HTC S-OFF [Solution] - GSM-Forum

nasirahmed · 01-25-2013, 18:22

*plese be patient untill I arrange this first post , then it will be open for discussion*

HTC Amaze 4G (RUBY) juopunutbear

HTC Butterfly J KDDI (DELUXE_J) dirtyracun

HTC Desire (BRAVO) revolutionary

HTC Desire C (GOLF) NOT YET

HTC Desire HD (ACE)

HTC Desire X (PROTO)

HTC Desire Z (VISION)

HTC Desire S (SAGA) revolutionary

HTC Desire V (PRIMODS)

HTC Droid Incredible 4G LTE (FIREBALL) dirtyracun

HTC Evo 4G (SUPERSONIC) revolutionary

HTC Evo 4G LTE (JEWEL) dirtyracun

HTC Evo 3D GSM (SHOOTERU) revolutionary juopunutbear

HTC Evo 3D CDMA (SHOOTER) revolutionary juopunutbear

HTC Explorer (PICO)

HTC Flyer revolutionary

HTC Hero, G2 Touch (HERO)

HTC Incredible S (VIVO) revolutionary

HTC J (VALENTEWX) dirtyracun

HTC JetStream (VERDILTE) juopunutbear

HTC Legend (LEGEND)

HTC Magic, my Touch 3G (SAPPHIRE)

HTC myTouch 4G (GLACIER)

HTC myTouch 4G Slide (DOUBLESHOT) revolutionary juopunutbear

HTC One X (ENDEAVOR) NOT YET

HTC One X+ (ENRC2B) NOT YET

HTC One XL (EVITA)

HTC One V (PRIMOU)

HTC One S ( VILLE / VILLEC2 )

HTC Rezound (VIGOR) juopunutbear

HTC Rhyme (BLISS)

HTC Sensation (PYRAMID) revolutionary juopunutbear

HTC Sensation XL (RUNNYMEDE)

HTC Tattoo (CLICK)

HTC Thunderbolt (MECHA) revolutionary

HTC Vivid, Raider, Velocity (HOLIDAY) juopunutbear

HTC Wildfire (BUZZ) revolutionary

HTC Wildfire S (MARVEL)

mak1983 · 01-30-2013, 09:28

how to S-OFF HTC desire
lcd showing

bravo pvt3 ship s-on
hboot-1.02.0001
touch panel-synt0101
radio-5.11.05.27
jul 22 2011,16:19:16
how to solve this problem sir

alfred martin · 02-01-2013, 06:11

i havbe here

htc evo 3d

shooter_u pvt ship s-on rl
hboot- 1.49.0012

radio-10.13.9020.29_M eMMC boot

how to s off?

crescentcell · 02-04-2013, 14:14

HTC Desire (BRAVO) hang on logo only S-OFF possible ?

ferdoush · 02-04-2013, 15:05

how to s off?
htc legend

legend pvt ship s-on
hboot-1.01.0000
microp-0816
tauch panel-syn07_0105
radio-7.13.35.05
nov 8 2010,15:24:15

maanarman · 02-10-2013, 18:59

How can s-off htc explorer

yopie_3cell · 02-10-2013, 19:04

Same here
How to s-off htc desire bravo

yopie_3cell · 02-13-2013, 08:52

Quote:

Originally Posted by maanarman

contact me on sonork

i contact u but no answer

zahaf27 · 02-14-2013, 15:11

same here ...how to s-off htc desire bravo

.:SUBRATA:. · 02-17-2013, 06:17

Quote:

Originally Posted by maanarman

How can s-off htc explorer

No S-Off solution for Explorer aka pico.

Only bootloader unlock. not even trough JTAG,

adelkaha25 · 02-20-2013, 14:21

ho to make AN HTC desire HD (s-off)
what you need

1- Ace Advanced Hack Kit
2- unlock root
3- some thinking stuff to bypass main version is older message

Quote:

Ace Advanced Hack Kit [Linux/OSX/Windows] attn1 2011/2012

___________________________
MAIN MENU | |
| Only ONE Menu Step to: |
1 - Hack Ace <----------------------------+ * S-OFF |
| * SIM Unlock |
2 - DONATE (Encouraged, but optional) | * SuperCID |
Free HTC goldcard generator | RevSkills | * Root |
http://www.eff.org/ | * Busybox |
| |
************************************************** ********************
o - Options Menu (Return to Stock, Flash radios, etc)
************************************************** ********************
t - Toggle Flash Method - current method is fastbootRUU
************************************************** ********************

q - Quit

step 1 downgrad
[Select and press Enter]1

3.12.405.1

This version of Android cannot use the hack kit at this time.

You can downgrade if you like, then rerun the hack step.

WARNING: THIS WILL WIPE DATA

[Would you like to downgrade? y/n]y
a67daa6baa7ef085307593fef6329d14 *PD98IMG/PD98IMG-GB2.zip
Flash the downgrade RUU? [y,n]y

pushing rom to sdcard - this takes time please be patient.
1814 KB/s (259503624 bytes in 139.656s)
Setting up to temproot....
cannot stat 'tools/bin/zergRush': No such file or directory
1627 KB/s (572752 bytes in 0.343s)
601 KB/s (19240 bytes in 0.031s)
going for temproot using zergRush....
/data/local/tmp/zergRush: not found
setting mainver lower for downgrade...
--set_version set. VERSION will be changed to: 1.31.405.6
Misc partition is "/dev/block/mmcblk0p17"
Patching and backing up misc partition...
Creating goldcard....
HTC android goldcard tool Copyright (C) 2011, Wayne D. Hoxsie Jr.
Original code by B. Kerler. Special thanks to ATTN1 and the XDA team.
Donations can be made to the Electronic Frontier Foundation:
http://www.eff.org/
or to B. Kerler:
RevSkills | We deliver mobile forensic and analysis software solutions worldwide
0+1 records in
0+1 records out
384 bytes transferred in 0.002 secs (192000 bytes/sec)
starting downgrade...

** The phone will now reboot into HBOOT.
** It will then check the file just sent.
** If everything is okay, the phone will
** prompt you to continue by pressing
** VOLUME UP. It will reboot, flashing twice.

**** PUSH POWER WHEN THIS STEP COMPLETES ****

If downgrade is successful, you may set up the phone and try to hack it again.

Once the downgrade is successful, press a key to return to the menu......
Otherwise, cut and paste the output to the screen into a text file for evaluatio
n.... then press a key.
Appuyez sur une touche pour continuer...

Ace Advanced Hack Kit [Linux/OSX/Windows] attn1 2011/2012

___________________________
MAIN MENU | |
| Only ONE Menu Step to: |
1 - Hack Ace <----------------------------+ * S-OFF |
| * SIM Unlock |
2 - DONATE (Encouraged, but optional) | * SuperCID |
Free HTC goldcard generator | RevSkills | * Root |
http://www.eff.org/ | * Busybox |
| |
************************************************** ********************
o - Options Menu (Return to Stock, Flash radios, etc)
************************************************** ********************
t - Toggle Flash Method - current method is fastbootRUU
************************************************** *******************

q - Quit

step2 rooting + s-off
[Select and press Enter]1

/sdcard/PD98IMG.zip: No such file or directory
rm failed for /sdcard/PD98IMG.zip, No such file or directory
1713 KB/s (4359771 bytes in 2.484s)
pkg: /data/local/tmp/stericson.busybox-1.apk
Success
1202 KB/s (19240 bytes in 0.015s)
1649 KB/s (4564992 bytes in 2.703s)
1839 KB/s (3737600 bytes in 1.984s)
2179 KB/s (557962 bytes in 0.250s)
cannot stat 'tools/bin/fre3vo': No such file or directory
1431 KB/s (572752 bytes in 0.390s)
1400 KB/s (134401 bytes in 0.093s)
873 KB/s (13968 bytes in 0.015s)
Unable to chmod /data/local/tmp/fre3vo: No such file or directory
ro.build.version.release=2.3.3
Setting up for Gingerbread restore...
1700 KB/s (2801664 bytes in 1.609s)
1922 KB/s (2830336 bytes in 1.437s)
1985 KB/s (285981 bytes in 0.140s)
2234 KB/s (285981 bytes in 0.125s)
1 fichier(s) copié(s).
uid=0(root) gid=0(root)
/dev/block/vold/179:65 /mnt/sdcard vfat rw,dirsync,nosuid,nodev,noexec,relatime,
uid=1000,gid=1015,fmask=0702,dmask=0702,allow_utim e=0020,codepage=cp437,iocharse
t=iso8859-1,shortname=mixed,utf8,errors=remount-ro 0 0
tmpfs /mnt/sdcard/.android_secure tmpfs ro,relatime,size=0k,mode=000 0 0
HTC android goldcard tool Copyright (C) 2011, Wayne D. Hoxsie Jr.
Original code by B. Kerler. Special thanks to ATTN1 and the XDA team.
Donations can be made to the Electronic Frontier Foundation:
http://www.eff.org/
or to B. Kerler:
RevSkills | We deliver mobile forensic and analysis software solutions worldwide
0+1 records in
0+1 records out
384 bytes transferred in 0.001 secs (384000 bytes/sec)
--set_version set. VERSION will be changed to: 1.31.405.6
Misc partition is "/dev/block/mmcblk0p17"
Patching and backing up misc partition...
Starting update process....
erasing 'cache'... OKAY [ 0.125s]
finished. total time: 0.125s
Be patient - sending update ...
sending 'zip' (18223 KB)... OKAY [ 3.016s]
writing 'zip'... INFOadopting the signature contained in this i
mage...
INFOsignature checking...
INFOzip header checking...
INFOzip info parsing...
INFOchecking model ID...
INFOchecking custom ID...
INFOchecking main version...
INFOstart image[boot] unzipping & flushing...
INFO[RUU]UZ,boot,0
INFO[RUU]UZ,boot,31
INFO[RUU]UZ,boot,68
INFO[RUU]UZ,boot,99
INFO[RUU]UZ,boot,100
INFO[RUU]WP,boot,0
INFO[RUU]WP,boot,100
INFOstart image[recovery] unzipping & flushing...
INFO[RUU]UZ,recovery,0
INFO[RUU]UZ,recovery,20
INFO[RUU]UZ,recovery,44
INFO[RUU]UZ,recovery,66
INFO[RUU]UZ,recovery,89
INFO[RUU]UZ,recovery,100
INFO[RUU]WP,recovery,0
INFO[RUU]WP,recovery,100
INFOstart image[radio] unzipping & flushing...
INFO[RUU]UZ,radio,0
INFO[RUU]UZ,radio,8
INFO[RUU]UZ,radio,13
INFO[RUU]UZ,radio,20
INFO[RUU]UZ,radio,25
INFO[RUU]UZ,radio,33
INFO[RUU]UZ,radio,41
INFO[RUU]UZ,radio,49
INFO[RUU]UZ,radio,57
INFO[RUU]UZ,radio,62
INFO[RUU]UZ,radio,70
INFO[RUU]UZ,radio,79
INFO[RUU]UZ,radio,86
INFO[RUU]UZ,radio,94
INFO[RUU]UZ,radio,99
INFO[RUU]UZ,radio,100
INFO[RUU]WP,radio,0
INFO[RUU]WP,radio,6
INFO[RUU]WP,radio,14
INFO[RUU]WP,radio,19
INFO[RUU]WP,radio,27
INFO[RUU]WP,radio,36
INFO[RUU]WP,radio,44
INFO[RUU]WP,radio,51
INFO[RUU]WP,radio,59
INFO[RUU]WP,radio,68
INFO[RUU]WP,radio,76
INFO[RUU]WP,radio,85
INFO[RUU]WP,radio,95
INFO[RUU]WP,radio,100
OKAY [ 95.297s]
finished. total time: 98.313s
rebooting...
finished. total time: 0.156s
Radio downgrade complete - starting next process - please be patient...
Linux version 2.6.32.21-gf3f553d (htc-kernel@and18-2) (gcc version 4.4.0 (GCC) )
#1 PREEMPT Thu Oct 28 13:24:11 CST 2010

major abra-cadabra going on, please be patient.....

--secu_flag off set
--cid set. CID will be changed to: 11111111
--sim_unlock. SIMLOCK will be removed
Section header entry size: 40
Number of section headers: 44
Total section header table size: 1760
Section header file offset: 0x000138b4 (80052)
Section index for section name string table: 41
String table offset: 0x000136fb (79611)
Searching for .modinfo section...
- Section[16]: .modinfo
-- offset: 0x00000a14 (2580)
-- size: 0x000000cc (204)
Kernel release: 2.6.32.21-gf3f553d
New .modinfo section size: 204
Attempting to power cycle eMMC... OK.
Searching for mmc_blk_issue_rq symbol...
- Address: c02a9e00, type: t, name: mmc_blk_issue_rq, module: N/A
Kernel map base: 0xc02a9000
Kernel memory mapped to 0x40000000
Searching for brq filter...
- Address: 0xc02a9e00 + 0x34c
- 0x2a000012 -> 0xea000012
Patching and backing up partition 7...
Error opening copy file.
Error opening copy file.
^^^^^^^^^^^^
I- NORMAL ERROR HERE -I
patience - rebooting
* daemon not running. starting it now on port 5037 *
* daemon started successfully *
--secu_flag off set
--cid set. CID will be changed to: 11111111
--sim_unlock. SIMLOCK will be removed
Section header entry size: 40
Number of section headers: 44
Total section header table size: 1760
Section header file offset: 0x000138b4 (80052)
Section index for section name string table: 41
String table offset: 0x000136fb (79611)
Searching for .modinfo section...
- Section[16]: .modinfo
-- offset: 0x00000a14 (2580)
-- size: 0x000000cc (204)
Kernel release: 2.6.32.21
New .modinfo section size: 196
Attempting to power cycle eMMC... OK.
Searching for mmc_blk_issue_rq symbol...
- Address: c02db21c, type: t, name: mmc_blk_issue_rq, module: N/A
Kernel map base: 0xc02db000
Kernel memory mapped to 0x40009000
Searching for brq filter...
- Address: 0xc02db21c + 0x34c
- 0x2a000012 -> 0xea000012
Patching and backing up partition 7...
patching secu_flag: 0
Done.
push: tools/afr/system/app/Superuser.apk -> /system/app/Superuser.apk
push: tools/afr/system/bin/su -> /system/bin/su
2 files pushed. 0 files skipped.
2241 KB/s (609587 bytes in 0.265s)
dnsmasq monkey su
dumpstate mount surfaceflinger
ime ps wpa_supplicant

S-OFF, ROOT and Clockworkmod recovery complete

Be patient - installing updated radio and AAHK ENG Hboot...
Starting update process....
erasing 'cache'... OKAY [ 0.109s]
finished. total time: 0.109s
Be patient - sending update ...
sending 'zip' (11650 KB)... OKAY [ 1.922s]
writing 'zip'... INFOzip header checking...
INFOzip info parsing...
INFOchecking model ID...
INFOchecking custom ID...
INFOstart image[hboot] unzipping for pre-update check...
INFOstart image[hboot] unzipping & flushing...
INFO[RUU]UZ,hboot,0
INFO[RUU]UZ,hboot,100
INFO[RUU]WP,hboot,0
INFO[RUU]WP,hboot,100
INFOstart image[radio] unzipping & flushing...
INFO[RUU]UZ,radio,0
INFO[RUU]UZ,radio,8
INFO[RUU]UZ,radio,13
INFO[RUU]UZ,radio,20
INFO[RUU]UZ,radio,25
INFO[RUU]UZ,radio,33
INFO[RUU]UZ,radio,41
INFO[RUU]UZ,radio,49
INFO[RUU]UZ,radio,57
INFO[RUU]UZ,radio,65
INFO[RUU]UZ,radio,70
INFO[RUU]UZ,radio,79
INFO[RUU]UZ,radio,86
INFO[RUU]UZ,radio,94
INFO[RUU]UZ,radio,100
INFO[RUU]WP,radio,0
INFO[RUU]WP,radio,6
INFO[RUU]WP,radio,14
INFO[RUU]WP,radio,19
INFO[RUU]WP,radio,27
INFO[RUU]WP,radio,36
INFO[RUU]WP,radio,44
INFO[RUU]WP,radio,100
INFOstart image[rcdata] unzipping & flushing...
INFO[RUU]UZ,rcdata,0
INFO[RUU]WP,rcdata,0
INFO[RUU]WP,rcdata,100
OKAY [ 34.219s]
finished. total time: 36.141s
rebooting...
finished. total time: 0.156s

************ Process complete **************

Appuyez sur une touche pour continuer...

to get yellow step working correctly you have to root phone using unlock root.

good luck to all and happy s-off for your HTC desire HD (ACE)

NKhan_Gsm · 02-25-2013, 10:17

Can we S-off HTC Sensation Z710e with HBoot 1.18.0000 ? or is there anyway to downward its HBoot ?

Serial Number: SH19JV803964
Android Version: 2.3.4
Manufacturer: HTC
Model: HTC Sensation Z710e
Hardware: pyramid
ROM Version: 1.45.415.5
BOOT Version: 1.18.0000
IMEI: 358313-04-520270-7
CID: HTC__J15 / HTC-GCC
Backup CID: HTC__J15
Linux Kernel Version: 2.6.35.13-g746427a

.:SUBRATA:. · 02-25-2013, 12:03

Quote:

Originally Posted by NKhan_Gsm

Can we S-off HTC Sensation Z710e with HBoot 1.18.0000 ? or is there anyway to downward its HBoot ?

Serial Number: SH19JV803964
Android Version: 2.3.4
Manufacturer: HTC
Model: HTC Sensation Z710e
Hardware: pyramid
ROM Version: 1.45.415.5
BOOT Version: 1.18.0000
IMEI: 358313-04-520270-7
CID: HTC__J15 / HTC-GCC
Backup CID: HTC__J15
Linux Kernel Version: 2.6.35.13-g746427a

Use revoulationary ..................

azraelcelt · 04-28-2013, 05:40

has anyone figured out to S-OFF a HTC Desire X PROTO yet really need it so we can have an official CM

Rammstein_91 · 04-29-2013, 20:43

How to S-OFF HTC One S (Ville C2)?

VILLEC2 pvt ship s-on RL
hboot-3.01.0000
radio-16.11.20.24_M
OpenDSP-v09.6.0.2235.00.1210
eMMC-boot
Jan 18 2013,18:37:30:-1

PLZ!!! How to solve this problem???

01-25-2013, 18:22	#1 (permalink)
nasirahmed No Life Poster Join Date: Mar 2004 Location: LGE Posts: 3,950 Member: 57760 Status: Offline Sonork: 100.1579298 Thanks Meter: 3,510	HTC S-OFF [Solution] *plese be patient untill I arrange this first post , then it will be open for discussion* HTC Amaze 4G (RUBY) juopunutbear HTC Butterfly J KDDI (DELUXE_J) dirtyracun HTC Desire (BRAVO) revolutionary HTC Desire C (GOLF) NOT YET HTC Desire HD (ACE) HTC Desire X (PROTO) HTC Desire Z (VISION) HTC Desire S (SAGA) revolutionary HTC Desire V (PRIMODS) HTC Droid Incredible 4G LTE (FIREBALL) dirtyracun HTC Evo 4G (SUPERSONIC) revolutionary HTC Evo 4G LTE (JEWEL) dirtyracun HTC Evo 3D GSM (SHOOTERU) revolutionary juopunutbear HTC Evo 3D CDMA (SHOOTER) revolutionary juopunutbear HTC Explorer (PICO) HTC Flyer revolutionary HTC Hero, G2 Touch (HERO) HTC Incredible S (VIVO) revolutionary HTC J (VALENTEWX) dirtyracun HTC JetStream (VERDILTE) juopunutbear HTC Legend (LEGEND) HTC Magic, my Touch 3G (SAPPHIRE) HTC myTouch 4G (GLACIER) HTC myTouch 4G Slide (DOUBLESHOT) revolutionary juopunutbear HTC One X (ENDEAVOR) NOT YET HTC One X+ (ENRC2B) NOT YET HTC One XL (EVITA) HTC One V (PRIMOU) HTC One S ( VILLE / VILLEC2 ) HTC Rezound (VIGOR) juopunutbear HTC Rhyme (BLISS) HTC Sensation (PYRAMID) revolutionary juopunutbear HTC Sensation XL (RUNNYMEDE) HTC Tattoo (CLICK) HTC Thunderbolt (MECHA) revolutionary HTC Vivid, Raider, Velocity (HOLIDAY) juopunutbear HTC Wildfire (BUZZ) revolutionary HTC Wildfire S (MARVEL) Last edited by nasirahmed; 01-29-2013 at 18:16.

01-30-2013, 09:28	#2 (permalink)
mak1983 No Life Poster Join Date: Dec 2011 Posts: 950 Member: 1704666 Status: Offline Sonork: 100.1652565 Thanks Meter: 157	how to S-OFF HTC desire lcd showing bravo pvt3 ship s-on hboot-1.02.0001 touch panel-synt0101 radio-5.11.05.27 jul 22 2011,16:19:16 how to solve this problem sir

02-01-2013, 06:11	#3 (permalink)
alfred martin Freak Poster Join Date: Feb 2007 Location: philippines Posts: 198 Member: 444178 Status: Offline Sonork: 949835364 Thanks Meter: 11	i havbe here htc evo 3d shooter_u pvt ship s-on rl hboot- 1.49.0012 radio-10.13.9020.29_M eMMC boot how to s off?

02-04-2013, 14:14	#4 (permalink)
crescentcell Insane Poster Join Date: May 2011 Location: chennai Age: 41 Posts: 81 Member: 1567913 Status: Offline Sonork: 100.1617419 Thanks Meter: 6	HTC Desire (BRAVO) hang on logo only S-OFF possible ?

02-04-2013, 15:05	#5 (permalink)
ferdoush Major Poster Join Date: Aug 2012 Location: Bangladesh_khulna Posts: 45 Member: 1802623 Status: Offline Sonork: 100.1601666 Thanks Meter: 6	how to s off? htc legend legend pvt ship s-on hboot-1.01.0000 microp-0816 tauch panel-syn07_0105 radio-7.13.35.05 nov 8 2010,15:24:15

02-10-2013, 18:59	#6 (permalink)
maanarman No Life Poster Join Date: Jan 2008 Location: PAKISTAN KARACHI Age: 44 Posts: 12,919 Member: 686395 Status: Offline Sonork: 100.1608345 Thanks Meter: 3,822	How can s-off htc explorer

02-10-2013, 19:04	#7 (permalink)
yopie_3cell Freak Poster Join Date: Oct 2007 Posts: 143 Member: 606433 Status: Offline Thanks Meter: 14	Same here How to s-off htc desire bravo

02-14-2013, 15:11	#9 (permalink)
zahaf27 Freak Poster Join Date: Feb 2011 Posts: 212 Member: 1519042 Status: Offline Thanks Meter: 35	same here ...how to s-off htc desire bravo

02-25-2013, 10:17	#12 (permalink)
NKhan_Gsm No Life Poster Join Date: Aug 2011 Location: Afghanistan Posts: 1,757 Member: 1646177 Status: Offline Sonork: 100.1604654 Thanks Meter: 369	Can we S-off HTC Sensation Z710e with HBoot 1.18.0000 ? or is there anyway to downward its HBoot ? Serial Number: SH19JV803964 Android Version: 2.3.4 Manufacturer: HTC Model: HTC Sensation Z710e Hardware: pyramid ROM Version: 1.45.415.5 BOOT Version: 1.18.0000 IMEI: 358313-04-520270-7 CID: HTC__J15 / HTC-GCC Backup CID: HTC__J15 Linux Kernel Version: 2.6.35.13-g746427a

04-28-2013, 05:40	#14 (permalink)
azraelcelt Junior Member Join Date: Apr 2013 Posts: 3 Member: 1926260 Status: Offline Thanks Meter: 1	has anyone figured out to S-OFF a HTC Desire X PROTO yet really need it so we can have an official CM

04-29-2013, 20:43	#15 (permalink)
Rammstein_91 Junior Member Join Date: Apr 2013 Posts: 2 Member: 1927442 Status: Offline Thanks Meter: 0	How to S-OFF HTC One S (Ville C2)? VILLEC2 pvt ship s-on RL hboot-3.01.0000 radio-16.11.20.24_M OpenDSP-v09.6.0.2235.00.1210 eMMC-boot Jan 18 2013,18:37:30:-1 PLZ!!! How to solve this problem???