[HOW-TO][zergRush Root] Root w/ v2.2.x-2.3.x (NOT ICS 4.x or GB after 11/2011)

DooMLoRD · 27th October 2011, 06:50 PM

Quote:

Originally Posted by paxChristos

ok, i'm stuck... my device locks up after running zergRush (to regain root)
Here's what I have so far, anybody have any ideas?

Code:

@echo ---------------------------------------------------------------
@echo	              Easy UNrooting toolkit (v1.0)
@echo                    created by DooMLoRD
@echo		   Slightly Changed by Paxchristos
@echo         using exploit zergRush (Revolutionary Team)
@echo    Credits go to all those involved in making this possible!
@echo ---------------------------------------------------------------
@echo[*] This script will:
@echo      (1) root ur device using zergRush exploit
@echo      (2) install Busybox (1.18.4)
@echo      (3) install SU files (3.0.5)
@echo[*] Before u begin:   
@echo      (1) make sure u have installed adb drivers for ur device
@echo      (2) enable "USB DEBUGGING" 
@echo            from (Menu\Settings\Applications\Development)
@echo      (3) enable "UNKNOWN SOURCES"
@echo            from (Menu\Settings\Applications)
@echo      (4) [OPTIONAL] increase screen timeout to 10 minutes
@echo      (5) connect USB cable to PHONE and then connect to PC
@echo      (6) skip "PC Companion Software" prompt on device
@echo ---------------------------------------------------------------
@echo  CONFIRM ALL THE ABOVE THEN 
@pause
@echo --- STARTING ----
@files\adb kill-server
@echo --- WAITING FOR DEVICE
@files\adb wait-for-device
@echo --- cleaning
@files\adb shell "rm -r /data/local/tmp"
@echo --- Added to DooMLoRDs script---
@files\adb shell "mkdir /data/local/tmp" 
@echo --- pushing zergRush"
@files\adb push files\zergRush /data/local/tmp/.
@echo --- correcting permissions
@files\adb shell "chmod 777 /data/local/tmp/zergRush"
@echo --- executing zergRush
@files\adb shell "./data/local/tmp/zergRush"
@echo --- WAITING FOR DEVICE TO RECONNECT
@echo if it gets stuck over here for a long time then try:
@echo    disconnect usb cable and reconnect it
@echo    toggle "USB DEBUGGING" (first disable it then enable it)
@echo --- DEVICE FOUND
@files\adb wait-for-device
@echo --- here comes the major changes to DooMLoRD's script
@files\adb shell "/system/xbin/busybox mount -o remount,rw /system"
@files\adb wait-for-device
@ehco --- deleting Superuser.apk
@files\adb shell "rm /system/app/Superuser.apk"
@echo --- deleting busybox
@files\adb shell "rm /system/xbin/busybox"
@echo --- deleting su
@files\adb shell "rm /system/bin/su"
@echo --- rebooting and hopefully root free!
@files\adb reboot
@echo ALL DONE!!!
@pause

thats not a correct way to unroot...

btw if u already rooted why run exploit again? :P

paxChristos · 27th October 2011, 06:56 PM

Quote:

Originally Posted by DooMLoRD

thats not a correct way to unroot...

btw if u already rooted why run exploit again? :P

I was pretty sure that zergRoot only worked until reboot (hence why I ran it again to regain root, I guess I could just remount with busybox, eh?) ... I'm a noob (and learning as I go) at this,

(I thought for sure if you deleted everything you used to root, it'd get rid of root, my bad)
so any help is very much appreciated :P

Nabeel_Nabs · 27th October 2011, 07:31 PM

Sorry again for my newbie questions I've done a quick search but found nothing on the subject... Can you update using SEPC ... Currently on 2.3.3 and rooted using this method and i've removed a few apps ( I did do a titanium backup of all apps before i removed anything though).

dannejanne · 27th October 2011, 07:33 PM

Quote:

Originally Posted by paxChristos

(I thought for sure if you deleted everything you used to root, it'd get rid of root, my bad)
so any help is very much appreciated :P

I know pretty much zip zero nada about stuff like that but I think it's a bit more complicated than that. I'm guessing the files pushed to the phone executes different stuff/commands after being pushed and changes things in config etc. But I wouldn't know really. Just guessing.

paxChristos · 03:17 AM

Ok, Here's a working unroot (i verified with root checker)

Code:

@echo ---------------------------------------------------------------
@echo	              Easy UNrooting toolkit (v1.0)
@echo                    created by DooMLoRD
@echo		   Slightly Changed by Paxchristos
@echo         using exploit zergRush (Revolutionary Team)
@echo    Credits go to all those involved in making this possible!
@echo ---------------------------------------------------------------
@echo[*] This script will:
@echo      (1) root ur device using zergRush exploit
@echo      (2) install Busybox (1.18.4)
@echo      (3) install SU files (3.0.5)
@echo[*] Before u begin:   
@echo      (1) make sure u have installed adb drivers for ur device
@echo      (2) enable "USB DEBUGGING" 
@echo            from (Menu\Settings\Applications\Development)
@echo      (3) enable "UNKNOWN SOURCES"
@echo            from (Menu\Settings\Applications)
@echo      (4) [OPTIONAL] increase screen timeout to 10 minutes
@echo      (5) connect USB cable to PHONE and then connect to PC
@echo      (6) skip "PC Companion Software" prompt on device
@echo ---------------------------------------------------------------
@echo  CONFIRM ALL THE ABOVE THEN 
@pause
@echo --- STARTING ----
@files\adb kill-server
@echo --- WAITING FOR DEVICE
@files\adb wait-for-device
@echo --- cleaning
@files\adb shell "rm -r /data/local/tmp"
@echo --- Starting unroot --- 
@files\adb shell "/system/xbin/busybox mount -o remount,rw /system"
@echo --- deleting Superuser.apk
@files\adb uninstall Superuser.apk
@echo --- deleting busybox
@files\adb shell "rm /system/xbin/busybox"
@echo --- deleting su
@files\adb shell "rm /system/bin/su"
@echo --- clean up
@files\adb shell "rm -r /data/local/tmp" 
@echo --- rebooting and hopefully root free!
@files\adb reboot
@echo ALL DONE!!!
@pause

enjoy!

CrimsonKnight13 · 27th October 2011, 08:02 PM

Quote:

Originally Posted by paxChristos

Ok, Here's a working unroot (i verified with root checker)

Code:

@echo ---------------------------------------------------------------
@echo                  Easy UNrooting toolkit (v1.0)
@echo                    created by DooMLoRD
@echo           Slightly Changed by Paxchristos
@echo         using exploit zergRush (Revolutionary Team)
@echo    Credits go to all those involved in making this possible!
@echo ---------------------------------------------------------------
@echo[*] This script will:
@echo      (1) root ur device using zergRush exploit
@echo      (2) install Busybox (1.18.4)
@echo      (3) install SU files (3.0.5)
@echo[*] Before u begin:   
@echo      (1) make sure u have installed adb drivers for ur device
@echo      (2) enable "USB DEBUGGING" 
@echo            from (Menu\Settings\Applications\Development)
@echo      (3) enable "UNKNOWN SOURCES"
@echo            from (Menu\Settings\Applications)
@echo      (4) [OPTIONAL] increase screen timeout to 10 minutes
@echo      (5) connect USB cable to PHONE and then connect to PC
@echo      (6) skip "PC Companion Software" prompt on device
@echo ---------------------------------------------------------------
@echo  CONFIRM ALL THE ABOVE THEN 
@pause
@echo --- STARTING ----
@files\adb kill-server
@echo --- WAITING FOR DEVICE
@files\adb wait-for-device
@echo --- cleaning
@files\adb shell "rm -r /data/local/tmp"
@echo --- Starting unroot --- 
@files\adb shell "/system/xbin/busybox mount -o remount,rw /system"
@echo --- deleting Superuser.apk
@files\adb uninstall Superuser.apk
@echo --- deleting busybox
@files\adb shell "rm /system/xbin/busybox"
@echo --- deleting su
@files\adb shell "rm /system/bin/su"
@echo --- clean up
@files\adb shell "rm -r /data/local/tmp" 
@echo --- rebooting and hopefully root free!
@files\adb reboot
@echo ALL DONE!!!
@pause

enjoy!

I hope you realize that this doesn't undo rooted adb shell... the zergRush exploit still remains intact.

Quote:

Originally Posted by Nabeel_Nabs

Sorry again for my newbie questions I've done a quick search but found nothing on the subject... Can you update using SEPC ... Currently on 2.3.3 and rooted using this method and i've removed a few apps ( I did do a titanium backup of all apps before i removed anything though).

What model of the PLAY and/or wireless provider do you have?

paxChristos · 27th October 2011, 08:11 PM

Quote:

Originally Posted by CrimsonSentinel13

I hope you realize that this doesn't undo rooted adb shell... the zergRush exploit still remains intact.

Unfortunately, closing the hole in adb shell is a little bit outside my grasp, this will get you to the point where your phone no longer is able to run su.

DooMLoRD · 27th October 2011, 08:24 PM

Quote:

Originally Posted by paxChristos

Ok, Here's a working unroot (i verified with root checker)

Code:

@echo ---------------------------------------------------------------
@echo	              Easy UNrooting toolkit (v1.0)
@echo                    created by DooMLoRD
@echo		   Slightly Changed by Paxchristos
@echo         using exploit zergRush (Revolutionary Team)
@echo    Credits go to all those involved in making this possible!
@echo ---------------------------------------------------------------
@echo[*] This script will:
@echo      (1) root ur device using zergRush exploit
@echo      (2) install Busybox (1.18.4)
@echo      (3) install SU files (3.0.5)
@echo[*] Before u begin:   
@echo      (1) make sure u have installed adb drivers for ur device
@echo      (2) enable "USB DEBUGGING" 
@echo            from (Menu\Settings\Applications\Development)
@echo      (3) enable "UNKNOWN SOURCES"
@echo            from (Menu\Settings\Applications)
@echo      (4) [OPTIONAL] increase screen timeout to 10 minutes
@echo      (5) connect USB cable to PHONE and then connect to PC
@echo      (6) skip "PC Companion Software" prompt on device
@echo ---------------------------------------------------------------
@echo  CONFIRM ALL THE ABOVE THEN 
@pause
@echo --- STARTING ----
@files\adb kill-server
@echo --- WAITING FOR DEVICE
@files\adb wait-for-device
@echo --- cleaning
@files\adb shell "rm -r /data/local/tmp"
@echo --- Starting unroot --- 
@files\adb shell "/system/xbin/busybox mount -o remount,rw /system"
@echo --- deleting Superuser.apk
@files\adb uninstall Superuser.apk
@echo --- deleting busybox
@files\adb shell "rm /system/xbin/busybox"
@echo --- deleting su
@files\adb shell "rm /system/bin/su"
@echo --- clean up
@files\adb shell "rm -r /data/local/tmp" 
@echo --- rebooting and hopefully root free!
@files\adb reboot
@echo ALL DONE!!!
@pause

enjoy!

this is not correct...

u are forgetting the tons of symlinks in /system/xbin/

also why "rm -r"? a simple "rm /data/local/tmp/*" is sufficient

also dont worry abt zergRush.. as far as i understand the exploit was only for temp root.. meaning its removed after reboot...

paxChristos · 27th October 2011, 08:33 PM

Quote:

Originally Posted by DooMLoRD

this is not correct...

u are forgetting the tons of symlinks in /system/xbin/

also why "rm -r"? a simple "rm /data/local/tmp/*" is sufficient

also dont worry abt zergRush.. as far as i understand the exploit was only for temp root.. meaning its removed after reboot...

I use rm -r because it deletes the directory

I'll update mine when class is done...