[TOOL] Ultimate Recovery Tool 3.1 (Unbrick, Downgrade HBOOT)

[SecUpwN]

Perfect, other than the failed part, at least it's detecting it now, Re-run the tool and select unbrick this time.

Why do I have to select unbrick now? I'd like it to work again, but can I downgrade the HBOOT after unbricking it? I want this phone to get fully ROOTED, remember?

 

[AlShAn]

CID Wrong

Hello,

i have a similar problem.

Everytime i try to flash via hboot i get "cid error"
Everytime i try to flash via RUU i get Error 130 or 131, did say its not the correct RUU or Model ID Error.
If i try to flash via fastboot CLI also get errors, because its Locked and S-ON.

I got my EVO's motherboard changed, cause i had a hardware defect.

After getting it back, no more HTCDEV S-OFF possible.

So i try to Downgrade via your trick.

Before:

shooter_u pvt ship s-on rl
hboot-1.53.0007
eMMC-boot
may 22 2012, 01:06:07

android 4.0.3
sense 3.6
software 3.28.401.1
kernel 3.0.16-ge733189
baseband 11.77.3504.00U_11.25.3504.06_M
build: 3.28.401.1 cl 385730


After:

hboot-1.49.0007
radio-11.25.3504.06_M
OpenDSP-v02.6.0.2226.00.0202

"getvar ALL"

(bootloader) version: 0.5
(bootloader) version-bootloader: 1.49.0007
(bootloader) version-baseband: 11.25.3504.06_M
(bootloader) version-cpld: None
(bootloader) version-microp: None
(bootloader) version-main: 0.28.401.1
(bootloader) serialno: xxxxx
(bootloader) imei: xxxxxxxx
(bootloader) product: shooter_u
(bootloader) platform: HBOOT-8260
(bootloader) modelid: PG8630000
(bootloader) cidnum: 0202
(bootloader) battery-status: good
(bootloader) battery-voltage: 5745mV
(bootloader) partition-layout: Generic
(bootloader) security: on
(bootloader) build-mode: SHIP
(bootloader) boot-mode: FASTBOOT
(bootloader) commitno-bootloader: edba812f
(bootloader) hbootpreupdate: 11
(bootloader) gencheckpt: 0

But now, i am impossible to flash a RUU, no matter if trying via fastboot or hboot pg86img.zip.

Even the Original RUU did not work anymore.

I tried (all via RUU and HBOOT):

RUU_Shooter_U_HTC_Europe_1.20.401.2_Radio_10.53.9020.00_10.13.9020.08_2M_release_203403_signed
RUU_Shooter_U_HTC_Europe_1.20.401.8_Radio_10.59.9020.00_10.15.9020.06_M_release_219793_signed

RUU_SHOOTER_U_ICS_35_S_HTC_Europe_3.28.401.1_Radio_11.77.3504.00U_11.25.3504.06_M_release_262714_signed <- this is the original RUU.

Also tried (but only via ruu):

RUU_Shooter_U_Vodafone_UK_1.21.161.1_Radio_10.53.9020.00_10.13.9020.08_2M_release_203613_signed
RUU_Shooter_U_Rogers_WWE_1.20.631.2_Radio_10.53.9020.00_10.13.9020.08_2M_release_203803_signed
RUU_Shooter_U_HTC_TUR_1.20.468.2_Radio_10.53.9020.00_10.13.9020.08_2M_release_204721_signed


I truly know this was my last HTC ever, but at the moment im stuck with this cause i have no money to buy another smartie

Did i miss something?

best regards
Al

 

[Unknownforce]

Why do I have to select unbrick now? I'd like it to work again, but can I downgrade the HBOOT after unbricking it? I want this phone to get fully ROOTED, remember?

It will, just use that option. It can only unbrick using the lower HBOOT, as the program doesn't even have the newer ones to unbrick with.

Hello,

i have a similar problem.

Everytime i try to flash via hboot i get "cid error"
Everytime i try to flash via RUU i get Error 130 or 131, did say its not the correct RUU or Model ID Error.
If i try to flash via fastboot CLI also get errors, because its Locked and S-ON.

I got my EVO's motherboard changed, cause i had a hardware defect.

After getting it back, no more HTCDEV S-OFF possible.

So i try to Downgrade via your trick.

Before:

shooter_u pvt ship s-on rl
hboot-1.53.0007
eMMC-boot
may 22 2012, 01:06:07

android 4.0.3
sense 3.6
software 3.28.401.1
kernel 3.0.16-ge733189
baseband 11.77.3504.00U_11.25.3504.06_M
build: 3.28.401.1 cl 385730


After:

hboot-1.49.0007
radio-11.25.3504.06_M
OpenDSP-v02.6.0.2226.00.0202

"getvar ALL"

(bootloader) version: 0.5
(bootloader) version-bootloader: 1.49.0007
(bootloader) version-baseband: 11.25.3504.06_M
(bootloader) version-cpld: None
(bootloader) version-microp: None
(bootloader) version-main: 0.28.401.1
(bootloader) serialno: xxxxx
(bootloader) imei: xxxxxxxx
(bootloader) product: shooter_u
(bootloader) platform: HBOOT-8260
(bootloader) modelid: PG8630000
(bootloader) cidnum: 0202
(bootloader) battery-status: good
(bootloader) battery-voltage: 5745mV
(bootloader) partition-layout: Generic
(bootloader) security: on
(bootloader) build-mode: SHIP
(bootloader) boot-mode: FASTBOOT
(bootloader) commitno-bootloader: edba812f
(bootloader) hbootpreupdate: 11
(bootloader) gencheckpt: 0

But now, i am impossible to flash a RUU, no matter if trying via fastboot or hboot pg86img.zip.

Even the Original RUU did not work anymore.

I tried (all via RUU and HBOOT):

RUU_Shooter_U_HTC_Europe_1.20.401.2_Radio_10.53.9020.00_10.13.9020.08_2M_release_203403_signed
RUU_Shooter_U_HTC_Europe_1.20.401.8_Radio_10.59.9020.00_10.15.9020.06_M_release_219793_signed

RUU_SHOOTER_U_ICS_35_S_HTC_Europe_3.28.401.1_Radio_11.77.3504.00U_11.25.3504.06_M_release_262714_signed <- this is the original RUU.

Also tried (but only via ruu):

RUU_Shooter_U_Vodafone_UK_1.21.161.1_Radio_10.53.9020.00_10.13.9020.08_2M_release_203613_signed
RUU_Shooter_U_Rogers_WWE_1.20.631.2_Radio_10.53.9020.00_10.13.9020.08_2M_release_203803_signed
RUU_Shooter_U_HTC_TUR_1.20.468.2_Radio_10.53.9020.00_10.13.9020.08_2M_release_204721_signed


I truly know this was my last HTC ever, but at the moment im stuck with this cause i have no money to buy another smartie

Did i miss something?

best regards
Al

With CID errors, you need to copy the PG86IMG zip file to the SDCard with the lower version and flash via Hboot. The exe's will not work. (They add another check into the exe for some stupid reason)

 

[AlShAn]

With CID errors, you need to copy the PG86IMG zip file to the SDCard with the lower version and flash via Hboot. The exe's will not work. (They add another check into the exe for some stupid reason)

Hello,

thank you for the reply.

That is what i did with these:

RUU_Shooter_U_HTC_Europe_1.20.401.2_Radio_10.53.90 20.00_10.13.9020.08_2M_release_203403_signed
RUU_Shooter_U_HTC_Europe_1.20.401.8_Radio_10.59.90 20.00_10.15.9020.06_M_release_219793_signed

RUU_SHOOTER_U_ICS_35_S_HTC_Europe_3.28.401.1_Radio _11.77.3504.00U_11.25.3504.06_M_release_262714_sig ned <- this is the original RUU.

Started RUU installation, copied ROM.ZIP from TEMP Ordner, named it PG86IMG.zip, copied to sd-card. All 3 Versions have different size.
Plugged in, started hboot, but then, after files are all checked, ... i get "CID incorrect! Update Fail!". Even with the original Image.

regards
Al

 

[Unknownforce]

Hello,

thank you for the reply.

That is what i did with these:

RUU_Shooter_U_HTC_Europe_1.20.401.2_Radio_10.53.90 20.00_10.13.9020.08_2M_release_203403_signed
RUU_Shooter_U_HTC_Europe_1.20.401.8_Radio_10.59.90 20.00_10.15.9020.06_M_release_219793_signed

RUU_SHOOTER_U_ICS_35_S_HTC_Europe_3.28.401.1_Radio _11.77.3504.00U_11.25.3504.06_M_release_262714_sig ned <- this is the original RUU.

Started RUU installation, copied ROM.ZIP from TEMP Ordner, named it PG86IMG.zip, copied to sd-card. All 3 Versions have different size.
Plugged in, started hboot, but then, after files are all checked, ... i get "CID incorrect! Update Fail!". Even with the original Image.

regards
Al

Hmm, others with CID errors got past it using that method... maybe the Europe version built in the check. Try another version.

 

[AlShAn]

Hmm, others with CID errors got past it using that method... maybe the Europe version built in the check. Try another version.

Will try all the other GSM versions from androidruu tomorrow..
I hope one of them works. Strange that even the original RUU did not work.

The repair is very fresh, got it back 2 days ago.
Maybe they changed something....again.

Strange habit from HTC. Send back phones that have less features, than the one you send to them for repair. (e.g. HTCDEV doesnt work)

 

[AlShAn]

Any other Ideas?

I really think it has something to do with different CIDs..

D:\android-sdk\sdk\platform-tools>fastboot getvar cid
cid: 0202
finished. total time: 0.003s

D:\android-sdk\sdk\platform-tools>fastboot.exe oem readcid
...
(bootloader) cid: HTC__102
OKAY [ 0.007s]
finished. total time: 0.008s

Today i tried:

RUU_Shooter_U_HTC_ARA_1.24.415.6_Radio_10.59.9020.00_10.15.9020.06_M_release_220917_signed
RUU_Shooter_U_hTC_Asia_TW_1.23.709.4_Radio_10.55.9020.00_10.13.9020.29_M_release_211198_signed
RUU_Shooter_U_HTC_TUR_1.20.468.2_Radio_10.53.9020.00_10.13.9020.08_2M_release_204721_signed
RUU_Shooter_U_HTCCN_CHS_1.29.1400.11_Radio_10.60.9020.00_10.15.9020.29_M_release_227249_signed
RUU_SHOOTER_U_ICS_35_S_hTC_Asia_WWE_3.28.707.1_Radio_11.77.3504.00U_11.25.3504.06_M_release_264110_signed
RUU_SHOOTER_U_ICS_35_S_HTC_Europe_3.28.401.1_Radio_11.77.3504.00U_11.25.3504.06_M_release_262714_signed
RUU_SHOOTER_U_ICS_35_S_Rogers_WWE_3.28.631.1_Radio_11.77.3504.00U_11.25.3504.06_M_release_262715_signed
RUU_Shooter_U_Rogers_WWE_1.20.631.2_Radio_10.53.9020.00_10.13.9020.08_2M_release_203803_signed
RUU_Shooter_U_Telstra_WWE_1.24.841.3_Radio_10.55.9020.00_10.13.9020.29_M_release_219401_signed
RUU_Shooter_U_TWM_TW_1.23.921.5_Radio_10.55.9020.00_10.13.9020.29_M_release_207920_signed
RUU_Shooter_U_Voda-Hutch_AU_1.23.862.4_Radio_10.55.9020.00_10.13.9020.26_2M_release_219430_signed

All via RUU.exe and via HBOOT.

Via RUU, got the same two error codes as yesterday

- 130 Device ID Error
- 131 User ID Error

Via HBOOT i get these 2:

- CID Error
- Modell ID Error


I tried all available Shooter U RUU/Images
Any other ideas?

regads
Al

 

[SecUpwN]

It will, just use that option. It can only unbrick using the lower HBOOT, as the program doesn't even have the newer ones to unbrick with.

I think I know now why neither downgrade of HBOOT nor unbricking worked: Your tool always spits out the error that it cannot locate the 'misc partition'. How to solve this riddle?

 

[Unknownforce]

I think I know now why neither downgrade of HBOOT nor unbricking worked: Your tool always spits out the error that it cannot locate the 'misc partition'. How to solve this riddle?

You can unbrick it the manual way. You'll need the older hboot image on the same PC as the URT tool and know where it is.

Open up the older version ROM zip file (that you'll use to flash the old version of the ROM) and extract the 1.49 hboot file (long name, has nb0 as an the file extension)

Copy it to somewhere that the URT tool has access to on that same pc, the linux computer, then open the tool and select flash custom image, select partition 12 (Make sure this is correct, flashing to another number can make for an unrecoverable brick) and give it the exact path to that hboot file (if it's in the same folder you can just give it the name of the file, it will use that same path anyway) Then follow the directions on screen and it will unbrick it the manual way.

After you flash that hboot file you can pop the battery back in and boot up. (it will likely bootloop, so you'll need to flash the older version of the ROM via hboot or fastboot at this point)

 

[SecUpwN]

You'll need the older hboot image on the same PC..

Thank you soo much for finally answering, @Unknownforce!

If the current RUU file is "RUU_SHOOTER_U_ICS_35_S_HTC_Europe_3.28.401.1_Radio_11.77.3504.00U_11.25.3504.06_M_release_262714:signed.zip" - which would be the "older version" then? And how to extract the 1.49 hboot file from it?

 

[AlShAn]

yah!

Dont know what happend.
But after laying down for 3 Days without battery, then connectin again with fastboot usb, again doing "fastboot erase cache" it was instantly possible to flash "RUU_Shooter_U_HTC_Europe_1.20.401.2_Radio_10.53.9020.00_10.13.9020.08_2M_release_203403_signed.exe"

Strange... because i tried this RUU at least 4-5 times before, as RUU.exe and same multiple times via PG86IMG.zip.
Only thing I changed was too uninstall HTC Sync, forgot this before.
But that should not influence hboot pg86img.zip flashing. Maybe this really worked cause i had no battery in for 3 days.

thanks for patience!

Thanks for your good work Unknownforce!

 

[Unknownforce]

Thank you soo much for finally answering, @Unknownforce!

If the current RUU file is "RUU_SHOOTER_U_ICS_35_S_HTC_Europe_3.28.401.1_Radio_11.77.3504.00U_11.25.3504.06_M_release_262714:signed.zip" - which would be the "older version" then? And how to extract the 1.49 hboot file from it?

The non-ICS ones would have it. Whatever the older ones for the Europe Phone are.. See the 3.28.401.1 number, look for the lowest one of that set of numbers. Like 1.28.405.6 or something?

You'll just open the zip file with a zip application and extract the file I mentioned. it should be the only one with the nb0 extension I think. It will say hboot in it's name probably.

And sorry for not replying fast, I'm lucky to even be online at all, My Internet at my home is broken and my phone service is having problems. I'm working on switching to another carrier, but it's taking time.

 

[Unknownforce]

Dont know what happend.
But after laying down for 3 Days without battery, then connectin again with fastboot usb, again doing "fastboot erase cache" it was instantly possible to flash "RUU_Shooter_U_HTC_Europe_1.20.401.2_Radio_10.53.9020.00_10.13.9020.08_2M_release_203403_signed.exe"

Strange... because i tried this RUU at least 4-5 times before, as RUU.exe and same multiple times via PG86IMG.zip.
Only thing I changed was too uninstall HTC Sync, forgot this before.
But that should not influence hboot pg86img.zip flashing. Maybe this really worked cause i had no battery in for 3 days.

thanks for patience!

Thanks for your good work Unknownforce!

Glad it worked finally!

 

[SecUpwN]

The non-ICS ones would have it. Whatever the older ones for the Europe Phone are.. See the 3.28.401.1 number, look for the lowest one of that set of numbers. Like 1.28.405.6 or something?

Whoa, how to find such number stuff in google? Is there a place like AndroidRUU, but which lists all older and newer RUU files of the specific phone type? Darn, I gotta find that file..

 

[Miels]

IMPORTANT: Do not plug in device until TOLD to do so.
Downgrade selected.
Ready to begin? (y/n):y

Plug in ypur device now.
Waiting for device...

My program Stopping in here.
any ideas?

 

[SecUpwN]

My program Stopping in here.
any ideas?

Remove the battery of your phone an try again. It should get recognized.

 

[chwads2k8]

Remove the battery of your phone an try again. It should get recognized.

hi i am using urtlivecd i have evo 3d s-on locked bootloader 1.53 i corrupted hboot and windows picks it up as qualcomm but on downgrade just says waiting for device i have connected it without battery what could be the problem???

i needed this as the phone wont unlock with htcdev method check always fails

 

[SecUpwN]

hi i am using urtlivecd i have evo 3d s-on locked bootloader 1.53 i corrupted hboot and windows picks it up as qualcomm but on downgrade just says waiting for device i have connected it without battery what could be the problem?

i needed this as the phone wont unlock with htcdev method check always fails

Try it on a real linux live CD.

 

[chwads2k8]

i tried it on a different cd and this time it worked and now i have 1.49.0007 however the ruu dont work my cid is reading 0202 which is wierd any ideas how to flash ruu or which one i would need for cid 0202

 

[SecUpwN]

i tried it on a different cd and this time it worked and now i have 1.49.0007 however the ruu dont work my cid is reading 0202 which is wierd any ideas how to flash ruu or which one i would need for cid 0202

As far as I know, you can change the CID using fastboot in terminal. Do you press "thanks" even once?