FORUMS
Remove All Ads from XDA

[GUIDE][30/06/2011]Root AND Downgrade Desire Z/G2(S-OFF/ClockWorkMod) -No Gingerbread

493 posts
Thanks Meter: 57
 
By Aegishua, Senior Member on 29th April 2011, 04:35 AM
Post Reply Email Thread
This guide is now obsolete. Please use this guide instead.




For Gingerbread Phones, Please use this guide.

Hey guys, this is probably the easiest guide to follow for rooting a branded desire Z. The reason why this can sometimes be hard is cause it uses a unique identifier (INFOCID) and the companies that brand the phones ONLY want roms from their company on them. This stops us from using a WWE rom like every else to downgrade and then root.

But ultimately, the reason I'm making this is because every other guide I've read constantly links you to other guides or other pages and it sorta annoyed me. So after I figured it all out I posted one concise guide that doesn't redirect you 50 times.

Now I’m gonna run you through EVERYTHING so you won’t get stuck anywhere.


This guide will work with:

Device: Desire Z or G2
Firmware Version: Any Firmware version will be fine (All you need to do is downgrade using step 1)
Android Version: Froyo or any previous variation of Android (Absolutely no gingerbread device will root with this method)



Btw, I take no responsibility for any damage taken by using these procedures. Sorry =P


Also if you don't have ADB and Fastboot set up then go ahead and follow the guides on the first two posts here. -Thanks nephron



Quote:
Originally Posted by g4b4g3

If your INFOCID is NOT one of these you need to make a goldcard to downgrade!
HTC__001
HTC__032
HTC__E11
HTC__203
HTC__Y13
HTC__102
HTC__405
HTC__304
HTC__A07
HTC__N34
HTC__J15
Which can be checked by typing the following two commands:

adb reboot bootloader
fastboot oem boot

If your CID matches one of the CID's above then you can skip Step 1.

1. Creating a Goldcard:

Prerequisites:

ADB Set up and running fine (to check if it is working just connect your phone and have USB debugging enabled. Then type adb devices in your CMD Prompt)
HxD Hex Editor (see attachments of post 1)
USB Debugging enabled on your phone

1.Firstly we need to mount the memory card on a windows PC.

2. Format the memory card as FAT32 using all the default options.

3. Mount the memory card on your Phone. Then give it a couple of seconds.

4. Remount the memory card on your PC.

5. Find your CID by using the follow command in your cmd prompt (YOU NEED ADB)
Code:
adb shell cat /sys/class/mmc_host/mmc2/mmc2:*/cid
6. Use the excel sheet provided to reverse the CID (see Attachments)

7. Goto this website and send yourself a goldcard.img
http://psas.revskills.de/?q=goldcard

8. Run HxD hex editor AS AN ADMINISTRATOR! (I can’t stress how important having admin rights is)

9. Go to Extras > Open Disk Image. Then select your goldcard.img

10. Go to Extras > Open Disk. IMPORTANT: Select your memory card UNDER the Physical Drives category. DO NOT open the logical drive.

11. Switch to your goldcard.img tab. Go to Edit > Select All. Then Edit > Copy.

12. Go to the physical drive tab and select the lines 00000000 until you get to the one with 00000170.

13. Go To Edit > Paste Write.

14. You should have a huge block of red characters now. This is good btw.

15. Mount your SD card on your Phone and let it detect it. If it comes up with a corrupt SD card error you have done it wrong and you may have to start over.

16. You are done with the goldcard.


2. Downgrading and Debranding


Before you start this please do the following:

1a. Download the RUU I’ve linked (it should be a ~300mb exe file) -Thanks g4rb4g3
ii. If you are a BELL User. Please download this RUU instead.

1b. Run the setup until you get to the screen with the tick boxes (Some Users may have to run this as an Administrator)

1c. Leave the setup running and go to C:\Users\<your account name>\AppData\local\temp ( Or Try %AppData%\Local\Temp\ ). Then right click and Sort By Date Modified. Look for the most recently created folder which should look like {xxxxxxx-xxxxxx-xxxxxxxx}. Then navigate into it and its then into its one folder. Look for rom.zip and copy that to your goldcard/memory card.

1d. Rename the rom.zip on your memory card to PC10IMG.zip (Make sure it is exactly the same as the way I've typed it there)

1e. Mount your sd card back onto your phone.

2. Download the attachments (misc_version & psneuters) and extract them in a folder like C:\RootVision\


Now you are ready to begin:

1. Open a CMD prompt window

2. Navigate your way to the folder with psneuter & misc_version IN CMD PROMPT. (So the cmd prompt window should be something like this C:\RootVision> )

3. Now we will use the following 5 commands one after the other
Code:
  adb push psneuter /data/local/tmp
  adb push misc_version /data/local/tmp
  adb shell chmod 777 /data/local/tmp/psneuter
  adb shell chmod 777 /data/local/tmp/misc_version
  adb shell /data/local/tmp/psneuter
  adb shell
4. After the last command you should have a # and a flashing line for you to enter text. This is good. (If you get a $ you have done it wrong and should try typing the commands out again)

5. Now you have the # type the following command in: (This will spoof the radio version)
Code:
/data/local/tmp/misc_version –s 1.33.405.5
Then go ahead and type:
Code:
exit
6. Type this command into your cmd prompt (btw you should be back with the normal C:\RootVision>)
Code:
adb reboot bootloader
7. Once on your white screen with colourful text you can go ahead and press the power button ONCE

8. Now just wait for the rom to install and verify. If you get INCORRECT CID your gold card doesn’t work or your CID doesn't match and you'll need a goldcard. (Go to Step 1. and make a goldcard for your phone)

9. Go ahead and install the rom when it asks you.

10. You are done downgrading and can now begin the Rooting process.

See Post 2 For Rooting
Attached Files
File Type: zip psneuter.zip - [Click for QR Code] (258.9 KB, 2882 views)
File Type: zip misc_version_02.zip - [Click for QR Code] (281.4 KB, 2615 views)
File Type: zip HxDen.zip - [Click for QR Code] (788.2 KB, 2069 views)
File Type: zip CID Reverser.zip - [Click for QR Code] (14.3 KB, 1954 views)
The Following 13 Users Say Thank You to Aegishua For This Useful Post: [ View ] Gift Aegishua Ad-Free
 
 
29th April 2011, 04:38 AM |#2  
Aegishua's Avatar
OP Senior Member
Flag Sydney
Thanks Meter: 57
 
More
Assuming all as gone well and you now have a rom without superuser but you have a baseband version that is 1.34xxxx.

Alright, let’s begin.

Prerequisites:

Download psneuter
Download gfree 0.5
Download root_psn
Download flash_image
Download the Desire Z hboot
Download Clockwork Recovery
ALL of these are in the attachments section
They all should be extracted into the same folder. Use something simple like C:\RootVision\Root



3. Root your Desire Z!

Before you start:

Enable USB Debugging and Allow Unknown Market Installations again.
Also delete the PC10IMG.zip on your phone if you downgraded.

Okay lets go:

1. Now Assuming you succeeded at the last part you should have a stock-ish rom without superuser. What we want to do is start by pushing all the files across with the following adb commands (use in cmd prompt the same way you pushed files in 2.)
Code:
  adb push psneuter /data/local/tmp/
  adb push gfree /data/local/tmp/
  adb push busybox /data/local/tmp/
  adb push root_psn /data/local/tmp/
  adb push flash_image /data/local/tmp/
  adb push su /sdcard/
  adb push hboot-eng.img /data/local/tmp/
  adb push Superuser.apk /sdcard/
  adb shell chmod 755 /data/local/tmp/*
2. Alright now we have all the files we need to root the phone. Input the following command. This is just putting our clockwork recovery in a convenient place with an easy name.
Code:
  adb push recovery-clockwork-3.0.2.4-vision.img /data/local/tmp/recovery.img
3. Now we’re gonna temp root again by typing in the following:
Code:
  adb shell /data/local/tmp/psneuter
  adb shell
4. This should leave us with another #. Now enter the following commands:
Code:
  cd /data/local/tmp
  ./gfree -f -b hboot-eng.img
  ./flash_image recovery recovery.img
  ./root_psn
  sync
5. Type in: (thanks for the correction john_d1974)
Code:
reboot
6. You should have a rooted phone with superuser after the reboot. Also it will have clockworkmod, SuperCID, secu-flag off & an Unlocked HBOOT-ENG.



If gfree 0.5 doesnt work for you then this section is for you:

Prerequisites:

Download psneuter
Download gfree 0.2
Download root_psn
Download flash_image
Download the Desire Z hboot
Download Clockwork Recovery
ALL of these are in the attachments section
They all should be extracted into the same folder. Use something simple like C:\RootVision\Root


1. Now Assuming you succeeded at the last part you should have a stock-ish rom without superuser. What we want to do is start by pushing all the files across with the following adb commands (use in cmd prompt the same way you pushed files in 2.)
Code:
  adb push psneuter /data/local/tmp/
  adb push gfree /data/local/tmp/
  adb push busybox /data/local/tmp/
  adb push root_psn /data/local/tmp/
  adb push flash_image /data/local/tmp/
  adb push su /sdcard/
  adb push hboot-eng.img /data/local/tmp/
  adb push Superuser.apk /sdcard/
  adb shell chmod 755 /data/local/tmp/*
2. Alright now we have all the files we need to root the phone. Input the following command. This is just putting our clockwork recovery in a convenient place with an easy name.
Code:
  adb push recovery-clockwork-3.0.2.4-vision.img /data/local/tmp/recovery.img
3. Now we’re gonna temp root again by typing in the following:
Code:
  adb shell /data/local/tmp/psneuter
  adb shell
4. This should leave us with another #. Now enter the following commands:
Code:
  cd /data/local/tmp
  ./gfree -f
  ./flash_image recovery recovery.img
  ./root_psn
  sync
5. Type in: (thanks for the correction john_d1974)
Code:
reboot
6. You should have a rooted phone with superuser after the reboot. Also it will have clockworkmod, SuperCID and secu-flag off.


4. Installing your own custom ROM
This section is just in case you don't know how to install a custom ROM.

Note: Always make sure the ROM you are installing is FOR YOUR PHONE! If you install a ROM meant for another phone you could potentially damage it or brick the phone itself.

1. Download the ROM you want and copy it to your SD Card. (Try to keep it in a folder that is easy to get to)

2. Turn off your phone.

3. Hold down the volume down button and then press the Power Button. This should take you to a white screen with lots of colourful text. One of which says FASTBOOT or FASTBOOT_USB.

4. Press the power button ONCE when BOOTLOADER is selected(BLUE)

5. Navigate using the volume buttons until you get to RECOVERY and then press the Power Button again.

6. The HTC Logo will come up then you will get a black screen with text.

7. From here you should Always do a NANDROID Backup so you can restore a working ROM if something fails.

NANDROID Backup
7a. Navigate to 'backup and restore' and then select it by pressing the trackpad button.
7b. Select 'Backup' and then let it finish. Once done you have a backup of your android.

8. Now you want to do these before you start installing:
a. 'wipe data/factory reset
b. 'wipe cache partition'
c. Go into 'advanced' and select 'Wipe Dalvik Cache'

9. Now you can install the ROM itself. This is done by selecting 'install zip from sdcard' in the main menu. Now you can select 'choose zip from sdcard' and just go ahead and select the ROM you copid to your sd card earlier.
9a. If the phone says verification failed then just toggle the signature verification option.





FAQ - For Anyone with any issues.

1. My version is 1.7xxxx or higher. Can I use this method?

Yes you can. This method will downgrade your phone to 1.34 so your radio is no longer locked thereby allowing you remove the secu-flag, add superCID and allow you to install a custom recovery (like ClockWorkMod)


2. My CID is XXXXXXXX and isn't on that list, will this method still work?

Yes it will. The reason why it will work is because a goldcard is essentially a manufacturers way of bypassing the CID checks used by ROMs. Therefore, by creating our own unique goldcards we can also bypass the CID check.


3. My CID is on the list that you mentioned. Do I need this goldcard?

No, you can skip the 1st step because when the ROM checks your phones CID it will match up perfectly and the phone will install the older radio without issue.


4. What Benefits does rooting a phone grant you?

Simply, it allows you to install any ROM of your choosing onto the phone as well as use custom kernels and certain applications that access locked functions on the phone. This can ultimately lead to; a longer battery life; more stable roms and more frequently updated roms; and finally an overall faster Android experience.


5. What is root access?

Root access essentially gives you access anything locked by the manufacturer on the phone. This most importantly means that you can read and write to any system partitions on the phone that would normally be locked.


6. Whats psneuter?

psneuter is an application used to grant temporary root access. This is done through an exploit in the android system and will give us a window to further exploit the system and ultimately grant us Permanent Root Access.

7. How do I find my CID?

To find your CID you run two commands. Firstly, in your CMD prompt you type 'adb reboot bootloader' when your phone is connected and USB debugging is active. This will restart your phone into its bootloader. Then once you see the words FASTBOOT_USB you type 'fastboot oem boot'. Then look for the words CID and then just read the 8 character CID.

Also there is a post with a screenshot here.

8. My phone will not find PC10IMG.zip

You will need to double check that the PC10IMG.zip is the correct ZIP file from the RUU that has been linked. It should be roughly 250mb in size and should be placed in the root folder of your SD Card. Also your SD Card must be compatible with your device (able to be read/written to). If you cannot access your SD Card from your Desire Z or G2 then there is probably something wrong with your SD Card. It should probably be reformatted.

9. Can I use this on the Desire Z/G2 running Gingerbread?

So far no one has been able to root the gingerbread version of android on the Desire Z/G2. Unfortunately, this guide still cannot root gingerbread desire Zs or G2s.

If there are any more, feel free to post them and I'll add them

10.I'm Missing my AdbWinApi.dll? What now?
Quote:
Originally Posted by espentan[U

][/U]
I don't know if you've figured this one out yet, but here's the solution to a potential cause.

You need to add the directory containing the "AdbWinApi.dll" to Windows' path under Environment Variables, so Windows know where to look for the necessary files when you enter commands in the shell.

For this exercise I'm going to assume that you have installed the Android SDK in the directory called "android-sdk-windows" on your C: hard drive. If you have it installed somewhere else, change the path I'm mentioning below accordingly.

Go to the Windows "Control Panel".
Click on "System and Security".
Click on "System".
Click on "Advanced system settings" in the left column of the window you're in.
Find the button called "Environment Variables" in the window that opens (it's at the bottom on the first tab).
Scroll down in the "System variables" box until you find "Path".
Select "Path" and click the "Edit" button.
At the very beginning of the input field called "Variable value" enter the following:
"C:\android-sdk-windows\platform-tools;" (without the quotes).
Do not remove any of the other paths, and make sure you have a semi colon at the end of the new path you're adding.
Reboot.

Now the windows command shell knows where to find the necessary DLL's and whatnot.

Attached Files
File Type: zip flash_image.zip - [Click for QR Code] (43.3 KB, 2122 views)
File Type: zip gfree_02.zip - [Click for QR Code] (197.6 KB, 1646 views)
File Type: zip gfree_05.zip - [Click for QR Code] (418.7 KB, 2054 views)
File Type: zip gfree_root_psn.zip - [Click for QR Code] (1.16 MB, 2335 views)
File Type: zip hboot&clockwork.zip - [Click for QR Code] (4.57 MB, 3954 views)
The Following 9 Users Say Thank You to Aegishua For This Useful Post: [ View ] Gift Aegishua Ad-Free
30th April 2011, 04:31 PM |#3  
faroreefer's Avatar
Senior Member
Thanks Meter: 6
 
More
will this work if i have 1.84.666.2?
3rd May 2011, 04:33 AM |#4  
faroreefer's Avatar
Senior Member
Thanks Meter: 6
 
More
anyone? thought?
3rd May 2011, 06:35 AM |#5  
Aegishua's Avatar
OP Senior Member
Flag Sydney
Thanks Meter: 57
 
More
Should work fine as long as you've got a Desire Z or G2 lol.
5th May 2011, 09:28 PM |#6  
john_d1974's Avatar
Senior Member
Thanks Meter: 11
 
More
hi, manageage to root the DZ sucessfully, however on step 5 you say

"5. Type in:
Code:

Reboot"

i got an Reboot: error not found

i retried with with "reboot" and was sucessful

The Following User Says Thank You to john_d1974 For This Useful Post: [ View ] Gift john_d1974 Ad-Free
7th May 2011, 02:35 PM |#7  
Senior Member
Flag diss
Thanks Meter: 12
 
More
Hi, im sure this has been covered before in other posts, but, could someone tell me, if i were to use the above method to downgrade and root etc, would this prevent me from doing an official upgrade, to, say gingerbread in the near future? Also is there any real benefits to going to gingerbread? I ask as im sure ive read somewhere its only possible to flash to cooked roms, not official ones (once downgraded and rooted etc).. this would concern me as ive moved over from win mo to android, and in my experiance, EVERY cooked unoficial rom i ever flashed (xperia x1) was simply rubbish, and i tried alot of them. (Even though people would say the roms would be fine, bugs smoothed out etc), i went back to stock in the end after constant dissapointment.
Sorry for the rant, just need to know where i stand.. thanks people..
10th May 2011, 12:23 PM |#8  
Aegishua's Avatar
OP Senior Member
Flag Sydney
Thanks Meter: 57
 
More
Quote:
Originally Posted by jmpcrx

Hi, im sure this has been covered before in other posts, but, could someone tell me, if i were to use the above method to downgrade and root etc, would this prevent me from doing an official upgrade, to, say gingerbread in the near future? Also is there any real benefits to going to gingerbread? I ask as im sure ive read somewhere its only possible to flash to cooked roms, not official ones (once downgraded and rooted etc).. this would concern me as ive moved over from win mo to android, and in my experiance, EVERY cooked unoficial rom i ever flashed (xperia x1) was simply rubbish, and i tried alot of them. (Even though people would say the roms would be fine, bugs smoothed out etc), i went back to stock in the end after constant dissapointment.
Sorry for the rant, just need to know where i stand.. thanks people..

It is pretty difficult to go back to stock updates from your carrier for example Vodafone. This is because of the unique CIDs used and the fact that it is extremely hard to find a stock ROM since no one can give you a NANDROID backup.

Anyways, there are numerous benefits to rooting your phone included with most ROMs. These benefits include longer battery life, faster ROMs & various other things depending on each chef.
10th May 2011, 05:48 PM |#9  
Senior Member
Flag diss
Thanks Meter: 12
 
More
Ok, thanks, but are the roms buggy at all, will some of the hardware not work properly, or will i have freezing probs etc, as i found this always to be the case with win mo roms?.. have you personally found a rom that works perfectly that includes htc sense? As i do like the UI..
My goal is to have all security off, full perm root, with a perfecly working sense rom that i can then overclock to a speed that works well with my particular phone, and to underclock when idle etc..

Thanks..
10th May 2011, 09:12 PM |#10  
Senior Member
Thanks Meter: 8
 
More
I need to verify that my Tmobile G2's INFOCID is compatible.

I typed in the two commands:
adb reboot bootloader
fastboot oem boot

The first one worked. The second command is not recognized once I'm in the bootloader. Can someone suggest a solution?
11th May 2011, 04:25 AM |#11  
Junior Member
Thanks Meter: 0
 
More
Newbie question,
how to unroot if i rooting the phone using this metode?
and how to go back to original rom?
Post Reply Subscribe to Thread

Guest Quick Reply (no urls or BBcode)
Message:
Previous Thread Next Thread
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes