Guide to permaroot, s=off AND s=on!!!!!

Search This thread

grankin01

Senior Member
Feb 9, 2008
973
658
Georgetown, KY
one more question .. i am following the downgrade guide .. in there is says after you flash the PD15IMG.zip .. wich i just did .. then it says to come over here and root the phone using the visionary method .. BUT

this guide says it will only work using the 2.2.1 update and the phone says 2.2 still .. so not sure if i should still try a root method here

orrr if i should update to the OTA thru stock recovery to get me to 2.2.1 first and then rooting... not sure why it is in that specific order on that downgrade guide.

The pd15img.zip flashed the 2.2.1 kernel so yes root here, flash clockwork recovery, then head back over and flash the update.zip through cwrecovery.

My MyGlacier 4G MINE!!!
 

tsuujin

Senior Member
Feb 6, 2010
87
2
Clovis
Think I missed something

So I've got s-off, flashed to 2.2.1, -thought- I had root but now when I try to "su" i get "permission denied" and titanium backup tells me I'm not rooted. I try to start by using visionary+ to temp root, and even though it tells me it's trying to root it doesn't appear to actually work.

Kinda stumped, any suggestions as to what to look for, or more information I can provide?
 

tenbeau

Senior Member
Apr 24, 2010
935
32
Leesburg, Fl
Does anyone know where I can find the RUU image? I need to restore my phone to stock after rooting with visionary and then using the permaroot method.
By chance does anyone know how closely T Mobile inspects the phones returned during buyers remorse? I will be returning my phone on Monday as it is being replaced by Retention. I am rooted and have S=off and have removed some bloatware with Titanium Backup. I plan on unrooting and turning S-on and doing factory restore. I am not sure how to get the apps back as Titanium BU for the first time does not give me a restore option just uninstall and delete. Prior to this I could restore all apps that I had uninstalled. Does anyone know how closely they inspect the phone other than checking for liquid damage and making sure all accessories are present? what happens if you return the phone and get a replacement and they determine that the phone was rooted etc? I mean how much do they charge you? Any and all help and info is very much appreciated.
 

jjlean

Senior Member
May 9, 2009
1,091
104
Colorado Springs, CO
There is a section on returning your phone to stock. They won't know if you follow the directions.... Also, not sure how closely they inspect them.
Does anyone know where I can find the RUU image? I need to restore my phone to stock after rooting with visionary and then using the permaroot method.
By chance does anyone know how closely T Mobile inspects the phones returned during buyers remorse? I will be returning my phone on Monday as it is being replaced by Retention. I am rooted and have S=off and have removed some bloatware with Titanium Backup. I plan on unrooting and turning S-on and doing factory restore. I am not sure how to get the apps back as Titanium BU for the first time does not give me a restore option just uninstall and delete. Prior to this I could restore all apps that I had uninstalled. Does anyone know how closely they inspect the phone other than checking for liquid damage and making sure all accessories are present? what happens if you return the phone and get a replacement and they determine that the phone was rooted etc? I mean how much do they charge you? Any and all help and info is very much appreciated.



Sent from my HTC Ice Glacier using XDA App
 

ggolemg

Senior Member
Feb 1, 2009
154
30
naperville il
Worked perfectly, first go around, after reading up to page 110 ish
Android ver. 2.2.1
Visionary+ R14
Your downloaded root.rar file

In visionary, clicked "temp root"
extracted root.rar to /sdcard/root
turned fastboot off
dl'd term emulator
in term: su
sh /sdcard/root/root.sh
shutdown (not reboot)
power + vol dwn boot s=off
reboot
ran visionary+ R14 permaboot
let it restart
dl'd rom manager/clockwork
flashed clockwork recovery 3 times to be safe
rebooted into clockwork recovery
did a backup
reboot

aside from the 2+ hours reading all of this thread, the rooting took maybe 5 minutes total

Thank you very much to everyone here and everyone involved. I really appreciate it.
 

xderekaustinx

Member
Jan 22, 2010
46
3
Dallas, TX
Thank YOU sir for saving me 2 hours of reading all the stuff that did/doesn't work anymore. Your summation got me working 100%. I really appreciate all the work you all put into this...can't wait to get it cracked open
 

grankin01

Senior Member
Feb 9, 2008
973
658
Georgetown, KY
still s=on!!!!....helppppppppp:(

If the insmod wpx.ko is showing error "function not implemented" and the dd command is showing that something was copied ie. 2048 bytes in 2048 bytes out blah blah blah copied in blah seconds then you are on the right track. (if this doesn't make sense to you (no offense) then post your output up and we can go from there)

If all of the above matches the output on your screen wait about 30 min to an hour and then restart your device and check of s to be off. Some of these devices seem to have a delay built into the cache driver that is longer than others and you have to give it the "waiting" period to sync properly.
 

Realm11984

Senior Member
Dec 7, 2007
160
39
I have been attempting this for 3 days now. I have tried the root explorer method and the terminal method. Both go just as they should and yet I always have s-on. I have uninstalled visinary r14 and superuser and reinstalled with no luck. I have tried a 30min delay before powerdown and a 1hr delay.
Here is my process:
Visionary r14
Root.rar extracted to sdcard
Run visionary with r/w checked and gained temproot
Terminal:
su
cd /sdcard/root
sh root.sh
Follow the onscreen prompts
Powerdown phone
Check hboot: s-on
I have even tried running temproot immediatly after anyways with no luck as well as permroot with no luck.
I dont have a PC so abd is not an option. Any fresh ideas? Help!

Sent from my HTC Glacier using XDA App
 

grankin01

Senior Member
Feb 9, 2008
973
658
Georgetown, KY
@realm11984, try terminal method and post the screen output here. If everything looks good you could run the steps and instead of rebooting go to bed and reboot in the morning. I would say the waiting period is going to be longer for some devices than others. :(

My MyGlacier 4G MINE!!!
 

dustrho

Senior Member
Sep 21, 2009
891
58
Oswego, IL
twitter.com
I've rooted my phone three times (3rd phone) with also flashing Iced Glacier, and I've rooted two other people's MT4G phones as well. No problems whatsoever. I tried rooting a plum MT4G and for whatever reason I cannot for the life of me to get the damn thing with S-Off. WTF? Here are the specs in fastboot:

hboot-0.86.0000
microp-0429
radio-26.03.02.26_m
sep 27 2010, 11:12:59

Any ideas on what could be preventing me from doing a permanent root? The only difference I see between my phone and this plum one is that my hboot is a different version. This plum phone does have Android 2.2.1 installed.
 

grankin01

Senior Member
Feb 9, 2008
973
658
Georgetown, KY
I've rooted my phone three times (3rd phone) with also flashing Iced Glacier, and I've rooted two other people's MT4G phones as well. No problems whatsoever. I tried rooting a plum MT4G and for whatever reason I cannot for the life of me to get the damn thing with S-Off. WTF? Here are the specs in fastboot:

hboot-0.86.0000
microp-0429
radio-26.03.02.26_m
sep 27 2010, 11:12:59

Any ideas on what could be preventing me from doing a permanent root? The only difference I see between my phone and this plum one is that my hboot is a different version. This plum phone does have Android 2.2.1 installed.

Run the terminal method and post the output here so we can troubleshoot.

My MyGlacier 4G MINE!!!
 

Realm11984

Senior Member
Dec 7, 2007
160
39
Terminal method output:
Inserting kernal module
insmod: init_module '/sdcard/root/wpk.ko' failed (function not implemented)
Duplicating hboot
2048+0 records in
2048+0 records out
1048576 bytes transferred in 0.432 secs (2427259 bytes/sec)
Synchronizing
Blahblah
Does this look right?

Sent from my HTC Glacier using XDA App
 

Kline

Senior Member
Mar 5, 2009
250
14
Illinois
I've rooted my phone three times (3rd phone) with also flashing Iced Glacier, and I've rooted two other people's MT4G phones as well. No problems whatsoever. I tried rooting a plum MT4G and for whatever reason I cannot for the life of me to get the damn thing with S-Off. WTF? Here are the specs in fastboot:

hboot-0.86.0000
microp-0429
radio-26.03.02.26_m
sep 27 2010, 11:12:59

Any ideas on what could be preventing me from doing a permanent root? The only difference I see between my phone and this plum one is that my hboot is a different version. This plum phone does have Android 2.2.1 installed.

This is my SAME PROBLEM! You can get 0.86.0000 hboot but are still stuck with S-ON! My phone worked flawlessly on the first try, my wife's phone will not go just like this! We are about to mfg warranty replace hers as after flashing her back to 100% stock then re-loading her apps/settings with Titanium, her email is no longer receiving on the phone. Maybe she will get one that is rootable after the replacement...
 

Top Liked Posts

  • There are no posts matching your filters.
  • 19
    First of all, unforgiven512 deserves most of the credit for coming up with the initial tutorial for perm root and s=off for the new HTC devices. Also, thanks to adwinp for the instructions on hexeditting the kernel module to make it work with the MT4G.

    This was a collaborative #g2root effort, primarily involving scotty2, tmzt, IntuitiveNipple but also many others!

    Ok, so the usual disclaimers go here:

    I am not responsible for your bricked phone or the ignorance that may or may not have caused it based on the fact that you CHOSE to follow these steps. Read through the forums and LEARN before you attempt to flash any device. You have been warned.

    This method only works for those devices who have already received their OTA update!!!

    Now that that is out of the way here we go:

    First make sure you have visionary installed!

    Root.rar (all files plus a script to make things a little easier. :D)
    http://www.mediafire.com/?flit79p2y069bb3
    md5sum: 46361b0cc8652d88688c0ab66d44950b

    1. Download the root.rar file and unzip it to /sdcard on your device.

    2. Run VISIONary to gain temp root.

    Now I am going to run two different sets of instructions (you'll understand why in a minute):


    Terminal Emulator Method
    3a. Start terminal emulator up on your device.(I prefer this method b/c you can see the output.)

    a. type "su" + enter to gain root privileges.

    b. Type "cd /sdcard/root" + enter.

    c. Type "sh root.sh" + enter.

    d. Follow the on screen prompts.


    File Explorer Method
    3b. Start up root explorer, sufbs, or some other type of file browser with root privileges.

    a. Navigate to /sdcard/root on your device.

    b. Click on root.sh and allow it to run. Some file browsers ask you if you want to or not.

    c. Now wait about 18 to 20 seconds and restart your device into the bootloader to check if S=off is displayed.

    4. Start the device back up.

    5. Run visionary again and reboot again. This will make root stick.

    You can now uninstall visionary and enjoy permaroot. :D

    Alternative Root Process

    First, uninstall visionary and superuser and restart your device to wipe out temp root.

    Second, download MT4G Modperm.zip and unzip its contents to your sdk tools directory.

    MT4G Modperm.zip: http://www.mediafire.com/?eaw0q0zjc7rrrwh
    MD5Sum: 3ea4a7a6ddee711d12f7350ce60fae33

    Then:

    Windows Users:
    1a. Using Explorer navigate to the root of your sdk. Hold shift and right mouse click on the tools folder. Select "Open command window here".

    2a. Type "adbbat" + enter. Wait till the batch file finishes.

    Linux Users:
    1b. Using file browser of your choice (or terminal) navigate to the tools folder of your sdk and double click on adbbat.sh (type sh adbbat.sh if you are using terminal). Credit for adbbat.sh goes to slhpss.

    2. Disconnect your phone from the PC.

    3. Open terminal emulator on the phone and type "/data/local/rage" + enter. Wait for "Forked XXXXXXXX children" to appear and then close the terminal.

    4. Start terminal back up. It should force close.

    5. Start terminal back up, again. This time it should stay open and you should have a "#" prompt instead of a "$" prompt. Then type "/data/local/temp.sh.

    6. When the script finishes run /data/local/rage again and sit tight. The phone should start acting weird and do a soft reboot. Then right after everything loads it should do a hard reboot. After the hard reboot reboot and check S.(If it doesn't do the two reboots just reboot into hboot yourself after rage finishes with the "forked xxxxxxxx children" message.

    7. Enjoy root!

    If you still have problems getting su to work after this uninstall visionary, shutdown, pull battery, and restart. Should work after that. Props to PolishDude for figuring that one out.

    If you have tried EVERYTHING and still cannot get it to work for through the process and wait 30 minutes to an hour. The driver might have a cache delay write and you may need to give it some time to allow the sync command to work. This has worked for one other person (mfouco). BTW, this was figured out by coachmai. Props man!

    If su doesn't stick, flash again! You can't overroot it! :D

    Process for turning S back on

    Download this file and unzip it to /sdcard on your device.

    unroot.rar
    http://www.mediafire.com/?12oi5elu7v2y8og
    md5sum: aad4e64126cf8d92d7e8b5abb48fdadd

    Terminal Emulator Method
    1. Open up terminal editor on your device.(I prefer this method b/c you can see the output.)

    a. Type "su" + enter to gain root privileges.

    b. Type "cd /sdcard/unroot" + enter.

    c. Type "sh unroot.sh" + enter.

    d. Follow the onscreen prompts.



    File Explorer Method
    2. Open root explorer, sufbs, or some other file browser with root access.

    a. Navigate to /sdcard/unroot.

    b. Click on unroot.sh and allow it to run. Some file browsers ask permission before they execute scripts.

    c. Wait 18 to 20 seconds and reboot your phone into the bootloader to check if S=on.

    You now have S=ON again.

    Since we opened up the nand to writes you should still retain persistent root privileges.

    Hope this makes it all easier for you.
    Cheers --grankin01 :D

    For everyone that is have trouble writing to the protected areas of the system after following the rooting procedures.

    Reboot into Clockwork recovery and choose the mounts and storage option. From there choose mount system (or whichever protected directory you want access to) and click the trackpad. When unmount system shows you have rw access to the /system directory and all of its subs.
    4
    This is so frustrating... I can't get an installable version of the visionary r11, I've tried Modaco's site and several links from members in this thread and all of them are not installable through Astro. And through Linda file manager, it gives me parsing errors. I'v checked if it has a .zip on the ending but it doesn't. All of them are .apk files but yet aren't installing. I'm dumbfounded....

    Any help would be greatly appreciated. :)

    Here is three versions of visionary. One is run-on-boot, one is not and one is the plus version. Enjoy :D.
    2
    I dont know what i'm doing wrong but it wont let me flash pd15img.zip with clockwork its saying abort bad file or something other....urrr what am I doing wrong?

    Sorry, reboot into hboot and it will check the package and ask you if you want to apply the update.
    1
    Great I just saw this on PaulObrians twitter so this is great news.

    Mackster248 Macky Evangelista
    @PaulOBrien will your visionary app tomorrow be able to root the mytouch 4g as well? Since it roots the desire hd.

    Pual's answer:

    PaulOBrien Paul O'Brien
    @
    @Mackster248 Possibly...

    Question, Did you recompile the kernel for the MT4G yourself? A big thanks to everyone. We all need to dig in out pockets to these developers and not forget them.
    1
    Guys might be a stupid question but how do you get into the hboot on mytouch 4g. I thought it was the power button and camera but that doesn't seem to work.

    Turn off "Fast Boot" under Applications then power on holding Power + Vol Down