Monday, December 17, 2012

Root HTC Desire S with HBOOT 2.00.0002

How to root HTC Desire S with hboot 2.00.0002 and SuperOneClick

Remember that you are only responsible for any damage you may cause to your smartphone, do follow this tutorial under your own responsability. Proceed at your own risk.

Steps to root the HTC Desire S with hboot 2.00.0002:
  1. Unlock the bootloader first via the HTCDev site.
  2. Root with SuperOneClick

Unlock the bootloader

Donwload HTC Sync for the HTC Desire S from the HTC website:

Create an account in HTCDev site ( login and follow the instructions to unlock the bootloader.
Neverteheless I had big problems with drivers and got this error message all the time:

C:\Android>fastboot flash unlocktoken Unlock_code.bin
  sending 'unlocktoken' (0 KB)...
  It got stuck there all the time, and also:
C:\Android>fastboot flash unlocktoken Unlock_code.bin
  sending 'unlocktoken' (0 KB)... FAILED (status malformed (1 bytes))
finished. total time: 0.010s

I solved this problem by installing HTC Sync on another computer, the problem was in the window xp usb drivers on my laptop that were not upgraded to USB 2.0 standard.
But I spend a whole day trying to make it work.

So finally I got the OKAY message on another computer:

C:\Android>fastboot flash unlocktoken Unlock_code.bin
sending 'unlocktoken' (0 KB)...
OKAY [  0.167s]
writing 'unlocktoken'...
(bootloader) unlock token check successfully
OKAY [  0.006s]
finished. total time: 0.175s


Root with SuperOneClick

Uninstall HTC sync, but leave HTC usb drivers

That was really easy, really. Just connect the phone with these options:
  • USB Debugging
  • Charge only

Then open SuperOneClick and:
  • Make sure that the Exploit option "Auto" is selected from the select list on the right.
  • Click on Root
  • Wait to see these messages appear:

[**] Zerg rush - Android 2.2/2.3 local root

[**] (C) 2011 Revolutionary. All rights reserved.

[**] Parts of code from Gingerbreak, (C) 2010-2011 The Android Exploid Crew.

[+] Found a GingerBread ! 0x00017118

[*] Scooting ..

[*] Sending 149 zerglings ...

[+] Zerglings found a way to enter ! 0x10

[+] Overseer found a path ! 0x000171e0

[*] Sending 149 zerglings ...

[+] Zerglings caused crash (good news): 0x401219c4 0x0054

[*] Researching Metabolic Boost ...

[+] Speedlings on the go ! 0xafd26019 0xafd39ef7

[*] Popping 24 more zerglings

[*] Sending 173 zerglings ...

[+] Rush did it ! It's a GG, man !

[+] Killing ADB and restarting as root... enjoy!

Source for SuperOneClick:

Enjoy your HTC Desire S, it is a fantastic phone!


Rojer Fredrick said...

I'm searching the information about unlocking the system of iPhone 5.But i read some valuable information about the HTC booting system.
iPad Repair Dallas

司馬懿 said...

My oneclick stop in step#7 and this exe crash so my htc can't root

((I'm TAIWANese and my english no't good , please use easy work to teach me

storiesofmaria said...

To unlock the bootloader you should follow step by step the instructions from the official HTC site. But you can also try it with another windows version (mine is old Windows XP) and see if it works.

Anonymous said...

how about taking recovery image, etc ?

Maria M. Olivares said...

In fact by rooting the phone you are not flashing a new image into it, so no need to recover it, but if per warranty reasons you need to roll back you can always LOCK the bootloader back

Anonymous said...

does it contain virus???

Maria M. Olivares said...

Well, it didn't have viruses when I tested it, but as I always say, do it under your responsibility and you can try to scan files first

Anonymous said...

I ran SuperOneClick without unlocked bootloader and it destroyed mobile network connection on my Desire S!!!
Now I have unlocked bootloader, 4EXT recovery, wiped everything, then locked back and install stock android 4 - without success. Mobile network connections is not working. :-(

Maria M. Olivares said...

Sorry to hear that, I hope you solved your problems. Maybe your radio problems have nothing to do with unlocking the bootloader, but as I always say there is a risk and I warn about it at the beginning of these posts

Anonymous said...

does this work with s-on device

Anonymous said...

I ran the above procedure with success on a HTC desire S, but i couldn't root it. Superoneclick ran as it should and finished as it should. The phone is still showing s-on and unlocked. It is not possible to use clockworkmod. The device didn't experience any loss of functionality though.

Post a Comment

Your opinion is very appreciated, thank you!