{GUIDE} Perm-rooting the HTC EVO Shift!!! Recovery added


Retired Recognized Developer
Dec 10, 2009
south va.
ok first off i would like to give many thanks to all the people that help test and figure out the easiest and most effective way of pulling this off.
Joeykrim (for his help with figuring out the easiest way of implementing this)
Toastcfh (for providing us with the eng spl without this we would be nowhere!!)
scotty2 and Guhl (for all the insight they have given me over the past couple of weeks)
preludedrew (for helping me with testing and of course the recovery he working so hard on right now)
riggsandroid and Cosine83 (for helping test things out)

Now on to the good stuff!!

Please read each and every step in this guide and do them fully failure to do this exactly as it is layed out could result in a permanent brick as usual I am not responsible for anybody's failure to read directions

Step 1
ok download this file and extract it to the root of your sdcard

Step 2
make sure you have adb properly setup on your computer before continuing
temp root using either visionary or z4root
open up command prompt and cd to your sdk platform-tools directory
then type adb shell then su
if you havent already u must press allow on your device to enable su perms

Step 3
check the md5sum of both of the files to make sure they match
md5sum /sdcard/Shift/hboot_orig.bin
md5sum /sdcard/Shift/hboot_eng.nb0
386c19451e8dd18f9b98fad6b11be4c0 hboot_orig.bin
60ec1006e6ec2e8acb370d6aad35b17e hboot_eng.nb0

if these do not match do not continue redownload the files then check the md5's again

Step 4
Flash the eng spl!!! (dangerous part)
make sure these commands are exact or you could risk bricking your phone!!!
now you should still be in adb shell with root permissions
runs this command and DO NOTT!! reboot till I tell you to
dd if=/sdcard/Shift/hboot_eng.nb0 of=/dev/block/mmcblk0p18
you just flashed the eng spl!!! now lets make sure it took

Step 5
Check the md5 of new flash hboot and restore if necessary
run this command to pull the newly flashed hboot to your sdcard
dd if=/dev/block/mmcblk0p18 of=/sdcard/Shift/hboot_check.nb0
now we check the md5 to see if it matches
md5sum /sdcard/Shift/hboot_check.nb0
it should read 60ec1006e6ec2e8acb370d6aad35b17e
if the md5sum matches then congratulations its safe to reboot!! you can skip the next bit and continue on to step 6

if you absolutely cannot get the eng hboot to flash right then run this to restore the stock hboot
dd if=/sdcard/Shift/hboot_orig.bin of=/dev/block/mmcblk0p18
then pull it to check md5
dd if=/dev/block/mmcblk0p18 of=/sdcard/Shift/hboot_check1.bin
then check the md5sum
md5sum /sdcard/Shift/hboot_check1.bin
it should read 386c19451e8dd18f9b98fad6b11be4c0
if it doesnt keep trying until it does but DO NOT!! reboot till it matches

Step 6
check hboot and perm root!!
ok now reboot your phone into bootloader
turn off phone and hold power+vol down till it boots into bootloader
look at the top and make sure it says s off
if so reboot the phone back into android
put the phone into airplane mode
temp root with visionary
after your temp rooted then attempt to perm root with visionary (haven't tested perm root with z4 yet)
your phone will reboot and you are now officially perm rooted any changes you make will now stick on reboot
Recovery is coming soon!!!!!!



Retired Recognized Developer
Dec 10, 2009
south va.
for now this recovery does not backup your wimax keys
we shall do that manually and store them in a safe place just in case

Backup Wimax Partitions
dd if=/dev/block/mmcblk0p25 of=/sdcard/Shift/wimax.bin
dd if=/dev/block/mmcblk0p30 of=/sdcard/Shift/udata_wimax.bin
Flash Recovery Image
download this zip and extract the img to wherever you please on your computer
if you do not already have fastboot setup get it
cd to wherever the recovery was placed
then power down your device and hold power+voldown at the same time till it loads the bootloader
click on the fastboot option
fastboot flash recovery recovery.img
now boot into recovery and see if it worked if so create a nandroid backup!!!
Last edited:


Senior Member
May 16, 2010
Thanks, first of all. Second, perhaps I should wait and see if something comes out later that doesn't look as intimidating as this. Yeah, some might say its easy and what are you crying about? I'm not going to dive in right this minute because I don't have confidence in my abilities with this yet.

Especially since I'm fighting keeping my eyes open. Me so sleepy. Maybe tomorrow I will be more with it.

Dread 7us

Inactive Recognized Developer
Jul 25, 2010
Worked like a charm! Thanks!! So much easier than what I had to do to root my hero originally or my girlfriend's evo. Thanks again!

Sent from my PG06100


Senior Member
Jan 15, 2011
Going to bed now, gonna spend my night off tomorrow rooting my Shift. A huge thank you to everyone involved, I wish I had the money to buy you all some coffee :(

Sent from my attic using a telegraph.


Senior Member
Sep 30, 2007
:eek: Every day I check the forums hoping today will be the day that perm root is achieved, and now I finally find that its happened...and I'm drunk out of my mind, now I gotta wait til i'm sober tomorrow to give this a go. Thanks to everyone involved!! Its appreciated! :D