Remove All Ads from XDA
Honor 9 Lite

How to DOWNGRADE Desire S with S-ON

17 posts
Thanks Meter: 6
By newrad67, Junior Member on 14th May 2011, 09:52 AM
Post Reply Email Thread
Warning! I don't recommend this to users who are new to Android since there is a possibility of bricking your device. I will not be responsible if this happens.

It will downgrade everything even the HBoot using a HTC signed ROM. I've downgraded RUU_Saga_Telstra_WWE_1.36.841.3 with HBoot 0.98.0002 to Hboot 0.98.0000 of RUU_Saga_HTC_Thailand_1.35.1113.2.

First you need below tools and applications. I will not explain everything since I'm assuming you already know how to use it and make it.

1. ADB tool to access you device thru shell.
2. ADB driver - you may install HTC Sync since it has ADB driver in it.
3. HEX Editor - I used HxD.
4. Spare micro SD with Goldcard.
5. Card reader to make your life easier.
6. ROM you will use to downgrade(rename it to
6. GingerBreak-v1.20.apk to temp root our device.

Step 1: Copy GingerBreak-v1.20.apk to your spare micro SD and insert it into your phone.

Step 2: Enable USB debugging in your device and connect it to your PC(Charge only). Make sure the drivers are installed properly. If not, install HTC Sync.

Step 3: Install and run GingerBreak-v1.20.apk. It will force close other apps(this is normal just close it). The gingerbreak application will promp that something goes wrong with the rooting(can't remember the actual spiel) but actually we already have our temp root.

Step 4: Run you ADB tool and issue command su to have root access. You can now see in your device that Superuser app is prompting you to allow the ADB root access. Accept it.

Step 5: On the # prompt, issue command dd if=/dev/block/mmcblk0p17 of=/mnt/sdcard/mmcblk0p17.img (to copy mmcblk0p17 to your SDcard). Power off your device and copy mmcblk0p17.img to your PC.(You can also use the command shell to copy it into your PC if you know how to do it).

Step 6: Open mmcblk0p17.img using your Hex editor. On the 11th line(I think), modify the current version to 1.28.401.1(since this is the lowest version I know). Save it and copy back to SDcard. Insert the sdcard and turn your phone on.

Step 7: Run GingerBreak-v1.20.apk again and follow step 3 to 4.

Step 8: On the # prompt, issue command dd if=/mnt/sdcard/mmcblk0p17.img of=/dev/block/mmcblk0p17 (to copy back mmcblk0p17.img to your phone). Do this as quickly as possible since the temp root access sometimes loose its effect.

Step 9: Power off your device and remove your SDcard. Using your card reader, delete everything(not format) in your microSD(with Goldcard) and paste your

Step 10: Hold volume down + power to boot to recovery and the phone will do the installation itself. Wait until you have your downgraded ROM.

This is how I do it. Hope you won't encounter any problem with this procedure. Good luck!

I want to give thanks to all the XDA members for the knowledge I acquired for this procedure and to the developer of Gingerbreak.

You may also check sonikz procedure on post #4. I think his procedure is faster. You may use which one is easier for you to follow.
The Following 6 Users Say Thank You to newrad67 For This Useful Post: [ View ] Gift newrad67 Ad-Free
14th May 2011, 10:33 AM |#2  
panosfx's Avatar
Senior Member
Flag Athens
Thanks Meter: 67
Downgrade to what?To Froyo?
And for what reason?
Sorry for that noob question...
14th May 2011, 10:47 AM |#3  
Senior Member
Flag Veldhoven
Thanks Meter: 7
Originally Posted by panosfx

Downgrade to what?To Froyo?
And for what reason?
Sorry for that noob question...

Good question i think, if i remember well, on the desire (or HD?) sometimes downgrading was a way of getting to a version of software where you then could get root again !From that point on you could get a recovery installed and install some nice roms. I dont know if thats whats going on here, i wouldn't dare to hope that ...?
14th May 2011, 10:59 AM |#4  
Flag Gloucester
Thanks Meter: 11
Angry Me n00b me downgrade
Newrad67, I have compiled a n00b way to achieve very similar results:

First off you need to create a Gold Card
Use the memory card that came with the phone, may as well hey!

Install Goldcard helper from market, run it and copy the CID for MMC2

This number has already been reversed so go to here, fill out the required fields.

That will then email you an image file. You can then using Gold Card Tool flash your image file to your phones SD card via the phones USB cable.

Next for the actual downgrade
You'll need this unzipped

in a command prompt, goto the directory you unzipped to
connect the phone via USB



adb push misc_version /data/local/tmp
adb push GingerBreak /data/local/tmp
adb shell chmod 777 /data/local/tmp/misc_version
adb shell chmod 777 /data/local/tmp/GingerBreak

This copies the files to the phone and changes the permissions so they will function


adb shell

This will enter the terminal for the phone



This will then temp root the phone you should now have # at the terminal prompt instead of $, which means you have higher privileges

From this point you can then run misc_version (Thanks to Blezz for the version number) This changes the version reported by the phone to 1.27.405.6, you cannot check this on the phone tho, as it will still report the other number.


cd /data/local/tmp
./misc_version -s 1.27.405.6

From here you can then install the update/downgrade from the exe, no need to dump zip files or anything. As with anything here, results may vary and I won't be buying new hardware if it breaks yours! But it works a treat on mine.
The Following 2 Users Say Thank You to sonikz For This Useful Post: [ View ] Gift sonikz Ad-Free
14th May 2011, 11:06 AM |#5  
brokenworm's Avatar
Senior Member
Thanks Meter: 134
This can be used with paulobriens test signed RUU HTC update to get root/boot/recovery installed on s-on .
If it just were public

Sent from my HTC Desire S using XDA Premium App
14th May 2011, 11:32 AM |#6  
OP Junior Member
Thanks Meter: 6
Originally Posted by panosfx

Downgrade to what?To Froyo?
And for what reason?
Sorry for that noob question...

This is why I recommend this only to advance users.

Our Desire S with S-On was released with Gingerbread ROM and Hboot that still not possible(as of now) to have custom boot recovery. Since we are on S-On, it is still not possible to be rooted and use custom ROM.

As far as I know, we don't have any official ROM except for Gingerbread. Correct me if I'm wrong. The list can be seen in this post.

I'm just sharing this to people who wants to change their ROM if they want to change to a different one. Like me who installed the latest ROM from TELSTRA and find the bloatware annoying. I've done this to get back to the ROM I'm more comfortable using.
14th May 2011, 11:43 AM |#7  
Flag Gloucester
Thanks Meter: 11
Yeah I'm pretty much with you mate, no way to do anything more practical than flash a clean European Rom currently..... Not really a vast amount of progress either. Anything we should be doing to help get permanent root? Anyone?

Sent from my HTC Desire S using XDA App
15th May 2011, 05:03 PM |#8  
Flag Riyadh
Thanks Meter: 8
It works on my s-on DS
Thanks a lot
15th May 2011, 05:09 PM |#9  
Senior Member
Thanks Meter: 61
i really like it how sonikz is doing now like it was his idea how to downgrade it using adb gingerbreak and misc_version lol
i'm gonna stop my rooting tries + supporting here for the desire s, hating such people like him
15th May 2011, 06:04 PM |#10  
Flag Gloucester
Thanks Meter: 11
I never said it was my idea and I have in a posted my thanks to the relevant people in other threads, I didn't mean to rub anyone the wrong way... I hadn't seen a adb version of gingerbreak until Friday and I'm sure you know the apk is very unpredictable or at least it is on my phone so I couldn't use misc_version, it just kept kicking errors.... Hey I just threw it out there, my bad
15th May 2011, 06:16 PM |#11  
Senior Member
Thanks Meter: 61
no it isnt the apks fault, maybe u forgot to use "su" in adb shell after using the apk, which u dont need for the command line version
anyway, maybe there is a way to get past the s-offf
in titanium backup there's a recovery exploit to remove files from s-on phones
we just need to know how the exploit is working and if it still working with 2.3

2nd option is i am getting a 2nd desire s soon.. it's a bugged on, radio destroyed and he don't get it repalced so he gives it me
maybe i can get the desire hd bootloader running somehow.. even if i am sure it will be a lot of work to get in
Post Reply Subscribe to Thread

Guest Quick Reply (no urls or BBcode)
Previous Thread Next Thread
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes