Attend XDA's Second Annual Developer Conference, XDA:DevCon 2014!
5,810,466 Members 50,302 Now Online
XDA Developers Android and Mobile Development Forum

[Guide] TEMP-ROOT ANY Gingerbread build and downgrade to 1.32.405.6 [Updated July 30]

Tip us?
 
CuBz90
Old
(Last edited by CuBz90; 26th September 2011 at 02:49 PM.)
#1  
CuBz90's Avatar
Senior Member - OP
Thanks Meter 286
Posts: 1,038
Join Date: Sep 2010
Location: Manchester
Default [Guide] TEMP-ROOT ANY Gingerbread build and downgrade to 1.32.405.6 [Updated July 30]

I CAN NO LONGER PROVIDE SUPPORT, NOR UPDATE THIS POST ANY MORE, AS I NO LONGER HAVE TIME DUE TO MOST OF MY TIME BEING SPENT AT WORK! SORRY
If you need help that would only take me a few seconds to answer, contact me on twitter @cubz90


Here is a guide to Temproot and downgrade any HTC Desire HD Gingerbread Build
This method has been confirmed working for all DHD Gingerbread builds!


Please could you post the Exploit address when successfully rooted with fre3vo. Thanks

Thanks go to:
agrabren
aswethinkweiz
JSLEnterprises

Please make sure you have the phone's drivers installed on the computer you are using, otherwise this will not work.




Temp Root:

1. Enable USB debugging on your phone and place your phone on CHARGE ONLY (If this doesn't work, try choosing 'HTC Sync' when connecting USB)
2. Download the DHD Downgrade folder and extract it to the root of your hard drive (usually this is the "C:\" drive on your computer)
3. Run the file named "RUN THIS FOR ROOT". A command prompt will open and will begin to do the adb steps for you.

Quote:
Alternatively (If step 3 fails):

1. Open a command prompt (right click "Run as Administrator" is using Vista or W7) and locate the downgrade folder (type "CD C:\DHDDowngrade" minus the quotes in CMD)
2. Run the below commands (be sure to press enter after each line)


adb push fre3vo /data/local/tmp
adb shell chmod 777 /data/local/tmp/fre3vo
adb shell /data/local/tmp/fre3vo -debug -start FBB00000 -end FFFFFFFF


If the scan hangs, just reboot your DHD and start again.

You may not get all the messages (due to flushing issues when we kill adb), but if you get kicked back to your system command prompt, try "adb shell"

If you see '#' you successfully have temproot.



If you want to use Titanium Backup, you must do the following:

1. Download Busybox, su & fixsu.sh and Superuser.apk

2. Run the following commands in CMD...

Quote:
adb push fixsu.sh /data/local/tmp
adb push su /data/local/tmp
adb push busybox /data/local/tmp
adb shell chmod 777 /data/local/tmp/fixsu.sh
adb shell chmod 777 /data/local/tmp/su
adb shell chmod 777 /data/local/tmp/busybox
3. Install Superuser.apk

4. Install Titanium Backup from the Market

5. Run the following commands in CMD:

Quote:
adb shell
# cd /data/local/tmp
# ./fixsu.sh
If you see...
Quote:
rm failed for /system/bin/su Read-only file system
...ignore it

You can now use Titanium to backup all User Apps + Data (You can backup System apps too)
If you don't want to go any further than rooting, and just want temproot to remove bloatware, you can also use Titanium backup to do that.
Temproot will be enabled until phone is rebooted.





Downgrade:


1. Create a goldcard:
Quote:
1. Format SDCard to FAT32

2. Download Goldcard Helper from Android Market

3. Open Goldcard Helper with the SDCard in the phone, and you will see the mmc2 reverse CID
Note: Do not use the Copy feature in the app as this will copy the wrong CID!
Alternate to the Goldcard helper app:
Quote:
1. Open up a command prompt (Windows Key + R, type "CMD", press enter)
2. connect your phone as "charge only" and have usb debugging enabled
3. navigate the command prompt to the downgrade folder.
4. Type the following command:
Quote:
adb shell cat /sys/class/mmc_host/mmc2/mmc2:*/cid
5. Select and copy the cid
4. Go to http://psas.revskills.de/?q=goldcard

5. Enter your email address and the mmc2 reverse CID that is showing on the Goldcard Helper app then submit it

6. The img file will be emailed to you, download and save it somewhere you will remember

7. Download this hex editor - http://mh-nexus.de/en/downloads.php?product=HxD

8. Open HxD hex editor on your computer by right-clicking it and clicking 'Run as Administrator'

9. Mount your SD card to your computer, preferably using a card reader but you can use your phone as well

10. Go to 'Extra' menu > 'Open Disk'. Select Removable Disk (which should be your SD card) under Physical Disk (and NOT logical disk), uncheck 'Open as Readonly' and click OK

11. Go to the 'Extra' > 'Open Disk Image' and open the goldcard image downloaded in Step 6. . Select '512 (Hard disks/Floppy disks)' as the sector size when prompted and click OK

12. In the goldcard image tab, go to 'Edit' > 'Select All' and then 'Edit' >'Copy'

13. In the 'Removable Disk' tab, highlight offset (line) 00000000 to offset (line) 00000170 including the 00000170 line and go to 'Edit' menu > 'Paste Write'

14. Click 'File' > 'Save' and accept any warning that you get
2. Place the stock 1.32 PD98IMG.zip on the root of your SDcard/Goldcard

4. Open the file in the folder named "RUN THIS FOR DOWNGRADE". The command prompt will opn and begin to do the adb steps for you.

Quote:
Alternatively (If step 4 fails):


Run the below commands in CMD:


adb push misc_version /data/local/tmp
adb shell chmod 777 /data/local/tmp/misc_version
adb shell /data/local/tmp/misc_version -s 1.31.405.3
adb reboot bootloader
5. You should see a white bootloader screen, press the power button to enter the bootloader and it should automatically start to detect the PD98IMG.zip file.
6. You will see a blue progress bar on the right of the screen while the file is being checked. You should now be asked to confirm if you want to install this ROM, press 'Volume Up' to confirm. Wait patiently while the ROM is installed.
7. Once the installation is complete, press the 'power' button to restart your phone.

You have successfully downgraded to stock 1.32



How to Root 1.32:

1. Download and install Visionary+ to your Desire HD
2. Open Visionary+ and choose "Temproot now". The screen may go black and may become unresponsive, please allow it to finish.
3. After temproot, choose "Attempt permroot now". This will attempt to permanently root your Desire HD. Your device should then reboot.
4. After reboot, you should successfully be rooted.

How to Radio S-Off & SimUnlock Your Desire HD - Thanks to jkoljo





How to Flash recovery with ClockworkMod

1. Search Android Market for a free app called 'ROM Manager'. Once found, install it.
2. Once it has been installed, launch 'ROM Manager' on your phone.
3. In ROM Manager, tap 'Flash ClockworkMod Recovery'. Tap on 'Desire HD' when it pops up.
4. Be patient as ClockworkMod is installed, as it can take quite some time. Once it has finished , you have ClockworkMod recovery installed on your phone.

You should now have stock 1.32, root, S-off, and CWM Recovery.
You can now flash a ROM using Clockworkmod





Quote:
FAQs


Q. How do I run CMD?

A. Windows Vista and 7 users: Press Start, type CMD. You should see CMD sppear, right click and 'Run as Administrator'. Windows XP users: Press Start, Press 'Run', type CMD, then click OK.



Q. How do I enable USB Debugging?

A. On your Desire HD go to Settings -> Applications -> Development -> Enable USB Debugging



Q. Why do I keep getting CID error in bootloader?

A. This is most often a problem with your goldcard. First make sure you have created a goldcard using the guide at the top of this post. If you have created a goldcard, format the SDCard using FAT32 and try again making sure you have followed each step very carefully. Also, make sure you have the .bin file on your SDCard after doing the adb steps.



Q. When going into bootloader it says "no image or wrong image"

A. This message will be displayed when files it is looking for cannot be found. Leave it to continue and it will update. If it displays this message after searching for PD98IMG.zip, then the file is damaged or you do not have it on your SDCard.



Q. Do I have to disconnect the phone from the computer before booting into bootloader?

A. Yes....Simplez



Q. I have tried many times to create the goldcard, but continue to get errors.

A. This could be because you are continuously making mistakes, or your SDCard cannot be made into a goldcard, try another SDCard.


More will be added when needed



Please press Thanks

Attached Files
File Type: zip DHDDowngrade.zip - [Click for QR Code] (303.0 KB, 42944 views)
The Following 65 Users Say Thank You to CuBz90 For This Useful Post: [ Click to Expand ]
 
audiavant
Old
#2  
audiavant's Avatar
Senior Member
Thanks Meter 13
Posts: 126
Join Date: Nov 2009
Location: Tønsberg
Thanks, many are waiting for this information
 
ianyt77
Old
#3  
Member
Thanks Meter 0
Posts: 39
Join Date: Oct 2006
Location: reading
Thank you Thank you Thank you !!! Got it working and loaded LeeDroid's ROM

WOW You guys are great.... thanks to all who have spent so much time and effort to crack 2.37...

I'm not very good sometimes at understanding all this programming stuff but after a full day of messing and redoing ... IT WORKS!!!

YYYeeeeeeee Hawwwwwwwww

Thanks again

aero star
 
ravian29
Old
#4  
Senior Member
Thanks Meter 152
Posts: 603
Join Date: Jan 2011
4. Boot phone into Bootloader (hold volume down whilst power on), follow the steps and continue to update

what does this means ? i am in bootloader but can not see any update options, there are following options

FASTBOOT
RECOVERY
FACTORY RESET
SIMLOCK
IMAGE CRC

any help please
 
Baarf
Old
#5  
Baarf's Avatar
Member
Thanks Meter 10
Posts: 79
Join Date: Jan 2009
Location: Bayonne
Yeaaah it's work great !

Thanks !!!
 
hero000
Old
#6  
hero000's Avatar
Senior Member
Thanks Meter 140
Posts: 817
Join Date: Jun 2011
Location: In my bedroom
Quote:
Originally Posted by ravian29 View Post
4. Boot phone into Bootloader (hold volume down whilst power on), follow the steps and continue to update

what does this means ? i am in bootloader but can not see any update options, there are following options

FASTBOOT
RECOVERY
FACTORY RESET
SIMLOCK
IMAGE CRC

any help please
Don't change any thing as far as I know It'll boot into "Fastboot" incase if it didn't choose "FASTBOOT"

It'll check Recvoery, Tp , etc. I forgot to name them.

Follow CuBz90's guide it works 100%. I downgraded n rooted n now running custom ROM.
 
[Aek]
Old
#7  
Member
Thanks Meter 0
Posts: 34
Join Date: Nov 2009
Location: Sydney
Is there a way to gain root status in 2.37, so the phone can be backed up (via Titanium backup or similar) prior to the downgrade?
Failing that is there any other way to backup the phone?
I assume that when downgrading all data will be lost.
 
aypee3
Old
#8  
Senior Member
Thanks Meter 29
Posts: 265
Join Date: Jan 2009
kindly reupload the "Download this ROM - Mirror" link as whenever i click it i get
-
404 Page Not Found

The page you requested was not found.
 
CuBz90
Old
#9  
CuBz90's Avatar
Senior Member - OP
Thanks Meter 286
Posts: 1,038
Join Date: Sep 2010
Location: Manchester
Quote:
Originally Posted by aypee3 View Post
kindly reupload the "Download this ROM - Mirror" link as whenever i click it i get
-
404 Page Not Found

The page you requested was not found.
Both work for me
 
CuBz90
Old
#10  
CuBz90's Avatar
Senior Member - OP
Thanks Meter 286
Posts: 1,038
Join Date: Sep 2010
Location: Manchester
Quote:
Originally Posted by [Aek] View Post
Is there a way to gain root status in 2.37, so the phone can be backed up (via Titanium backup or similar) prior to the downgrade?
Failing that is there any other way to backup the phone?
I assume that when downgrading all data will be lost.
You can backup apps with MyBackup, but you cannot backup the data as 2.37 cannot be rooted

Tags
tao
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes