[GUIDE] Downgrade G2 (2.3.X) & DZ (2.3.X) & mT4g (2.3.4) & DHD w/ S-ON to Stock Froyo

Search This thread

Setherio

Senior Member
Dec 1, 2009
114
329
plus.google.com
[GUIDE] Downgrade G2 (2.3.X) & DZ (2.3.X) & mT4g (2.3.4) & DHD w/ S-ON to Stock Froyo

This guide is written for anyone who has "Stock Gingerbread" and wants to downgrade their phone which originally had "Stock Froyo". The following is a list of phone models this guide is intended for and that are known to work:

Working Phone Models:
  • G2 (Vision)
  • Desire Z (Vision)
  • myTouch 4G (Glacier)
  • Desire HD (Ace)

It should also be noted, this guide WILL NOT work with the following:

Special Notes


Table of Contents
  • Introduction
    1. Gaining Temp Root
    2. Changing Version Number to Allow Downgrade and Gaining SuperCID with a Goldcard
    3. Temp-Rooting to Backup (*Optional*)
    4. Downgrading
      • Manual Downgrade
      • Fastboot Downgrade
  • Sources
  • Troubleshooting
  • Change Log
  • Attachments


I) Introduction
This guide is written with the assumption that the user has previously used "adb". If you are unfamiliar with "adb" or do not even know what "adb" is, download the Android SDK (found at http://developer.android.com/sdk/index.html). There are a couple guides to help you get started setting up the Android SDK and understanding ADB. If you have not installed the Android SDK or you are unfamiliar with ADB, please take some time and read a couple guides to get a basic understanding of it.


I - 1) Gaining Temp Root
  1. Download the attached files, unzip them, and place the files in your platform-tools folder. To elaborate, place the fre3vo file inside of the View attachment fre3vo.zip file in your platform-tools folder and the misc_version file inside the View attachment misc_version_01.zip file in your platform-tools folder.
  2. Make sure you have your sdcard inserted in your phone, and you are NOT in USB Storage Mode, and your sdcard is NOT FULL.
  3. Run the following command to verify the exploit has access to what it needs. (Only the first line is the command. The second line should be the result returned if all goes well.)
    Code:
    [B]> adb shell cat /dev/msm_rotator[/B]
    [I]/dev/msm_rotator: invalid length[/I]
  4. If you received the same message, you're good to continue on. If not… refer to the troubleshooting section of the guide before you continue.
  5. Run the following commands from your platform-tools directory.
    Code:
    [B]> adb push fre3vo /data/local/tmp
    > adb shell
    $ chmod 777 /data/local/tmp/fre3vo
    $ /data/local/tmp/fre3vo -debug -start FAA90000 -end FFFFFFFF[/B]
  6. After you enter that command, you should see something similar to the last few lines in the following displayed.
    (It may take a minute or two. From what I can tell, this appears to be the quickest method as the exploit seems to be found in the latter regions.)
    Code:
    [I]Buffer offset:      00000000
    Buffer size:        8192
    
    Scanning region fb7b0000...
    Scanning region fb8a0000...
    Scanning region fb990000...
    Scanning region fba90000...
    Potential exploit area found at address fbb4d600:a00.
    Exploiting device...[/I]
    • If the exploit works, you will be kicked out of ADB shell, proceed to Step #8.
    • If the above does not work, and fails, you can try the following, and hopefully one will work, try the following (you must reboot your phone before you try another set):
      Code:
      [B]$ /data/local/tmp/fre3vo -debug -start 10000000 -end 1FFFFFFF
      $ /data/local/tmp/fre3vo -debug -start 20000000 -end 2FFFFFFF
      $ /data/local/tmp/fre3vo -debug -start 30000000 -end 3FFFFFFF
      $ /data/local/tmp/fre3vo -debug -start F0000000 -end FFFFFFFF
      $ /data/local/tmp/fre3vo -debug -start E0000000 -end EFFFFFFF[/B]
  7. If you did get kicked out of adb shell, open it again. You should now see # instead of $, thus granting you temp root. Go ahead and exit out of shell to proceed to the next stage.
    Code:
    [B]> adb shell
    # exit[/B]


I - 2) Changing Version Number to Allow Downgrade and Gaining SuperCID with a Goldcard
  1. If you followed the first portion of this, you should of unzipped View attachment misc_version_01.zip ad View attachment flashgc.zip in the platform-tools directory.
    If you haven't done that yet, do that now and then run the following commands from your platform-tools directory.
  2. Code:
    [B]> adb push misc_version /data/local/tmp/misc_version
    > adb push flashgc /data/local/tmp/flashgc
    > adb shell chmod 777 /data/local/tmp/*
    > adb shell
    # cd /data/local/tmp
    # ./misc_version -s 1.00.000.0[/B]
    [I]--set_version set. VERSION will be changed to: 1.00.000.0
    Patching and backing up partition 17...[/I]
    [B]# ./flashgc[/B]
    *Note: If you get the following error, please make sure your sdcard is inserted in your phone and is NOT mounted to your computer (ie: make sure you are NOT in USB Storage Mode). This is a fairly common error and/or oversight many people tend to miss. Please double check this before continuing.
    Code:
    Error opening backup file.
  3. Code:
    [B]# sync[/B]
  4. Double check and make sure everything looks good so far by running the following command (still in adb shell).
    Code:
    [B]# dd if=/dev/block/mmcblk0p17 bs=1 skip=160 count=10[/B]
    [I]1.00.000.010+0 records in
    10+0 records out
    10 bytes transferred in 0.001 secs (10000 bytes/sec)[/I]
  5. BE SURE TO BACKUP ANY DATA!!!***


I - 3) Temp-Rooting to Backup
If you have nothing to back up or don't care to back anything up, proceed to the next section.

Credit goes to Nipqer from #g2root for providing me with this method.
  1. Download the attached file: View attachment Vision-fre3vo-temp-root.zip
  2. Extract the contents to your platform-tools directory.
  3. Run the following commands in command prompt while in platform-tools directory:
    Code:
    > adb push su /data/local/tmp/
    > adb push busybox /data/local/tmp/
    > adb push fixsu.sh /data/local/tmp/
    > adb install SuperUser.apk
    > adb shell chmod 755 /data/local/tmp/fixsu.sh
    > adb shell /data/local/tmp/fixsu.sh
  4. Download a backing up application such as...
  5. Make a backup!


I - 4) Downgrading

I - 4a) Manual Downgrade
  1. Rename the downloaded rom to it's proper update name:
    (Please note, the filenames MUST be all uppercase except for the extension, and if file extensions are hidden, do not include ".zip"):
    • G2: "PC10IMG.zip"
    • Desire Z: "PC10IMG.zip"
    • myTouch 4G: "PD15IMG.zip"
    • Desire HD: "PD98IMG.zip"

  2. Place the zip file in the root of your sdcard.
  3. Reboot your phone into bootloader by typing the following command:
    Code:
    [B]> adb reboot bootloader [/B]
  4. After your phone has entered bootloader, press the power button. It will then scan for the associated rom file and ask you to update by pressing a key.
  5. Press the key it requests to perform the update.
    DO NOT INTERRUPT THIS PROCESS.
    Your phone will reboot once or twice - this is completely normal.
    This process will take roughly 5-10 minutes so make sure your phone is plugged in, either to an outlet or your computer.
  6. Once the process is finished, it will ask you to reboot by pressing a key. Press the associated key and it will reboot into the Stock Froyo rom!
  7. After booting into Android 2.2, DO NOT update the OTA that is around 70MB. That is the update to Gingerbread. There is one update that will come before that, that is a lot smaller in size, which is the WiFi-Calling update - that update is okay to install.


I - 4b) Fastboot Downgrade
  1. Rename the downloaded stock rom "StockRom.zip" (if extensions are hidden, rename it "StockRom").
  2. Place the downloaded stock rom zip file in your platform-tools directory.
  3. Download the attached file View attachment fastboot.zip. In the zip archive there are three folders, "windows", "mac", and "linux".
  4. Extract the file from the associated with your operating system and place it in platform-tools directory.
  5. In command prompt, type the following command to reboot into bootloader:
    Code:
    [B]> adb reboot bootloader[/B]
  6. Make sure your device is recognized by typing the following command.
    Code:
    [B]> fastboot devices[/B]
  7. If you device is recognized, it should return a serial/model number.
  8. Code:
    [B]> fastboot oem rebootRUU[/B]
  9. Your phone should now reboot into a black screen with a gray/silver "HTC" logo on it.
  10. Next we flash the Stock Rom. This may take a few minutes as it transfers the file to the phone then attemps to update (downgrade).
    Code:
    [B]> fastboot flash zip StockRom.zip[/B]
  11. In rare cases the flash stops and the user gets a warning to repeat the flash immediately - no panic, just run the "fastboot flash zip StockRom.zip" (only this command, not the rebootRUU one) again and it will work.
  12. When it finishes, wait a minute or two (just in case) then reboot your phone by typing:
    Code:
    [B]> fastboot reboot[/B]
  13. After booting into Android 2.2, DO NOT update the OTA that is around 70MB. That is the update to Gingerbread. There is one update that will come before that, that is a lot smaller in size, which is the WiFi-Calling update - that update is okay to install.


II) Sources:

If anyone needs further help and would prefer messaging me, feel free.

III) Troubleshooting
[...] If [the downgrade] does not work, Right click your Command prompt, Select All, Right click again. Then go to pastebin.com, paste there, Scroll down, name it and hit submit. After that post the link here and we'll take a look at it.

EVERYONE: If you want a faster diagnostic please do this in advance and other people can see your mistakes.

You can also join the IRC channel #g2root on irc.freenode.net and ask questions in there. If you are unfamiliar with IRC, you can go to http://webchat.freenode.net and pick an alias, for channel type in #g2root and enter the reCAPTCHA and connect.


I wanted to give credit to specific individuals whom have helped write this guide, provided important feedback to further improve this guide, and/or in any other way further improved this guide. I think these invidiuals should be recognized, as if it were not for them, this would wouldn't be as elaborate, dynamic, and informative as it is. So a special thanks to, Cimer, strawmetal petarpLab, iDylan1357, asharma5290, guhl, pierre_ja, and skorgon from #g2root. And I would also like to recognize and give a major thanks to Nipqer whom offers a lot of support with constant responses helping assist those whom ask for help both in this thread as well as on IRC. And he is always making sure I keep this as updated as it can be.



IV) Change Log
  • 2023/04/14
    • I'm no longer supporting this thread anymore however I will try to update it if someone messages me with an issue. I don't have time anymore unfortunately. I did however update the downgrade ROM for the G2. The link in the mirror is currently hosted on my google drive. If there's a problem let me know in a private message.
  • 2013/06/14
    • Update ratherphallic.co.cc links to ratherphallic.tk. -Nipqer
  • 2012/11/11
    • Made some minor changes (grammar, spelling, layout/format).
    • Added links to guides which fix the issue with Desire HD (Ace) w/ Sense 3.x
  • 2012/05/22
    • Changed "fastboot" attachment to have 3 folders ("windows","linux",and "mac") each with "fastboot" in it instead of having "fastboot-linux", "fastboot-mac", and "fastboot-windows.exe".
    • Changed fastboot portion of guide to reflect change to attachment for easier usability.
  • 2012/04/21
    • Updated strawmetal's PDF document for G2/Desire Z Downgrade.
    • Added link to strawmetal's tools used in his PDF Guide.
  • 2012/03/07
    • Added a PDF file that strawmetal was kind enough to make for Vision users.
    • Added links to attached files in the guide where I reference them.
  • 2012/02/03
    • Changed link to the Stock Vision (G2) Rom and added mirrors.
    • Changed link to the Stock Vision (Desire Z) Rom and added mirrors.
    • Added mirrors to the Stock Glacier (myTouch 4G) Rom.
    • Changed link to the Stock Ace (Desire HD) Rom and added mirrors.
  • 2012/02/03
    • Added a guide to help individuals whom have used the "official" htcdev.com unlocker method.
  • 2012/02/03
    • Fixed link for the G2, Desire Z, and Desire HD (thanks to repast & cmstlist.
  • 2012/04/13
    • Possible exploit found for Desire HD updated to latest OTA update (which patched our current method).
  • 2012/01/28
    • Fixed link for myTouch 4G as megaupload has been taken down. Also added mirrors for myTouch 4G Stock Rom.
  • 2011/12/20
    • Clearified which phone models this guide is intended for as well as noting that the Doubleshot does not work.
    • Made note that a recent OTA patch for the Ace, giving it Sense 3.x, has patched this method and this method will no longer work on Ace models which have Sense 3.x
  • 2011/12/17
    • Added new goldcard generator and simplified the guide.
  • 2011/10/27
    • Changed the download link for the Desire HD.
    • Added MD5 checksums next to the rooms.
  • 2011/10/26
    • Re-added the manual downgrade method due to people having issues with the fastboot method.
  • 2011/10/23
    • Fixed a slightly error in code during the temp-root backup section. Had "adb install install Superuser.apk", replaced it with "adb install Superuser.apk"
  • 2011/10/22
    • Added a method to be able to backup data prior to downgrading! (thanks to Nipqer from #g2root)
  • 2011/10/20
  • 2011/08/26
    • Changed modified version number for each device to 1.00.000 as it is more universal and works for each one.
    • Made it more clear to extract the attached files and place them in the platform-tools directory for use.
  • 2011/08/06
    • Added a couple links to ADB guide.
  • 2011/08/05
    • Added myTouch 4G
    • Added link to an "adb" guide.
    • Changed title from "[GUIDE] Downgrade G2 2.13.531.8 (2.3.3 T-Mobile Rom w/ S-ON) & DZ 2.3.3 w/ S-ON" to "[GUIDE] Downgrade G2 (2.3.3) & DZ (2.3.3) & mT4g (2.3.4) w/ S-ON to Stock Froyo"

V) Attached Files
 
Last edited:

evilcuber

Senior Member
Aug 3, 2010
1,141
679
Toronto
Wow first guide. Nice! I hope this helps people who have 2.3.3 so they can stop asking how to downgrade

Sent from my HTC Vision using XDA App
 
  • Like
Reactions: jberg22

mejorguille

Senior Member
Dec 14, 2009
827
45
Florida
Sweet, now I can finally get my phone replaced. Accidentally blew out my LED and was scared of asking for a new one for fear of being unable to root. Thanks for the peace of mind I'll be using this in a few days :)
 
C

Cimer

Guest
Just some suggestions to avoid confusion when you run the command
Code:
 adb shell cat /dev/msm_rotator
you should get the return of
Code:
/dev/msm_rotator: invalid length
you do not need to enter in this line.

Also after entering
Code:
/data/local/tmp/fre3vo -debug -start FAA90000 -end FFFFFFFF
or one like it and it fails (It should not) you need to reboot the phone between these attempts.

Thanks for writing the guide! We just posted the log lol


Late side note: I've recently read an article on how root exploits are not credited to their original inventors. Just letting everyone know that agrabren should be credited as well for his work with Fr3v0, and his willingness to help during the process
 
Last edited:

Setherio

Senior Member
Dec 1, 2009
114
329
plus.google.com
Thanks for the tips Cimer, I edited the post, hopefully that clarifies it a bit more.

I've been a quiet browser here on XDA for quite a while but I believe that was actually the first post I made =3 It took me a while to try to get it formatted... fluently / tried to make it easy to read and follow.

And hey, if it wasn't for you all posting the logs from #g2root, I would of never gotten my G2 back to being rooted. :) I think I had like 8 different pages open when I was doing it, reading the chat log, reviewing the pastebin data, et cetera. But it worked, after searching every day, the trick has been found.

On a side note, I picked the range "-start FAA90000 -end FFFFFFFF" because it appears that the exploit is most likely within that range. It was for yours "FBB47C00:1400", mine was "FBB4D600:A00", and a friend of mine was also an FBB*.
 

Setherio

Senior Member
Dec 1, 2009
114
329
plus.google.com
Does it work for the european desire Z ?

Personally, I have no idea. I don't imagine it would hurt the phone any if you tried. I know you would have to change the version number (when using misc_version) to a different number, one that would be equivalent to the stock rom that came with the phone. As for the exploit itself, I don't see any harm it could do to try (though I'm no expert). Just be sure to reboot your phone after each attempt of using fre3vo.
 

Setherio

Senior Member
Dec 1, 2009
114
329
plus.google.com
Setherio, please divide a section for 2.3.3 DZ owners. the appropriate PC10IMG.zip for them is
multiupload.com/GH26HXLLES (md5 2ff42897cd27e0db425a2cf36c8bd078)
the mics_version command is: /data/local/tmp/misc_version -s 1.33.405.5
the push command is: adb push PC10IMG.zip /sdcard/

Thanks for the information. I updated the guide. :)
 
C

Cimer

Guest
Incase anyone did not know already gfree is the best way to root after the downgrade...visionary bricks phones. You can find gfree in the xda wiki.

Sent from my HTC Vision using XDA App
 

trzype

Member
Jan 31, 2009
31
7
Great guide. My first downgrade and I haven't bricked my phone
Thanks to all people that made it possible

Incase anyone did not know already gfree is the best way to root after the downgrade...visionary bricks phones. You can find gfree in the xda wiki.

Sent from my HTC Vision using XDA App

So AMT is ok for rooting after downgrade?

This package contains:

- gfree
- gfree_verify
- Superuser
- Busybox
- flash_image
- psneuter
- root_psn
- misc_version
- GingerBreak APK
 

Setherio

Senior Member
Dec 1, 2009
114
329
plus.google.com

trzype

Member
Jan 31, 2009
31
7
Used AMT. Got some error about 1.34 and "Double" but cliked Continue button anyway. Everything went fine.

I downgraded and rooted, went ahead and installed Cyanogen nightly. As did a couple others I've talked to who have downgraded as well.

I'm going for Virtuous 2.0.0. Can't live without Sense UI :D

Thanks again
 

Top Liked Posts

  • There are no posts matching your filters.
  • 237
    [GUIDE] Downgrade G2 (2.3.X) & DZ (2.3.X) & mT4g (2.3.4) & DHD w/ S-ON to Stock Froyo

    This guide is written for anyone who has "Stock Gingerbread" and wants to downgrade their phone which originally had "Stock Froyo". The following is a list of phone models this guide is intended for and that are known to work:

    Working Phone Models:
    • G2 (Vision)
    • Desire Z (Vision)
    • myTouch 4G (Glacier)
    • Desire HD (Ace)

    It should also be noted, this guide WILL NOT work with the following:

    Special Notes


    Table of Contents
    • Introduction
      1. Gaining Temp Root
      2. Changing Version Number to Allow Downgrade and Gaining SuperCID with a Goldcard
      3. Temp-Rooting to Backup (*Optional*)
      4. Downgrading
        • Manual Downgrade
        • Fastboot Downgrade
    • Sources
    • Troubleshooting
    • Change Log
    • Attachments


    I) Introduction
    This guide is written with the assumption that the user has previously used "adb". If you are unfamiliar with "adb" or do not even know what "adb" is, download the Android SDK (found at http://developer.android.com/sdk/index.html). There are a couple guides to help you get started setting up the Android SDK and understanding ADB. If you have not installed the Android SDK or you are unfamiliar with ADB, please take some time and read a couple guides to get a basic understanding of it.


    I - 1) Gaining Temp Root
    1. Download the attached files, unzip them, and place the files in your platform-tools folder. To elaborate, place the fre3vo file inside of the View attachment fre3vo.zip file in your platform-tools folder and the misc_version file inside the View attachment misc_version_01.zip file in your platform-tools folder.
    2. Make sure you have your sdcard inserted in your phone, and you are NOT in USB Storage Mode, and your sdcard is NOT FULL.
    3. Run the following command to verify the exploit has access to what it needs. (Only the first line is the command. The second line should be the result returned if all goes well.)
      Code:
      [B]> adb shell cat /dev/msm_rotator[/B]
      [I]/dev/msm_rotator: invalid length[/I]
    4. If you received the same message, you're good to continue on. If not… refer to the troubleshooting section of the guide before you continue.
    5. Run the following commands from your platform-tools directory.
      Code:
      [B]> adb push fre3vo /data/local/tmp
      > adb shell
      $ chmod 777 /data/local/tmp/fre3vo
      $ /data/local/tmp/fre3vo -debug -start FAA90000 -end FFFFFFFF[/B]
    6. After you enter that command, you should see something similar to the last few lines in the following displayed.
      (It may take a minute or two. From what I can tell, this appears to be the quickest method as the exploit seems to be found in the latter regions.)
      Code:
      [I]Buffer offset:      00000000
      Buffer size:        8192
      
      Scanning region fb7b0000...
      Scanning region fb8a0000...
      Scanning region fb990000...
      Scanning region fba90000...
      Potential exploit area found at address fbb4d600:a00.
      Exploiting device...[/I]
      • If the exploit works, you will be kicked out of ADB shell, proceed to Step #8.
      • If the above does not work, and fails, you can try the following, and hopefully one will work, try the following (you must reboot your phone before you try another set):
        Code:
        [B]$ /data/local/tmp/fre3vo -debug -start 10000000 -end 1FFFFFFF
        $ /data/local/tmp/fre3vo -debug -start 20000000 -end 2FFFFFFF
        $ /data/local/tmp/fre3vo -debug -start 30000000 -end 3FFFFFFF
        $ /data/local/tmp/fre3vo -debug -start F0000000 -end FFFFFFFF
        $ /data/local/tmp/fre3vo -debug -start E0000000 -end EFFFFFFF[/B]
    7. If you did get kicked out of adb shell, open it again. You should now see # instead of $, thus granting you temp root. Go ahead and exit out of shell to proceed to the next stage.
      Code:
      [B]> adb shell
      # exit[/B]


    I - 2) Changing Version Number to Allow Downgrade and Gaining SuperCID with a Goldcard
    1. If you followed the first portion of this, you should of unzipped View attachment misc_version_01.zip ad View attachment flashgc.zip in the platform-tools directory.
      If you haven't done that yet, do that now and then run the following commands from your platform-tools directory.
    2. Code:
      [B]> adb push misc_version /data/local/tmp/misc_version
      > adb push flashgc /data/local/tmp/flashgc
      > adb shell chmod 777 /data/local/tmp/*
      > adb shell
      # cd /data/local/tmp
      # ./misc_version -s 1.00.000.0[/B]
      [I]--set_version set. VERSION will be changed to: 1.00.000.0
      Patching and backing up partition 17...[/I]
      [B]# ./flashgc[/B]
      *Note: If you get the following error, please make sure your sdcard is inserted in your phone and is NOT mounted to your computer (ie: make sure you are NOT in USB Storage Mode). This is a fairly common error and/or oversight many people tend to miss. Please double check this before continuing.
      Code:
      Error opening backup file.
    3. Code:
      [B]# sync[/B]
    4. Double check and make sure everything looks good so far by running the following command (still in adb shell).
      Code:
      [B]# dd if=/dev/block/mmcblk0p17 bs=1 skip=160 count=10[/B]
      [I]1.00.000.010+0 records in
      10+0 records out
      10 bytes transferred in 0.001 secs (10000 bytes/sec)[/I]
    5. BE SURE TO BACKUP ANY DATA!!!***


    I - 3) Temp-Rooting to Backup
    If you have nothing to back up or don't care to back anything up, proceed to the next section.

    Credit goes to Nipqer from #g2root for providing me with this method.
    1. Download the attached file: View attachment Vision-fre3vo-temp-root.zip
    2. Extract the contents to your platform-tools directory.
    3. Run the following commands in command prompt while in platform-tools directory:
      Code:
      > adb push su /data/local/tmp/
      > adb push busybox /data/local/tmp/
      > adb push fixsu.sh /data/local/tmp/
      > adb install SuperUser.apk
      > adb shell chmod 755 /data/local/tmp/fixsu.sh
      > adb shell /data/local/tmp/fixsu.sh
    4. Download a backing up application such as...
    5. Make a backup!


    I - 4) Downgrading

    I - 4a) Manual Downgrade
    1. Rename the downloaded rom to it's proper update name:
      (Please note, the filenames MUST be all uppercase except for the extension, and if file extensions are hidden, do not include ".zip"):
      • G2: "PC10IMG.zip"
      • Desire Z: "PC10IMG.zip"
      • myTouch 4G: "PD15IMG.zip"
      • Desire HD: "PD98IMG.zip"

    2. Place the zip file in the root of your sdcard.
    3. Reboot your phone into bootloader by typing the following command:
      Code:
      [B]> adb reboot bootloader [/B]
    4. After your phone has entered bootloader, press the power button. It will then scan for the associated rom file and ask you to update by pressing a key.
    5. Press the key it requests to perform the update.
      DO NOT INTERRUPT THIS PROCESS.
      Your phone will reboot once or twice - this is completely normal.
      This process will take roughly 5-10 minutes so make sure your phone is plugged in, either to an outlet or your computer.
    6. Once the process is finished, it will ask you to reboot by pressing a key. Press the associated key and it will reboot into the Stock Froyo rom!
    7. After booting into Android 2.2, DO NOT update the OTA that is around 70MB. That is the update to Gingerbread. There is one update that will come before that, that is a lot smaller in size, which is the WiFi-Calling update - that update is okay to install.


    I - 4b) Fastboot Downgrade
    1. Rename the downloaded stock rom "StockRom.zip" (if extensions are hidden, rename it "StockRom").
    2. Place the downloaded stock rom zip file in your platform-tools directory.
    3. Download the attached file View attachment fastboot.zip. In the zip archive there are three folders, "windows", "mac", and "linux".
    4. Extract the file from the associated with your operating system and place it in platform-tools directory.
    5. In command prompt, type the following command to reboot into bootloader:
      Code:
      [B]> adb reboot bootloader[/B]
    6. Make sure your device is recognized by typing the following command.
      Code:
      [B]> fastboot devices[/B]
    7. If you device is recognized, it should return a serial/model number.
    8. Code:
      [B]> fastboot oem rebootRUU[/B]
    9. Your phone should now reboot into a black screen with a gray/silver "HTC" logo on it.
    10. Next we flash the Stock Rom. This may take a few minutes as it transfers the file to the phone then attemps to update (downgrade).
      Code:
      [B]> fastboot flash zip StockRom.zip[/B]
    11. In rare cases the flash stops and the user gets a warning to repeat the flash immediately - no panic, just run the "fastboot flash zip StockRom.zip" (only this command, not the rebootRUU one) again and it will work.
    12. When it finishes, wait a minute or two (just in case) then reboot your phone by typing:
      Code:
      [B]> fastboot reboot[/B]
    13. After booting into Android 2.2, DO NOT update the OTA that is around 70MB. That is the update to Gingerbread. There is one update that will come before that, that is a lot smaller in size, which is the WiFi-Calling update - that update is okay to install.


    II) Sources:

    If anyone needs further help and would prefer messaging me, feel free.

    III) Troubleshooting
    [...] If [the downgrade] does not work, Right click your Command prompt, Select All, Right click again. Then go to pastebin.com, paste there, Scroll down, name it and hit submit. After that post the link here and we'll take a look at it.

    EVERYONE: If you want a faster diagnostic please do this in advance and other people can see your mistakes.

    You can also join the IRC channel #g2root on irc.freenode.net and ask questions in there. If you are unfamiliar with IRC, you can go to http://webchat.freenode.net and pick an alias, for channel type in #g2root and enter the reCAPTCHA and connect.


    I wanted to give credit to specific individuals whom have helped write this guide, provided important feedback to further improve this guide, and/or in any other way further improved this guide. I think these invidiuals should be recognized, as if it were not for them, this would wouldn't be as elaborate, dynamic, and informative as it is. So a special thanks to, Cimer, strawmetal petarpLab, iDylan1357, asharma5290, guhl, pierre_ja, and skorgon from #g2root. And I would also like to recognize and give a major thanks to Nipqer whom offers a lot of support with constant responses helping assist those whom ask for help both in this thread as well as on IRC. And he is always making sure I keep this as updated as it can be.



    IV) Change Log
    • 2023/04/14
      • I'm no longer supporting this thread anymore however I will try to update it if someone messages me with an issue. I don't have time anymore unfortunately. I did however update the downgrade ROM for the G2. The link in the mirror is currently hosted on my google drive. If there's a problem let me know in a private message.
    • 2013/06/14
      • Update ratherphallic.co.cc links to ratherphallic.tk. -Nipqer
    • 2012/11/11
      • Made some minor changes (grammar, spelling, layout/format).
      • Added links to guides which fix the issue with Desire HD (Ace) w/ Sense 3.x
    • 2012/05/22
      • Changed "fastboot" attachment to have 3 folders ("windows","linux",and "mac") each with "fastboot" in it instead of having "fastboot-linux", "fastboot-mac", and "fastboot-windows.exe".
      • Changed fastboot portion of guide to reflect change to attachment for easier usability.
    • 2012/04/21
      • Updated strawmetal's PDF document for G2/Desire Z Downgrade.
      • Added link to strawmetal's tools used in his PDF Guide.
    • 2012/03/07
      • Added a PDF file that strawmetal was kind enough to make for Vision users.
      • Added links to attached files in the guide where I reference them.
    • 2012/02/03
      • Changed link to the Stock Vision (G2) Rom and added mirrors.
      • Changed link to the Stock Vision (Desire Z) Rom and added mirrors.
      • Added mirrors to the Stock Glacier (myTouch 4G) Rom.
      • Changed link to the Stock Ace (Desire HD) Rom and added mirrors.
    • 2012/02/03
      • Added a guide to help individuals whom have used the "official" htcdev.com unlocker method.
    • 2012/02/03
      • Fixed link for the G2, Desire Z, and Desire HD (thanks to repast & cmstlist.
    • 2012/04/13
      • Possible exploit found for Desire HD updated to latest OTA update (which patched our current method).
    • 2012/01/28
      • Fixed link for myTouch 4G as megaupload has been taken down. Also added mirrors for myTouch 4G Stock Rom.
    • 2011/12/20
      • Clearified which phone models this guide is intended for as well as noting that the Doubleshot does not work.
      • Made note that a recent OTA patch for the Ace, giving it Sense 3.x, has patched this method and this method will no longer work on Ace models which have Sense 3.x
    • 2011/12/17
      • Added new goldcard generator and simplified the guide.
    • 2011/10/27
      • Changed the download link for the Desire HD.
      • Added MD5 checksums next to the rooms.
    • 2011/10/26
      • Re-added the manual downgrade method due to people having issues with the fastboot method.
    • 2011/10/23
      • Fixed a slightly error in code during the temp-root backup section. Had "adb install install Superuser.apk", replaced it with "adb install Superuser.apk"
    • 2011/10/22
      • Added a method to be able to backup data prior to downgrading! (thanks to Nipqer from #g2root)
    • 2011/10/20
    • 2011/08/26
      • Changed modified version number for each device to 1.00.000 as it is more universal and works for each one.
      • Made it more clear to extract the attached files and place them in the platform-tools directory for use.
    • 2011/08/06
      • Added a couple links to ADB guide.
    • 2011/08/05
      • Added myTouch 4G
      • Added link to an "adb" guide.
      • Changed title from "[GUIDE] Downgrade G2 2.13.531.8 (2.3.3 T-Mobile Rom w/ S-ON) & DZ 2.3.3 w/ S-ON" to "[GUIDE] Downgrade G2 (2.3.3) & DZ (2.3.3) & mT4g (2.3.4) w/ S-ON to Stock Froyo"

    V) Attached Files
    4
    I have updated the PDF with changes related to new gfree 1.0.

    Download here http://d-h.st/j97
    4
    Thanks for the tips Cimer, I edited the post, hopefully that clarifies it a bit more.

    I've been a quiet browser here on XDA for quite a while but I believe that was actually the first post I made =3 It took me a while to try to get it formatted... fluently / tried to make it easy to read and follow.

    And hey, if it wasn't for you all posting the logs from #g2root, I would of never gotten my G2 back to being rooted. :) I think I had like 8 different pages open when I was doing it, reading the chat log, reviewing the pastebin data, et cetera. But it worked, after searching every day, the trick has been found.

    On a side note, I picked the range "-start FAA90000 -end FFFFFFFF" because it appears that the exploit is most likely within that range. It was for yours "FBB47C00:1400", mine was "FBB4D600:A00", and a friend of mine was also an FBB*.
    4
    Re: [GUIDE] Downgrade G2 (2.3.X) & DZ (2.3.X) & mT4g (2.3.4) & DHD w/ S-ON to Stock F

    I included the guide for rooting in the pdf given in the op. You could use that.

    Sent from my HTC Vision using Tapatalk 2
    3
    Setherio, please divide a section for 2.3.3 DZ owners. the appropriate PC10IMG.zip for them is
    http://www.multiupload.com/GH26HXLLES (md5 2ff42897cd27e0db425a2cf36c8bd078)
    the mics_version command is: /data/local/tmp/misc_version -s 1.33.405.5
    the push command is: adb push PC10IMG.zip /sdcard/