• After 15+ years, we've made a big change: Android Forums is now Early Bird Club. Learn more here.

[GUIDE] How to root the ZTE Score M

PlayfulGod

Extreme Android User
Jan 28, 2011
8,099
4,929
NW Georgia
unleashedprepaids.com
This guide will explain how to root the ZTE Score M with the documented backdoor ZTE has put on the Score M. This method will not work once ZTE pushes out the patch to remove it which ZTE has stated they will do soon.

So now on the what needs to be done.


Requirements:


  • Need adb working and recognising your phone.
  • Needed drivers for your phone installed. (Windows, listed below)




Instructions (the following will need to be done from cmd on windows or a terminal on linux:


  1. Download zip (listed below)
  2. unzip zip
  3. navigate to the unzipped dir in cmd
  4. run push.bat (windows) or push.sh (linux) should be able to dbl click it to run too.:
    Code:
    ./push.bat or ./push.sh
  5. type:
    Code:
    adb shell
    or
    Code:
    ./adb shell
  6. type:
    Code:
    /system/bin/sync_agent ztex1609523
  7. type:
    Code:
    mount -o remount,rw -t yaffs2 /dev/block/mtdblock2 /system
  8. type:
    Code:
    cd /data/local/tmp
  9. type:
    Code:
    busybox cp su /system/xbin/su
  10. type:
    Code:
    busybox cp Superuser.apk /system/app/Superuser.apk
  11. type:
    Code:
    busybox cp busybox /system/xbin/busybox
  12. type:
    Code:
    chmod 755 /system/xbin/busybox
  13. type:
    Code:
    chown root.shell /system/xbin/su
  14. type:
    Code:
    chmod 6755 /system/xbin/su
  15. type:
    Code:
    ln -s /system/xbin/su /system/bin/su
  16. type:
    Code:
    /system/xbin/busybox --install -s /system/xbin
  17. type:
    Code:
    exit
  18. then from term or cmd type:
    Code:
    adb shell "rm /data/local/tmp/*"
    or
    Code:
    ./adb shell "rm /data/local/tmp/*"


Download:



 
in both linux and windows, right click the script n make it executable ;)

Other than that I had no problems running the cmds as posted. It cant be explained any better than it is ;)

might need to add ./ the the adb shell cmd like so
Code:
./adb shell
And a video wont help if you cant follow the writing instructions, not being mean, just stating facts. ;)


Note: the push script will error copying remount, no biggie I didnt include it ;) and then again on rm /data/local/tmp/ which you can do from cmd like so:
Code:
 adb shell "rm /data/local/tmp/*"
or

Code:
 ./adb shell "rm /data/local/tmp/*"
I edited the OP for this one. ;)
 
Upvote 0
Untitled.jpg

yo.jpg

This is wat i get but i cant even open push with double clicking it just closes right away
 
Upvote 0
Upvote 0
Okay... I copied the remount file from the original zip file from the first thread... and that got me past the first error. I guess the remount file wasn't included in the second zip file.

Now, I opened a command prompt and typed adb shell and got to the 3rd command, but it says

cp: not found

This happens for both su and superuser files...

adb does find my phone and seems to be working, as I can type adb devices and see my phone listed.

<sigh>

I even tried creating those directories on the sd-card and manually copying the files over but when I went to chmod it still said no such file or directory so something still ain't right with this... Are we all working with the correct paths here?? Maybe PG's stuff is different from ours or something, but for it to not be working with this many people - it's just not us.....Satan spawned this phone...
 
Upvote 0
View attachment 32519

View attachment 32520

I had to remove the $ from each line in the batch file. Windows doesn't recognize lines starting with a $ to my knowledge. I removed them and got further...

Mine got to:

C:\phone\>adb push remount /data/local/tmp/remount
cannot start 'remount': No such file or directory
yea the $ is my bad in the .bat, you can remove the remount line altogether too since you're editing anyway. ;)

changing to executable does not work in windows. PG what os are you using?
I'm in linux. try the edits corbryant did along with remove the remount line. I will look at both scripts again, but I had no problems using the cp cmd in adb shell esp once at the # prompt.
 
Upvote 0
i have had the same exact problems as corbryant. the original zip from the other thread led me to the # sign, and i could not type into cmd. on this one tried removing $ signs got further, same as corbryant. the batch file needs to be redone. i am desperate for root, and still no luck.

if this is still too hard for you to do manually then i have two options for ya.

1) give up
2) you can click the link in my sig, better had hope PG is around because if im going to walk you through how to root the device step by step or remote in and do it for ya then im gunna charge you for it

this is the two choices i extend to anyone who either cant follow his instructions or open up the batch script and run the commands manually.
 
  • Like
Reactions: PlayfulGod
Upvote 0
Welp, downloaded the new zip and got started. Got allllll the way to the last 3 commands, and got an error... <sigh>

$ /system/xbin/busybox --install -s /system/xbin
/system/xbin/busybox --install -s /system/xbin
link_image[1934]: 5571 missing essential tablesCANNOT LINK EXECUTABLE
$

Is this something happening as a result of all the crap I've already tried throughout all of this?
 
Upvote 0

BEST TECH IN 2023

We've been tracking upcoming products and ranking the best tech since 2007. Thanks for trusting our opinion: we get rewarded through affiliate links that earn us a commission and we invite you to learn more about us.

Smartphones