Root Checker Tool (RCT) Analysis

Lekerstein · Oct 23, 2015 at 2:51 AM

Ok, so here are the hex values so far in /persist/rct:

Rooted: 61 42 0F 00 ("aB.." when converted to/viewed as ASCII)
Unrooted: 65 42 0F 00 ("eB")

Interesting. Ok now to package it and flash.

Lekerstein · Oct 23, 2015 at 4:19 AM

No go on bigjohnman's /persist/rct. I noted, though, that your /persist/rct.cfg has tagged you as rooted, so this may not be the cleanest /persist/rct.

I'm going to re-root and work through my partitions to see if I missed something that is continuing to trip rctd

Sent from my LG-H810 using Tapatalk

warri · Oct 23, 2015 at 2:13 PM

I'd advise against straight flashing bigjohbman's image, there is most certainly a serial code in the text file.

Lekerstein, you need to remember to replace both files with "unrooted" versions.

---------- Post added at 09:07 AM ---------- Previous post was at 09:05 AM ----------

bigjohnman said:
I got the warning that I was suspected of tampering with the phone's OS. I got around it by doing a DD of my factory BACKUP.img back onto my phone. I then rebooted, did the OS update and RE-rooted my phone OS using the same methods found in XDA. I am a linux user so I used my new BACKUP_10o.img to create the ROOTED_10o.img. Then just disk dumped it back to my phone. I'm currently working on tweaking the Recovery.img in an attempt to setup a custom recovery.
There is always a way.

---------- Post added at 03:53 PM ---------- Previous post was at 03:50 PM ----------

http://vps.banandana.com/h810.html
Follow the process below, but you will need these images above for the 10o OS version:
http://forum.xda-developers.com/g4/o...ot-lg-t3164765 (MAKE A BACKUP.img BEFORE YOU FLASH ROOTED.img)

We're you coming from 10i or 10g when you started? It might be possible that 10g didn't bother to look at the rct...

---------- Post added at 09:09 AM ---------- Previous post was at 09:07 AM ----------

Nowak4G said:
The problem is when I flash my backup of unrooted 10I, reboot, and try and take the OTA, it fails no matter what I try. Removed all root apps, xposed and modules and do full unroot via SuperSU. I never froze or disabled any apps. I tried factory reset and didn't help. I even tried to use someone else's backup of 10I thinking mine was in some way tainted with busybox or something.. So I'm guessing there is a flag that gets tripped like the OP is referring to or some other weird thing.

There most definitely is a flag that get tripped, you can see it in /persist/rct ...it even puts it in plain text for you. (See 1st and 2nd post)

---------- Post added at 09:13 AM ---------- Previous post was at 09:09 AM ----------

Check this response out...I haven't had time to verify but it's possible rctd checks sim serial? http://forum.xda-developers.com/showthread.php?p=63437713

bigjohnman · May 12, 2012 74 29 0

I too will UN-root and repost a Persist_UR.img... This may take me a little bit. I am on my work computer, and I stay busy, but I should get it posted today...

---------- Post added at 10:07 AM ---------- Previous post was at 09:28 AM ----------

MD5 CheckSum for Persist_UR.img (UR=UnRooted)
9aeada3385d2fbb23c755ef1a52dc3bc
http://androidtool.duckdns.org/Persist_UR.img <<< This has got to work now...
I went back to stock for you guys...
Now I must re-root my phone.
I really hope this helps.
Keep in mind that this is 10o software, as I can't downgrade to 10i.
Next we have to work on unlocking the boot loader!!! How do I get the boot loader files? is it in the boot.img that flashify creates when it backs up the boot files? I also have the recovery files, and can post them on my androidtools website quickly if needed.
As soon as we get this working though... I will disable that URL so I am not tracked down by the AT&T police.

niftium · Oct 23, 2015 at 4:04 PM

bigjohnman said:
I too will UN-root and repost a Persist_UR.img... This may take me a little bit. I am on my work computer, and I stay busy, but I should get it posted today...

---------- Post added at 10:07 AM ---------- Previous post was at 09:28 AM ----------

MD5 CheckSum for Persist_UR.img (UR=UnRooted)
9aeada3385d2fbb23c755ef1a52dc3bc
http://androidtool.duckdns.org/Persist_UR.img <<< This has got to work now...
I went back to stock for you guys...
Now I must re-root my phone.
I really hope this helps.
Keep in mind that this is 10o software, as I can't downgrade to 10i.
Next we have to work on unlocking the boot loader!!! How do I get the boot loader files? is it in the boot.img that flashify creates when it backs up the boot files? I also have the recovery files, and can post them on my androidtools website quickly if needed.
As soon as we get this working though... I will disable that URL so I am not tracked down by the AT&T police.

Unfortunately, the rooting flag persists across rooting/unrooting actions, so I think only the very first factory /persist/rct will give us what we need. Also, this persist_UR.img is throwing bad sector errors for me when I try to extract it.

I thought I had my store-bought stock 10G image here at work, but I can't find it. Fail.

Lekerstein · Oct 23, 2015

warri said:
I'd advise against straight flashing bigjohbman's image, there is most certainly a serial code in the text file.

Lekerstein, you need to remember to replace both files with "unrooted" versions.

Yep. While I was rooted previously, I had already edited my rct.cfg to say Not Rooted and keep my serial numbers. I then mounted my /persist image in Linux as su, deleted my /persist/rct and moved his /persist/rct into the mount. Changed permissions to su 0755 on the file and umounted back to image. In the end the phone thought it was my original image.

I'm digging the idea of a sim card check. Though it will get cumbersome to get a new sim card before every OTA.

Perhaps removing the sim and then taking the OTA without a sim card in would have the same effect? If AT&T stores our rooted status on their servers, that would just kill that check.

Sent from my LG-H810 using Tapatalk

bigjohnman · May 12, 2012 74 29 0

I have a SIM reader / writer if anyone needs a Sim card to be swapped, or anything.
I got it because I am going to India soon and want to know the difference from their sims and ours.

ExTREmE99 · Oct 23, 2015 at 5:25 PM

niftium said:
I still got the "suspected of rooting" message after I last tried a factory reset.

warri said:
The issue is that this flag/file is on the /persist partition and not effected by factory resets.

ah, gotcha. i've never used xposed on my G4, so i guess that is why i've never had problems unrooting, then updating the new OTA. carry on

ajent · Oct 24, 2015 at 2:45 AM

I too am stuck on the 10g update. Also had xposed installed, seems to be the common thing for people who cant seem to pass the root checker.
Re-rooted and ran through everything again to make sure I didn't miss anything, still failed after unrooted flash.

niftium · Oct 24, 2015 at 3:03 AM

I still have a SIM from my GS3 (daily driver prior to the G4), so I'll give it a shot. I was rooted w/ CM and XPosed installed almost from the day I bought it, but who knows, worth a shot.

ajent · Oct 24, 2015 at 3:22 AM

I pulled the sim out as update was downloading, turned phone back on, download finished but install still failed @ 4%.

niftium · Oct 24, 2015 at 3:24 AM

ajent said:
I pulled the sim out as update was downloading, turned phone back on, download finished but install still failed @ 4%.

Damn. But thank you for saving me a 320MB download on crappy DSL!

Lekerstein · Oct 24, 2015

I'll try with my wife's active sim tomorrow night. There's gotta be a way! BTW just to keep it going, I did have xposed installed and am on 10i. That does seem to be the consistent theme

Sent from my LG-H810 using Tapatalk

InsanityOnABun · Oct 24, 2015 at 4:38 AM

I never had xposed installed and I got the message consistently until it decided to work for me, so that wouldn't be the unifying factor.

tjunck · Oct 25, 2015 2 0 0

10o images

warri said:
I'd advise against straight flashing bigjohbman's image, there is most certainly a serial code in the text file.

Lekerstein, you need to remember to replace both files with "unrooted" versions.

---------- Post added at 09:07 AM ---------- Previous post was at 09:05 AM ----------

We're you coming from 10i or 10g when you started? It might be possible that 10g didn't bother to look at the rct...

---------- Post added at 09:09 AM ---------- Previous post was at 09:07 AM ----------

There most definitely is a flag that get tripped, you can see it in /persist/rct ...it even puts it in plain text for you. (See 1st and 2nd post)

---------- Post added at 09:13 AM ---------- Previous post was at 09:09 AM ----------

Check this response out...I haven't had time to verify but it's possible rctd checks sim serial? http://forum.xda-developers.com/showthread.php?p=63437713

If BigJohnMan's image will overwrite my serial #'s what are my options? My G4 came home from ATT yesterday and against all odds, is already at 10o. Is there a more technical procedure to simply root the phone?

Lekerstein · Oct 25, 2015 at 5:01 PM

See rooting guide here: http://forum.xda-developers.com/showthread.php?t=3180586

Sent from my LG-H810 using Tapatalk

warri · Oct 25, 2015 at 6:29 PM

My comment about serial numbers is was about his /persist img not his system.img

mu3g · Oct 26, 2015

I tried my roommates sim today after putting build.prop like the way it was, completely removing all root apps, removing Xposed, removing flashfire, unrooting (with SuperSu disabled and full unroot), debloating completely, but i got the usual 4% error and device suspected of rooting. I was very careful in making sure i was completely unrooted and no root apps, Xposed modules were installed...furthermore, made sure i was completely debloated.

Did anyone else have luck with a different sim? also, has anyone found a way to overwrite the persist image with a clean copy which has the root checker tool? Just fyi, i am on 10g

Lekerstein · Oct 26, 2015 at 1:12 PM

Yeah, I was able to flash a clean persist image. See this post: http://forum.xda-developers.com/showthread.php?p=63448788

However, after trying to take the OTA, I looked at /persist/rct again and the flag had been tripped again.

Sent from my LG-H810 using Tapatalk

ExTREmE99 · Oct 26, 2015 at 4:02 PM

mu3g said:
I tried my roommates sim today after putting build.prop like the way it was, completely removing all root apps, removing Xposed, removing flashfire, unrooting (with SuperSu disabled and full unroot), debloating completely, but i got the usual 4% error and device suspected of rooting. I was very careful in making sure i was completely unrooted and no root apps, Xposed modules were installed...furthermore, made sure i was completely debloated.

Did anyone else have luck with a different sim? also, has anyone found a way to overwrite the persist image with a clean copy which has the root checker tool? Just fyi, i am on 10g

after removing everything, did you reflash the stock, unrooted system.img? you need to do this before you can take the OTA. you will not lose your data, but after flashing the stock system.img, all of the at&t apps come back

Root Checker Tool (RCT) Analysis

Senior Member

Senior Member

Senior Member

Senior Member

Senior Member

Senior Member

Senior Member

Senior Member

Senior Member

Senior Member

Senior Member

Senior Member

Senior Member

Senior Member

New member

Senior Member

Senior Member

Senior Member

Senior Member

Senior Member