[Desire HD General] Jorellana:
I think that worked Phiber. :D

Already unlocked Bootloader, inserted again the PD98IMG-GB2.zip (renaming it as PD98IMG), booted and run again the script:

Ace Advanced Hack Kit 2

___________________________
MAIN MENU | |
1 - Hack Ace <----------------------------+ * S-OFF |
| * SIM Unlock |
h - Prepare HTCdev unlocked device | * SuperCID |
| * Root |
| * Touch Recovery |
| |
**********************************************************************
t - Toggle Flash Method - current method is fastbootRUU
**********************************************************************

q - Quit

[Select and press Enter]1
Android version is exploitable.
rm failed for /sdcard/PD98IMG.zip, No such file or directory
1441 KB/s (19240 bytes in 0.013s)
1779 KB/s (4564992 bytes in 2.505s)
1706 KB/s (4458496 bytes in 2.551s)
2113 KB/s (557962 bytes in 0.257s)
920 KB/s (9796 bytes in 0.010s)
1743 KB/s (572752 bytes in 0.320s)
2734 KB/s (134401 bytes in 0.048s)
1111 KB/s (13968 bytes in 0.012s)
ro.build.version.release=2.3.3
Setting up for Gingerbread restore...
1712 KB/s (2801664 bytes in 1.597s)
1691 KB/s (2830336 bytes in 1.634s)
1731 KB/s (285981 bytes in 0.161s)
1666 KB/s (285981 bytes in 0.167s)
1 archivo(s) copiado(s).
Linux version 2.6.35.10-gd2564fb (htc-kernel@and18-2) (gcc version 4.4.0 (GCC) )
#1 PREEMPT Thu Jun 9 14:20:29 CST 2011
Kernel version is Gingerbread... Using fre3vo to temproot...
fre3vo by #teamwin
Please wait...
Attempting to modify ro.secure property...
fb_fix_screeninfo:
id: msmfb
smem_start: 802160640
smem_len: 3145728
type: 0
type_aux: 0
visual: 2
xpanstep: 0
ypanstep: 1
line_length: 1920
mmio_start: 0
accel: 0
fb_var_screeninfo:
xres: 480
yres: 800
xres_virtual: 480
yres_virtual: 1600
xoffset: 0
yoffset: 800
bits_per_pixel: 32
activate: 16
height: 106
width: 62
rotate: 0
grayscale: 0
nonstd: 0
accel_flags: 0
pixclock: 0
left_margin: 0
right_margin: 0
upper_margin: 0
lower_margin: 0
hsync_len: 0
vsync_len: 0
sync: 0
vmode: 0
Buffer offset: 00000000
Buffer size: 8192
Scanning region faa90000...
Scanning region fab80000...
Scanning region fac70000...
Scanning region fad60000...
Scanning region fae50000...
Scanning region faf40000...
Scanning region fb030000...
Scanning region fb120000...
Scanning region fb210000...
Scanning region fb300000...
Scanning region fb3f0000...
Scanning region fb4e0000...
Scanning region fb5d0000...
Scanning region fb6c0000...
Scanning region fb7b0000...
Scanning region fb8a0000...
Scanning region fb990000...
Scanning region fba80000...
Potential exploit area found at address fbb55c00:1400.
Exploiting device...
/dev/block/vold/179:65 /mnt/sdcard vfat rw,dirsync,nosuid,nodev,noexec,relatime,
uid=1000,gid=1015,fmask=0702,dmask=0702,allow_utime=0020,codepage=cp437,iocharse
t=iso8859-1,shortname=mixed,utf8,errors=remount-ro 0 0
tmpfs /mnt/sdcard/.android_secure tmpfs ro,relatime,size=0k,mode=000 0 0
Creating goldcard...
HTC android goldcard tool Copyright (C) 2011, Wayne D. Hoxsie Jr.
Original code by B. Kerler. Special thanks to ATTN1 and the XDA team.
Donations can be made to the Electronic Frontier Foundation:
[url]http://www.eff.org/[/url]
or to B. Kerler:
[url]http://psas.revskills.de/[/url]
0+1 records in
0+1 records out
384 bytes transferred in 0.001 secs (384000 bytes/sec)
Setting mainver lower to allow downgrade...
--set_version set. VERSION will be changed to: 1.31.405.6
Misc partition is "/dev/block/mmcblk0p17"
Patching and backing up misc partition...
Starting flash process...
erasing 'cache'...
OKAY [ 1.605s]
finished. total time: 1.610s
Sending update...
This takes time. Please be patient!
sending 'zip' (18223 KB)...
OKAY [ 3.074s]
writing 'zip'...
(bootloader) adopting the signature contained in this image...
(bootloader) signature checking...
(bootloader) zip header checking...
(bootloader) zip info parsing...
(bootloader) checking model ID...
(bootloader) checking custom ID...
(bootloader) checking main version...
(bootloader) start image[boot] unzipping & flushing...
(bootloader) [RUU]UZ,boot,0
(bootloader) [RUU]UZ,boot,31
(bootloader) [RUU]UZ,boot,68
(bootloader) [RUU]UZ,boot,99
(bootloader) [RUU]UZ,boot,100
(bootloader) [RUU]WP,boot,0
(bootloader) [RUU]WP,boot,100
(bootloader) start image[recovery] unzipping & flushing...
(bootloader) [RUU]UZ,recovery,0
(bootloader) [RUU]UZ,recovery,20
(bootloader) [RUU]UZ,recovery,44
(bootloader) [RUU]UZ,recovery,66
(bootloader) [RUU]UZ,recovery,89
(bootloader) [RUU]UZ,recovery,100
(bootloader) [RUU]WP,recovery,0
(bootloader) [RUU]WP,recovery,100
(bootloader) start image[radio] unzipping & flushing...
(bootloader) [RUU]UZ,radio,0
(bootloader) [RUU]UZ,radio,8
(bootloader) [RUU]UZ,radio,13
(bootloader) [RUU]UZ,radio,20
(bootloader) [RUU]UZ,radio,25
(bootloader) [RUU]UZ,radio,33
(bootloader) [RUU]UZ,radio,41
(bootloader) [RUU]UZ,radio,49
(bootloader) [RUU]UZ,radio,57
(bootloader) [RUU]UZ,radio,62
(bootloader) [RUU]UZ,radio,70
(bootloader) [RUU]UZ,radio,79
(bootloader) [RUU]UZ,radio,86
(bootloader) [RUU]UZ,radio,94
(bootloader) [RUU]UZ,radio,99
(bootloader) [RUU]UZ,radio,100
(bootloader) [RUU]WP,radio,0
(bootloader) [RUU]WP,radio,6
(bootloader) [RUU]WP,radio,14
(bootloader) [RUU]WP,radio,19
(bootloader) [RUU]WP,radio,27
(bootloader) [RUU]WP,radio,36
(bootloader) [RUU]WP,radio,44
(bootloader) [RUU]WP,radio,51
(bootloader) [RUU]WP,radio,59
(bootloader) [RUU]WP,radio,68
(bootloader) [RUU]WP,radio,76
(bootloader) [RUU]WP,radio,85
(bootloader) [RUU]WP,radio,95
(bootloader) [RUU]WP,radio,100
OKAY [ 97.567s]
finished. total time: 100.650s
rebooting...

finished. total time: 0.169s
Radio downgrade complete. Starting unlock process...
Linux version 2.6.32.21-gf3f553d (htc-kernel@and18-2) (gcc version 4.4.0 (GCC) )
#1 PREEMPT Thu Oct 28 13:24:11 CST 2010
Final rooting, setting super-cid and installing recovery now...
This takes time. Please be patient!
property service neutered.
killing adbd. (should restart in a second or two)
--secu_flag off set
--cid set. CID will be changed to: 11111111
--sim_unlock. SIMLOCK will be removed
Section header entry size: 40
Number of section headers: 44
Total section header table size: 1760
Section header file offset: 0x000138b4 (80052)
Section index for section name string table: 41
String table offset: 0x000136fb (79611)
Searching for .modinfo section...
- Section[16]: .modinfo
-- offset: 0x00000a14 (2580)
-- size: 0x000000cc (204)
Kernel release: 2.6.32.21-gf3f553d
New .modinfo section size: 204
Attempting to power cycle eMMC... OK.
Searching for mmc_blk_issue_rq symbol...
- Address: c02a9e00, type: t, name: mmc_blk_issue_rq, module: N/A
Kernel map base: 0xc02a9000
Kernel memory mapped to 0x40000000
Searching for brq filter...
- Address: 0xc02a9e00 + 0x34c
- 0x2a000012 -> 0xea000012
Patching and backing up partition 7...
Error opening copy file.
Error opening copy file.
^^^^^^^^^^^^^^^^^^^^^^^^
I- NORMAL ERROR HERE -I
--secu_flag off set
--cid set. CID will be changed to: 11111111
--sim_unlock. SIMLOCK will be removed
Section header entry size: 40
Number of section headers: 44
Total section header table size: 1760
Section header file offset: 0x000138b4 (80052)
Section index for section name string table: 41
String table offset: 0x000136fb (79611)
Searching for .modinfo section...
- Section[16]: .modinfo
-- offset: 0x00000a14 (2580)
-- size: 0x000000cc (204)
Kernel release: 2.6.32.21
New .modinfo section size: 196
Attempting to power cycle eMMC... OK.
Searching for mmc_blk_issue_rq symbol...
- Address: c02db21c, type: t, name: mmc_blk_issue_rq, module: N/A
Kernel map base: 0xc02db000
Kernel memory mapped to 0x40009000
Searching for brq filter...
- Address: 0xc02db21c + 0x34c
- 0x2a000012 -> 0xea000012
Patching and backing up partition 7...
patching secu_flag: 0
Done.
board_spade.disable_uart2=0 board_spade.usb_h2w_sw=0 board_spade.disable_sdcard=
0 diag.enabled=0 board_spade.debug_uart=0 smisize=0 userdata_sel=0 androidboot.e
mmc=true androidboot.baseband=26.03.02.26_M androidboot.cid=CWS__001 androidboo
t.batt_poweron=good_battery androidboot.carrier=ATT androidboot.mid=PD9812000 en
able_zcharge=1 androidboot.keycaps=qwerty androidboot.mode=recovery androidboot.
serialno=HT1AMT206606 androidboot.bootloader=0.85.0024 zygote_oneshot=off kmemle
ak=off no_console_suspend=1
rm: can't remove '/system/bin/su': No such file or directory
rm: can't remove '/system/xbin/su': No such file or directory
rm: can't remove '/system/bin/.ext/.su': No such file or directory
rm: can't remove '/system/app/Superuser.apk': No such file or directory
rm: can't remove '/system/app/Superuser.odex': No such file or directory
rm: can't remove '/system/app/SuperUser.apk': No such file or directory
rm: can't remove '/system/app/SuperUser.odex': No such file or directory
rm: can't remove '/system/app/superuser.apk': No such file or directory
rm: can't remove '/system/app/superuser.odex': No such file or directory
rm: can't remove '/system/app/Supersu.apk': No such file or directory
rm: can't remove '/system/app/Supersu.odex': No such file or directory
rm: can't remove '/system/app/SuperSU.apk': No such file or directory
rm: can't remove '/system/app/SuperSU.odex': No such file or directory
rm: can't remove '/system/app/supersu.apk': No such file or directory
rm: can't remove '/system/app/supersu.odex': No such file or directory
rm: can't remove '/data/dalvik-cache/*com.noshufou.android.su*': No such file or
directory
rm: can't remove '/data/dalvik-cache/*Superuser.apk*': No such file or directory

rm: can't remove '/data/dalvik-cache/*SuperUser.apk*': No such file or directory

rm: can't remove '/data/dalvik-cache/*superuser.apk*': No such file or directory

rm: can't remove '/data/dalvik-cache/*eu.chainfire.supersu*': No such file or di
rectory
rm: can't remove '/data/dalvik-cache/*Supersu.apk*': No such file or directory
rm: can't remove '/data/dalvik-cache/*SuperSU.apk*': No such file or directory
rm: can't remove '/data/dalvik-cache/*supersu.apk*': No such file or directory
push: tools/afr/system/app/Superuser.apk -> /system/app/Superuser.apk
push: tools/afr/system/bin/.ext/.su -> /system/bin/.ext/.su
push: tools/afr/system/xbin/su -> /system/xbin/su
3 files pushed. 0 files skipped.
2809 KB/s (1976425 bytes in 0.687s)
dnsmasq monkey surfaceflinger
iftop printenv wpa_supplicant

**********************************************
* Installed ROOT and custom touch recovery! *
* Security flag and and Simlock are removed! *
**********************************************

Installing updated radio and custom ENG HBOOT...
Starting flash process...
erasing 'cache'...
OKAY [ 1.766s]
finished. total time: 1.771s
Sending update...
This takes time. Please be patient!
sending 'zip' (11429 KB)...
OKAY [ 1.925s]
writing 'zip'...
(bootloader) zip header checking...
(bootloader) zip info parsing...
(bootloader) checking model ID...
(bootloader) checking custom ID...
(bootloader) start image[hboot] unzipping for pre-update check...
(bootloader) start image[hboot] unzipping & flushing...
(bootloader) [RUU]UZ,hboot,0
(bootloader) [RUU]UZ,hboot,100
(bootloader) [RUU]WP,hboot,0
(bootloader) [RUU]WP,hboot,100
(bootloader) start image[radio] unzipping & flushing...
(bootloader) [RUU]UZ,radio,0
(bootloader) [RUU]UZ,radio,8
(bootloader) [RUU]UZ,radio,16
(bootloader) [RUU]UZ,radio,24
(bootloader) [RUU]UZ,radio,32
(bootloader) [RUU]UZ,radio,41
(bootloader) [RUU]UZ,radio,49
(bootloader) [RUU]UZ,radio,57
(bootloader) [RUU]UZ,radio,65
(bootloader) [RUU]UZ,radio,73
(bootloader) [RUU]UZ,radio,82
(bootloader) [RUU]UZ,radio,90
(bootloader) [RUU]UZ,radio,98
(bootloader) [RUU]UZ,radio,100
(bootloader) [RUU]WP,radio,0
(bootloader) [RUU]WP,radio,6
(bootloader) [RUU]WP,radio,14
(bootloader) [RUU]WP,radio,19
(bootloader) [RUU]WP,radio,27
(bootloader) [RUU]WP,radio,36
(bootloader) [RUU]WP,radio,44
(bootloader) [RUU]WP,radio,51
(bootloader) [RUU]WP,radio,100
(bootloader) start image[rcdata] unzipping & flushing...
(bootloader) [RUU]UZ,rcdata,0
(bootloader) [RUU]WP,rcdata,0
(bootloader) [RUU]WP,rcdata,100
OKAY [ 37.710s]
finished. total time: 39.645s
rebooting...

finished. total time: 0.164s

************ Process complete **************
Presione una tecla para continuar . . .

I'm done? My HBOOT shows unlocked and S-OFF... :good:

Also, Root Checker gives me this:

I'm done Phiber? I saw on the script some errors, but everything seems on place.:confused: