't able to locate it.

that's the closes, but it includes aftermarket kernels (you can just not flash them).

http://bbs.anzhi.com/thread-4799292-1-1.html

http://115.com/file/e7h67rfx#

pyramid_asia_wwe_1507071_v3_Bricked.zip

http://115.com/file/e7h67v65#

pyramid_asia_wwe_1507071_v3_Faux.zip

more: http://bbs.zhangku.com/thread-54417-1-1.html

dl.dbank.com/c0xdflo9ft
[HTC Sensation] Hawke84:
Hmm I wonder if u could put a recovery image on sale as hboot image? Someone has been pm me and phone just loaded find after doing what u did...
[HTC Sensation] MOVZX:
What do You mean with 'put a recovery image on sale as hboot image'?

I have 2 devices already on hand, both of them are stuck at bootloader. And I wonder if someone has any idea to make my devices bricked again because I need to do so.
[HTC Sensation] Fuses:
Just short and fast reply.

Try to create goldcard and flash rom from any region into the phone. Make sure that new rom has greater mainver than 1.50.
[HTC Sensation] dmcb123:
What happens if you put a recovery image on the root of your sdcard as a pg58.IMG and try to flash it through bootloader screen

from my HTC Sensation XE with Beats Audio using xda premium
[HTC Sensation] bonesy:
Don't put is as P58.img it wont work..Put it as PG58IMG.zip

---------- Post added at 10:46 PM ---------- Previous post was at 10:44 PM ----------

One other thing...has anyone tried the old "goldcard" for any of this?
[HTC Sensation] dmcb123:
Yup sorry that's what I meant
[HTC Sensation] Hawke84:
Sorry typo meant to say same as hboot, I'm confuses why its stuck at bootloader when In theory it should be normal now but with locked hboot. I was wondering I'd u could push a custom recovery image to allow u to flash stuff?
[HTC Sensation] MOVZX:
How to make a goldcard?
[HTC Sensation] Hawke84:
Will that work if he's s-on?
[HTC Sensation] MOVZX:
Already done this with no luck!

Mainversion is older

press power to reboot
[HTC Sensation] RussianBear:
i wonder if you can export the misc partition (if everything else fails) and modify it. that's where the image version is, according to this guide:

http://xdaforums.com/showthread.php?t=843544 or http://xdaforums.com/showthread.php?t=1467099

pm'ed you more links with that ruu
[HTC Sensation] Hawke84:
So we need to get that file in secure flag 0 state and push that maybe?

The guy who pm me didn't have this problem..
[HTC Sensation] RussianBear:
his hboot is 1.18 though. he said he used the one Fuses attached earlier?
[HTC Sensation] Hawke84:
Yeah just noticed that. Just pm u his info. Maybe movzx can push that on? What hboot did he try, 1.17?
[HTC Sensation] MOVZX:
Still failed to inject HBOOT, whatever version signed or unsigned :|
[HTC Sensation] RussianBear:
http://xdaforums.com/showpost.php?p=23529804&postcount=148

ehh...movzx, this hboot is actually 1.18. where did you get the 1.17 from?
[HTC Sensation] Hawke84:
So u could only inject stuff your way when it was bricked :/
[HTC Sensation] MOVZX:
I injected from original RUU rom.zip because there are too many files and I'm confused when I choose it :confused:

---------- Post added at 05:32 AM ---------- Previous post was at 05:31 AM ----------

Yes, and I need to make it bricked again but how????? :confused:
[HTC Sensation] RussianBear:
which original ruu? doesn't really matter now, but i'm wondering why it's not booting up.

were you running a custom or stock rom and recovery when you did the secureflag command to brick it?
[HTC Sensation] dexter93:
Although this might sound completely irrelevant, i need a guy to make an update.zip flashable via recovery, for MOVZX which should do the following:

adb push misc_version /misc_version
adb shell chmod 755 /misc_version
adb shell /misc_version -s 1.35.707.1

the misc_version file is on the attachments
[HTC Sensation] Snake_skw:
hey guys,why dont you head over to an irc channel and work this through even faster :)

when you sort it all out just do a step by step guide :)

i'll provide a direct link for browser irc :)

http://webchat.freenode.net/

channel is #unbrick

please use the same nickname as on xda :)
[HTC Sensation] MOVZX:
ADB can't detect my devices BTW, just fastboot works!
[HTC Sensation] RussianBear:
good idea. i'm there.
[HTC Sensation] dexter93:
That stuff can be done automatically through recovery flashable files. I don't know how to code them, so I posted the adb commands for someone to translate it
[HTC Sensation] d3vilskid:
How long did you let it stay at the bootup screen? And have you tried a factory reset/hard reset?
[HTC Sensation] MOVZX:
Factory Reset doesn't work, everytime I choose it via bootloader (HBOOT) it just revert Me back to HBOOT screen.

About how long I've been on HTC logo screen, it's more than 1 hours as I've already tried to leave it alone...
[HTC Sensation] dexter93:
Lol he flashed a wrong hboot. The latest ruu fixed it though...

2 devices completely recovered so far. Stay tuned... Major thread update coming tomorrow
[HTC Sensation] RussianBear:
so it seems it's possible to write directly to the emmc via dd commands once the emmc mounts? i've sent some links to Fuses about some linux stuff concerning qualcomm mcc storage:

http://neildecapia.wordpress.com/2009/07/05/globe-tattoo-on-ubuntu-jaunty-9-04/

http://forums.opensuse.org/english/...re/laptop/441158-qualcomm-cdma-usb-modem.html

http://ubuntuforums.org/archive/index.php/t-1670724.html

http://forums.macnn.com/57/consumer...torage-compatibility-qualcomm-samsung-mobile/

edit: http://pzolee.blogs.balabit.com/2010/05/zerocd-technology-and-windows-7/

http://en.wikipedia.org/wiki/Virtual_CD-ROM_switching_utility

seems like we need to disable windows from auto-detecting the phone as a "phone" lol
[HTC Sensation] dexter93:
Lol RussianBear.. with all these links you are about to turn this thread in a qc stuff encyclopedia :p
[HTC Sensation] RussianBear:
lol whatever get us through this :)

linux guys have a switch for these occasions: http://www.draisberghof.de/usb_modeswitch/

not sure if the switch can be used for storage mode only, since i know nothing about how linux works lol

edit: i wonder, if we were to put the sensation the dl mode, but not install the drivers, would it become a mmc storage then? need to try it.
[HTC Sensation] xHausx:
You have to reflash the kernel anytime you flash a new bootloader

Awesome work everyone, now we just need to figure out a way to get there without having to brick it. Or if nothing else we could just figure out a way to purposely brick new ones so people can downgrade their hboots lol
[HTC Sensation] MOVZX:
Quick Unbrick QHUSB_DLOAD using WinHex

How to unbrick bootloader?

Just go here: http://xdaforums.com/showpost.php?p=23566551&postcount=249

DWYOR
[HTC Sensation] d3vilskid:
Yea I know I read, but never know you know that a reset might work. Well in this case it didn't.
[HTC Sensation] duy_ctytvxdkg:
About just connect and remove the driver in few seconds issues, I already checked with Windows 7 64bit, Windows XP 32 bit, press the volume down key, without press the volume down key. Try with 2 computers still get the same issues. I guest that I get a bad luck. Will try with another cable and revert.

-------------------------

stupid question:

If anyone have a good phone, please try to get it into download mode and connect the same way as tutorial. If you can do that, is there anyway to take *.mbn file an unbrick the phone in software download of QPST?
[HTC Sensation] Um3r:
Unable to find a linux box I have reverted to trying on a 64bit win 7 machine...I was just observing that as soon as I connect the phone the device manager shows a connected USB storage device:

USB composite Device

USB mass storage Device

Although this unmounts later but the delay is roughly about 15 seconds meaning that both the entries stay there for 15 seconds before the storage suddenly unmounts. The last two second show up in emmc software download as device arrival and device removal.

Maybe something can be pushed during this time or windows could be stopped trying to open the mounted device like it usually does when you plug in a normal USB? Because I think as soon as it tries to open the corrupt partition it unmounts the device.

The wire trick for me, I think just restarts the device and causes it to mount and unmount as if i were trying to connect again. I tried doing it for a while but no success..I stuck a stapler pin into the bottom hole and let the other end touch the frame and left it there to see if it stayed mounted but it didnt. breaking and resuming contact would again trigger the process..
[HTC Sensation] Dragula3012:
I talked a bit to the one who did the unbricking with Linux via dd:

Hopefully someone can help me with this. And my Linux installation isnt permanent, its Ubuntu 11.10 32bit LiveCD

When I boot this Live CD on my Windows 7 computer, I'll get error -110 instead of error -71

When i got the Battery in the phone i get sometimes on Windows, instead the Qualcomm Driver, an Unknown USB Device, could it be that this is the emmc? This is permanent till I take the battery out. I got Windows 7 64bit Home Premium.

So Long

Dragula3012
[HTC Sensation] Fuses:
rmmod that qcserial driver
[HTC Sensation] Hawke84:
ok so i think we're at the phase of of writing a short guide for another beta tester with a brick? maybe through googlechat or irc?

did MOVZX get his device sorted?
[HTC Sensation] Snake_skw:
yes,he did it yesterdy,it's unbricked and running stock gb :)

once again,irc server is irc.freenode.net and channel is #unbrick
[HTC Sensation] Um3r:
Now that is just awesome...Hopping over to IRC now...If there could be a guide about mounting the phone it would be epic..I have tried everything I could think of to keep it mounted. :/