19
Mar
tbolt root
Last Updated: June 5th, 2012

HTC tried to stop us. They made signed images, a signed kernel, and a signed recovery. They locked the memory. In short, the ThunderBolt is their most locked-down phone to date.

We fixed it for you. Unlike the root method we described yesterday, following the instructions below will provide S-OFF, remove signature checks, and unlock eMMC. Enjoy!

Rooting The ThunderBolt - Version 2.5

Update: This guide was updated to include some steps into the upgrade RUU, making it faster and safer

Pros

  • Root with read/write access to /system
  • Ability to downgrade and flash any RUU (i.e. signed firmware)
  • S-OFF
  • Fully unlocked bootloader
  • All ThunderBolts survived testing

Cons

  • Voids warranty
  • Could brick your phone if you aren't careful

The method of rooting your Android device as described in the article herein is solely for enthusiasts and not for the faint of heart.

IT WILL WIPE YOUR DATA. IT WILL WIPE YOUR DATA. IT WILL WIPE YOUR DATA.

Android Police and Team AndIRC disclaim all liability for any harm that may befall your device, including, but not limited to: bricked phones, voided manufacturer warranties, exploding batteries, etc.

The instructions below assume you already have a strong familiarity with adb command lines - this is not for beginners.

If you’re unfamiliar with some of the terms, hit up our primers here:

Credits

  • Scotty2, jamezelle, jcase, and all of Team AndIRC
  • Testers, especially ProTekk and Trident
  • Thanks to scotty2 for WPThis
  • Busybox was pulled from a CyanogenMod ROM, source should be available here
  • psneuter was pulled from somewhere, credit to scotty2, source here
  • All firmware credit goes to 911sniper
  • nat3mil for the video guide
  • Jaroslav from Android Police for editorial help

If I missed anyone in the credits, it was unintentional and I will fix it soon. Lots of people had their hands in on this project.

*** Please read the instructions in full before you attempt the process or head to IRC to ask questions. Also, make sure your battery is fully charged before taking the plunge. ***

Step 1

First, download these files:

  • Downgrade RUU PG05IMG_downgrade.zip (md5sum : aae974054fc3aed275ba3596480ccd5b):

 

After downloading these files, please check the md5sums!

For instructions on how to do so, see:

Windows: http://helpdeskgeek.com/how-to/check-md5sum-in-windows-7/
Linux: https://help.ubuntu.com/community/HowToMD5SUM
Mac OSX: http://ubuntuforums.org/showthread.php?t=373879 

If the md5sums do not match, please stop and re-download that file.

Step 2

Note that adb is required.

Push misc.img, busybox, and psnueter using the following commands:

adb push psneuter /data/local/

adb push busybox /data/local/

adb push misc.img /data/local/

adb shell chmod 777 /data/local/psneuter

adb shell chmod 777 /data/local/busybox

Step 3

This step will gain temp root and flash the custom misc.img. Run:

adb shell

Now the shell should display "$".

Run:

/data/local/psneuter

You will now be kicked out of adb, and adb will restart as root. Let's confirm the md5 of misc.img:

adb shell

At this point, the shell should display "#".

Run:

/data/local/busybox md5sum /data/local/misc.img

Output should be "c88dd947eb3b36eec90503a3525ae0de." If it's anything else, re-download the file and try again.

Now let's write misc.img:

dd if=/data/local/misc.img of=/dev/block/mmcblk0p17

exit

Step 4

Here you will rename PG05IMG_downgrade.zip as PG05IMG.zip and place it on your SD card. Then, run the following command:

adb reboot bootloader

Choose the bootloader option and press power; let the ROM flash. When asked to upgrade, choose yes. Don't freak, it's a long reboot.

Once done, reboot and delete PG05IMG.zip from your SD card.

Set up the two part exploit, to gain root and unlock MMC.

Push wpthis, busybox, and psnueter.

adb push psneuter /data/local/

adb push busybox /data/local/

adb push wpthis /data/local/

adb shell chmod 777 /data/local/psneuter

adb shell chmod 777 /data/local/busybox

adb shell chmod 777 /data/local/wpthis

Step 5

Next, enter the following commands:

adb shell

/data/local/psneuter

To unlock eMMC:

adb shell

/data/local/wpthis

exit

Step 6

Please pay attention - this is very important. This step involves a small chance of bricking if you mess up.

To push the eng bootloader:

adb push hbooteng.nb0 /data/local/

adb shell

/data/local/busybox md5sum /data/local/hbooteng.nb0

If the output does not match "6991368ee2deaf182048a3ed9d3c0fcb" exactly, stop, delete it, and re-download it. Otherwise, continue.

Now we will write the new bootloader.

dd if=/data/local/hbooteng.nb0 of=/dev/block/mmcblk0p18

Confirm proper write:

/data/local/busybox md5sum /dev/block/mmcblk0p18

If the output does not match "6991368ee2deaf182048a3ed9d3c0fcb," try again; if it still doesn't work, seek help from chat.andirc.net in channel #thunderbolt. DO NOT REBOOT.

Now, reboot your phone, rename PG05IMG_stock.zip as PG05IMG.zip and put on your SD card. Then flash it. This will upgrade you to release firmware with an S-OFF bootloader.

Next, run this command:

adb reboot bootloader

Choose the bootloader option, and press power; let the ROM flash. When asked to upgrade, choose yes. Don't freak, it's a long reboot.

Once done, reboot and delete PB05IM.zip off of your SDCard. You are now fully rooted.

If you prefer videos, you might be interested in the following, however it uses an older method and will be slightly different:

http://www.youtube.com/watch?v=uFD8vWzMmDA

If you still have problems, come to the chat: irc.andirc.net #thunderbolt or use http://chat.andirc.net:9090/?channels=#thunderbolt.

Justin Case
Justin Case is a 30yr old father of four. He has an ever changing array of Android devices, and an eye for mobile security.
  • dave

    You need to start fresh from the beginning. S-on means no root has been applied.
    There are several great roms that have ad blocks. Let's get you rooted first. I have only been rooted for a month or so but you can't "wade"..it too addictive because there is SOOOO much to choose from. There are literally hundreds of roms to choose from. I have tried 7 until I came across "The Perfect Storm" which I love and I have the Thunderbolt 1766_V2 speed rom which is overclocked to 1.65 GHZ stable. That's a lot faster than 1.0.
    Anyway download adb for dummies first and then download one of EACH file ( I just use each GALAXY to avoid confusion).
    After you download those 3....make a file and name it Joey G. Take those 3 files and place them in the Joey G. file. You will remove the files one at a time (the 459mb first. The 399mb doesn't come until step 7).
    When you remove the 459mb file, right click on it and rename it PG05IMG and DO NOT OPEN IT. Leave it in its zip file state and DON'T add . zip to the PG05IMG. It is already there but its hidden. I ran into this more than once. You will do the same thing again with the 399mb file later. Don't forget in step 7 to rename it the exact same thing and way that you did the 459mb file. We'll get you there!!

    • Joey G

      HAHA--I know what you mean about addiction!! I could not stop putting leaked OS's on my blackberry phones but it was quite a bit simpler process. I have my home computer already set up with all downloads and adb. I should be able to start right off with step 2. I do not anticipate any problems but I get home at 5:30 central time and should be "swimming by 6 or 7. I would like to flash a rom but will need some help with that I am sure--but like you say once i get going it could get out of control--LOL! Thanks again for the quick responses and thanks in advance for the questions I will probably have tonight!!

    • Joey G

      Dave please help me if you are out there!!

  • Joey G

    I am hung on and its on Step 5 and says for me not to reboot I really need help and I cannot seem to ge to the help page--HELP

  • dave

    At my son's game. Be back in an hour or so

  • Joey G

    My phone seems to be fine I just unplugged and rebooted for the hell of it!! It came back up but with a very weak radio it seems and some different apps that I did not have before. Of course the phone was wiped but I dunno need some help with a restore I guess. I tried to do a check for system updates and it gives me an error for that but other than that data and cell service work. another thing that is weird is that my wife no longer get my custom ringtone when i call her?? I hope you get home soon and point me in the right direction. thanks for your time in advance

  • Joey G

    its also telling me my navigation is no longer available in my location??? what gives?? lost

    • jcase

      Joey, you need to start over. You didn't complete the guide. I updated the guide before noticing your comments, my advice is to redownload and do the new guide. It is safer and easier.

  • dave

    Hey Joey,
    Sorry i was out and then I think the site was down. Tried your e-mail but your domain is not working.
    Do you have s-OFF or S-on??

  • Joey G

    I am not sure I cannot seem to get it to boot into the hboot screen??

  • Joey G

    Nevermind finally got it to work I have S-on

  • dave

    OK!! Let's start from scratch. You MUST be S-OFF if you are to obtain root.
    I want you to start at step 2 and continue THROUGH step 4. I am assuming you already downloaded adb for dummies.
    We need to move forward from there.
    When you get to step 4 do it SLOWLY and run all adb. Remember to not open up any zip files or they will not work. Also, you MUST rename the 1st and third file PG05IMG and do NOT add .zip. As soon as you complete step 4 you will go from S-ON to S-OFF. This is temporary root and you're on your way.
    You will do the exact same thing again with the 3rd file but not until step 7

    • Joey G

      thank you I am doing it now will get back to you when In a few

  • dave

    S-ON is no good. We need S-OFF.
    Do what I have stated on my last post and we'll move forward.

  • dave

    Start with adb push psneuter /data/local/ and do all 5 in step 2 and don't leave out anything including the / after local etc...

  • dave

    when you get to step three start with
    adb shell

    • Joey G

      give me a second--working on it now

  • dave

    When you get to step 4 Here you will rename PG05IMG_downgrade.zip as PG05IMG.zip but do NOT put the .zip after PG05IMG. It is already there but you can't see it, it's hidden!!! Place it on your SD card. Then, run the following command:
    adb reboot bootloader

  • dave

    As soon as you are done with the above command..STOP... Reboot!!!!!

    • Joey G

      i have had zero problems so far and I have just typed exit and will do step 4 soon. the file is still downloading b/c i deleted all old files and started fresh. I have just typed exit and awaiting the completion of my last file to download. unfortunately it is the one i need first haha--12 minutes remaining--and in case by some miracle I forget --thank you so much for helping me !!

  • dave

    Ok!. When it starts scrolling (takes 5 minutes or so..it will say S-OFF....your home free

    • Joey G

      In about 60 seconds I will be doing the adb reboot bootloader--download took forever!!

  • dave

    OK! After it scrolls...Stop...and REBOOT or you get to try it again. It should say S-OFF

    • Joey G

      rebooting now--SO i need to go back into the boot loader to check for s-off??

    • Joey G

      finished with those steps

  • dave

    It will say it at the top.
    Not to worry if you didn't get to see it.
    Next...
    copy and paste

    adb push psneuter /data/local/
    adb push busybox /data/local/
    adb push wpthis /data/local/
    adb shell chmod 777 /data/local/psneuter
    adb shell chmod 777 /data/local/busybox
    adb shell chmod 777 /data/local/wpthis

    • Joey G

      made it to step 6--should I just follow the instructions above

  • dave

    ok. keep going

    When you get to the point where it says do not reboot.....stop and double check that your info matches. If everthing is ok then REBOOT and stop. We will continue at that point but do not do the PG05IMG for the second time yet.

  • Joey G

    I am at that point how do i reboot?? just cycle the phone or use the commands?? I think you mean for me just to turn phone off and on correct??

  • dave

    Just press and hold the button on the top of your device until it asks for a reboot or just shuts down, then fire it back up again

    • Joey G

      Got it covered--I thought I was more tech savvy--evidently I am turning into my grandfather--lol--Phone is rebooted an ready to go

    • Joey G

      Just to be clear at this point (HAHA) I need to delete the first one off the card then add the stock zip?? And this new one is 400 mb not 399?? Just wanting to be thorough--I cannot do this again tonight--I am tired!! And I know you are tired of messing with me!! But I do appreciate it

  • dave

    The homestretch. Take the last file that you have (399mb) and name it PG05IMG
    DO NOT ADD .ZIP. Flash it like you did in step 4.
    Then enter adb reboot bootloader

  • dave

    Choose the bootloader option, and press power; let the ROM flash. When asked to upgrade, choose yes.
    It will take a little time

    • Joey G

      Man I do not know how to thank you!! Not only I am rooted-- I learned a ton of great information. Thank you just doesn't seem to cover it. I am in the final stages but I see S-OFF and no problems--thank you so much for all your help!!

      • dave

        No problem. Don't load too much into your phone yet. Tomorrow you need to download a good rom and get rid of the stock rom. Get some speed...At least a 1.4 or better. I have the Thunderbolt 1766_V2 and I love it.
        Download SETCPU...you're going to need it.
        Astro File Manager,and most importantly Titanium backup to go with your rom manager.
        As soon as you download titanium backup hit problems and press busybox.
        Then get adfree to get rid of all ads.
        Freeze or dump the apps that you don't like after you download a new rom in titanium backup.
        Good night.

  • dave

    Yes. Delete the first one that is 459mb

    remember..DON'T OPEN IT. It needs to stay in its zipped state. The phone will open it automatically

  • Gregory Glaser

    First I would like to say how impressed I am with the aggregate of knowledge and experience to be found here. Second, scrolling through these exchanges is pretty darn entertaining as well as educational.

    Having said that, I have questions of my own that I have not found addressed here.

    My first question has to do with the 459 and 399 downloads. Why do you suppose Winzip opens the 399 file without any problem, yet reports the 459 file as "corrupt?"

    Of course I'm not about to attempt to open these files and "push" them to the SD card because there's no reason to do so in the first place.

    I just find it peculiar that after several downloads from two different sites that this is the case.

    I haven't attempted to root my TB yet.

    Perhaps since the unzipping of the files actually happen within the TB under a Linuxish environment, the "corrupt" status reported by Winzip is immaterial.

    Is there any experience out there about this topic?

    Best of luck to everyone

    Greg

    • jcase

      Article doesn't tell you to open them. One of them is signed by HTC, altering the file would break the signature. Some lesser programs like winzip choke on these signed images.
      aka Don't open them and winzip is junk

      • Gregory Glaser

        As I stated in my earlier post,

        "Of course I’m not about to attempt to open these files and “push” them to the SD card because there’s no reason to do so in the first place."

        This was written to indicate that your point about not pushing the unzipped file to the device was understood.

        Your point about breaking the HTC signature explains why the 459 file gets reported as corrupt under Winzip and requires no further castigation of Winzip as "junk."

        I disagree with you about your characterization of Winzip as junk. It effectively unpacks the exploits.zip file; a useful and necessary process in the quest to achieve root, so I don't understand your assessment of it as "junk."

        Winzip clearly does not unzip signed files, that's all you need to say.

        You have provided people a great deal of useful information in this forum. You should feel good about that.

        Failure to provide reasoning behind your characterization of Winzip as junk amounts to a reckless characterization of a product that has done much good in the world.

        Unsupported statements such as these are is a quick road to ruining your overall credibility.

        Thanks for your help though.

        Cheers.

        • jcase

          How about the fact it just does not follow the RFC, and breaks compatibility.

          My credibility is not my concern, but it seems to be your's.

  • dave

    If Justin says it....take it to the bank.
    Follow the instructions I gave (credit to Justin/the author) to Joey in the previous posts and you should have no problem

  • Edward

    Does this updated method install the new leaked RUU that fixes 4G/3G problems, camcorder audio, battery life, etc.? Or will I need to download it and flash it separately after the root process is done?

    • jcase

      No it does not. This tutorial returns you to stock firmware rooted.

      The leak RUU needs more testing before I integrate it.

      • Edward

        Thank you for the reply! Going to attempt rooting on my lunch break today. Keeping my fingers crossed! :)

      • dave

        Sorry to get into it Jcase...
        It is your post and you help EVERYONE so tirelessly including me. I have become very protective of those that do so much for others. This greg is a troublemaker with nothing to bring to the table.

  • Joey G

    Just an update--all is well with my phone and root was achieved

    • dave

      I know... I was there with you!!

  • dave

    @Gregory.. I suppose you just come on this board to create problems?? If you don't want to be part of the solution then just stay away. This forum is to help people. The author is entitled to his opinion. Are you the zip file police???
    Cheers!!!
    @ Joey...Glad it worked out. What rom did you choose??

  • Greg

    @jcase

    Your credibility is everyone's concern.

    Re: RFC, citation please.

    @Dave

    No one is talking to you. Butt out. Go try to mix in someplace else.

    kthxbye.

    • jcase

      Greg,

      My credibility is not my concern, I really have never cared what random people on the internet thought of me. If I did, I would be one sad person.

      RE: credibility, citation please.

      I am not your personal research assistant, and this article is not about winzip. If I write an article about winzip, I promise I will do a thorough break down, and explain why I dislike it, and why your should too.

  • dave

    @Greg
    Piss off scumbag.
    Find another place to peddle your drivel.
    We all appreciate and respect jcase.
    You, on the other hand, are an idiot and should be banned from these boards!!
    Cheers!!

  • jcase

    Dave,

    Thank you, I don't ban people from comments, and he really isn't doing much other than some minor trolling.

    • dave

      You take care of everyone elso so you shouldn't have to listen to some troll that has nothing better to do than start trouble.

      Thanks again for all you do for all of us. Your help to me has made it a pleasure to help others on the board that ask. Emily, Joey etc...AND, I'm a noob also. Proudly, but learning!!!!

  • Joey G

    I leave for a little while and this place gets heated!! haha--@jcase--instructions are amazing--@dave--your help was wonderful!! I have already flashed my first rom today and I am thoroughly enjoying--(virus/airbone senseless) and as I said I have become addicted already!! I am wanting to try another and was thinking about the one you mentioned (the perfect storm) and was wondering if you were still enjoying or if youhave moved on.

  • dave

    Hey Joey,
    I think the world of Justin. He IS the reason that I was able to help you. I don't appreciate people coming on his post and criticizing him.
    Anyway,
    I love my "Perfect Storm". Try it or try another.
    Have fun.

  • Joey G

    Have a question about flashing the radio first then the rom?? been trying to search around and find some instructions but no good--wanting to flash bamf remix but I have to flash new radio first--tried putting the file on sd card and use CWR but it would just abort installation. Can you give the the quick step through guide?? And I understand about that other guy--i would feel the same way!!

  • dave

    Hey Joey,
    I'm at a party so i can't help tonight. Go to xda and download it. Go to t-bolt development and go to all things root. You'll find the new 1.5 version woth the fix for the radio. I had others ask about that same problem yesterday.
    If you still have problems tomorrow, I'll be happy to help you out when I'm at my computer.

  • Joey G

    Sounds great!! Have fun and be safe!! (I am getting old)

  • Frank

    i've got zero experience with ADB, but have been a developer for many years. took me two hours total but works as advertised on my new t-bolt.
    :-)

  • gozo311

    Here's something I think may help people: I had a hard time getting the bootloader to ask to upgrade. The reason was because after I moved PG05IMG.zip to the SD card, I never ejected the SD card. Therefore, the file was never fully written to the drive, so the bootloader couldn't find it. If you have this trouble, make SURE the RUU is completely copied to the SD card and that the filename and extension are correct.

  • Edward

    Rooted my Bolt yesterday at the office. This was my first root ever, so I was a tiny bit worried about bricking my phone, but hey, I got insurance! :D

    I am very happy to report that following the easy instructions everything went smoothly and my phone is now rooted. After installing ROM Manager and backing up the system I installed the leaked OTA RUU and saw quite a few improvements as promised.

    Also, I installed Titanium Backup and used it to remove some bloatware like BitBop, Rockband, etc. To my amazement, TiB cannot remove Blockbuster app.

    Anyways, huge thanks to this website, Jcase and the team. You guys rock!

  • ChuckM

    Good advice gozo311, I always check the MD5's after transfering to SD as well, just what I do..

  • LTE4G

    What happens when verizon pushes out a system update? Are we screwed or is that disabled? How do u disable it?

    • Edward

      Good question, I'm curious about that too!

      • Joey

        If anyone would just answer this for us noobs (that rooted our phones) that would be enormously helpful. I don't want to do a system update and have it un-root me (if possible) or negate any of the value of rooting.

        Thanks.

        • jcase

          You can install an updated custom rom from a rom developer.

    • jcase

      If you flashed the clockwork recovery, it should not be able to apply.

      You will need to apply one provided by TeamAndIRC or someone else.

      • LTE4G

        Yes I did, thank's for the answer... only issue I have with it is the same I had b4 the video camera mic but everything else has been running well, Definitely glad I have root now! Missed Ti a lot!
        Someday I'll try a diff rom but at least now I CAN :) Thanks to all the hard work the dev's put into this!

        Also btw did it on Ubuntu 11.04 beta2 x64 so glad it worked so well!!! Very easy once I had grasped the adb program, and no it wasn't hard but I do like to have a good understanding before I attempt such a task.
        Also thought I would mention I found a way to backup my data (Angry birds) at least... using adb push/pull ... I imagine there is a better way to copy data/data/* but that worked well!!!

  • zxecktroid

    This was the easiest follow up guide ever made.. I just bought this TB a week ago , never had a droid phone and got it rooted if you can simply follow the steps and READ carefully.. Noob ? does not exist , if I can everyone can even a fetus...Thanks to the Brains that made this possible.. can't be any more greatful..

  • teambret

    awesome, thanks. i'm brand new to the android and it went flawlessly.

  • dustin

    "Now, reboot your phone, rename PG05IMG_stock.zip as PG05IMG.zip and put on your SD card. Then flash it. This will upgrade you to release firmware with an S-OFF bootloader."

    Do I need to reboot it firstly? Then copy the zip?

    • LTE4G

      I'm sure it won't hurt, let's everything get setup on the older firmware (no not install all your apps) just reboot to the main screen, copy the file over then continue

      • dustin

        Thanks, yes, I reboot then copied the zip, works now

  • makabra

    Thanks.

    After 3 hours trying to root my TB i finally dit it.

    But now i have a question, is it possible to install a newer version of android?.

    • LTE4G

      Yes, you would not want to install the official one, or else you MAY lose root... but install Rom Manger (purchase it) and I recommend Titanium for backing up data/apps...

      You can get a whole new rom from many devs, including liquid smooth roms... he has one but I have not tested it yet... so a good place to start, or CM7 I think is the other popular one.

  • Kat

    Hi I'm having trouble getting past bootloader. it's saying the file/ image doesn't exist.

    • dave

      What step are you on??

  • Gfitcher

    i need help i've been stuck when i go to reboot into bootloader it wont let me... i got stck halfway through rooting it with the last method and i had a problem so i'm on the downgraded software but i dont have root access can someone please help.

  • vwman

    So when I boot into the bootloader... mine says
    MECHA XD SHIP S-ON
    HBOOT-0.95.0000
    I assume that this is not correct. I know that I have root access but am trying to wipe the device so I can associate it with a different email address.
    Did I miss something?

    • dave

      You must have s-OFF.
      Start from #2 and when you rename the file just put PG05IMG and nothing else....No, Do not put .zip

    • dave

      Yes. Just download 1 each of the multiupload. One file is 459mb, the next is small and the last one is 399mb.
      Download them and DO NOT OPEN THEM. Leave them in their zipped state. Make a file on your desktop and name it mrt.
      Put each of the three in the file. In step 2 when it's time to send the first file to your phone, right click on the unopened zip file and rename it PG05IMG then send it to the phone. The phone will open it automatically. After it is opened in the phone and used - you can delete it. You will rename the 3rd file PG05IMG also in step 7. DO NOT ADD .ZIP to any file. It is already there...You just can't see it.

    • vwman

      I was able to get it fixed over the weekend. Flashed it back to stock and then re-rooted again.

      All is good.
      thx

  • mrt

    when i tried downloading the first mirrors it had me download white smoke installer... and its a program to fix spelling??
    what did i do wrong?lol
    total epic noob here

    • dave

      Yes. Just download 1 each of the multiupload. One file is 459mb, the next is small and the last one is 399mb.
      Download them and DO NOT OPEN THEM. Leave them in their zipped state. Make a file on your desktop and name it mrt.
      Put each of the three in the file. In step 2 when it’s time to send the first file to your phone, right click on the unopened zip file and rename it PG05IMG then send it to the phone. The phone will open it automatically. After it is opened in the phone and used – you can delete it. You will rename the 3rd file PG05IMG also in step 7. DO NOT ADD .ZIP to any file. It is already there…You just can’t see it.

  • Mark

    Once rooted, how do I get ROM MANAGER to come up instead of Bootloader? I want to install some ROMS... HELP!!!

  • JN

    Based on the very good advice here over the years, I've rooted 3 855 droids.

    Tomorrow, I'm getting a new Verizon HTC thunderbolt and looking forward to giving this a try.

    This might be a total noob question, but am I safe (or better off) to root before activation? Or should I wait until after activation?

    Thank you

    • sgtguthrie

      I would wait until after. That way if you have trouble activating you can feel okay walking into vzw to fix it. But that's just my 2 cents...

      • JN

        Good advice. I guess I should find out if I have any warranty issues before I void my warranty. ;-)

  • Tom

    I see it says version 2.5, just got my Android the other day from Verizon, it's version 2.2.1...will this work as well, I can't seem to find rooting steps for a Thunderbolt with 2.2.1, all different phones

    • sgtguthrie

      It means the rooting version is 2.5...there is no Android version 2.5 yet :-) This is for Android version 2.2.1...you're good to go...

  • Tom

    Thanks, appreciate the response. This should be a fun project for tomorrow!

  • Steven

    Thank you so much, The process went flawlessly! Such and easy root process even though it looks a little daunting before you start it. Thank you for all the hard work, now its time to see what Ol' Thundy can really do!

  • Foolproof

    After I understood what was going on it was super easy. Thanks a lot for all the work

  • Lazarus

    Am I daft? I do not see any "Step 7"...

  • Mike

    After this step :

    Step 4

    Here you will rename PG05IMG_downgrade.zip as PG05IMG.zip and place it on your SD card. Then, run the following command:

    adb reboot bootloader

    the phone reboot to factory setting and asked me to put information back like : email account & etc.
    I want to know please if it's mean that phone not reboot from the : "PG05IMG_downgrade.zip" and i need to do all from begin. by the way all my phone directory was lost to... (i have backup) but i am think that it was not correct since when i come to step 6 and put that command :" Confirm proper write:/data/local/busybox md5sum /dev/block/mmcblk0p18"

    i got a meesage that the file not exist.

    i think that i just reboot to the original htc boot. any idea or help will be appreciate.

  • Mike

    This methos not work (the new one) . i follow everything , verify that all is correct and after i reboot the phone i still can't access the root. i hope that someone will verify that.

    • jcase

      It works flawlessly, please check with root checker form the market.

      • Mike

        Jcase

        Thank you for the reply , i did test it with root checker and it's show that the phone is rooted. but i have a quasetion and hope you can help me with that. as i understand once the phone is root i can delete application like "City ID" that install in the phone .... when i check on "manage application" and select it i don't see any option to uninstall it. how can i do that ?

        Thanks again for your help and support.

        • sgtguthrie

          You can't do it that way. Download titanium backup from the market and use that to uninstall them. Just make sure you are only uninstalling things that are safe to. If you're unsure, freeze it first and see if it messes anything up...

        • sgtguthrie

          Also, I forgot to mention one important thing. MAKE SURE YOU DO A COMPLETE NANDROID BACKUP WITH RECOVERY BEFORE YOU REMOVE ANYTHING!!!

  • GuhBah

    I see no step 7.

    But my major problem is that I can't get superuser to download. Is that part of the April 21 revision or is that only pre-April 21? What to do at this point? I still have bloatware and no way to get rid of it. I have ROM Manager and have completed steps 1-6.

    I was confused by the discussion of step 7 that took place in the comments post-April 21, so I found a "step 7, 8, 9" website that looks like it copied your steps before the April 21 revision.

    Regardless, I would love to hear from you. I'm a wee bit lost at this point and scared to forget where I am.

    • jcase

      I condensed the guide, and made it more reliable, and shorter. No longer do we have 7,8 and 9.

      This guide does not remove bloat, please check various android forums for that.

      • Lazarus

        Thanks jcase - figured as much ;-)

        EPIC tutorial - well done, and thanks!

      • GuhBah

        Thanks for all the hard work. I think I have it figured out. That was my first attempt at rooting a device. It went smoothly and I figured out what you are saying about the fewer steps.

        My new question: When moving apps to sd card, do I move just the .apk file or do I move the .odex file as well when it accompanies the .apk file?

        I have a similar comment down the row, but I addressed this directly to you through the reply feature.

    • sgtguthrie

      @GuhBah did you download the superuser apk from the market? During the root process you push the su binaries, but you still have to download the apk from the market...

      • GuhBah

        I did finally get it. but I still have a question about moving apps to the sd card. Do I move only the .apk files or both the .apk and the .odex files?

  • Justin

    Has anyone else seen that the GalaxySense mirror is not available?

    • Mark

      Yep. No galaxy sense mirror. Is that a problem? Are all three mirrors the same?

  • GuhBah

    Got it. Thanks for the help.

    I'm good to go now, fully rooted (as I was before and didn't know enough to realize it).

    I'm using Root Explorer to move Bloatware to my sd card.

    Quick Question about that: When I'm moving files, should I be moving the .odex files that accompany the .apk files, or is moving the .apk files sufficient?

    Thanks a million for all of your hard work!

  • Mike

    To :Sgtguthrie

    Thank you , i really appriciate your help.

    Best Regards

    • sgtguthrie

      No problem mike, glad I could help :-)

  • alex

    Is the RUU 1.13 or 1.12?

  • skylines

    rooting my thunderbolt tonight. looks a lot easier than my ps3 :p

  • aaron

    Question how do i put tge Thu onto sd card it isn't showing up oon my computer need help to get passed step 5

  • wascapsfan

    tgu, Thu?
    Are you trying to achieve root??

  • aaron

    Tried rooting with abd got the ruu onto SD and went into bootloader got it to update reported followed all steps it erased my data but didn't root my phone I have root explorer and tried going into data folder to hack tapfish said my phone is not rooted... I need it rooted to hack tapfish please email me or reply to this msg I need help please. [email protected] thanks

    • sgtguthrie

      Did you install the superuser apk from the market?

  • SNPRFOX

    So do you know if you can download the software update via phone info menu or will updated software have to come from modded rom?

  • mike

    Are there any versions (i.e. software, firmware, kernel, android version etc) that this process will not work on? I have notice other site threads mention specific versions. Mind you, this would be my first root of a phone so I am new to the process.
    Thanks for the help.

    • mike

      I downloaded the SDK from Android but I am not able to access the ADB. Downloaded Android 2.2 Platform which I think is the same as my T-Bolt. Which version should I be using? Will another version work on my phone? Can anyone provide some insight?

  • Matt

    Just wondering if this is still a valid method of Rooting a Thunderbolt as of May 24th. My thunderbolt has Android V2.2.1; and Baseband V1.16.00.0402w-1. I'm wanting to safely root my phone so I can update my GPS config file. If there is a better method for a phone with the latest OTA push from Verizon, I'd appreciate the guidance.

    Thanks!

    • NightRider5o

      Let me know if you get a reply please. I got stuck on 4 after adb reboot bootloader phone reset but would not install PG05IMG. I downloaded same file again and went through steps with same issue. says no image or wrong image

  • LTE4G

    This should work no matter what update is installed... basically you are installing a previous "Official" version that's signed and everything, then exploiting that versions weakness to gain root etc...

    http://www.liquidsmoothroms.com

    I'm using the LGSv1.0 and even though it's 'alpha' it's so fast, so slick, and so far after about 60 hours running flawless from what I can tell, there's even one app that won't run on stock froyo TBolt that does on this GB 2.3.4 so go figure!

  • Greg

    I just wanted to say thank you for this extremely detailed, thorough, and easy-to-follow guide. I had never even heard the term "adb" before reaching this page but your step-by-step instructions were able to get me through flawlessly. Thanks so much for all your contributions to the Android community.

  • Payab

    JCase, I read your post on XDA, but I want to know if i could get a video on "how to update the OTA firmware using RUU" I just dont want to mess it up.. Is it just step 4 repeated? Thanks in advance

  • Jay

    Once my phone is rooted (done) should I still be getting software updates?

  • Jay

    Once my phone is rooted (done) should I still be getting software updates?

    Also, every time I connect my phone to my pc via usb I get an error message "HTC SYNC ADR6400L is not responding." ... and says to reconnect cable after 10 seconds.

    Any help would be appreciated!

  • switz

    Great job with the instructions as I am now rooted. I tried another method but it would not work.

    I am having an issue now though: My connection blows. It is soooooo slow either downloading something from the marketplace or using the Internet. Did this root roll back the radio? If so, can I update it again without losing root? Thanks again for the great job.

  • Tommie Spikes

    I got stuck on 4 after adb reboot bootloader phone reset but would not install PG05IMG. I downloaded same file again and went through steps with same issue. says no image or wrong image

  • dave

    Change the file name to PG05IMG and do NOT add .zip to the end of it.

    • NightRider5o

      thanks dave leaving .zip solved my problem

  • SNPRFOX

    Can you still get firmware upgrades via phone menu with this root method?

  • Sharpace

    I would like to start off by saying thank you. I bought my Thunderbolt on the June 3rd and just spent the night rooting and unlocking it (the entire night due to slow connection speed). As for the process, people say it is complicated or difficult I was a total noob, the only other device I had rooted was the Droid Incredible and I used unrevoked for that, but when I purchased this phone I missed having root which lead me to using this process instead of waiting and I did not have a single problem. The guide has good links to everything you need, except for adb, you may want to link to a guide on how to install and use it for those who don't like searching themselves. Even with that flaw, five stars.

  • androiddamnit

    I get the following error:
    C:\Program Files\Android\android-sdk\tools>adb shell
    $ adb push psneuter /data/local/
    adb push psneuter /data/local/
    adb: permission denied
    $
    What am I doing that renders me retarded?

  • dave

    Your not following instructions.

    Step 2 Push these EXACTLY as I type it, one line at a time.

    adb push psneuter /data/local/

    adb push busybox /data/local/

    adb push misc.img /data/local/

    adb shell chmod 777 /data/local/psneuter

    adb shell chmod 777 /data/local/busybox

    adb shell

    /data/local/psneuter

    adb shell

    /data/local/busybox md5sum /data/local/misc.img (all of this is on one line..Do NOT copy this that is in parenthesis)

    Do not copy this... Read this only..Output should be "c88dd947eb3b36eec90503a3525ae0d

    Push the next line....

    dd if=/data/local/misc.img of=/dev/block/mmcblk0p17

  • Jonathan

    Will this still work with the MR2 update?

    • JL

      I would also like to know this before rooting.

  • qdizzle

    im having a hard time. i did great with my droid one but im stuck on step 2. i copy and paste and it tells meC:\android-sdk-windows\platform-tools>adb push psneuter /data/local/
    cannot stat 'psneuter': No such file or directory

    C:\android-sdk-windows\platform-tools
    HELP PLEASE.

  • John G

    I can unzip the PG05IMG.zip and the exploits.zip no problem on my mac. I get stuck in a circular "cpgz to zip" loop when I try to unzip the PG05IMG_downgrade.zip. Does this matter? Is the archive corrupt, or will it behave differently on android os ?

    thanks
    john

    • jcase

      Yes it matters, the directions only tell you to unzip exploits.zip. Follow the directions.

  • http://geekdrop.com GeekDrop.com

    So this is my first Android phone, and thus my first attempt at rooting, so I want to study up on everything and learn all I need to before diving in.

    My main question is: on my stock TB I've tweaked and customized the sh*t out of it for a few months now, and seeing that rooting will wipe all data, what's the best way on an unrooted phone to back up all my settings, customizations, etc.

    I've already read about Nandroid imaging for rooted, but haven't seen much on unrooted phones?

    TIA

  • mememe

    Is it true that adb on these phones is not working unless the computer connecting to it is windblows?
    I stopped using MS crap quite awhile back. I'll hook up an Ubuntu, Debian, FreeBSD or Scientific Linux box to it, but not a windows machine.

  • mememe

    Is it true that adb on these phones is not working unless the computer connecting to it is windblows?
    I stopped using MS crap quite awhile back. I'll hook up an Ubuntu, Debian, FreeBSD or Scientific Linux box to it, but not a windows machine.

    • jcase

      Guide was written using a debian box....

  • doug

    So I got my 1st Android phone, (T-bolt) and have been reading this forum for sometime now, and am ready to root. I'm pretty good with computers and not afraid to do this, but just one (or two) questions before I start:
    1. When I root and then a new update comes from Verizon, how do I get the new version? Do I just install a 'rooted version' (if something like that exists)?

    2. Once I root and set up my phone the way I want it, all the folders and app drawers all organized and such, when I do #1 above (re-root for updates or something) do I then have to reset up my phone all over again? All the organizations are gone again?

    Thanks in advance for any feedback! Thanks to all who make this forum the great one it is too!

  • http://geekdrop.com GeekDrop.com

    Rooted my Tbolt last night and the instructions worked 100% perfect first time through. Big thanks to all who made this possible. For anyone who's never done it yet and might be a little nervous, it's a simple matter of copy/paste each line, one after the other. I used a clipboard extender program called Clipmate (http://bit.ly/clipmate) to copy them all down in a row, then with CM's "Powerpaste" you just paste your way through. Very simple.
    My problem now though is that I used the app MyBackup Pro to back up everything I had on the unrooted phone, then after rooting, used it to do a full restore of all it backed up. Looks like it must've corrupted my SD Card because all of the icons I had moved to SD are no longer shown in the app tray, and any that were on my home screens show the generic android icon, and when clicked I get a popup saying something along the lines of "the linked program no longer exists".(grrrr).
    I can see all the files/folders on the SD in Astro still however, and in settings I can still see the SD's size and how much is used/free.
    Anyone ever have this issue before and know how to fix it (while NOT losing the data on it?)
    TIA

    • http://geekdrop.com GeekDrop.com

      Since rooting (and not adding any other roms) I've still be plagued with the problem I mentioned at the bottom of my previous post, where about 50%-90% of the time my SD Card won't be "seen" by the OS.

      All files/folders/structure are still on the card, as seen via any file explorer both on the Thunderbolt itself, and with a card reader on my computer. I've tried mounting the card as R/W, manually synching the device, using different home launchers, and just about everything else I can think of. It seems to "come back on it's own" randomly as well, although I'm sure SOMETHING I've done while attempting 87328790374023 things to fix it must've triggered it's "fix", but I've been unable to pinpoint it thus far. "Just when I think I've got it" ....

      When it's screwed up, trying to unmount the card in settings also just causes the settings to hang until it's FC'd, and it never actually unmounts it.

      Anyone have any ideas? It's starting to get pretty frustrating.

  • Jay

    Thanks for this guide.

    Rooted my T-Bolt over the weekend. Success first time through with no issues. Only hiccup I had was having to put the phone back into USB debugging mode.

  • dave

    Jay, go into settings, then applications, then development, then check usb debugging.

  • doug

    So I completed the root and loaded DasBAMF Rom and all is working well. Seems that the random reboot happens a little more now, but oh well. If I keep using DasBAMF Roms and don't load any experimental ones, and only load the 'stable' ones, can I just load the new Rom via Clockwork or do I still have to wipe everything each time?

    Thanks!

  • David B

    I've been trying to download the listed files:
    * Downgrade RUU PG05IMG_downgrade.zip
    * Custom upgrade RUU PG05IMG_stock.zip
    Everytime I compare the MD5Sum I get a bad code? This will be the umpteenth time today I've downloaded both files with no success. The computer says the files downloaded fine (completed), but the CheckSums are different.

    Am I doing something wrong, or do I need to get it from a different mirror? Any help would be appreciated as I'm a NOOB!

  • Andrew

    in step 3 i am getting a # instead of $..

    c:\android-sdk-windows\platform-tools>adb shell
    # /data/local/psneuter
    /data/local/psneuter
    mmap() failed. Operation not permitted
    # adb shell

  • protonum

    Hi
    I sailed through till step 5

    At step 6, after copying PM05IMG.zip (stock version) to the SD card, and running

    adb reboot bootloader, and selecting BOOTLOADER option,

    it loads the PM05IMG.zip file and checks it. After that is just comes back to the FASBOOT, RECOVERY... menu. It does not give the option of upgrade

    I guess the rooting is not complete. Can you please help

    • protonum

      My bad, I missed writing the hbooteng.nb0 to bootloader file using

      dd if=/data/local/hbooteng.nb0 of=/dev/block/mmcblk0p18

      Worked fully...thanks

  • H4X0R

    Has anyone has any issues rooting since the new Verizon update? I just wonder if it works after the update, because I don't want to waste my time or risk bricking my device.

  • slowpok22

    did it last night, seems to work, but need to update to the newest radio i guess?
    not getting G4 signal, everything else seems to work.

    I used the MR1/OTA Firmware 1.13.605.7 from XDA

  • Marty

    I can't get the download for the PM05IMG.zip file to either complete or it seems like it is messes up. I have renamed and put on the SD card then hit enter: Output=# adb reboot bootloader
    adb reboot bootloader
    adb: not found
    #
    I did have to try many time today at one place and now home to get this one download. It is very frustrating to say the least. This is all I need to finish this up. Can't stop in the middle. MY email: [email protected]
    If you have a dropbox I would be ever so happy to get that way.

    Regards,
    Marty R.

  • John

    Myself and H4X0R are on the same boat. Anyone had complete success since the latest OTA update? LTE too! If anyone could post there experience (success too!) that would be so greatly appreciated. I might give you a cookie!

  • J

    So I rooted my TB with this method everything seemed to work great up until I realized I lost my lte data connectivity. 4G LTE shows up but I get the error saying I may not be provisioned to use data services.

  • http://xpgamer.com mpisarsk

    Worked great - just got a Thunderbolt yesterday... flawless.
    Thanks Justin!

  • Matt

    Worked flawlessly for me as well! Thanks for all your hard work putting this together!

  • Mark

    GalaxySense link does not work

  • Mark

    I really need to know whether all three links for the mirror are to the same file. I believe so, hence the same m5sum. Is this correct? The reason I ask is the Galaxy Sense site is down.

    • Mark

      To answer my own question- all the mirror files listed are the same. you only need one. root went fine.

  • Shad

    Work great! Thank you

    • Don

      Did you start with the latest OTA update from Verizon? Still waiting to hear if someone has successfully rooted with this method after that update. Thanks!

      • DethanB

        I just got my replacement phone on Tuesday as the Data quit working on the device. I checked to see if it was the latest OTA version, and it indicated there were no updates available.

        I rooted this one right away and had no issues at all with the rooting process and loading of the ROM I enjoy.

  • sam

    rooted successfully but next day verizon pushed update and now my phone is completely unusable. Any thing I do to revive my phone back to original?

  • Chris

    My phone did the same. It would power down and have the android guy with an exclamation point.

    I followed the recommendations from here: http://forum.xda-developers.com/showthread.php?t=1160374

    Basically getting the rooted version of the OTA update and flashing it on along with flashing the new radio for the update.

  • thebear

    All data on my phone will be lost, including all contacts? I'm kinda sketched out about rooting my phone and fucking it up. Someon sell me on this please

  • cracker6686

    after rooting, u can still go back to the market and get the programs u have bought and redownload them again. and u can restore ur contacts threw ur google account if u have been sync-ing with google, or if ur on verizon ur contacts will be restored to ur phone auto-maticly with in 15 mins if u are using the backup feature verizon offers for free. and if ur worried about loosing ur pics and videos from ur sd card...i dont remeber if u will or not, but no worries just save them to ur computer first the put them back on ur sd card after rooting the phone, so basicly u realy aint going to loose anything. this was how i did my phone and after i rooted it i just we to the andriod market and clicked purchaced apps and restored them them restored my contacts, but i dont remeber if i lost my pics and videos cuz its been so long ago that i did this, so just back the pics and videos up and u should be good to go.

    AND like everyone says, it looks so easy but dont be fooled, go slow and read and reread. and u cant go wrong.

  • cracker6686

    welp shit, here i am back to root my phone again. i had it rooted b4. but i had unrooted it cuz my charge plug got broken. so here i am back to root my replacement phone. and i didnt have a bit of problems the first time i did it i didnt get confused nor stuck nor any errors went smooth as hell. but now i cant seem to even do the first part right. i can get the sdk and adb going, and i can get adb devices to show that my phone is connected. and i put the exploit file (extracted) in the platform tools but the dang cmd Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation. All rights reserved.

    C:\Users\adobe>adb push psneuter /data/local/
    * daemon not running. starting it now on port 5037 *
    * daemon started successfully *
    cannot stat 'psneuter': No such file or directory

    C:\Users\adobe>adb shell
    $

    is proble something so simple i am forgetting.. i dont get the file not being there thing cuz i can go to where its says it aint, but yet it is there.

    HELP plz. i know this way works ...just for got wtf to do..lmao.

    • Chris

      On your phone:

      Menu -> Applications -> Development -> USB Debugging (check it)

  • cracker6686

    yea i got the bugging turned on.

  • cracker6686

    well i have started over and rechecked the sums and still cant get it to do nothing is still saying same thing in cmd.

  • whogivsashit

    Works for me. Thanks for your time and effort!

  • Alex

    How to STOP the Verizon Updates?

  • GizmosAmerica

    I want to thank those that make these jail breaking and rooting directions, I have use them many times, You people are just F**king Awesome. here is some addition info that help to clear up the ADB process for me.
    Pre Word:
    1.) Update your SDK program with the newest Android platform.
    2.) Unzip the “Expoilts” folder to desktop, Nav to the SDK folder on your c:/ then Copy and paste (Busybox, misc.img, psneuter and wpthis) to the Platform-tools directory.
    Close the Nav box.
    Start yout C:/ prompt Cmd mode and enter “CD..” enter, do this over as many times as necessary to bring the Cmd screen to the root C:/, Now Change Directory again using the “CD” cmd to your SDK Directory; example, Cd windows/android-sdk-windows/platform-tools.
    This puts you in the correct directory to use the ADB commands.
    At the Cmd prompt Type:
    ADB Devices :enter
    This should show you your Android device.
    Example: HTC128728783920
    If it says HTC128728783920 offline
    Make sure you have set your device for “Debugging”
    You can find this on the Thunderbolt at:
    Menu/Settings/Applications/Development

  • Guardian

    These files are no longer available. Where can I download them

Quantcast