Guide to permaroot, s=off AND s=on!!!!!

Search This thread

grankin01

Senior Member
Feb 9, 2008
973
658
Georgetown, KY
Ok....So I have two identical phones, bought the same day same store. Both have been re-flashed with the stock image before trying any of this.

First phone: Worked great following the "force upgrade and root" and is now S-OFF and upgraded.

Second phone: Nothing works :(

I flashed the stripped PD15IMG.zip from the "force upgrade" that nearly breaks WiFi and cell signal and then came to this thread for the S-OFF steps that I ran on my working phone. Tried the first method with sync (and waiting 30-60m after sync). No luck. Tried the alternative method with rage, no luck. Tried both methods two or three times back to back, no luck.

All was done with Fastboot off, and there are no errors from any of the scripts (my output matches the guide here).

HBOOT is


Which matches my phone this all worked on identically. Any ideas? The working phone is mine and the one I'm having problems with is my wife's, so it's now in a half-state of working after the stripped PD15IMG.zip flash :(

hboot is 0.85.2007 and s is still on???? That is an engineering hboot and should have s=off by default.

I just bought this phone yesterday morning I paid cash for the white one and then I installed the software update to 2.2.1 default was 2.2. and went directly to this forum I have been following mytouch 4g developments since the phone came out.

Your output looks exactly as it should. :) Try waiting the 30-60m and rebooting then. It sounds like you have a delay built into the driver for the cache for whatever reason.

so to root and get s off i need the 2.2.1 update??

No, you can use the force upgrade method that is in this forum.

Alternate method worked out on my buds mt4g.. got him all rom'd,root'd and oc'd along with clockwork!!!

Thanks for your work!!

Glad it finally worked for you man!:D
 

LJGarcia87

New member
Nov 21, 2010
2
0
Thanks for the quick and accurate responses. Titanium backup worked like a charm. Thanks for the heads up, you guys rock.
 

Kline

Senior Member
Mar 5, 2009
250
14
Illinois
hboot is 0.85.2007 and s is still on???? That is an engineering hboot and should have s=off by default.
Yes. That is the correct hboot her phone has. I even held both phones side by side to compare, S-ON vs S-OFF is the only difference.

I tried to get sneaky and made a nandroid backup of my (working, rooted) phone and was trying to use fastboot to flash all the pieces back -- kept getting permission denied. So, I then fastbooted into clockwork and tried the nandroid restore directly from the phone. Boot flashed ok, but it failed on /system and ended there. Rebooted the phone and it's still partly working (borked wifi, in/out cell signal from the stripped PD15IMG.zip) and had to leave for work then.

edit: Talked my wife thru how to get into hboot and had her take a photo of the screen with her camera. Attached as proof I'm not crazy :)
 

Attachments

  • IMG_0009.JPG
    IMG_0009.JPG
    22.8 KB · Views: 94
Last edited:

grankin01

Senior Member
Feb 9, 2008
973
658
Georgetown, KY
Yes. That is the correct hboot her phone has. I even held both phones side by side to compare, S-ON vs S-OFF is the only difference.

I tried to get sneaky and made a nandroid backup of my (working, rooted) phone and was trying to use fastboot to flash all the pieces back -- kept getting permission denied. So, I then fastbooted into clockwork and tried the nandroid restore directly from the phone. Boot flashed ok, but it failed on /system and ended there. Rebooted the phone and it's still partly working (borked wifi, in/out cell signal from the stripped PD15IMG.zip) and had to leave for work then.

edit: Talked my wife thru how to get into hboot and had her take a photo of the screen with her camera. Attached as proof I'm not crazy :)

Ok, umm wow!!! That's the first time I have ever seen an engineering bootloader have s=on lol. (not to laugh at your pain:)). Here try this:

1. Flash the file from this link: http://www.megaupload.com/?d=YUYEMJNM

2. After it finishes run the alternative rage method only.

3. Please update thread with results. I think the Twilight Zone (not the one with the glittery vampires) just got a little jealous.:D

With s=on a downgrade of the firmware is impossible so it won't hurt anything. All it will do is take hboot back to 0.86.0000.
 
Last edited:

Kline

Senior Member
Mar 5, 2009
250
14
Illinois
Ok, umm wow!!! That's the first time I have ever seen an engineering bootloader have s=on lol. (not to laugh at your pain:)). Here try this:

1. Flash the file from this link: http://www.megaupload.com/?d=YUYEMJNM

2. After it finishes run the alternative rage method only.

3. Please update thread with results. I think the Twilight Zone (not the one with the glittery vampires) just got a little jealous.:D

With s=on a downgrade of the firmware is impossible so it won't hurt anything. All it will do is take hboot back to 0.86.0000.

Is that the same stock pre-OTA firmware? I initially flashed her phone with that to downgrade her a week ago after we had mistakenly deleted (rather than frozen) some system apps. I'll give your suggestions a go when I get home in the morning (12 hrs, long shift lol) :)

edit: Got my wife on google talk messenger and she's brave enough to try this on her own...Will walk her thru it lol
 
Last edited:

grankin01

Senior Member
Feb 9, 2008
973
658
Georgetown, KY
Is that the same stock pre-OTA firmware? I initially flashed her phone with that to downgrade her a week ago after we had mistakenly deleted (rather than frozen) some system apps. I'll give your suggestions a go when I get home in the morning (12 hrs, long shift lol) :)

edit: Got my wife on google talk messenger and she's brave enough to try this on her own...Will walk her thru it lol

Yeah, if you are talking about the one from its own thread and not from the force upgrade thread. I'm honestly not sure what happened here but I am hoping that something just got confused when you tried s=off the first time and flashing this and "starting over" will make it work.
 

grankin01

Senior Member
Feb 9, 2008
973
658
Georgetown, KY
i have s off but i cant get root to stick....im using the new visionary r14 is that ok??

This was posted about 4 pages back. Hope it helps. I haven't used r14 yet.

Ok got it to work. I had to do the permroot option in visionary instead of temp root, with the new visionary r14 you gotta temp root first then follow the terminal method on the op then after you get s-off if you're still getting denied by superuser you have to go into visionary and do the "permroot now" option it will reboot your phone for you then after that you should be permrooted.
 

Kline

Senior Member
Mar 5, 2009
250
14
Illinois
Yeah, if you are talking about the one from its own thread and not from the force upgrade thread. I'm honestly not sure what happened here but I am hoping that something just got confused when you tried s=off the first time and flashing this and "starting over" will make it work.

Re-flashed stock. Re-flashed the partial 2.2.1 files from the force upgrade thread required to run the root scripts. Ran the rage root method. Still S-ON :(

edit: Oh, my wife said it's also back to HBOOT 0.85.2007 again, too, but still S-OFF :(
 
Last edited:

Zenijourr

Member
Nov 16, 2010
40
0
i have s off but i cant get root to stick....im using the new visionary r14 is that ok??
I had your same prob dude, if your s-off then just run visionary and choose the "permroot" option instead of "temproot" it should restart your phone and root should stick. Also make sure your fast boot option is disabled before you do it. Try and tell me if it works.


Sent from my HTC Glacier using XDA App
 

em2drvr03

Senior Member
Aug 11, 2009
750
111
I had your same prob dude, if your s-off then just run visionary and choose the "permroot" option instead of "temproot" it should restart your phone and root should stick. Also make sure your fast boot option is disabled before you do it. Try and tell me if it works.


Sent from my HTC Glacier using XDA App

i went to a older version of visionary and it worked just fine...but now i now i can do that on my girlfriends mytouch....thanks for the quick responses guy....i love this place...again thank u
 

grankin01

Senior Member
Feb 9, 2008
973
658
Georgetown, KY
Re-flashed stock. Re-flashed the partial 2.2.1 files from the force upgrade thread required to run the root scripts. Ran the rage root method. Still S-ON :(

edit: Oh, my wife said it's also back to HBOOT 0.85.2007 again, too, but still S-OFF :(

Try it just by just re-flashing the image and running the rage method. Don't use any of the steps from the force upgrade thread and see what happens.
 

ripgut

Senior Member
Aug 25, 2009
243
19
Kennewick, WA
Ok, so my new(er) MT4G has received the OTA to Android 2.2.1, and my software version is currently 1.17.531.2

my Fastboot info:

GLACIER PVT SHIP S-ON
HBOOT-0.86.0000
MICROP-0429
RADIO-26.03.02.26_M
eMMC-boot
Sep 27 2010,11:12:59

What do i need to do exactly, in super layman's terms, or baby step by baby step, please..

I want this thing rooted, because i cant stand this Espresso interface and will be much closer to being able to flash a Cyanogen ROM, if it's dev'd.
 

Matt105

Senior Member
Oct 3, 2009
163
9
I followed the instructions for the terminal emulator root process and I now have s-off all the time, even after multiple reboots. But Titanium won't load for me. It says it can't get root access and make sure I have busybox (what is busybox?). Thanks.

Edit: Do I need to do "permroot" in visionary? I did temproot after I ran the script in terminal. Maybe that's my problem...?
 
Last edited:

Zenijourr

Member
Nov 16, 2010
40
0
I followed the instructions for the terminal emulator root process and I now have s-off all the time, even after multiple reboots. But Titanium won't load for me. It says it can't get root access and make sure I have busybox (what is busybox?). Thanks.

Edit: Do I need to do "permroot" in visionary? I did temproot after I ran the script in terminal. Maybe that's my problem...?
Yes, on visionary r14 after you temproot and get s-off you need to then do permroot option in visionary and your root will stick


Sent from my HTC Glacier using XDA App
 

ripgut

Senior Member
Aug 25, 2009
243
19
Kennewick, WA
Ok, im rooted, super user working and everything is good, phew. I guess i just had to wait for the OTA to 2.2.1 for the guide to work as posted, my apologies and thanks for all the help provided thus far, this is a great community and will always have my support
 

Top Liked Posts

  • There are no posts matching your filters.
  • 19
    First of all, unforgiven512 deserves most of the credit for coming up with the initial tutorial for perm root and s=off for the new HTC devices. Also, thanks to adwinp for the instructions on hexeditting the kernel module to make it work with the MT4G.

    This was a collaborative #g2root effort, primarily involving scotty2, tmzt, IntuitiveNipple but also many others!

    Ok, so the usual disclaimers go here:

    I am not responsible for your bricked phone or the ignorance that may or may not have caused it based on the fact that you CHOSE to follow these steps. Read through the forums and LEARN before you attempt to flash any device. You have been warned.

    This method only works for those devices who have already received their OTA update!!!

    Now that that is out of the way here we go:

    First make sure you have visionary installed!

    Root.rar (all files plus a script to make things a little easier. :D)
    http://www.mediafire.com/?flit79p2y069bb3
    md5sum: 46361b0cc8652d88688c0ab66d44950b

    1. Download the root.rar file and unzip it to /sdcard on your device.

    2. Run VISIONary to gain temp root.

    Now I am going to run two different sets of instructions (you'll understand why in a minute):


    Terminal Emulator Method
    3a. Start terminal emulator up on your device.(I prefer this method b/c you can see the output.)

    a. type "su" + enter to gain root privileges.

    b. Type "cd /sdcard/root" + enter.

    c. Type "sh root.sh" + enter.

    d. Follow the on screen prompts.


    File Explorer Method
    3b. Start up root explorer, sufbs, or some other type of file browser with root privileges.

    a. Navigate to /sdcard/root on your device.

    b. Click on root.sh and allow it to run. Some file browsers ask you if you want to or not.

    c. Now wait about 18 to 20 seconds and restart your device into the bootloader to check if S=off is displayed.

    4. Start the device back up.

    5. Run visionary again and reboot again. This will make root stick.

    You can now uninstall visionary and enjoy permaroot. :D

    Alternative Root Process

    First, uninstall visionary and superuser and restart your device to wipe out temp root.

    Second, download MT4G Modperm.zip and unzip its contents to your sdk tools directory.

    MT4G Modperm.zip: http://www.mediafire.com/?eaw0q0zjc7rrrwh
    MD5Sum: 3ea4a7a6ddee711d12f7350ce60fae33

    Then:

    Windows Users:
    1a. Using Explorer navigate to the root of your sdk. Hold shift and right mouse click on the tools folder. Select "Open command window here".

    2a. Type "adbbat" + enter. Wait till the batch file finishes.

    Linux Users:
    1b. Using file browser of your choice (or terminal) navigate to the tools folder of your sdk and double click on adbbat.sh (type sh adbbat.sh if you are using terminal). Credit for adbbat.sh goes to slhpss.

    2. Disconnect your phone from the PC.

    3. Open terminal emulator on the phone and type "/data/local/rage" + enter. Wait for "Forked XXXXXXXX children" to appear and then close the terminal.

    4. Start terminal back up. It should force close.

    5. Start terminal back up, again. This time it should stay open and you should have a "#" prompt instead of a "$" prompt. Then type "/data/local/temp.sh.

    6. When the script finishes run /data/local/rage again and sit tight. The phone should start acting weird and do a soft reboot. Then right after everything loads it should do a hard reboot. After the hard reboot reboot and check S.(If it doesn't do the two reboots just reboot into hboot yourself after rage finishes with the "forked xxxxxxxx children" message.

    7. Enjoy root!

    If you still have problems getting su to work after this uninstall visionary, shutdown, pull battery, and restart. Should work after that. Props to PolishDude for figuring that one out.

    If you have tried EVERYTHING and still cannot get it to work for through the process and wait 30 minutes to an hour. The driver might have a cache delay write and you may need to give it some time to allow the sync command to work. This has worked for one other person (mfouco). BTW, this was figured out by coachmai. Props man!

    If su doesn't stick, flash again! You can't overroot it! :D

    Process for turning S back on

    Download this file and unzip it to /sdcard on your device.

    unroot.rar
    http://www.mediafire.com/?12oi5elu7v2y8og
    md5sum: aad4e64126cf8d92d7e8b5abb48fdadd

    Terminal Emulator Method
    1. Open up terminal editor on your device.(I prefer this method b/c you can see the output.)

    a. Type "su" + enter to gain root privileges.

    b. Type "cd /sdcard/unroot" + enter.

    c. Type "sh unroot.sh" + enter.

    d. Follow the onscreen prompts.



    File Explorer Method
    2. Open root explorer, sufbs, or some other file browser with root access.

    a. Navigate to /sdcard/unroot.

    b. Click on unroot.sh and allow it to run. Some file browsers ask permission before they execute scripts.

    c. Wait 18 to 20 seconds and reboot your phone into the bootloader to check if S=on.

    You now have S=ON again.

    Since we opened up the nand to writes you should still retain persistent root privileges.

    Hope this makes it all easier for you.
    Cheers --grankin01 :D

    For everyone that is have trouble writing to the protected areas of the system after following the rooting procedures.

    Reboot into Clockwork recovery and choose the mounts and storage option. From there choose mount system (or whichever protected directory you want access to) and click the trackpad. When unmount system shows you have rw access to the /system directory and all of its subs.
    4
    This is so frustrating... I can't get an installable version of the visionary r11, I've tried Modaco's site and several links from members in this thread and all of them are not installable through Astro. And through Linda file manager, it gives me parsing errors. I'v checked if it has a .zip on the ending but it doesn't. All of them are .apk files but yet aren't installing. I'm dumbfounded....

    Any help would be greatly appreciated. :)

    Here is three versions of visionary. One is run-on-boot, one is not and one is the plus version. Enjoy :D.
    2
    I dont know what i'm doing wrong but it wont let me flash pd15img.zip with clockwork its saying abort bad file or something other....urrr what am I doing wrong?

    Sorry, reboot into hboot and it will check the package and ask you if you want to apply the update.
    1
    Great I just saw this on PaulObrians twitter so this is great news.

    Mackster248 Macky Evangelista
    @PaulOBrien will your visionary app tomorrow be able to root the mytouch 4g as well? Since it roots the desire hd.

    Pual's answer:

    PaulOBrien Paul O'Brien
    @
    @Mackster248 Possibly...

    Question, Did you recompile the kernel for the MT4G yourself? A big thanks to everyone. We all need to dig in out pockets to these developers and not forget them.
    1
    Guys might be a stupid question but how do you get into the hboot on mytouch 4g. I thought it was the power button and camera but that doesn't seem to work.

    Turn off "Fast Boot" under Applications then power on holding Power + Vol Down