[EVO 4G Android Development] clar8299:
Auto Root Problem

I just attempted to root my Evo using this and at end it says my NAND is still locked and I still have S-on. Below is my log file. Any ideas what I can do to get rooted?

------------ AutoRoot.bat Begin - v1.9 - Tue 12/21/2010 20:45:57.65

Params=1'' 2'' 3'' 4'' 5'' 6''

Checking for ADB...

PLEN='1' PSTATE='device' RETURNTO='s1' STATE=''

PING ADB Counter - State Changed '1' out of '1'. ADB State is 'device' expected 'device'

Found the phone connected as 'device'.

Checking MTD configuration...

dev: size erasesize name

mtd0: 00c00000 00020000 "wimax"

mtd1: 000a0000 00020000 "misc"

mtd2: 00480000 00020000 "recovery"

mtd3: 00300000 00020000 "boot"

mtd4: 15e00000 00020000 "system"

mtd5: 0a000000 00020000 "cache"

mtd6: 1aba0000 00020000 "userdata"

'check.bat mtd' returned 'old'

Checking for root...

UID is 'uid=2000(shell)'

Pushing res\rageagainstthecage-arm5.bin to /data/local/tmp/rageagainstthecage-arm5.bin...

337 KB/s (5392 bytes in 0.015s)

Running exploit...

./data/local/tmp/rageagainstthecage-arm5.bin

$ [*] CVE-2010-EASY Android local root exploit (C) 2010 by 743C

[*] checking NPROC limit ...

[+] RLIMIT_NPROC={3316, 3316}

[*] Searching for adb ...

[+] Found adb as PID 848

[*] Spawning children. Dont type anything and wait for reset!

[*]

[*] If you like what we are doing you can send us PayPal money to

[*] 7-4-3-C@web.de so we can compensate time, effort and HW costs.

[*] If you are a company and feel like you profit from our work,

[*] we also accept donations > 1000 USD!

[*]

[*] adb connection will be reset. restart adb server on desktop and re-login.

$

Checking for ADB...

PLEN='45' PSTATE='device' RETURNTO='s3' STATE=''

PING ADB Counter - State Changed '1' out of '45'. ADB State is 'of' expected 'device'

PING ADB Counter - State Changed '2' out of '45'. ADB State is 'of' expected 'device'

PING ADB Counter - State Changed '3' out of '45'. ADB State is 'of' expected 'device'

PING ADB Counter - State Changed '4' out of '45'. ADB State is 'of' expected 'device'

PING ADB Counter - State Changed '5' out of '45'. ADB State is 'of' expected 'device'

PING ADB Counter - State Changed '6' out of '45'. ADB State is 'of' expected 'device'

PING ADB Counter - State Changed '7' out of '45'. ADB State is 'device' expected 'device'

Found the phone connected as 'device'.

Checking for root...

UID is 'Got Root!'

Checking for needed files...

Pushing res\flash_image to /data/local/flash_image...

952 KB/s (76044 bytes in 0.078s)

Pushing res\mtd-eng.img to /sdcard/mtd-eng.img...

1414 KB/s (655360 bytes in 0.452s)

Pushing res\URFSOFF.zip to /sdcard/URFSOff.zip...

1408 KB/s (225014 bytes in 0.156s)

Pushing res\URFSON.zip to /sdcard/URFSOn.zip...

1751 KB/s (223773 bytes in 0.124s)

Pushing res\oldkernel.zip to /sdcard/oldkernel.zip...

1350 KB/s (3020437 bytes in 2.184s)

Flashing misc partition...

Rebooting in to bootloader...

Verifying bootloader status...

hBoot version '2.02.0000'

Version Major '2'

Version Minor '02'

Firmware version '1.17.651.1'

Version Major '1'

Version Minor '17'

hbpreupdate set at '11'

HBPU is 'na'

WARNING Skipping bootloader verification...

Security is 'on'

Setting RUU mode...

... OKAY

Sending flash PC36IMG_UD.zip command...

sending 'zip' (175072 KB)... OKAY

writing 'zip'... INFOadopting the signature contained in this image...

INFOsignature checking...

INFOzip header checking...

INFOzip info parsing...

INFOchecking model ID...

INFOchecking custom ID...

INFOchecking main version...

INFOstart image[hboot] unzipping for pre-update check...

INFOstart image[microp] unzipping & flushing...

INFO[RUU]UZ,microp,0

INFO[RUU]WP,microp,0

INFO[RUU]WP,microp,9

INFO[RUU]WP,microp,14

INFO[RUU]WP,microp,23

INFO[RUU]WP,microp,28

INFO[RUU]WP,microp,33

INFO[RUU]WP,microp,42

INFO[RUU]WP,microp,51

INFO[RUU]WP,microp,56

INFO[RUU]WP,microp,61

INFO[RUU]WP,microp,70

INFO[RUU]WP,microp,75

INFO[RUU]WP,microp,84

INFO[RUU]WP,microp,89

INFO[RUU]WP,microp,100

INFOstart image[radio] unzipping & flushing...

INFO[RUU]UZ,radio,0

INFO[RUU]UZ,radio,9

INFO[RUU]UZ,radio,14

INFO[RUU]UZ,radio,19

INFO[RUU]UZ,radio,28

INFO[RUU]UZ,radio,33

INFO[RUU]UZ,radio,42

INFO[RUU]UZ,radio,47

INFO[RUU]UZ,radio,52

INFO[RUU]UZ,radio,61

INFO[RUU]UZ,radio,70

INFO[RUU]UZ,radio,75

INFO[RUU]UZ,radio,80

INFO[RUU]UZ,radio,85

INFO[RUU]UZ,radio,97

INFO[RUU]UZ,radio,100

INFO[RUU]WP,radio,0

INFO[RUU]WP,radio,7

INFO[RUU]WP,radio,12

INFO[RUU]WP,radio,17

INFO[RUU]WP,radio,26

INFO[RUU]WP,radio,31

INFO[RUU]WP,radio,36

INFO[RUU]WP,radio,41

INFO[RUU]WP,radio,46

INFO[RUU]WP,radio,51

INFO[RUU]WP,radio,100

INFOstart image[rcdata] unzipping & flushing...

INFO[RUU]UZ,rcdata,0

INFO[RUU]UZ,rcdata,100

INFO[RUU]WP,rcdata,0

INFO[RUU]WP,rcdata,100

INFOstart image[recovery] unzipping & flushing...

INFO[RUU]UZ,recovery,0

INFO[RUU]UZ,recovery,22

INFO[RUU]UZ,recovery,42

INFO[RUU]UZ,recovery,73

INFO[RUU]UZ,recovery,99

INFO[RUU]UZ,recovery,100

INFO[RUU]WP,recovery,0

INFO[RUU]WP,recovery,22

INFO[RUU]WP,recovery,44

INFO[RUU]WP,recovery,66

INFO[RUU]WP,recovery,88

INFO[RUU]WP,recovery,100

INFOstart image[sp1] unzipping & flushing...

INFO[RUU]UZ,sp1,0

INFO[RUU]UZ,sp1,100

INFO[RUU]WP,sp1,0

INFO[RUU]WP,sp1,100

INFOstart image[system] unzipping & flushing...

INFO[RUU]UZ,system,0

INFO[RUU]UZ,system,7

INFO[RUU]UZ,system,15

INFO[RUU]UZ,system,23

INFO[RUU]UZ,system,31

INFO[RUU]UZ,system,38

INFO[RUU]UZ,system,46

INFO[RUU]UZ,system,54

INFO[RUU]UZ,system,62

INFO[RUU]UZ,system,70

INFO[RUU]UZ,system,77

INFO[RUU]UZ,system,85

INFO[RUU]UZ,system,93

INFO[RUU]UZ,system,100

INFO[RUU]WP,system,0

INFO[RUU]WP,system,100

INFOstart image[tp] unzipping & flushing...

INFO[RUU]UZ,tp,0

INFO[RUU]UZ,tp,100

INFOstart image[tp] unzipping & flushing...

INFO[RUU]UZ,tp,0

INFO[RUU]UZ,tp,100

INFOstart image[userdata] unzipping & flushing...

INFO[RUU]UZ,userdata,0

INFO[RUU]UZ,userdata,8

INFO[RUU]UZ,userdata,13

INFO[RUU]UZ,userdata,21

INFO[RUU]UZ,userdata,26

INFO[RUU]UZ,userdata,34

INFO[RUU]UZ,userdata,43

INFO[RUU]UZ,userdata,51

INFO[RUU]UZ,userdata,56

INFO[RUU]UZ,userdata,65

INFO[RUU]UZ,userdata,73

INFO[RUU]UZ,userdata,78

INFO[RUU]UZ,userdata,87

INFO[RUU]UZ,userdata,95

INFO[RUU]UZ,userdata,100

INFO[RUU]WP,userdata,0

INFO[RUU]WP,userdata,100

INFOstart image[wimax] unzipping & flushing...

INFO[RUU]UZ,wimax,0

INFO[RUU]UZ,wimax,12

INFO[RUU]UZ,wimax,24

INFO[RUU]UZ,wimax,36

INFO[RUU]UZ,wimax,48

INFO[RUU]UZ,wimax,60

INFO[RUU]UZ,wimax,72

INFO[RUU]UZ,wimax,83

INFO[RUU]UZ,wimax,95

INFO[RUU]UZ,wimax,100

INFO[RUU]WP,wimax,0

INFO[RUU]WP,wimax,11

INFO[RUU]WP,wimax,23

INFO[RUU]WP,wimax,35

INFO[RUU]WP,wimax,47

INFO[RUU]WP,wimax,59

INFO[RUU]WP,wimax,71

INFO[RUU]WP,wimax,83

INFO[RUU]WP,wimax,95

INFO[RUU]WP,wimax,100

INFOstart image[boot] unzipping & flushing...

INFO[RUU]UZ,boot,0

INFO[RUU]UZ,boot,45

INFO[RUU]UZ,boot,90

INFO[RUU]UZ,boot,100

INFO[RUU]WP,boot,0

INFO[RUU]WP,boot,42

INFO[RUU]WP,boot,84

INFO[RUU]WP,boot,100

INFOstart image[hboot] unzipping & flushing...

INFO[RUU]UZ,hboot,0

INFO[RUU]UZ,hboot,100

OKAY

Sending 'fastboot reboot' command...

rebooting...

Checking for ADB...

PLEN='120' PSTATE='any' RETURNTO='b2recovery' STATE=''

PING ADB Counter - State Changed '1' out of '120'. ADB State is 'of' expected 'any'

PING ADB Counter - State Changed '2' out of '120'. ADB State is 'of' expected 'any'

PING ADB Counter - State Changed '3' out of '120'. ADB State is 'of' expected 'any'

PING ADB Counter - State Changed '4' out of '120'. ADB State is 'of' expected 'any'

PING ADB Counter - State Changed '5' out of '120'. ADB State is 'of' expected 'any'

PING ADB Counter - State Changed '6' out of '120'. ADB State is 'of' expected 'any'

PING ADB Counter - State Changed '7' out of '120'. ADB State is 'of' expected 'any'

PING ADB Counter - State Changed '8' out of '120'. ADB State is 'of' expected 'any'

PING ADB Counter - State Changed '9' out of '120'. ADB State is 'of' expected 'any'

PING ADB Counter - State Changed '10' out of '120'. ADB State is 'of' expected 'any'

PING ADB Counter - State Changed '11' out of '120'. ADB State is 'recovery' expected 'any'

Phone booted to the Recovery from RUU mode. Waiting on it to reboot into the ROM...

Checking for ADB...

PLEN='180' PSTATE='device' RETURNTO='b2recovery' STATE=''

PING ADB Counter - State Changed '1' out of '180'. ADB State is 'recovery' expected 'device'

PING ADB Counter - State Changed '2' out of '180'. ADB State is 'recovery' expected 'device'

PING ADB Counter - State Changed '3' out of '180'. ADB State is 'recovery' expected 'device'

PING ADB Counter - State Changed '4' out of '180'. ADB State is 'recovery' expected 'device'

PING ADB Counter - State Changed '5' out of '180'. ADB State is 'recovery' expected 'device'

PING ADB Counter - State Changed '6' out of '180'. ADB State is 'of' expected 'device'

PING ADB Counter - State Changed '7' out of '180'. ADB State is 'of' expected 'device'

PING ADB Counter - State Changed '8' out of '180'. ADB State is 'of' expected 'device'

PING ADB Counter - State Changed '9' out of '180'. ADB State is 'of' expected 'device'

PING ADB Counter - State Changed '10' out of '180'. ADB State is 'of' expected 'device'

PING ADB Counter - State Changed '11' out of '180'. ADB State is 'of' expected 'device'

PING ADB Counter - State Changed '12' out of '180'. ADB State is 'of' expected 'device'

PING ADB Counter - State Changed '13' out of '180'. ADB State is 'of' expected 'device'

PING ADB Counter - State Changed '14' out of '180'. ADB State is 'of' expected 'device'

PING ADB Counter - State Changed '15' out of '180'. ADB State is 'of' expected 'device'

PING ADB Counter - State Changed '16' out of '180'. ADB State is 'of' expected 'device'

PING ADB Counter - State Changed '17' out of '180'. ADB State is 'of' expected 'device'

PING ADB Counter - State Changed '18' out of '180'. ADB State is 'of' expected 'device'

PING ADB Counter - State Changed '19' out of '180'. ADB State is 'of' expected 'device'

PING ADB Counter - State Changed '20' out of '180'. ADB State is 'recovery' expected 'device'

PING ADB Counter - State Changed '21' out of '180'. ADB State is 'recovery' expected 'device'

PING ADB Counter - State Changed '22' out of '180'. ADB State is 'recovery' expected 'device'

PING ADB Counter - State Changed '23' out of '180'. ADB State is 'recovery' expected 'device'

PING ADB Counter - State Changed '24' out of '180'. ADB State is 'recovery' expected 'device'

PING ADB Counter - State Changed '25' out of '180'. ADB State is 'recovery' expected 'device'

PING ADB Counter - State Changed '26' out of '180'. ADB State is 'recovery' expected 'device'

PING ADB Counter - State Changed '27' out of '180'. ADB State is 'recovery' expected 'device'

PING ADB Counter - State Changed '28' out of '180'. ADB State is 'recovery' expected 'device'

PING ADB Counter - State Changed '29' out of '180'. ADB State is 'recovery' expected 'device'

PING ADB Counter - State Changed '30' out of '180'. ADB State is 'recovery' expected 'device'

PING ADB Counter - State Changed '31' out of '180'. ADB State is 'recovery' expected 'device'

PING ADB Counter - State Changed '32' out of '180'. ADB State is 'recovery' expected 'device'

PING ADB Counter - State Changed '33' out of '180'. ADB State is 'recovery' expected 'device'

PING ADB Counter - State Changed '34' out of '180'. ADB State is 'recovery' expected 'device'

PING ADB Counter - State Changed '35' out of '180'. ADB State is 'recovery' expected 'device'

PING ADB Counter - State Changed '36' out of '180'. ADB State is 'recovery' expected 'device'

PING ADB Counter - State Changed '37' out of '180'. ADB State is 'recovery' expected 'device'

PING ADB Counter - State Changed '38' out of '180'. ADB State is 'recovery' expected 'device'

PING ADB Counter - State Changed '39' out of '180'. ADB State is 'recovery' expected 'device'

PING ADB Counter - State Changed '40' out of '180'. ADB State is 'recovery' expected 'device'

PING ADB Counter - State Changed '41' out of '180'. ADB State is 'recovery' expected 'device'

PING ADB Counter - State Changed '42' out of '180'. ADB State is 'recovery' expected 'device'

PING ADB Counter - State Changed '43' out of '180'. ADB State is 'recovery' expected 'device'

PING ADB Counter - State Changed '44' out of '180'. ADB State is 'recovery' expected 'device'

PING ADB Counter - State Changed '45' out of '180'. ADB State is 'recovery' expected 'device'

PING ADB Counter - State Changed '46' out of '180'. ADB State is 'of' expected 'device'

PING ADB Counter - State Changed '47' out of '180'. ADB State is 'of' expected 'device'

PING ADB Counter - State Changed '48' out of '180'. ADB State is 'of' expected 'device'

PING ADB Counter - State Changed '49' out of '180'. ADB State is 'of' expected 'device'

PING ADB Counter - State Changed '50' out of '180'. ADB State is 'of' expected 'device'

PING ADB Counter - State Changed '51' out of '180'. ADB State is 'of' expected 'device'

PING ADB Counter - State Changed '52' out of '180'. ADB State is 'of' expected 'device'

PING ADB Counter - State Changed '53' out of '180'. ADB State is 'of' expected 'device'

PING ADB Counter - State Changed '54' out of '180'. ADB State is 'of' expected 'device'

PING ADB Counter - State Changed '55' out of '180'. ADB State is 'of' expected 'device'

PING ADB Counter - State Changed '56' out of '180'. ADB State is 'of' expected 'device'

PING ADB Counter - State Changed '57' out of '180'. ADB State is 'of' expected 'device'

PING ADB Counter - State Changed '58' out of '180'. ADB State is 'of' expected 'device'

PING ADB Counter - State Changed '59' out of '180'. ADB State is 'of' expected 'device'

PING ADB Counter - State Changed '60' out of '180'. ADB State is 'of' expected 'device'

PING ADB Counter - State Changed '61' out of '180'. ADB State is 'of' expected 'device'

PING ADB Counter - State Changed '62' out of '180'. ADB State is 'of' expected 'device'

PING ADB Counter - State Changed '63' out of '180'. ADB State is 'of' expected 'device'

PING ADB Counter - State Changed '64' out of '180'. ADB State is 'of' expected 'device'

PING ADB Counter - State Changed '65' out of '180'. ADB State is 'of' expected 'device'

PING ADB Counter - State Changed '66' out of '180'. ADB State is 'of' expected 'device'

PING ADB Counter - State Changed '67' out of '180'. ADB State is 'of' expected 'device'

PING ADB Counter - State Changed '68' out of '180'. ADB State is 'device' expected 'device'

Found the phone connected as 'device'.

Giving the phone time to configure itself...

Attempting to reboot into the recovery from 'device'...

Checking for ADB...

PLEN='60' PSTATE='recovery' RETURNTO='b2recovery' STATE=''

PING ADB Counter - State Changed '1' out of '60'. ADB State is 'recovery' expected 'recovery'

Found the phone connected as 'recovery'.

Found the Recovery, continuing...

Pushing amon_ra_1.8-mod to /...

push: amon_ra_1.8-mod/etc/mtab -> /etc/mtab

push: amon_ra_1.8-mod/etc/fstab -> /etc/fstab

push: amon_ra_1.8-mod/res/images/progress_bar_right_round.png -> /res/images/progress_bar_right_round.png

push: amon_ra_1.8-mod/res/images/progress_bar_left_round.png -> /res/images/progress_bar_left_round.png

push: amon_ra_1.8-mod/res/images/progress_bar_fill.png -> /res/images/progress_bar_fill.png

push: amon_ra_1.8-mod/res/images/progress_bar_empty_right_round.png -> /res/images/progress_bar_empty_right_round.png

push: amon_ra_1.8-mod/res/images/progress_bar_empty_left_round.png -> /res/images/progress_bar_empty_left_round.png

push: amon_ra_1.8-mod/res/images/progress_bar_empty.png -> /res/images/progress_bar_empty.png

push: amon_ra_1.8-mod/res/images/indeterminate6.png -> /res/images/indeterminate6.png

push: amon_ra_1.8-mod/res/images/indeterminate5.png -> /res/images/indeterminate5.png

push: amon_ra_1.8-mod/res/images/indeterminate4.png -> /res/images/indeterminate4.png

push: amon_ra_1.8-mod/res/images/indeterminate3.png -> /res/images/indeterminate3.png

push: amon_ra_1.8-mod/res/images/indeterminate2.png -> /res/images/indeterminate2.png

push: amon_ra_1.8-mod/res/images/indeterminate1.png -> /res/images/indeterminate1.png

push: amon_ra_1.8-mod/res/images/icon_install_corrupt.png -> /res/images/icon_install_corrupt.png

push: amon_ra_1.8-mod/res/images/icon_installing.png -> /res/images/icon_installing.png

push: amon_ra_1.8-mod/res/images/icon_firmware_install.png -> /res/images/icon_firmware_install.png

push: amon_ra_1.8-mod/res/images/icon_firmware_error.png -> /res/images/icon_firmware_error.png

push: amon_ra_1.8-mod/res/images/icon_error.png -> /res/images/icon_error.png

push: amon_ra_1.8-mod/res/keys -> /res/keys

push: amon_ra_1.8-mod/sbin/wipe -> /sbin/wipe

push: amon_ra_1.8-mod/sbin/unyaffs -> /sbin/unyaffs

push: amon_ra_1.8-mod/sbin/ums_toggle -> /sbin/ums_toggle

push: amon_ra_1.8-mod/sbin/um -> /sbin/um

push: amon_ra_1.8-mod/sbin/tune2fs -> /sbin/tune2fs

push: amon_ra_1.8-mod/sbin/sdparted -> /sbin/sdparted

push: amon_ra_1.8-mod/sbin/recovery -> /sbin/recovery

push: amon_ra_1.8-mod/sbin/reboot -> /sbin/reboot

push: amon_ra_1.8-mod/sbin/parted -> /sbin/parted

push: amon_ra_1.8-mod/sbin/nandroid-mobile.sh -> /sbin/nandroid-mobile.sh

push: amon_ra_1.8-mod/sbin/mkyaffs2image -> /sbin/mkyaffs2image

push: amon_ra_1.8-mod/sbin/mke2fs -> /sbin/mke2fs

push: amon_ra_1.8-mod/sbin/log2sd -> /sbin/log2sd

push: amon_ra_1.8-mod/sbin/fs -> /sbin/fs

push: amon_ra_1.8-mod/sbin/flash_image -> /sbin/flash_image

push: amon_ra_1.8-mod/sbin/fix_permissions -> /sbin/fix_permissions

push: amon_ra_1.8-mod/sbin/e2fsck -> /sbin/e2fsck

push: amon_ra_1.8-mod/sbin/dump_image -> /sbin/dump_image

push: amon_ra_1.8-mod/sbin/busybox -> /sbin/busybox

push: amon_ra_1.8-mod/sbin/backuptool.sh -> /sbin/backuptool.sh

push: amon_ra_1.8-mod/sbin/adbd -> /sbin/adbd

push: amon_ra_1.8-mod/system/bin/sh -> /system/bin/sh

push: amon_ra_1.8-mod/system/bin/linker -> /system/bin/linker

push: amon_ra_1.8-mod/system/lib/libstdc++.so -> /system/lib/libstdc++.so

push: amon_ra_1.8-mod/system/lib/libm.so -> /system/lib/libm.so

push: amon_ra_1.8-mod/system/lib/liblog.so -> /system/lib/liblog.so

push: amon_ra_1.8-mod/system/lib/libcutils.so -> /system/lib/libcutils.so

push: amon_ra_1.8-mod/system/lib/libc.so -> /system/lib/libc.so

48 files pushed. 0 files skipped.

1894 KB/s (3721687 bytes in 1.918s)

sync: not found

Recovery type is 'stock'

---------RECOVERY LOG DUMP BEGIN---------

nandroid-mobile v2.2.1

Using G1 keyboard, enter a prefix substring and then <CR>

Accepting default.

Using - prefix to create a backup folder

mounting system and data read-only, sdcard read-write

checking free space on sdcard

done

done

done

done

done

done

done

done

done

done

unmounting system, data and sdcard

Backup successful.

----------RECOVERY LOG DUMP END----------

Rebooting to bootloader...

Setting RUU mode...

< waiting for device >

... OKAY

Verifying bootloader status...

hBoot version '2.02.0000'

Version Major '2'

Version Minor '02'

Security is 'on'

Passed to ERRHANDLER

Attempting to dump the recovery log.

---------RECOVERY LOG DUMP BEGIN---------

error: device not found

----------RECOVERY LOG DUMP END----------

------------ AutoRoot.bat End