Database Users

[GUIDE] Desire Z/G2 Rooting and Flashing Firmware for Noobs

Hey guys, i rooted my Desire Z with these Tutorials out there and i recognized not everything is that clear and easy to understand if you are a noob like me with this stuff. First i want to say that im from austria and so please ignore when my english is not that good.
Now just start here. When you are done with that all you can have any rom running on youre phone, but i recommend the ones designed for the desire z.
>>> Click here to read the full tutorial on my website with fast download links. ;D
!!! BEFORE YOU START YOU MUST CREATE A BACKUP OF ALL YOR DATA YOU HAVE ON YOUR PHONE !!!
Don't worry, youre friut ninja scores are still on feint.
1. First you will have to install ADB. If you have it skip that part.
Just head over here: http://developer.android.com/sdk/index.html
Download the .zip archive and extract "android-sdk-windows" to C:\
Now run SDK Manager.exe and let it install everything. This could take looooong hours...
2. Now you have to check the infocid of your Desire Z. Make sure the developement mode is turned on (USB-Debugging).
Open up a cmd window on your PC (Windows Key + R and type "cmd") and type:
Code:
cd C:\android-sdk-windows\platform-tools
adb reboot bootloader
fastboot oem boot
If your INFOCID doesnt match the following you'll need a goldcard to continue (Get it here: http://forum.xda-developers.com/showthread.php?t=832503 ).
Code:
HTC__001
HTC__032
HTC__E11
HTC__203
HTC__Y13
HTC__102
HTC__405
HTC__304
HTC__A07
HTC__N34
HTC__J15
3. So now you have to download 3 Files:
>>> http://wede.devftw.com/downloads/psneuter
>>> http://www.multiupload.com/A9PNGVBWBE
>>> http://www.multiupload.com/9L618DJVR6
Broken link? Click here: W3D3 @ devFTW
IMPORTANT! When you save psneuter remove the txt file extention, it should hav none!
4. Extract the file misc_version from misc_version_01.zip (just downloaded in step 3). Just ignore the rest. Put that file to C:\android-sdk-windows\platform-tools.
5. Get the PC10IMG.zip from here: http://www.multiupload.com/GH26HXLLES
6. Now you open the cmd again and type following commands: (type cd C:\android-sdk-windows\platform-tools first if youve closed the window)
Code:
adb push psneuter /data/local/tmp
adb push misc_version /data/local/tmp
adb shell chmod 777 /data/local/tmp/psneuter
adb shell chmod 777 /data/local/tmp/misc_version
adb shell /data/local/tmp/psneuter
adb shell
7. Congrats if you now see a #! You now have root access.
If you see a $ something went wrong here. Just go back to step 1 and check youve done everything right.
8. Beside the # type:
Code:
/data/local/tmp/misc_version -s 1.33.405.5
exit
9. Now copy the 1.34.405.5_PC10IMG.zip to youre phone's SD card (Download in step 5) and rename it PC10IMG.zip
10. Now boot youre phone's bootloader with following commands:
Code:
adb reboot bootloader
Or you can just switch youre phone off. Switch it on again while you press the power button and the trackpad together.
You now see the bootloader screen with the 3 android skaters on the bottom.
11. Select BOOTLOADER.
Wait a few seconds.
Then the Bootloader will load our PC10IMG.zip
When asked for update press VOL UP to confirm.
Now wait and restart your phone when prompted.
12. When you check your version at your phone now it should say "1.34". Youre desire z is now downgroaded.
13. Enable USB-Debugging again.
14. Extract the contents in root.zip to the platform-tools folder.
15. Now type that in cmd:
Code:
adb install AndroidTerm.apk
adb push busybox /data/local/tmp/
adb push gfree /data/local/tmp/
adb push rage /data/local/tmp
adb push root /data/local/tmp/
adb shell chmod 0755 /data/local/tmp/*
adb push su /sdcard/
adb push Superuser.apk /sdcard/
16. Start the new app "Terminal Emulator" on your phone and type:
Code:
/data/local/tmp/rage
After a while you'll see the message: "Forked [number] childs"
Press MENU > reset terminal
The terminal will close.
Start it again. It will force close.
Start it again. You should see the # sign again.
Beside it write following:
Code:
/data/local/tmp/gfree -f
After that type:
Code:
/data/local/tmp/root
sync
This will root your phone. When you get that message "mkdir: /system/xbin already exists", don't worry everything is ok.
After that restart your phone.
17. Install ROM Manager from market. Install The ClockworkMod Recovery.
After that you should go to "restart to recovery-system"(or similar) and from there you chose Backup/Restore and create a backup from your current rom.
(Note that you chose with the trackpad in Clockwork and not with the power button like in the bootloader)
When that's done you can come back to that status everytime you want.
(How to Restore when something isnt working:
- Start the device with trackpad holded.
- Chose Fastboot in Bootmanager. (if he asks for update again you forgot to remove the PC10IMG.zip from your SD)
- Chose Recovery
- ClockworkMod Recovery will show up
- Go to Backup/Restore and chose your Backup to restore
- Done. )
18. In RomManager chose Download ROM or install from SD card when you've found a ROM you like.
19. When it's done loading and there is a small window with 3 points make sure the 3rd AND the 2nd is chosen! if you forget to chose the 2nd point youre phone will make bootloops!
ENJOY your rooted DESIRE Z!
(Credits go to g4rb4g3 for the great solution of downgroading)
Please hit Thanks if you liked the Tut.

i recommend visionary/gfree no adb but to each his own
pimped out g2

The visionary-gfree no-adb method is awesome.. used it myself. But doesn't really apply to the Desire-Z, which is what the OP has.

killswitch11 said:
The visionary-gfree no-adb method is awesome.. used it myself. But doesn't really apply to the Desire-Z, which is what the OP has.
Click to expand...
Click to collapse
Yes it does, i have one, and it worked perfect for me

oh snap!! my bad..all i saw was g2 root...score 1 for killswitch
pimped out g2

I heard that there is a high brick risk using visonary?
Sent from my HTC Vision using XDA Premium App

only for permroot
pimped out g2

I permrooted my desire z with the tutorial above and everything is working fine - i tried visionary before but didn't worked for me.
Sent from my HTC Vision using XDA Premium App

Thanks, rooted my bell desire z with this guide.

pretty exhausting explanation. A big thank you....

How different is this from the guide in the wiki?

slapshot30 said:
How different is this from the guide in the wiki?
Click to expand...
Click to collapse
Hi!
It's similar to the wiki method but uses older versions of the tools and some tools and procedures are redundant (i.e. using psneuter for temp-root to downgrade but rage for temp-root during the gfree procedure).
If you know how to use adb, follow the wiki, if not follow the visionary temp-root plus gfree guide that is somewhere around here.
Have fun - Guhl

backarelli said:
pretty exhausting explanation. A big thank you....
Click to expand...
Click to collapse
Infact, it is a concise tutorial
You dont need to open many links just to know how to root.. unlike the time before this thread exist
Thanks to the OP

Glad you all like it
Sent from my HTC Vision using XDA Premium App

Hi,
I got a question before I jump off the bridge and root/flash/stress.
My phone is still on the branded bellmobility firmware, but it is unlocked. Since I only want to get rid of bell stuff and install an official HTC WWE ROM, do I have to follow your guide and root the phone to flash it ? Or can I follow only the flash part and flash an official ROM without rooting ?
Thx

I was able to root my girlfriend's G2 that was still on 2.2 by using this method:
http://archive.rootzwiki.com/index.php/Smartphones/HTC-Corporation/HTC-Desire-Z/G2.html
My coworker recently got a replacement G2 and it shipped back to her with 2.3 on it. We're just wondering if we're able to use the same perm root process that we used for my girlfriend's G2 (2.2)

If u dont want to permroot but u want roms I suggest u at least temp root using visionary, z4root, or one of the othrr one click methodz. If u browse the forums people have gottin into trouble not bein rooted. Then if u dont like it u can reboot and itll go back

ElNiNi0 said:
Hi,
I got a question before I jump off the bridge and root/flash/stress.
My phone is still on the branded bellmobility firmware, but it is unlocked. Since I only want to get rid of bell stuff and install an official HTC WWE ROM, do I have to follow your guide and root the phone to flash it ? Or can I follow only the flash part and flash an official ROM without rooting ?
Thx
Click to expand...
Click to collapse
You can also use temproot which means that you can use all the root functions (flashing included) till you reboot.
I thought of that method before but when you wanna play around with the different roms to find out which is the best permroot would be great. (Look @ the guide)
I dont know much about temproot so just head over to another thread in xda to find out more about that method.
Its your choise.
Sent from my HTC Vision using XDA Premium App

letsgophillyingeneral said:
...
My coworker recently got a replacement G2 and it shipped back to her with 2.3 on it. We're just wondering if we're able to use the same perm root process that we used for my girlfriend's G2 (2.2)
Click to expand...
Click to collapse
Hi!
No, the 2.3.3 version that T-Mobile/HTC are shipping as replacement (by accident) are not rootable at all (at the moment).
There is currently no published temp-root method for this release and therefor it can also not be S-OFFed or perm-rooted.
Have fun - Guhl
Sent from my HTC Vision using XDA App

I have been thinking about rooting my desire z for a while now, just made a backup.
got the android sdk, and adb working, but i cant get the infocid, "fastboot oem boot" doesn't work? why? what to do?
well just skipped the part, worked just fine whit out goldcard. i'm rooted now

Help Looked at wiki and stickies: Unrooting without Windows or USB?

The USB port on my ph is broken so I need to send it back. In addition, I don't know ANYONE with a windows machine. So far I've restored stock ROM and factory settings with P10IMG.zip, but I still have S-OFF. I think I rooted with Gfree. When I look at the wiki, it looks impossible without a windows machine and working USB port. What are my options? is there a slightly older stock rom that will auto unroot my ph and allow me to upgrade to 2.2. I'm afraid if I try to flash gingerbread in order to gain S-on, they'll take one look and charge me 500 bucks.

generally speaking as long as the problem isnt root related (ie broken usb) they wont charge you.. i didnt do gfree so i cant say exactly how to s-on

Thanks, I'm still trying to get it S-on.... I hope you're right about them not caring but since I'm returning it under warranty and not under insurance... I'm nervous. Me and Murphy's Law don't get along so well.

http://forum.xda-developers.com/wiki/index.php?title=HTC_Vision#Returning_to_Stock
If you have access to a microsd to sd card adaptor, a different phone with a working usb port, or if you have root explorer (which you should have) you can do everything in that guide to return to stock.
A pc and adb is not required for this guide. Its just convient.
Sent from my HTC Vision using Tapatalk

PanCubano said:
http://forum.xda-developers.com/wiki/index.php?title=HTC_Vision#Returning_to_Stock
If you have access to a microsd to sd card adaptor, a different phone with a working usb port, or if you have root explorer (which you should have) you can do everything in that guide to return to stock.
A pc and adb is not required for this guide. Its just convient.
Sent from my HTC Vision using Tapatalk
Click to expand...
Click to collapse
I've read the portion I would need to do "Alternative: Use gfree to get radio S-ON and the original CID" a gazillion times and honestly, it's like reading greek. I have no idea how I could do that process using my good ph and a sd card. Can you elaborate... with stupid simple instructions

I'm still unable to figure this out. The wiki instructions are:
ON YOUR PC:
Unzip gfree_06.zip to a place on your computer. Open a terminal or command window, navigate to where the files are on your computer, and type:
$ adb push gfree /data/local/tmp/gfree
$ adb shell chmod 777 /data/local/tmp/gfree
gfree should now be in your phone at /data/local/tmp
IN THE ROOT SHELL (in the first terminal/command) : Now run:
# /data/local/tmp/gfree -s on -c T-MOB010
# sync
I put Gfree on the root menu of the sdcard since I can't figure out how to put it /data/local/tmp/gfree without a USB or ADB. Changed the command to
/sdcard/gfree -s on -c T-MOB010
and, I get permission denied *sighs* I don't know what to do.
I have the temp root using visionary instead of psneuter because the wiki said, I needed to Temp root prior to unrooting and the psneuter instructions were for adb. Every seemed okay but I guess not. Any idea where to go from here?

2.37 has been downgrade!!

hi guys,3 days ago,my DHD upgraded the official RUU,the sw version was been 2.37.i tried myself to find the way to downgrade.But i was faild.
Today,i was try again,and my phone was downgrade to 1.32,that's great!
if your DHD is 2.37 now,maybe the artical can help you.
1.
make your SDcard to goldcard
2.
RUU this RUU_Ace_Gingerbread_S_SoftBank_JP_2.37.762.2_Radio_12.54.60.25_26.09.04.11_M2_release_186075_signed.exe
3.
adb push misc_version /data/local/tmp
adb shell chmod 777 /data/local/tmp/misc_version
adb push GingerBreak /data/local/tmp/GingerBreak
adb shell chmod 777 /data/local/tmp/GingerBreak
adb shell
cd /data/local/tmp
./GingerBreak
if there is a "#" on your screen,type the follow
/data/local/tmp/misc_version -s 1.31.405.3
this time,your phone has been downgrade.
4.
RUU the 1.32,the it finished,there's a big surprised to you.
welcome to China,good luck!

I doubt it, but there is a slight remote chance that it might work.
It is all about the SoftBank ROM, whether it has patched GingerBreak hole or not.
edit: It seems that the guys working at SoftBank are dev friendly, and they indeed left the GingerBreak exploit non-patched

ruu the softbank rom,you can root your DHD,RUU 1.32.
my phone succeed to downgrade

Where can i download ruu file?
Sent from my GT-P1000 using XDA App

plz upload the ruu I need to try it on my dhd.
Sent from my Desire HD using XDA App

And plz give me a clear instruction on how to do it.I'm newbie to android system.
Sent from my Desire HD using XDA App

i doubt it,too..any ideal?? has anyone tried it yet?

h_andria said:
Where can i download ruu file?
Sent from my GT-P1000 using XDA App
Click to expand...
Click to collapse
http://www.filefactory.com/file/cbf...0.25_26.09.04.11_M2_release_186075_signed.exe

I'm trying it now, will let you all know how it goes
UPDATE - Goldcard created, just downloading the RUU and backing up everything on my DHD
UPDATE - DIDN'T WORK - Keep getting ERROR [131] ID Error

CuBz90 said:
I'm trying it now, will let you all know how it goes
UPDATE - Goldcard created, just downloading the RUU and backing up everything on my DHD
Click to expand...
Click to collapse
I'm having an eye on your progress can't wait to see if it's working

method works

serhij said:
method works
Click to expand...
Click to collapse
ya kidding me,,seriously can you paste the details here or redirect me to a link where i can follow the instruction.
cheers

hero000
downloaded RUU this RUU_Ace_Gingerbread_S_SoftBank_JP_2.37.762.2_Radio _12.54.60.25_26.09.04.11_M2_release_186075_signed. exe from this post http://forum.xda-developers.com/showpost.php?p=15274987&postcount=8
and further on this statement http://forum.xda-developers.com/showpost.php?p=10428927&postcount=1

can you give me full instructions?? i'm newbie....

Sorry guys I've been having speed problems with my internet connection, so I fell asleep waiting for the RUU to download lol

Oh not good!...but i'm wondering how you use this RUU file? It's .exe.
I don't know from where to start...I wanna give it a try

hero000 said:
Oh not good!...but i'm wondering how you use this RUU file? It's .exe.
I don't know from where to start...I wanna give it a try
Click to expand...
Click to collapse
You connect your DHD to your computer via USB (Must have HTC Sync for drivers) then just run the RUU

I keep getting Error 131...have created my goldcard and recreated it again incase it had gone wrong
Gna give it another try

Do you have to use the same sd card that you use in ur phone or can be different ones?

roy_hui said:
hi guys,3 days ago,my DHD upgraded the official RUU,the sw version was been 2.37.i tried myself to find the way to downgrade.But i was faild.
Today,i was try again,and my phone was downgrade to 1.32,that's great!
if your DHD is 2.37 now,maybe the artical can help you.
1.
make your SDcard to goldcard
2.
RUU this RUU_Ace_Gingerbread_S_SoftBank_JP_2.37.762.2_Radio_12.54.60.25_26.09.04.11_M2_release_186075_signed.exe
3.
adb push misc_version /data/local/tmp
adb shell chmod 777 /data/local/tmp/misc_version
adb push GingerBreak /data/local/tmp/GingerBreak
adb shell chmod 777 /data/local/tmp/GingerBreak
adb shell
cd /data/local/tmp
./GingerBreak
if there is a "#" on your screen,type the follow
/data/local/tmp/misc_version -s 1.31.405.3
this time,your phone has been downgrade.
4.
RUU the 1.32,the it finished,there's a big surprised to you.
welcome to China,good luck!
Click to expand...
Click to collapse
does it work in 2.42 ????

[GUIDE] Downgrade G2 (2.3.X) & DZ (2.3.X) & mT4g (2.3.4) & DHD w/ S-ON to Stock Froyo

[GUIDE] Downgrade G2 (2.3.X) & DZ (2.3.X) & mT4g (2.3.4) & DHD w/ S-ON to Stock Froyo
This guide is written for anyone who has "Stock Gingerbread" and wants to downgrade their phone which originally had "Stock Froyo". The following is a list of phone models this guide is intended for and that are known to work:
Working Phone Models:
G2 (Vision)
Desire Z (Vision)
myTouch 4G (Glacier)
Desire HD (Ace)
It should also be noted, this guide WILL NOT work with the following:
myTouch 4G Slide (Doubleshot)
Desire HD (Ace) w/ Sense 3.x (a recent OTA update as patched this method).*
*See these threads for a fix for the Desire HD (Ace) w/ Sense 3.x:
[GUIDE] Downgrade from 3.13 (Sense 3.0) roms
Temp root on Desire HD (Ace) with Sense 3.x
Special Notes
If you have used HTCDEV unlock your phone, please visit the following guide prior to using this guide, otherwise you will not be able to downgrade.
[GUIDE] How to get root/flash custom roms with HTCDEV unlock written by Nipqer
strawmetal has been kind enough to make an amazing PDF for each of the various phone models this guide supports which may be easier to read and follow for some users. I highly recommend taking a look at these files, especially if you are finding yourself a little confused during this guide (as this guide is written for multiple devices though he has PDFs for each device individually).
STRAWMETAL's Downgrade From Gingerbread to Froyo Guides and Tools
HTC Desire Z-G2 Downgrade & Root *Recently Updated*
Table of Contents
Introduction
Gaining Temp Root
Changing Version Number to Allow Downgrade and Gaining SuperCID with a Goldcard
Temp-Rooting to Backup (*Optional*)
Downgrading
Manual Downgrade
Fastboot Downgrade
Sources
Troubleshooting
Change Log
Attachments
I) Introduction
This guide is written with the assumption that the user has previously used "adb". If you are unfamiliar with "adb" or do not even know what "adb" is, download the Android SDK (found at http://developer.android.com/sdk/index.html). There are a couple guides to help you get started setting up the Android SDK and understanding ADB. If you have not installed the Android SDK or you are unfamiliar with ADB, please take some time and read a couple guides to get a basic understanding of it.
[GUIDE] ADB Workshop and Guide for everyone
[HOW-TO] ADB for Dummies(How-To Learner's Guide)
How To Set Up ADB/USB Drivers for Android Devices
I - 1) Gaining Temp Root
Download the attached files, unzip them, and place the files in your platform-tools folder. To elaborate, place the fre3vo file inside of the View attachment fre3vo.zip file in your platform-tools folder and the misc_version file inside the View attachment misc_version_01.zip file in your platform-tools folder.
Make sure you have your sdcard inserted in your phone, and you are NOT in USB Storage Mode, and your sdcard is NOT FULL.
Run the following command to verify the exploit has access to what it needs. (Only the first line is the command. The second line should be the result returned if all goes well.)
Code:
[B]> adb shell cat /dev/msm_rotator[/B]
[I]/dev/msm_rotator: invalid length[/I]
If you received the same message, you're good to continue on. If not… refer to the troubleshooting section of the guide before you continue.
Run the following commands from your platform-tools directory.
Code:
[B]> adb push fre3vo /data/local/tmp
> adb shell
$ chmod 777 /data/local/tmp/fre3vo
$ /data/local/tmp/fre3vo -debug -start FAA90000 -end FFFFFFFF[/B]
After you enter that command, you should see something similar to the last few lines in the following displayed.
(It may take a minute or two. From what I can tell, this appears to be the quickest method as the exploit seems to be found in the latter regions.)
Code:
[I]Buffer offset: 00000000
Buffer size: 8192
Scanning region fb7b0000...
Scanning region fb8a0000...
Scanning region fb990000...
Scanning region fba90000...
Potential exploit area found at address fbb4d600:a00.
Exploiting device...[/I]
If the exploit works, you will be kicked out of ADB shell, proceed to Step #8.
If the above does not work, and fails, you can try the following, and hopefully one will work, try the following (you must reboot your phone before you try another set):
Code:
[B]$ /data/local/tmp/fre3vo -debug -start 10000000 -end 1FFFFFFF
$ /data/local/tmp/fre3vo -debug -start 20000000 -end 2FFFFFFF
$ /data/local/tmp/fre3vo -debug -start 30000000 -end 3FFFFFFF
$ /data/local/tmp/fre3vo -debug -start F0000000 -end FFFFFFFF
$ /data/local/tmp/fre3vo -debug -start E0000000 -end EFFFFFFF[/B]
If you did get kicked out of adb shell, open it again. You should now see # instead of $, thus granting you temp root. Go ahead and exit out of shell to proceed to the next stage.
Code:
[B]> adb shell
# exit[/B]
I - 2) Changing Version Number to Allow Downgrade and Gaining SuperCID with a Goldcard
If you followed the first portion of this, you should of unzipped View attachment misc_version_01.zip ad View attachment flashgc.zip in the platform-tools directory.
If you haven't done that yet, do that now and then run the following commands from your platform-tools directory.
Code:
[B]> adb push misc_version /data/local/tmp/misc_version
> adb push flashgc /data/local/tmp/flashgc
> adb shell chmod 777 /data/local/tmp/*
> adb shell
# cd /data/local/tmp
# ./misc_version -s 1.00.000.0[/B]
[I]--set_version set. VERSION will be changed to: 1.00.000.0
Patching and backing up partition 17...[/I]
[B]# ./flashgc[/B]
*Note: If you get the following error, please make sure your sdcard is inserted in your phone and is NOT mounted to your computer (ie: make sure you are NOT in USB Storage Mode). This is a fairly common error and/or oversight many people tend to miss. Please double check this before continuing.
Code:
Error opening backup file.
Code:
[B]# sync[/B]
Double check and make sure everything looks good so far by running the following command (still in adb shell).
Code:
[B]# dd if=/dev/block/mmcblk0p17 bs=1 skip=160 count=10[/B]
[I]1.00.000.010+0 records in
10+0 records out
10 bytes transferred in 0.001 secs (10000 bytes/sec)[/I]
BE SURE TO BACKUP ANY DATA!!!***
I - 3) Temp-Rooting to Backup
If you have nothing to back up or don't care to back anything up, proceed to the next section.
Credit goes to Nipqer from #g2root for providing me with this method.
Download the attached file: View attachment Vision-fre3vo-temp-root.zip
Extract the contents to your platform-tools directory.
Run the following commands in command prompt while in platform-tools directory:
Code:
> adb push su /data/local/tmp/
> adb push busybox /data/local/tmp/
> adb push fixsu.sh /data/local/tmp/
> adb install SuperUser.apk
> adb shell chmod 755 /data/local/tmp/fixsu.sh
> adb shell /data/local/tmp/fixsu.sh
Download a backing up application such as...
Titanium Backup
MyBackup Root
Make a backup!
I - 4) Downgrading
Download the Stock Rom for your device:
G2: PC10IMG_Vision_TMOUS_1.19.531.1_Radio_12.21.60.09b_26.02.01.15_M2_release_149459_signed.zip (Link not working last time I checked... hopefully it will come back up).
Mirrors:
Vision_G2_1.19.531.1_PC10IMG.zip (Working as of April 2023)
MD5: 531c08dc402e15577b947bf4cd22aec2
Desire Z: PC10IMG.zip
Mirrors:
PC10IMG.zip
Vision_DZ_1.34.405.5_PC10IMG.zip
Vision_DZ_1.34.405.5_PC10IMG.zip
MD5: 2ff42897cd27e0db425a2cf36c8bd078
myTouch 4G: PD15IMG.zip
Mirrors:
http://cmw.22aaf3.com/glacier/stock/1.17.531.2/PD15IMG.zip
http://goo-inside.me/ruu/glacier/fu....140e_26.03.02.26_M_release_155771_signed.zip
Glacier_mT4G_1.17.531.2_PD15IMG.zip
Glacier_mT4G_1.17.531.2_PD15IMG.zip
MD5: 49d07f0ee7de1765a6a84cb12fa53110
Desire HD: RUU_Ace_HTC_WWE_1.24.405.1_Radio_12.27.60.14b_26.02.00.29_M4_release_151852_signed.zip
Mirrors:
Ace_DHD_1.24.405.1_PD98IMG.zip
Ace_DHD_1.24.405.1_PD98IMG.zip
MD5: a107b30a4b397c9238ddc7f4571c2ee8
Follow either Manual Downgrade OR Fastboot Downgrade.
I - 4a) Manual Downgrade
Rename the downloaded rom to it's proper update name:
(Please note, the filenames MUST be all uppercase except for the extension, and if file extensions are hidden, do not include ".zip"):
G2: "PC10IMG.zip"
Desire Z: "PC10IMG.zip"
myTouch 4G: "PD15IMG.zip"
Desire HD: "PD98IMG.zip"
Place the zip file in the root of your sdcard.
Reboot your phone into bootloader by typing the following command:
Code:
[B]> adb reboot bootloader [/B]
After your phone has entered bootloader, press the power button. It will then scan for the associated rom file and ask you to update by pressing a key.
Press the key it requests to perform the update.
DO NOT INTERRUPT THIS PROCESS.
Your phone will reboot once or twice - this is completely normal.
This process will take roughly 5-10 minutes so make sure your phone is plugged in, either to an outlet or your computer.
Once the process is finished, it will ask you to reboot by pressing a key. Press the associated key and it will reboot into the Stock Froyo rom!
After booting into Android 2.2, DO NOT update the OTA that is around 70MB. That is the update to Gingerbread. There is one update that will come before that, that is a lot smaller in size, which is the WiFi-Calling update - that update is okay to install.
I - 4b) Fastboot Downgrade
Rename the downloaded stock rom "StockRom.zip" (if extensions are hidden, rename it "StockRom").
Place the downloaded stock rom zip file in your platform-tools directory.
Download the attached file View attachment fastboot.zip. In the zip archive there are three folders, "windows", "mac", and "linux".
Extract the file from the associated with your operating system and place it in platform-tools directory.
In command prompt, type the following command to reboot into bootloader:
Code:
[B]> adb reboot bootloader[/B]
Make sure your device is recognized by typing the following command.
Code:
[B]> fastboot devices[/B]
If you device is recognized, it should return a serial/model number.
Code:
[B]> fastboot oem rebootRUU[/B]
Your phone should now reboot into a black screen with a gray/silver "HTC" logo on it.
Next we flash the Stock Rom. This may take a few minutes as it transfers the file to the phone then attemps to update (downgrade).
Code:
[B]> fastboot flash zip StockRom.zip[/B]
In rare cases the flash stops and the user gets a warning to repeat the flash immediately - no panic, just run the "fastboot flash zip StockRom.zip" (only this command, not the rebootRUU one) again and it will work.
When it finishes, wait a minute or two (just in case) then reboot your phone by typing:
Code:
[B]> fastboot reboot[/B]
After booting into Android 2.2, DO NOT update the OTA that is around 70MB. That is the update to Gingerbread. There is one update that will come before that, that is a lot smaller in size, which is the WiFi-Calling update - that update is okay to install.
II) Sources:
#g2root: http://fishporn.ca/vision.gingerbread.root.html
Using fre3vo: http://therootofallevo.com/forums/viewtopic.php?f=6&t=120
[GUIDE] ADB Workshop and Guide for everyone
[HOW-TO] ADB for Dummies(How-To Learner's Guide)
How To Set Up ADB/USB Drivers for Android Devices
[ROM]Ace Test & Stock ROMS [RE-UPLOADED]
Instructions for flashgc
Temp-Root Backup Post by Nipqer
[GUIDE] How to get root/flash custom roms with HTCDEV unlock
flashgc by skorgon
Various Chats I've had with individuals.
If anyone needs further help and would prefer messaging me, feel free.
AIM: IgnorantNihilist
G-Talk: [email protected]
MSN: [email protected]
III) Troubleshooting
Cimer said:
[...] If [the downgrade] does not work, Right click your Command prompt, Select All, Right click again. Then go to pastebin.com, paste there, Scroll down, name it and hit submit. After that post the link here and we'll take a look at it.
EVERYONE: If you want a faster diagnostic please do this in advance and other people can see your mistakes.
Click to expand...
Click to collapse
You can also join the IRC channel #g2root on irc.freenode.net and ask questions in there. If you are unfamiliar with IRC, you can go to http://webchat.freenode.net and pick an alias, for channel type in #g2root and enter the reCAPTCHA and connect.
I wanted to give credit to specific individuals whom have helped write this guide, provided important feedback to further improve this guide, and/or in any other way further improved this guide. I think these invidiuals should be recognized, as if it were not for them, this would wouldn't be as elaborate, dynamic, and informative as it is. So a special thanks to, Cimer, strawmetal petarpLab, iDylan1357, asharma5290, guhl, pierre_ja, and skorgon from #g2root. And I would also like to recognize and give a major thanks to Nipqer whom offers a lot of support with constant responses helping assist those whom ask for help both in this thread as well as on IRC. And he is always making sure I keep this as updated as it can be.
IV) Change Log
2023/04/14
I'm no longer supporting this thread anymore however I will try to update it if someone messages me with an issue. I don't have time anymore unfortunately. I did however update the downgrade ROM for the G2. The link in the mirror is currently hosted on my google drive. If there's a problem let me know in a private message.
2013/06/14
Update ratherphallic.co.cc links to ratherphallic.tk. -Nipqer
2012/11/11
Made some minor changes (grammar, spelling, layout/format).
Added links to guides which fix the issue with Desire HD (Ace) w/ Sense 3.x
2012/05/22
Changed "fastboot" attachment to have 3 folders ("windows","linux",and "mac") each with "fastboot" in it instead of having "fastboot-linux", "fastboot-mac", and "fastboot-windows.exe".
Changed fastboot portion of guide to reflect change to attachment for easier usability.
2012/04/21
Updated strawmetal's PDF document for G2/Desire Z Downgrade.
Added link to strawmetal's tools used in his PDF Guide.
2012/03/07
Added a PDF file that strawmetal was kind enough to make for Vision users.
Added links to attached files in the guide where I reference them.
2012/02/03
Changed link to the Stock Vision (G2) Rom and added mirrors.
Changed link to the Stock Vision (Desire Z) Rom and added mirrors.
Added mirrors to the Stock Glacier (myTouch 4G) Rom.
Changed link to the Stock Ace (Desire HD) Rom and added mirrors.
2012/02/03
Added a guide to help individuals whom have used the "official" htcdev.com unlocker method.
2012/02/03
Fixed link for the G2, Desire Z, and Desire HD (thanks to repast & cmstlist.
2012/04/13
Possible exploit found for Desire HD updated to latest OTA update (which patched our current method).
2012/01/28
Fixed link for myTouch 4G as megaupload has been taken down. Also added mirrors for myTouch 4G Stock Rom.
2011/12/20
Clearified which phone models this guide is intended for as well as noting that the Doubleshot does not work.
Made note that a recent OTA patch for the Ace, giving it Sense 3.x, has patched this method and this method will no longer work on Ace models which have Sense 3.x
2011/12/17
Added new goldcard generator and simplified the guide.
2011/10/27
Changed the download link for the Desire HD.
Added MD5 checksums next to the rooms.
2011/10/26
Re-added the manual downgrade method due to people having issues with the fastboot method.
2011/10/23
Fixed a slightly error in code during the temp-root backup section. Had "adb install install Superuser.apk", replaced it with "adb install Superuser.apk"
2011/10/22
Added a method to be able to backup data prior to downgrading! (thanks to Nipqer from #g2root)
2011/10/20
Added Desire HD.
Changed the downgrading method to use fastboot rather than manually downgrading.
Added "Creating A Goldcard" method from http://www.thinkthinkdo.com/trac/project1/attachment/wiki/pierre_ja/flashgc_instructions
2011/08/26
Changed modified version number for each device to 1.00.000 as it is more universal and works for each one.
Made it more clear to extract the attached files and place them in the platform-tools directory for use.
2011/08/06
Added a couple links to ADB guide.
2011/08/05
Added myTouch 4G
Added link to an "adb" guide.
Changed title from "[GUIDE] Downgrade G2 2.13.531.8 (2.3.3 T-Mobile Rom w/ S-ON) & DZ 2.3.3 w/ S-ON" to "[GUIDE] Downgrade G2 (2.3.3) & DZ (2.3.3) & mT4g (2.3.4) w/ S-ON to Stock Froyo"
V) Attached Files
View attachment misc_version_01.zip
View attachment fre3vo.zip
View attachment fastboot.zip
View attachment Vision-fre3vo-temp-root.zip
View attachment flashgc.zip

Wow first guide. Nice! I hope this helps people who have 2.3.3 so they can stop asking how to downgrade
Sent from my HTC Vision using XDA App

Sweet, now I can finally get my phone replaced. Accidentally blew out my LED and was scared of asking for a new one for fear of being unable to root. Thanks for the peace of mind I'll be using this in a few days

Just some suggestions to avoid confusion when you run the command
Code:
adb shell cat /dev/msm_rotator
you should get the return of
Code:
/dev/msm_rotator: invalid length
you do not need to enter in this line.
Also after entering
Code:
/data/local/tmp/fre3vo -debug -start FAA90000 -end FFFFFFFF
or one like it and it fails (It should not) you need to reboot the phone between these attempts.
Thanks for writing the guide! We just posted the log lol
Late side note: I've recently read an article on how root exploits are not credited to their original inventors. Just letting everyone know that agrabren should be credited as well for his work with Fr3v0, and his willingness to help during the process

Thanks for the tips Cimer, I edited the post, hopefully that clarifies it a bit more.
I've been a quiet browser here on XDA for quite a while but I believe that was actually the first post I made =3 It took me a while to try to get it formatted... fluently / tried to make it easy to read and follow.
And hey, if it wasn't for you all posting the logs from #g2root, I would of never gotten my G2 back to being rooted. I think I had like 8 different pages open when I was doing it, reading the chat log, reviewing the pastebin data, et cetera. But it worked, after searching every day, the trick has been found.
On a side note, I picked the range "-start FAA90000 -end FFFFFFFF" because it appears that the exploit is most likely within that range. It was for yours "FBB47C00:1400", mine was "FBB4D600:A00", and a friend of mine was also an FBB*.

Does it work for the european desire Z ?

ilbeppez said:
Does it work for the european desire Z ?
Click to expand...
Click to collapse
Personally, I have no idea. I don't imagine it would hurt the phone any if you tried. I know you would have to change the version number (when using misc_version) to a different number, one that would be equivalent to the stock rom that came with the phone. As for the exploit itself, I don't see any harm it could do to try (though I'm no expert). Just be sure to reboot your phone after each attempt of using fre3vo.

ilbeppez said:
Does it work for the european desire Z ?
Click to expand...
Click to collapse
Give me a second, Guhl made a post about this...
http://forum.xda-developers.com/showpost.php?p=15825944&postcount=27
Should explain things for Desire Z users.

Cimer said:
Give me a second, Guhl made a post about this...
http://forum.xda-developers.com/showpost.php?p=15825944&postcount=27
Should explain things for Desire Z users.
Click to expand...
Click to collapse
Ok
thanks

Thank you. I have been searching for this.

Setherio, please divide a section for 2.3.3 DZ owners. the appropriate PC10IMG.zip for them is
http://www.multiupload.com/GH26HXLLES (md5 2ff42897cd27e0db425a2cf36c8bd078)
the mics_version command is: /data/local/tmp/misc_version -s 1.33.405.5
the push command is: adb push PC10IMG.zip /sdcard/

petarpLab said:
Setherio, please divide a section for 2.3.3 DZ owners. the appropriate PC10IMG.zip for them is
multiupload.com/GH26HXLLES (md5 2ff42897cd27e0db425a2cf36c8bd078)
the mics_version command is: /data/local/tmp/misc_version -s 1.33.405.5
the push command is: adb push PC10IMG.zip /sdcard/
Click to expand...
Click to collapse
Thanks for the information. I updated the guide.

thanks a lot

Incase anyone did not know already gfree is the best way to root after the downgrade...visionary bricks phones. You can find gfree in the xda wiki.
Sent from my HTC Vision using XDA App

Great guide. My first downgrade and I haven't bricked my phone
Thanks to all people that made it possible
Cimer said:
Incase anyone did not know already gfree is the best way to root after the downgrade...visionary bricks phones. You can find gfree in the xda wiki.
Sent from my HTC Vision using XDA App
Click to expand...
Click to collapse
So AMT is ok for rooting after downgrade?
This package contains:
- gfree
- gfree_verify
- Superuser
- Busybox
- flash_image
- psneuter
- root_psn
- misc_version
- GingerBreak APK
Click to expand...
Click to collapse

trzype said:
Great guide.
My first downgrade and I haven't bricked my phone
Thanks to all people that made it possible
Click to expand...
Click to collapse
Thank you Glad it helped you.
trzype said:
So AMT is ok for rooting after downgrade?
Click to expand...
Click to collapse
Yes. I downgraded and rooted, went ahead and installed Cyanogen nightly. As did a couple others I've talked to who have downgraded as well.

Used AMT. Got some error about 1.34 and "Double" but cliked Continue button anyway. Everything went fine.
Setherio said:
I downgraded and rooted, went ahead and installed Cyanogen nightly. As did a couple others I've talked to who have downgraded as well.
Click to expand...
Click to collapse
I'm going for Virtuous 2.0.0. Can't live without Sense UI
Thanks again

Should I rename the stock Rom to just PC10IMG before I push it to sd card or can I just put it on sd card before hand
Sent from my HTC Sensation 4G using XDA Premium App

Got it worked great thanks

Thank you so much worked like a charm - Peace

(MAYBE) How to downgrade and root 2.43.661.1 and up! TEST IT!

Anyony give it a try?
How to downgrade and root 2.43.661.1 and up:
http://androidforums.com/desire-hd-all-things-root/382082-how-downgrade-root-2-43-661-1-up.html
I'll try it later this week (see my posts over there)...

wat abt 2.42 ??????????????

And 2.50.405.2? It ins´t for this?

dwyaneW said:
And 2.50.405.2? It ins´t for this?
Click to expand...
Click to collapse
Apparently it works too, this guy has that build number: http://androidforums.com/desire-hd-...downgrade-root-2-43-661-1-up.html#post2995693

Finally we have a way to downgrade from 2.50 !!!
Hi All !
I tested it and it worked, so here are the things you need:
Download the downgrade.zip
An SD card with the 1.32 PD89IMG.zip
Connect your phone in Charge Only mode with USB Debugging enabled.
Run these commands with enter after every line:
adb push fre3vo /data/local/tmp
adb push misc_version /data/local/tmp
adb shell chmod 777 /data/local/tmp/fre3vo
adb shell chmod 777 /data/local/tmp/misc_version
adb shell /data/local/tmp/fre3vo -debug -start F0000000 -end FFFFFFFF
If you success you will see this message:
Potential exploit area found at address (maybe fbb6b600:1a00 or something else).
Exploiting device...
Then run the following:
adb shell (you will have to get the "#"
/data/local/tmp/misc_version -s 1.31.405.3
adb reboot bootloader
Run the ROM setup and you will done

This method is the same as CubZ
im all over both threads, please post offsets at which the exploit was found on your device.
so as we can narrow down the searches to make a quick one click method.

JSLEnterprises said:
This method is the same as CubZ
im all over both threads, please post offsets at which the exploit was found on your device.
so as we can narrow down the searches to make a quick one click method.
Click to expand...
Click to collapse
Potential exploit area found at address (maybe fbb6b600:1a00 or something else). This is the address of my phone.

great
great
great
great
greatgreat

CONFIRMED on Telus Desire HD running 2.43!
Follow the instructions on this link here:
http://driphter.com/index.php?topic=3867.0
I just completed Step 7. Step 8 will have to wait until I get home, since I don't have administrative access on this computer, so I can't run the batch to turn off Radio S-Off yet. BUT my phone is rooted now. Now running on Android 2.2 build 1.32.405
Also, just perm rooted using Visionary+. Just tested it with adb shell and got the magical #.
Thank you JSL from Dripther.com!

Totally works! No problems at all on my unbranded DHD.

JSLEnterprises said:
This method is the same as CubZ
im all over both threads, please post offsets at which the exploit was found on your device.
so as we can narrow down the searches to make a quick one click method.
Click to expand...
Click to collapse
It found an exploit area at fbb7f800:1800 on my Telus-branded Desire HD.
EDIT: I've tried the process about 4 or 5 times, and everything goes fine until it boots into the bootloader. Whenever it gets to that stage, nothing appears to get flashed and my phone goes right back to the way it was. Any particular reason for that?

Finaly, i give it a try.
Sent from my Desire HD using XDA Premium App

Now I downgraded 2.50 build !!

We also have a giude from CuBz90 in "Desire HD Android Development" forum: http://forum.xda-developers.com/showthread.php?t=1152233

Works perfect, custom rom, android revolution installed
Sent from my Desire HD using XDA Premium App

Command_HDX said:
We also have a giude from CuBz90 in "Desire HD Android Development" forum: http://forum.xda-developers.com/showthread.php?t=1152233
Click to expand...
Click to collapse
I had the exact same luck with that. I've used this exact same SD card with my old HTC Hero, so it's not the card. Could it just be something as simple as me having a corrupted download of PD98IMG.zip? I'll check the MD5 and report back.

This works for 2.50xxx. Just did it. If it fails 1st time, unplug and try again.
Sent from my Motorola Startac running Atari 2600 software!