Thursday, June 7, 2012

How to Unroot

How to Unroot

The revolutionary method of rooting uses a sneaky hboot exploit and replaces your stock 1.04.0000 or 1.05.0000 bootloader with a modified permanent hboot. It not only gives you all the same fastboot flash abilities as the original engineering bootloader, but it very effectively blocks other hboots from overwriting it. It's good... as you will remain s-off if you accidentally flash a full RUU, or accept an OTA... but makes it a little trickier to remove. 

For the time being, removal requires ADB to be set up and running and some commands entered in "fastboot" to to allow the permanent hboot to be overwritten. Once an "s-on" tool is released... I'll take this part of the guide down.

If you've rooted using the old manual way and have adb setup and working, you can use this guide to remove the permanent hboot.

*WARNING* no signature or file checks will be done flashing the new bootloader in hboot or fastboot. fastboot will literally flash "lets golf" as a bootloader if you tell it to. DO NOT mess with your hboot unless absolutely necessary to return to stock for warranty purposes. If you're just tired of being rooted, flash the mr2 ruu to get back to unrooted firmware and factory recovery. Leaving the revolutionary s-off bootloader in place is the safest and best option... andwill not affect your ability to receive OTAs.

*AGAIN- if you're just following this procedure because you're tired of being rooted... skip this next section and leave the permanent hboot in place. Jump to "Putting current stock firmware and s-on back onto the phone" and flash only the first "" file (you can flash the 2nd file too if you want,but the permanent hboot will block it)

Setting up adb and removing the permanent hboot if you've never used adb before
1) If you no longer have the htc drivers that you installed when rooting with revolutionary... download them again from here on revolutionarys website.
2) Next download this file to somewhere convenient that you'll be able to find it... like your desktop or a "downloads" folder. It contains the old eng 1.40.2000 s-off hboot and the bare minimum tools to install it.
3) The following directions were used using windows 7 and chrome browser. Other OS's may be slightly different... the end result is you want unzipped, inside tbolt folder to be on the root of your C: drive.
-Find the download 
-Click on download and open it. 
-Inside is a folder labeled tbolt. Drag it to the root of C:. inside tbolt is the unpermanent hboot and some adb tools.
4) Charge your Thunderbolt to 100%
5) Click on the "start" bubble in the lower left corner of your screen. Type "command" in the search window and hit enter. This will open a small black command window.
6) Enter the following command (by typing or copy/paste):
cd c:\tbolt
You should see your prompt in the window change to: c:\tbolt>

7) Enter the following command:
md5sums hbooteng.nb0
Check the output on the command window. THIS IS VERY IMPORTANT. The command must equal exactly 6991368ee2deaf182048a3ed9d3c0fcb if it does not... STOP!! Delete the download and the unzipped tbolt folder from C:, re-download and try it again. Again... do not proceed if the output in your command number does not equal it exactly.

8) Once the number matches... you can continue. Copy and paste the following codes into the command window:
adb devices
The output should be your phones serial number.

Now enter:
adb reboot bootloader
This will cause your phone to boot into FASTBOOT mode, which is a white screen with colored letters.

Now enter:
fastboot devices
The result again should be your phones serial number.

9) Now you're ready to enter the command to unlock the permanent hboot and flash the new... non permanent one.
To unlock,enter: 
fastboot oem mw 8d08ac54 1 31302E30
Write the new hboot:
fastboot flash hboot hbooteng.nb0
If you select bootloader at this point from the fastboot menu.. you'll still see the permanent s-off hboot... so select reboot with the volume rocker and power button and let the phone reboot. After it boots, you can adb reboot bootloader again or power off... Then power on/vol down and check that your pink "UNLOCKED" or "REVOLUTIONARY" is gone and you have the old 1.49.2000 bootloader.

Here is what you should see in the command window... the red are my inputs:
Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation.  All rights reserved.
C:\Users\Scott>cd c:\tbolt
c:\tbolt>md5sums hbooteng.nb0
MD5sums 1.2 freeware for Win9x/ME/NT/2000/XP+
Copyright (C) 2001-2005 Jem Berkes -
Type md5sums -h for help
[Path] / filename                              MD5 sum
hbooteng.nb0                                   6991368ee2deaf182048a3ed9d3c0fcb
c:\tbolt>adb devices
* daemon not running. starting it now *
* daemon started successfully *
List of devices attached
HT126S005970    device
c:\tbolt>adb reboot bootloader
c:\tbolt>fastboot devices
HT126S005970    fastboot
c:\tbolt>fastboot oem mw 8d08ac54 1 31302E30
OKAY [  0.006s]
finished. total time: 0.006s
c:\tbolt>fastboot flash hboot hbooteng.nb0
sending 'hboot' (1024 KB)...
OKAY [  0.183s]
writing 'hboot'...
OKAY [  0.219s]
finished. total time: 0.403s
Putting current stock firmware and s-on back onto the phone

After getting the bootloader back to the original s-off, engineering 1.04.2000 hboot download these 2 files: 
md5: 3e189b6c85ea7da1e26e12a5cd7b1ab0
md5: d26b3253358407d459c654e6729a39ca

Rename to "PG05IMG"... move to your sd card and flash in hboot.

This is important! you must flash the first!

after successfully flashing that,you will be on unrooted gingerbread with an eng s-off bootloader. delete the PG05IMG file from your sd card. now place the on your sd card. check the md5. once youve verified it matches,you can rename PG05IMG and flash it.

Again, ONLY flash the hboot file after you have successfully flashed the rom.

Now you are 100% stock on latest firmware. unrooted gingerbread 2.11.605.9 with *locked* 1.05.0000 s-on bootloader.

*** Last and not least... the standard disclaimer. I take no credit for anything listed in this post. I am only responsible for placing the information here in one spot. Please do your research before attempting to modify your phone. I take no responsibility for any of the methods listed above. ***

UnRoot Guide: SCOTTY85
ADB/Bootloader Code: SELE & Crew@ RescueSquad


  1. is this only for the Thunderbolt ?

  2. Very informative and well written post! Quite interesting and nice topic chosen for the post.
    Panasonic Laptops