if youre reading this and considering rooting your device,a word of warning: DO NOT ever attempt to accept an OTA while rooted and running a custom recovery.
an official OTA update needs the stock recovery to apply it. attempting to take an OTA without the stock recovery can result in a failed harmless attempt,a fixable bootloop,or even a brick. so please... dont do it.
and now,on with the info. enjoy
Revolutionary
a new method has just become available that does not wipe your data. this is 100% the best,and most reccomended way to root your thunderbolt at this time.
special note: the minor OTA to firmware number 2.11.605.9 patches the exploit used by revolutionary. there are 2 options:
1)several users have reported being able to downgrade to 2.11.605.5 simply by running an RUU for that firmware,despite an s-on hboot wich would normally prevent you from going backwards in version numbers. PG05IMG and .EXE files for this version are available in post 4. (needs verified)
*please note that downgrading WILL wipe your personal data
2) achieve temp root via another means,then run revolutionary(this method follows)
feel free to do wichever is most comfortable
following is how to manually temp root and run revolutionary. i am happy to keep supporting this for those that wish to do it.
however,there is now a very good tool to do this for you: [ALL IN ONE] The HTC Thunderbolt Tool!
it will root and unroot your thunderbolt.
this is not my work,so please post questions about it in that thread,where we will do our best to help you
__________________________________________________ ________________________________ how to manually root 2.11.605.9/2.11.605.19 WITHOUT downgrading
as usual,i take no credit- i just put it together
credits:
-jelly doughnut for pointing me to this thread,and the Desire HD guys for this thread.
*make sure you thank jelly in this post
-sele and crew at HTC Thunderbolt Forum for what i like to call the "mini adb" concept
2)set up adb:
-extract miniadb_tbolt2.zip and place the unzipped folder onto the root of your C\ drive on your PC
-open a command window. windows 7,click on start bubble,type "command" in the search box. a small black window should open up
4)open the DHDDowngrade.zip file,then the folder contained inside of it. transfer "Fre3vo" into the tbolt2 folder with adb/fastboot.(ignore the rest of the files in DHDDongrade,fre3vo is the only one you need)
5)in your command window: change to the tbolt2 directory by typing: cd c:\mini-adb_tbolt2 (your promt should change to c:\mini-adb_tbolt2>)
*note that in the next few steps,anything in bold type is an adb command. you can directly copy from this window,and paste into your command window to eliminate typos.
6)enable usb debugging,plug in your phone via usb. select "charge only" mode.
7)make sure adb is seeing your phone: adb devices (should return your serial number)
8) enter the commands from your link,one at a time,hit enter after each:
9)make sure it worked. when you see "exploiting device" then your command prompt again: adb shell (if your prompt changes to a # youre good to go)
10)run revolutionary again. this time it will work really fast. you can have it install clockwork if you wish to use that recovery.
10)flash the superuser 3.07 files linked on revolutionarys info page
youre done
heres what youll see in the command window(red are my inputs,blue are just additional comments):
Code:
Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.
C:\Users\Scott>cd c:\tbolt2
c:\tbolt2>adb devices
* daemon not running. starting it now *
* daemon started successfully *
List of devices attached
HTxxxxxx device
c:\tbolt2>adb push fre3vo /data/local/tmp
956 KB/s (9796 bytes in 0.010s)
c:\tbolt2>adb shell chmod 777 /data/local/tmp/fre3vo
c:\tbolt2>adb shell /data/local/tmp/fre3vo -debug -start F0000000 -end FFFFFFFF
fre3vo by #teamwin
Please wait...
Attempting to modify ro.secure property...
fb_fix_screeninfo:
id: msmfb
smem_start: 802160640
smem_len: 3145728
type: 0
type_aux: 0
visual: 2
xpanstep: 0
ypanstep: 1
line_length: 1920
mmio_start: 0
accel: 0
fb_var_screeninfo:
xres: 480
yres: 800
xres_virtual: 480
yres_virtual: 1600
xoffset: 0
yoffset: 0
bits_per_pixel: 32
activate: 16
height: 94
width: 56
rotate: 0
grayscale: 0
nonstd: 0
accel_flags: 0
pixclock: 0
left_margin: 0
right_margin: 0
upper_margin: 0
lower_margin: 0
hsync_len: 0
vsync_len: 0
sync: 0
vmode: 0
Buffer offset: 00000000
Buffer size: 8192
Scanning region f0000000...
Scanning region f00f0000...
Scanning region f01e0000...
Scanning region f02d0000...
Scanning region f03c0000...
Scanning region f04b0000...
Scanning region f05a0000...
Scanning region f0690000...
Scanning region f0780000...
Scanning region f0870000...
Scanning region f0960000...
Scanning region f0a50000...
Scanning region f0b40000...
Scanning region f0c30000...
Scanning region f0d20000...
Scanning region f0e10000...
Scanning region f0f00000...
Scanning region f0ff0000...
Scanning region f10e0000...
Scanning region f11d0000...
Scanning region f12c0000...
Scanning region f13b0000...
Scanning region f14a0000...
Scanning region f1590000...
Scanning region f1680000...
Scanning region f1770000...
Scanning region f1860000...
Scanning region f1950000...
Scanning region f1a40000...
Scanning region f1b30000...
Scanning region f1c20000...
Scanning region f1d10000...
Scanning region f1e00000...
Scanning region f1ef0000...
Scanning region f1fe0000...
Scanning region f20d0000...
Scanning region f21c0000...
Scanning region f22b0000...
Scanning region f23a0000...
Scanning region f2490000...
Scanning region f2580000...
Scanning region f2670000...
Scanning region f2760000...
Scanning region f2850000...
Scanning region f2940000...
Scanning region f2a30000...
Scanning region f2b20000...
Scanning region f2c10000...
Scanning region f2d00000...
Scanning region f2df0000...
Scanning region f2ee0000...
Scanning region f2fd0000...
Scanning region f30c0000...
Scanning region f31b0000...
Scanning region f32a0000...
Scanning region f3390000...
Scanning region f3480000...
Scanning region f3570000...
Scanning region f3660000...
Scanning region f3750000...
Scanning region f3840000...
Scanning region f3930000...
Scanning region f3a20000...
Scanning region f3b10000...
Scanning region f3c00000...
Scanning region f3cf0000...
Scanning region f3de0000...
Scanning region f3ed0000...
Scanning region f3fc0000...
Scanning region f40b0000...
Scanning region f41a0000...
Scanning region f4290000...
Scanning region f4380000...
Scanning region f4470000...
Scanning region f4560000...
Scanning region f4650000...
Scanning region f4740000...
Scanning region f4830000...
Scanning region f4920000...
Scanning region f4a10000...
Scanning region f4b00000...
Scanning region f4bf0000...
Scanning region f4ce0000...
Scanning region f4dd0000...
Scanning region f4ec0000...
Scanning region f4fb0000...
Scanning region f50a0000...
Scanning region f5190000...
Scanning region f5280000...
Scanning region f5370000...
Scanning region f5460000...
Scanning region f5550000...
Scanning region f5640000...
Scanning region f5730000...
Scanning region f5820000...
Scanning region f5910000...
Scanning region f5a00000...
Scanning region f5af0000...
Scanning region f5be0000...
Scanning region f5cd0000...
Scanning region f5dc0000...
Scanning region f5eb0000...
Scanning region f5fa0000...
Scanning region f6090000...
Scanning region f6180000...
Scanning region f6270000...
Scanning region f6360000...
Scanning region f6450000...
Scanning region f6540000...
Scanning region f6630000...
Scanning region f6720000...
Scanning region f6810000...
Scanning region f6900000...
Scanning region f69f0000...
Scanning region f6ae0000...
Scanning region f6bd0000...
Scanning region f6cc0000...
Scanning region f6db0000...
Scanning region f6ea0000...
Scanning region f6f90000...
Scanning region f7080000...
Scanning region f7170000...
Scanning region f7260000...
Scanning region f7350000...
Scanning region f7440000...
Scanning region f7530000...
Scanning region f7620000...
Scanning region f7710000...
Scanning region f7800000...
Scanning region f78f0000...
Scanning region f79e0000...
Scanning region f7ad0000...
Scanning region f7bc0000...
Scanning region f7cb0000...
Scanning region f7da0000...
Scanning region f7e90000...
Scanning region f7f80000...
Scanning region f8070000...
Scanning region f8160000...
Scanning region f8250000...
Scanning region f8340000...
Scanning region f8430000...
Scanning region f8520000...
Scanning region f8610000...
Scanning region f8700000...
Scanning region f87f0000...
Scanning region f88e0000...
Scanning region f89d0000...
Scanning region f8ac0000...
Scanning region f8bb0000...
Scanning region f8ca0000...
Scanning region f8d90000...
Scanning region f8e80000...
Scanning region f8f70000...
Scanning region f9060000...
Scanning region f9150000...
Scanning region f9240000...
Scanning region f9330000...
Scanning region f9420000...
Scanning region f9510000...
Scanning region f9600000...
Scanning region f96f0000...
Scanning region f97e0000...
Scanning region f98d0000...
Scanning region f99c0000...
Scanning region f9ab0000...
Scanning region f9ba0000...
Scanning region f9c90000...
Scanning region f9d80000...
Scanning region f9e70000...
Scanning region f9f60000...
Potential exploit area found at address f9fd6200:e00.
Exploiting device...
c:\tbolt2>adb shell
# <-indicates that you have temp root access
__________________________________________________ ________________________________ how to unroot
the revolutionary method of rooting uses a sneeky hboot exploit,and replaces your stock 1.04.0000 or 1.05.0000 bootloader with a modified permanent hboot. it not only gives you all the same fashboot flash abilities as the original engineering bootloader,but it very effectively blocks other hboots for overwriting it. its good,as you will remain s-off if you accidentally flash a full RUU,or accept an OTA,but makes it a little trickier to remove.
for the time being, removal requires ADB to be set up and running and some commands entered in "fastboot" to to allow the permanent hboot to be overwritten. once an "s-on" tool is release,ill take th is part of this guide down.
if you rooted the old skool manual way and have adb setup and working,you can use this guide to remove the permanent hboot.
with Revolutionary,will come a new wave of rooters that have no clue what adb,or fastboot even are. for you folks, Sele and the crew in the "rescue sguad" at HTC Thunderbolt Forum have come up with a really clever way to get the adb basics,and the eng bootloader to flash,with minimal setup and confusion. with their permission,im borrowing it for our guide here.
*WARNING* no siginture or file checks will be done flashing the new bootloader in hboot or fastboot.fastboot will literally flash "lets golf" as a bootloader if you tell it to. DO NOT mess with your hboot unless absolutely neccessary to return to stock for warranty purposes. if youre just tired of being rooted,flash the gingerbread ruu to get back to unrooted firmware and factory recovery. leaving the revolutionary s-off bootloader in place is the safest,and best option,and will not affect your ability to recieve OTAs.
*AGAIN- if youre just following this procedure because youre tired of being rooted,skip this next section and leave the permanent hboot in place. jump to "Putting current stock firmware and s-on back onto the phone" and flash only the first "PG05IMG_no_hboot_2.11.605.9" file(you can flash the 2nd file too if you want,but the permanent hboot will block it )
Setting up adb and removing the permanent hboot if youve never used adb before
1)if you no longer have the htc drivers that you installed when rooting with revolutionary,download them again from here on revolutionarys website.
2)next download *link removed (mirror)to somewhere convenient that youll be able to find it,like your desktop,or a "downloads" folder. it contains the old eng 1.40.2000 s-off hboot,and the bare minumum tools to install it.
3)the following directions were using windows 7 and chrome browser. other OS may be slightly different-the end result is you want unzipped,inside tbolt folder to be on the root of your C: drive.
-find the tbolt.zipdownload
-click on tbolt.zip download and open it.
-inside tbolt.zip,there is a folder labled tbolt. drag it to the root of C:. inside tbolt is the unpermanent hboot and some adb tools.
4) charge your Thunderbolt to 100%
5)click on then "start" bubble in the lower left corner of your screen. type "command" in the search window and hit enter. this will open a small black command window.
6)enter the following command(by typing or copy/paste):
Code:
cd c:\tbolt
you should see your promt in the window change to: c:\tbolt>
7)enter the follwing command:
Code:
md5sums hbooteng.nb0
check the output on the command window. THIS IS VERY IMPORTANT. the command must equal exactly 6991368ee2deaf182048a3ed9d3c0fcb if it does not,STOP!. delete the tbolt.zip download,and the unzipped tbolt folder from C:,re download and try it again. again,do not procede if the output in your command number does not equal it exactly.
8)once the number matches,you can continue. copy and paste the following codes into the command window:
Code:
adb devices
the output should be your phones serial number
now enter:
Code:
adb reboot bootloader
this will cause your phone to boot into FASTBOOT mode,wich is a white screen with colored letters.
now enter:
Code:
fastboot devices
the result again,should be your phones serial number.
9) now youre ready to enter the command to unlock the permanent hboot and flash the new,non permanent one.
to unlock,enter:
Code:
fastboot oem mw 8d08ac54 1 31302E30
write the new hboot:
Code:
fastboot flash hboot hbooteng.nb0
if you select bootloader at this point from the fastboot menu, youll still see the permanent s-off hboot,so select reboot with the volume rocker and power button and let the phone reboot. after it boots,you can adb reboot bootloader again,or power off, then power on/vol down and check that your pink "UNLOCKED" or "REVOLUTIONARY" is gone and you have the old 1.49.2000 bootloader.
here is what you should see in the command window,the red are my inputs:
Code:
Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.
C:\Users\Scott>cd c:\tbolt
c:\tbolt>md5sums hbooteng.nb0
MD5sums 1.2 freeware for Win9x/ME/NT/2000/XP+
Copyright (C) 2001-2005 Jem Berkes - http://www.pc-tools.net/
Type md5sums -h for help
[Path] / filename MD5 sum
-------------------------------------------------------------------------------
[c:\tbolt\]
hbooteng.nb0 6991368ee2deaf182048a3ed9d3c0fcb
c:\tbolt>adb devices
* daemon not running. starting it now *
* daemon started successfully *
List of devices attached
HT126S005970 device
c:\tbolt>adb reboot bootloader
c:\tbolt>fastboot devices
HT126S005970 fastboot
c:\tbolt>fastboot oem mw 8d08ac54 1 31302E30
...
OKAY [ 0.006s]
finished. total time: 0.006s
c:\tbolt>fastboot flash hboot hbooteng.nb0
sending 'hboot' (1024 KB)...
OKAY [ 0.183s]
writing 'hboot'...
OKAY [ 0.219s]
finished. total time: 0.403s
c:\tbolt>
Putting current stock firmware and s-on back onto the phone
rename PG05IMG_no_hboot_2.11.605.19.zip to "PG05IMG",move to your sd card,and flash in hboot.
this is important! you must flash the PG05IMG_no_hboot_2.11.605.19.zip first
after successfully flashing that,you will be on unrooted gingerbread with an eng s-off bootloader. delete the PG05IMG file from your sd card. now place the PG05IMG_hboot_ONLY_2.11.605.19.zip on your sd card. check the md5. once youve verified it matches,you can rename PG05IMG and flash it.
again, only flash the hboot file after you have successfully flashed the rom.
now you are 100% stock on latest firmware. unrooted gingerbread 2.11.605.19 with *locked* 1.05.0000 s-on bootloader.
as always,be as cautious as possible doing hboot flashes,and follow directions in the [HOW TO] and some root terminology to flash these files if youre unfamiliar with hboot flashing.
*please start a new thread before attempting this if any part of this confuses you. without a bootloader your phone is a paperweight,so we want to help you prior to making any mistakes
*some advice for linux/ubuntu users on unrooting can be found in this thread,in post #233,special thanks to user lovebuntu
*last and not least the standard discalaimer. i take no credit for anything listed in this post,i am only responsible for placing the information here in one spot. please do your research before attempting to modify your phone,i take no responsibility if any of the methods listed above aid you in turning yout thunderbolt into an expensive paperweight.
__________________
The Delivery Guy
If someone has helped you,please click the THANKS button on that post.
Please post questions so others can benefit from the answers. donate to my device fund
Last edited by scotty85; November 15th, 2012 at 08:59 AM.
The Following 17 Users Say Thank You to scotty85 For This Useful Post:
claiming this post for "unroot with no usb" directions. i hope worm doesnt mind
this post is for unrooting without a working usb port. it assumes you are on some sort of rooted rom,so if youve allready run an RUU,youll need to re-root it before using this to remove revolutionarys or shadowmites permanent patched hboot.
2)download miniadb_tbolt2.zip from here: mini-adb_tbolt2.zip
md5: ef01f616471673d3eeb71b4cac4b8118
3)set up adb:
-extract miniadb_tbolt2.zip and place the unzipped folder onto the root of your C\ drive on your PC
-open a command window. windows 7,click on start bubble,type "command" in the search box. a small black window should open up
4)prepair your phone
-go to settings/display and set your time out to NEVER sleep. *this is important.
-launch the app
-touch the "turn on" button
5)connect and write new hboot
-change to your miniadb_tbolt2 directory by typing this command in your command window: cd c:\miniadb_tbolt2 this should change your command prompt to: "c:\miniadb_tbolt2>"
-enter the command on the screen of your phone to connect to adb over wireless. in my case it was : adb connect 192.168.1.68:5555 i have no idea if it will be different in other cases
enter the following commands,one at a time. all commands will be bold from this point forward. additional comments will be blue or red
adb devices should return the number you typed in above. in my case it was 192.168.1.68:5555
adb push busybox /data/local/
adb push hbooteng.nb0 /data/local/
adb shell watch your phone. you may have to allow superuser permissions. you may have to type SU to change your prompt from a $ to a # **you will need the # promt to continue**
chmod 777 /data/local/busybox
/data/local/busybox md5sum /data/local/hbooteng.nb0 checking the old eng hboot. this must output 6991368ee2deaf182048a3ed9d3c0fcb if it does not,STOP redownload,and start over.do not procede if it doesnt match
dd if=/data/local/hbooteng.nb0 of=/dev/block/mmcblk0p18 write the new hboot.
/data/local/busybox md5sum /dev/block/mmcblk0p18 confirm proper write. again: the ouput MUST be 6991368ee2deaf182048a3ed9d3c0fcb if it is not, STOP! do NOT reboot! doing so could brick your phone. seek help. try and repeat the 2 steps prior to this one.
assuming your md5 matched,reboot. you can reboot manually on your phone,or:
exit back ty your mini-adb_tbolt2> prompt
adb reboot this will break your wifi connectivity,but thats ok,your done.
after your phone reboots,you should be running the original,overwritable, eng 1.04.2000 hboot. verify by booting to hboot.
6)you can now follow the original directions in the first post: Putting current stock firmware and s-on back onto the phone you will need a card reader to transfer the PG05IMG to your sd card.
i have tested this and it worked for me,but i am radio s-off. if someone tests it,please provide feedback as to wether it worked or not
here is what your adb session should look like:
Code:
Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.
C:\Users\Scott>cd c:\tbolt
c:\tbolt>adb connect 192.168.1.68:5555
connected to 192.168.1.68:5555
c:\tbolt>adb devices
List of devices attached
192.168.1.68:5555 device
c:\tbolt>adb push busybox /data/local/
641 KB/s (1062992 bytes in 1.618s)
c:\tbolt>adb push hbooteng.nb0 /data/local/
620 KB/s (1048576 bytes in 1.649s)
c:\tbolt>adb shell
$ su
su
# chmod 777 /data/local/busybox
chmod 777 /data/local/busybox
# /data/local/busybox md5sum /data/local/hbooteng.nb0
/data/local/busybox md5sum /data/local/hbooteng.nb0
6991368ee2deaf182048a3ed9d3c0fcb /data/local/hbooteng.nb0
# dd if=/data/local/hbooteng.nb0 of=/dev/block/mmcblk0p18
dd if=/data/local/hbooteng.nb0 of=/dev/block/mmcblk0p18
2048+0 records in
2048+0 records out
1048576 bytes transferred in 0.415 secs (2526689 bytes/sec)
# /data/local/busybox md5sum /dev/block/mmcblk0p18
/data/local/busybox md5sum /dev/block/mmcblk0p18
6991368ee2deaf182048a3ed9d3c0fcb /dev/block/mmcblk0p18
# exit
exit
$ exit
exit
c:\tbolt>adb reboot
Last edited by scotty85; January 25th, 2012 at 06:10 AM.
rooted stock roms(flash in recovery.does not overwrite radios,recovery,or hboot. these are just like other roms you flash,but are pre-rooted stock firmware):
RUUs(these will return your radio,recovery,etc. to 100% factory. if rooted via revolutionary,permanent s-off will remain. if rooted "old skool" the 1.04.2000 eng hboot will be overwritten) *warning* flashing certain RUUs overtop of the 1.04.2000 eng hboot will cause a security warning.
if you need to return to stock,ask for help,or go to the Thunderbolt Root/Unroot Thread for themost current directions.
PG05IMG files(rename PG05IMG and flash in hboot)
*note: these will most likely need to be placed on a "gold card" to flash on a vzw branded phone
.exe files(these are firmware run on your pc with phone pluged in. download,open,and follow the onscreen prompts)
*noterolly not flashable a vzw branded phone 1.01.1520.0 leak FileFactory Premium
recently there was a need to unroot without a functional screen. i am including this here,as it will work if you have non functioning power or volume keys the only prerequesite is that you be able to get into "fastboot" somehow. this can be done several ways:
1)entering the adb command "adb reboot bootloader" as described in the directions below.
2)thru an app like quickboot
3) thru hboot in this manner:
-power off
-hold volume down
-hold power while continuing to hold volume down untill you get to hboot. press power to enter fastboot.
*note that #3 will not work if you have "fastboot" checked in settings/power.
*if you wish to make a backup with amon-ra recovery prior to/in conjunction with this procedure,see the directions here in post #217
so if you cant see anything on your screen,or have non-working buttons heres what you need to do to unroot:
download these 2 .zip files(from the original root/unroot thread):
then follow these directions(also from the original root/unroot thread): Setting up adb and removing the permanent hboot if youve never used adb before
1)if you no longer have the htc drivers that you installed when rooting with revolutionary,download them again from here on revolutionarys website.
2)next download this file (mirror)to somewhere convenient that youll be able to find it,like your desktop,or a "downloads" folder. it contains some adb tools.
3)the following directions were using windows 7 and chrome browser. other OS may be slightly different-the end result is you want unzipped,inside tbolt folder to be on the root of your C: drive.
-find the tbolt.zipdownload
-click on tbolt.zip download and open it.
-inside tbolt.zip,there is a folder labled tbolt. drag it to the root of C:. inside tbolt is the unpermanent hboot and some adb tools.
3a) once you have the "tbolt" folder on the root of your c/ drive,drag the entire PG05IMG_no_hboot_2.11.605.9.zip into it the tbolt folder,along with the tools and files that are allready there. dont unzip it.
3b) open the PG05IMG_hboot_ONLY_2.11.605.9 .zip file. if you have to,use 7 zip or the equivalent to extract it. inside there is an image: "hboot_7630_1.05.0000_110719.nb0" youll want to drag and drop it,or copy and paste it, into the tbolt folder,along with PG05blah blah,and all the tools.
4) charge your Thunderbolt to 100%
5)click on then "start" bubble in the lower left corner of your screen. type "command" in the search window and hit enter. this will open a small black command window. plug in your thunderbolt.
6)enter the following command(by typing or copy/paste):
Code:
cd c:\tbolt
you should see your promt in the window change to: c:\tbolt>
7)enter the follwing command:
Code:
adb devices
assuming your custom rom has usb debugging disabled by default,or you are able to enable usb debugging on a stock rom, then you should see your serial number.
enter the commands,1 at a time:
8)
Code:
md5sums PG05IMG_no_hboot_2.11.605.9.zip
it may take a minute,but it should output 3e189b6c85ea7da1e26e12a5cd7b1ab0
9)
Code:
md5sums hboot_7630_1.05.0000_110719.nb0
output should be e1e330356ec5c889a92be1b5ef6c853d
10)
Code:
adb reboot bootloader
11)
Code:
fastboot devices
should output serial number
11a)
Code:
fastboot erase cache
12)
Code:
fastboot oem rebootRUU
13)
Code:
fastboot devices
should output serial number. if not,youll have get to pull the battery and get back into fastboot somehow. if you have a no screen,but working buttons,power on into hboot via power/vol down. wait a couple minutes. press power to select fastboot. i know this will be nerveracking cause you cant see the screen if you have a screen and no buttons,you will have to let thephone boot,then use #1 or #2 above. do fastboot devices again. then go back to the 12) fastboot oem rebootRUU step,and continue. you need to get your serial number at step 13 before you can continue. otherwise youll just get a "<waiting for device>" error.
14)once youve gotten your serial number at step 13,flash the pg05 no hboot file with this command:
Code:
fastboot flash zip PG05IMG_no_hboot_2.11.605.9.zip
remember,for it to work,its important that PG05IMG_no_hboot_2.11.605.9.zip be in the tbolt folder along with adb,fastboot,etc.
it will do a bunch of stuff. when its done,youll see:
"OKAY [213.940s]
finished. total time: 287.032s"
if yo have a black screen and want a little peace of mind that the above worked and got you back to stock,you can enter fastboot getvar all with the phone in fastboot(right after step 19 in the procedure would be a good time to do it). this will list a bunch of variables that you can double check. this is completely optional and for peace of mind only. nothing wrong with not doing it. heres basically what you will see:
Code:
c:\tbolt>fastboot getvar all
INFOversion: 0.5
INFOversion-bootloader: 1.04.2000 <-this should say 1.05.0000
INFOversion-baseband: 1.48.00.0101w <-this should be 1.48.00.0930w
INFOversion-cpld: None
INFOversion-microp: /
INFOversion-main: 2.10.605.1 <-this should be 2.11.605.9
INFOserialno: HTxxxxxxxx
INFOimei: 355195000000017
INFOproduct: mecha
INFOplatform: HBOOT-7630
INFOmodelid: PG05*****
INFOcidnum: 11111111 <- this should be VZW_001
INFObattery-status: good
INFObattery-voltage: 4112mV
INFOpartition-layout: Generic
INFOsecurity: off <-this should say on
INFObuild-mode: ENG <-this should be SHIP
INFOboot-mode: FASTBOOT
INFOcommitno-bootloader: 9a13ccd2
INFOhbootpreupdate: 12
INFOgencheckpt: 0
INFOregion-id: not support
all: Done!
finished. total time: 0.023s
*note that this is my rooted phone,but it gives you the idea
Last edited by scotty85; February 10th, 2012 at 05:01 PM.
The Following 2 Users Say Thank You to scotty85 For This Useful Post:
the unroot method may change in the future,but for now i will leave it as is.
if you are running a permant patch hboot(revolutionary or shadowmite) and find yourself without a working touchscreen or usb port,fear not, you can still get back to full stock s-on.
download these files:
-the current "no_hboot" file from the OP.
-the current "hboot_only" file from the OP
-the downgrader hboot from here: www.mediafire.com/?koldajo4245f6v2
inside the zip,there is an md5 for the zip inside. make sure that you check it
once youve verified the integrity of the zip inside the download,the directions are simple:
1)rename the downgrader zip from inside the download to PG05IMG and flash in hboot. reboot
2)rename PG05IMG,and flash the "no_hboot" file. reboot
3)rename PG05IMG and flash the "hboot_only" file. you MUST FLASH IT LAST
*this is important*
Last edited by scotty85; July 8th, 2012 at 09:50 PM.
I fixed it. I removed all of the downloads and re-placed with new ones. Not sure what happened but im Rooted TB user now.
Thanks Scotty 85
I would like to know what are the first things to do now im rooted. I have the wireless tether app. Taking full advantage of that one.
Give me some other necessities if you have some great ones...
I fixed it. I removed all of the downloads and re-placed with new ones. Not sure what happened but im Rooted TB user now.
Thanks Scotty 85
I would like to know what are the first things to do now im rooted. I have the wireless tether app. Taking full advantage of that one.
Give me some other necessities if you have some great ones...
Titanium backup and root explorer are both good root apps.
I would suggest you look into flashing a rom to get rid of bloatware as well as getting to try out newer versions of sense or AOSP.
Awesome. Glad you got it working yeahhas suggestions are good,and you can find alot of info in the "how to" sticky thread at the top of the forum. Post up if you have any questions
Last and not least,your cigar and blazer are on the table
I would be extremely careful doing this. After flashing the old Eng 1.04.2000 hboot, the safest way to flash new firmware and hboot is to remove the hboot from the ruu,flash the ruu, then flash only the hboot second.
There is a 1.05.0000 hboot in he hboots,radios,and recoveries thread. Since I haven't uploaded a gingerbread "no hboot" ruu,the best thing to is this:
1)flash gb ruu with revolutionary hboot in place. This will safely get the ruu onto the phone first,since the revolutionary hboot will block the 1.05.0000 install.
2)follow the guide to unlock the permanent revolutionary hboot and install the old Eng 1.04.2000 hboot.
3)flash the 1.05.0000 hboot from the radios,recoveries,hboots thread linked above.
attempting to falsh the GB RUU in its entirety overtop of custom firmware may or may not result in a security warning. if that happens,youre stuck with the phone until a newer ruu comes out i personally would not risk it.
youd have been better off telling them that the phone still had mr2,IMO. then you could have used the unroot files above.
Last edited by scotty85; October 3rd, 2011 at 08:27 PM.
The Following User Says Thank You to scotty85 For This Useful Post:
I would be extremely careful doing this. After flashing the old Eng 1.04.2000 hboot, the safest way to flash new firmware and hboot is to remove the hboot from the ruu,flash the ruu, then flash only the hboot second.
There is a 1.05.0000 hboot in he hboots,radios,and recoveries thread. Since I haven't uploaded a gingerbread "no hboot" ruu,the best thing to is this:
1)flash gb ruu with revolutionary hboot in place. This will safely get the ruu onto the phone first,since the revolutionary hboot will block the 1.05.0000 install.
2)follow the guide to unlock the permanent revolutionary hboot and install the old Eng 1.04.2000 hboot.
3)flash the 1.05.0000 hboot from the radios,recoveries,hboots thread linked above.
attempting to falsh the GB RUU in its entirety overtop of custom firmware may or may not result in a security warning. if that happens,youre stuck with the phone until a newer ruu comes out i personally would not risk it.
youd have been better off telling them that the phone still had mr2,IMO. then you could have used the unroot files above.
Ill just put mr2 on it they wont care. As long as its not rooted im good.
I hear you. I only run AOSP so I am unaffected by the security bug but depending on how HTC handles this I could see it being a dealbreaker for people come time for their upgrade. Did you get MR2 running?
I hear you. I only run AOSP so I am unaffected by the security bug but depending on how HTC handles this I could see it being a dealbreaker for people come time for their upgrade. Did you get MR2 running?
Im on cm7 but its just the principle of the issue at hand. I talked to htc and they refuse to convey how they will rectify this. The charge will tide me over until the prime hits. I was going to get the vigor but forget it now.
No im waiting to s-on unroot until my charge gets here in yhe next few days. Im debating putting ginger ota on it or just stick to mr2 before i ship back. Not sure whats best as i told verizon i got the gingerbread update.
If you get MR2 stock on it with the stock bootloader then using the ruu to GB shouldn't be an issue. I think the security warning scotty said something about would be trying to use the RUU a s-on bootloader and a custom rom
Im on cm7 but its just the principle of the issue at hand. I talked to htc and they refuse to convey how they will rectify this. The charge will tide me over until the prime hits. I was going to get the vigor but forget it now.
IMO this is a little childish. i do not believe htc has put files on intentionally to be exploited and our data manipulated. while this is a serious issue, what makes you think there are no such files in the charge firmware? just because no ones found them yet,doesnt mean they arent there. i like htc hardware. how they handle this situation will either passify me,or make me extremely disapointed. but that wont change the fact that i like the hardware. im just going to root whatever device i get anyway,it doesnt matter really,what files mfgrs sneek into their stock roms as ill never use them.
Quote:
Originally Posted by Yeahha
If you get MR2 stock on it with the stock bootloader then using the ruu to GB shouldn't be an issue. I think the security warning scotty said something about would be trying to use the RUU a s-on bootloader and a custom rom
that is correct,sir,once the phone is mr2 s-on stock,flashing the GB ruu is perfectly safe,it just involes alot more hboot flashing than what i recceomended above. just double and triple check md5s and it should be fine.
the prollem is thw way the hboot checks the firmware before flashing the rest of the RUU. if your on cm7,and flash certain RUUs(mr1 for example,not 100%sure on mr2 or GB),the hboot flashes first,logically,as it flashes the rest of the firmware. after the hboot flashes it looks at cm7 and may say "WTF!" and throw up the security warning. or it may not. we dont know until someone tries it and reports.
thats why the 100% safest way to flash an RUU whose outcome you dont know is to always flash the ruu first,hboot second.
So i downgrade to mr2 then flash the stock s-on hboot then i can flash the GB ota without removing the new hboot from the zip? Did i understand this correctly?
Also scotty alot of people got replacement phones today over this. Its not childish in any way.
So i downgrade to mr2 then flash the stock s-on hboot then i can flash the GB ota without removing the new hboot from the zip? Did i understand this correctly?
yes. follow the guide above. flash no hbootfirst,hboot only second. then you can flash the entire 2.11.605.3 ruu if you wish.
Quote:
Originally Posted by fixxxer1022
Also scotty alot of people got replacement phones today over this. Its not childish in any way.
doesnt mean alot of people arent childish. if alot of people jumped off a bridge,would you do it?
i agree its a big deal. but we dont even know how they will handle it,why they did it inthe first place. the hardware is the same now as it was before and you and most of these other folks were happy with it. you were running cm7 and not even in any danger as those files arent there.
"lots of people" are using it as an excuse to get new phones.
just my opinion.
The Following User Says Thank You to scotty85 For This Useful Post:
So i downgrade to mr2 then flash the stock s-on hboot then i can flash the GB ota without removing the new hboot from the zip? Did i understand this correctly?
Yeah if you get stock MR2 on there you can RUU the GB OTA without any worries, given you have the s-on hboot and everything else stock.
Quote:
Originally Posted by fixxxer1022
Also scotty alot of people got replacement phones today over this. Its not childish in any way.
I saw the posts at rootz about it, I don't run sense so it won't affect me but I can see why people wouldn't want to have to worry about it and HTC hasn't really address it at all I really expected more out of them.
Yeah if you get stock MR2 on there you can RUU the GB OTA without any worries, given you have the s-on hboot and every
I saw the posts at rootz about it, I don't run sense so it won't affect me but I can see why people wouldn't want to have to worry about it and HTC hasn't really address it at all I really expected more out of them.
Good luck man, it shouldn't be that difficult to root the charge, just not a solution like revolutionary but if you rooted with the old manual process then it shouldn't be any issue. Let us know how it goes.
Good luck man, it shouldn't be that difficult to root the charge, just not a solution like revolutionary but if you rooted with the old manual process then it shouldn't be any issue. Let us know how it goes.
I did root with revolutionary on my tbolt, sorry if i wasnt clear on that. Or were you talking about the charge?
I was talking about the charge, it looks like the root process is a little more difficult than revolutionary but most things are now. Yet it doesn't look too daunting, a lot like the older process we had to root the bolt.
Question from a root noob, is it possible to root after the GB is applied? I have the craptastic GB update applied. I have a service ticket open with Verizon and can get a replacement without GB.
stupid question but will z4root or gingerbreak work on the tbolt as a temp solution without having to go s-off? now that im s-on i might want to temp root until my charge gets here.
wow, you guys sure have put alot of time into this...and even with the step by step instructions i'm lost. my son helped me root my hero before i switched to the tb but he's recently joined the air force and is in bootcamp with no tie to the outside world for a while. argh! i'll keep looking at it and hope to eventually get rooted.
wow, you guys sure have put alot of time into this...and even with the step by step instructions i'm lost. my son helped me root my hero before i switched to the tb but he's recently joined the air force and is in bootcamp with no tie to the outside world for a while. argh! i'll keep looking at it and hope to eventually get rooted.
With revolutionary it is pretty easy to root, the explanations may seem harder than they actually are. What parts of the process are causing issues for you
With revolutionary it is pretty easy to root, the explanations may seem harder than they actually are. What parts of the process are causing issues for you
nothing yet...i'm afraid of starting, getting hung up, then having no phone. i will jump into it this weekend. if i get stuck i'll know someone is standing by to assist.
No problem, I like helping here. If you were to post here with an issue and not get a response quick enough (if you have a problem in the middle of rooting) then you can also use IRC to get answers
No problem, I like helping here. If you were to post here with an issue and not get a response quick enough (if you have a problem in the middle of rooting) then you can also use IRC to get answers
I don't think you should have any real issues with revolutionary, if you come into any post them in this thread, if you don't get a reply (I am rather inactive on the weekends but other people are more active) feel free to PM scotty85, WormDoes, or me, You can also try the IRC I linked as well but I promise you will get help if you have any issues.
the short answer is yes,if you want to get rid of the su app and binary by flashing an ruu,then you will lose data.
how did you root,and why do you want to unroot?
if you just want to recieve an OTA,then you can flash a stock mr2 rom,flash the stock mr2 recovery,and thats all you need to do.
if you need to return for warranty purposes,then thats a different story. but in that case it wont really matter if you lose your data or not
Thanks for the reply...
I was going to try some different ROMS...I seen there was a ROM that didn't wipe your data...it was Shifts3ns3 by Droidth3ory...but can't seem to find the ROM...the link is dead?...
So I decided to say the heck with it and un-root so I would be able to receive the OTA updates...but didn't realize un-rooting would cause the data lose
Sorry...kinda of a noob here...
Anyway...I started the un-root process and have the Revolutionary gone in hboot but have s-off...
Any recommendations what to do now?...
I really don't want to lose my data and rebuild my phone
I was going to try some different ROMS...I seen there was a ROM that didn't wipe your data...it was Shifts3ns3 by Droidth3ory...but can't seem to find the ROM...the link is dead?...
So I decided to say the heck with it and un-root so I would be able to receive the OTA updates...but didn't realize un-rooting would cause the data lose
Sorry...kinda of a noob here...
Anyway...I started the un-root process and have the Revolutionary gone in hboot but have s-off...
Any recommendations what to do now?...
I really don't want to lose my data and rebuild my phone
Thanks again...
are you on mr2 now? (1.70.605.7) double check your firmware version,and if its that,you should be safe to go ahead and flash the mr2 recovery,then the "PG05IMG_hboot_only_1.04.0000" file. all your data will be intact,and youll be stock except for the su app and binary. just delete the superuser app and you can consider yourself unrooted.
the recovery link can be found on the thread linked in the 2nd post. you willl want to use:
MR2: http://www.multiupload.com/PB5F6G7C8Q
md5: a3320797390e3d746a67fda915854b16
so to recap:
1)flash stock recovery
2)flash stock hboot
3)delete superuser app
unrooted
Last edited by scotty85; October 9th, 2011 at 11:37 AM.
are you on mr2 now? (1.70.605.7) double check your firmware version,and if its that,you should be safe to go ahead and flash the mr2 recovery,then the "PG05IMG_hboot_only_1.04.0000" file. all your data will be intact,and youll be stock except for the su app and binary. just delete the superuser app and you can consider yourself unrooted.
I assume I am?...I have the latest OTA that was pulled...
Sorry...seen where you updated your post...
So what files do I need to un-root without losing data...
I have the one you posted...now what?...
Sorry for having to hold my hand thru this...
Nevermind...I think I got it...I flashed the two files and have s-on...so i'm good to go with any OTA's correct?...
And one last thing...for instance...when I received the OTA that got pulled when in a call I occasionally hear a "chirp" sound...is there anyway I can flash a different radio now?...
Last edited by jtb199; October 9th, 2011 at 12:55 PM.
I assume I am?...I have the latest OTA that was pulled...
whaaaa
Quote:
Originally Posted by jtb199
Nevermind...I think I got it...I flashed the two files and have s-on...so i'm good to go with any OTA's correct?...
given the above statement,i have no idea. since you were in too big of a hurry to wait for an answer,or double check your firmware number,you have inadvertantly flashed froyos stock hboot and recovery with gingerbread firmware. i *think* youre ok? but like i said,i have no idea for sure. i cannot reccomend you stay this way without having tested the situation myself,or knowing more about how the recoverys jive with the rest of the firmware.
*prolly* nothing bad will happen,but its quite possible to end up with anything from a failed update to a brick when the OTA hits.
next time i reccomend you not be so anxious when messing with something as important as your bootloader and stock recovery.
Quote:
Originally Posted by jtb199
And one last thing...for instance...when I received the OTA that got pulled when in a call I occasionally hear a "chirp" sound...is there anyway I can flash a different radio now?...
no. not with s-on,and its one of the big reasons that you should have left your revolutionary hboot alone. it will not affect your ability to recive OTAs(ive done it),and it leaves the door open for you to have control over things like this when you want it.
ideally,you should have waited for me to get home this eveing(ive been out of town),so i could pull a recovery from the 2.11.605.3 RUU and upload it for you. you could have flashed it,deleted superuser,and been good to go.
at this point,id reccomend that you reroot with revolutionary. wait for a recovery that matches your firmware(later this eveing),then flash it. the 1.05.0000 hboot is in the hboots + recoveries thread allready,if you really feel you need to get back to s-on,but id pretty strongly reccomend not to flash your hboot unneccesarily,and leave the revolutionary one in place.
wether or not your still interested,th3ory roms are here: HTC Thunderbolt Developer Forum you will have to register to download. sorry i didnt get you this information earlier,its been a busy few days and i havent been on the forum as much.
edit: here is the recovery that matches your 2.11.605.3 firmware(double check settings/about phone before flashing):
given the above statement,i have no idea. since you were in too big of a hurry to wait for an answer,or double check your firmware number,you have inadvertantly flashed froyos stock hboot and recovery with gingerbread firmware. i *think* youre ok? but like i said,i have no idea for sure. i cannot reccomend you stay this way without having tested the situation myself,or knowing more about how the recoverys jive with the rest of the firmware.
*prolly* nothing bad will happen,but its quite possible to end up with anything from a failed update to a brick when the OTA hits.
next time i reccomend you not be so anxious when messing with something as important as your bootloader and stock recovery.
no. not with s-on,and its one of the big reasons that you should have left your revolutionary hboot alone. it will not affect your ability to recive OTAs(ive done it),and it leaves the door open for you to have control over things like this when you want it.
ideally,you should have waited for me to get home this eveing(ive been out of town),so i could pull a recovery from the 2.11.605.3 RUU and upload it for you. you could have flashed it,deleted superuser,and been good to go.
at this point,id reccomend that you reroot with revolutionary. wait for a recovery that matches your firmware(later this eveing),then flash it. the 1.05.0000 hboot is in the hboots + recoveries thread allready,if you really feel you need to get back to s-on,but id pretty strongly reccomend not to flash your hboot unneccesarily,and leave the revolutionary one in place.
wether or not your still interested,th3ory roms are here: HTC Thunderbolt Developer Forum you will have to register to download. sorry i didnt get you this information earlier,its been a busy few days and i havent been on the forum as much.
edit: here is the recovery that matches your 2.11.605.3 firmware(double check settings/about phone before flashing):
Don't know if you need anymore inf but that's what I got...
If you need anymore info please let me know...
Should I go ahead and flash the recovery you posted?...
Again...thank you...
you are quite welcome,im glad to help.i didnt mean to pick on you,but i wanted to get the point across for folks who read this in the future.
yes,id reccomend to flash the recovery i just posted. it matches your firmware version above
you will have to reroot with revolutionary first,as the s-on hboot will not let you flash the stock recovery. sounds a lil ironic,i know,but just becasue its stock doesnt mean the s-on will flash it. s-on only flashes "signed and approved by htc" files.