[How to] Root 2.3.5/1.3.418

[sd_shadow]

1.3.418 can be rooted now


bhigham/beh has modified/combined a couple of root methods
based on New root method for stock 2.3.4 (621/622) found (Droid2, R2D2)

How this works

Originally Posted by phifc
There's an exploit in loadpreinstall.sh. It compares md5 sum files of preinstalled apps and if they're different, copies the md5 to the local cache. The preinstall just has an empty file in app/ so it will parse the md5 for it. Instead of an md5 sum, it contains a local.prop that allows adb root shell. So the system thinks it's copying the md5sum to the cache when it bounces off the symlink and overwrites the /data/local.prop, giving adb root on next reboot

watch video By: Tomsgt

have 5 options
a self extracting batch file
a regular batch file
slitaz/linux live boot image,
manual adb/moto-fastboot
Voodoo method

I have tested and they work

Basic instructions/steps for batch files and slitaz
but first you need to be on 2.3.5/1.3.418
SBF and update.zip here http://forum.xda-developers.com/show....php?t=1703640
and Motorola Drivers

turn phone on
enable usb debugging (system/apps/developer options)
connect to pc
start program, see instructions specified with the option you chose
there are on screen instruction, but this is what will happen
a file is pushed to your phone with adb
phone will reboot to fastboot, all you will see on phone is moto boot logo dualcore screen
click enter
to files will be flashed to phone
phone will reboot
when it has completed reboot
click enter
phone will reboot
when phone has completed reboot
click enter
files will be pushed to phone with adb
phone will reboot
when phone has completed reboot
click enter
files will be pushed to phone with adb
phone will reboot to recovery
press both volume buttons when you see ! in a triangle with android andy
wipe cache using volume buttons to scroll, select with power button
when complete, select reboot with power button
done.

when running the batch file or slitaz you may see these errors
rm failed for /data/preinstall_md5/magic.md5 no such file or directory
no root.img.gz no such file or directory
rm failed for /data/preinstall_md5/magic.md5 read only file system

that is fine, it will still work
BSR/ System Recovery should also be installed

Root DX2 2.3.5 batch file in self extracting exe
md5 hash: A5762E7ACF4EEB634991EB0DFD2DCC79
sha-1 Hash: D38301056A918E7784BD541832E4324F617688A9
note: first reboot, goes to a nonlabeled fastboot mode, all you will see is moto boot logo dualcore screen just click enter to flash files
DroidX2_Root_2012.exe

Root DX2 2.3.5 batch file
md5 hash:99470BE0F0F353255569950231E366EC
sha-1 hash:3D294A1807E4805AB1E63BCCE3A31F4FA4F9F57B
extract with 7zip run rootdx2.bat
note: first reboot, goes to a nonlabeled fastboot mode, all you will see is moto boot logo dualcore screen
DX2_Batchroot.7z

and made a

slitaz boot cd, like ezSBF
md5 Hash:7BAEE9C34F6EF7AD0B4FA219AE387C68
sha-1 Hash: 6D2A2019D746BBBCF0A92FFB60305B793381EDA

Instructions (Mac):
Download 1KDStaz.iso
Use Disk Utility (built in) to burn iso file to a CD (instructions)
Shut computer down
Hold c key, push power and hold c until you see the Linux OS start
Hit enter at the yellow "boot baby... boot" screen
You will see yellow dots for 3-5 minutes then the script will start

Instructions (Windows):
Burn iso image to a disk (Instructions, Windows 7 - Vista and XP)
Reboot PC
Hit F12 (sometimes F8 or esc) during boot to go to boot menu (possibly google search how to boot your specific pc from CDROM)
Select boot from CDROM (or USB if you used a flash drive)
Hit enter at the yellow "boot baby... boot" screen
You will see yellow dots for 3-5 minutes then the script will start

Live USB Instructions (Windows):
(Instructions from pendrivelinux.com)(thanks) http://www.pendrivelinux.com/using-unetbootin-to-create-a-live-usb-linux/
Download UNetBootin for Windows

Double click the Unetbootin Executable to start the program
(1) Click the Diskimage radio box
(2) browse to select your ISO
(3) Set your target USB drive
(4) click OK to start the creation


has options for D2, D2G, DX, and DX2

Droid2_D2G_DX_DX2-RootCD-2012.iso"]Droid2_D2G_DX_DX2-RootCD-2012.iso




or
manual method may update this later

you need
moto-fastboot.exe not fastboot.exe
adb files found in petes root tools
Petes root tools
modified root.img

instructions
extract any .zip or .gz
move all files to same folder like C:\root to make it easy

Enable USB debugging on phone
open command prompt
enter
cd/
cd c:root
adb shell rm /data/preinstall_md5/magic.md5 ( don't worry if you see an error)
adb shell ln -s /data/local.prop /data/preinstall_md5/magic.md5

boot phone to fastboot
run commands
moto-fastboot.exe flash preinstall root.img
moto-fastboot.exe reboot

let phone boot complete, then reboot again (reboot just replaces the local.prop, but the old local.prop is still in memory, till second reboot)
command
adb shell should give you a root prompt (# instead of $)

run petes root tools, zerg rush, or superoneclick
then you rooted




VooDoo Method

1 start with full stock 2.3.4/1.3.380, if you have rooted with anything other than Pete's Root Tools*, have altered/deleted stock file, or running 2.3.5, you need to
SBF to full stock 2.3.4/1.3.380 (VRZ_MB870_4.5.1A-DTN-150-30_1FF_01.sbf)
read How to SBF an X2, ezSBF DX2, and Common X2 Questions and Answers
if you don't want to lose data, don't wipe data (although it is recommended), unless you bootloop
if you bootloop you have no choice, but to wipe data via stock recovery see Common X2 Questions and Answers

2 install Voodoo OTA Root Keeper, backup su, then temp unroot (keeps backup)

3 install update 2.3.5/1.3.418 , (Blur_Version.1.3.380.MB870.Verizon.en.US.zip)**
a via over the air or
b download, place in sd card root (not in a folder)
md5 B127D3AF93FD6A75C3A3D897C6D0FCD1
and install via stock recovery see Common X2 Questions and Answers

4 restore root with Voodoo

*zergrush may remove stock files, to root, causing update to fail
**updates are named by the version they are updating
md5 checksum windows / android

Magic MD5 Root 2.3.4 for D2, R2D2, D2G, DX and 2.3.5 for DX2

Links to FAQs, SBF, ROMs, Guides...

06 Aug 2012 added magic md5 methods (originally just voodoo)
03 Oct 2012 added video link, reworded

 

[sd_shadow]

updated root method

 

[Big Spartacus]

Hey, I'm trying to root using the self extracting method (and the video) posted above. My issue is I get all the way to where you begin flashing files, and it never makes it past the "sending preinstall" phase.

I'm new to both rooting and the android OS as a whole, so any help would be greatly appreciated

 

[sd_shadow]

did you
install moto drivers on pc
check usb debugging on phone
select charge only on phone

edit: could try toggling usb debugging off/on

 

[Big Spartacus]

I'll try toggling the usb debugging. now

question though: what's the difference between the self extracting and the batch file version of installing? as far as looking at it from a run .exe/bat file?

 

[sd_shadow]

just have to unzip manually
the self extracting should be one step shorter, the regular is just for those who who like to see everything

if toggling doesn't work use, slitaz boot image, less chance of errors

 

[Big Spartacus]

what if i'm not smart enough to use the boot image version? I've been at this rooting thing for the better part of two days now, and i haven't been able to get service in those two days, so i'm kinda interested in doing whatever it takes

 

[sd_shadow]

boot image, is not hard
Burn iso image to a disk (Instructions, Windows 7 - Vista and XP) or (Load to a USB flash drive)
Reboot PC
Hit F12 (sometimes F8 or esc) during boot to go to boot menu (possibly google search how to boot your specific pc from CDROM)
Select boot from CDROM (or USB if you used a flash drive)
Hit enter at the yellow "boot baby... boot" screen
You will see yellow dots for 3-5 minutes then the script will start
then follow on screen directions

edit: changed instructions for usb drive

the advantage of the live CD is it's not windows, so no driver errors, and less other hardware problems

I've been at this rooting thing for the better part of two days now

rooting should only take 10mins

 

[Big Spartacus]

So what if I mounted the image to a virtual drive(like virtualclone). Would that should be basically the same thing right?

 

[Big Spartacus]

rooting should only take 10mins

which is why I now question everything I know. I've loaded leaked and hybrid OS's on my BB,even going so far as to manually strip out programs. Hell I even designed themes back when RIM believed in em. And the idea/fact that I lack the mental capacity to solve one-click rooting on an older device is driving me to use foul language and just generally be a nasty person.

Life ain't got to be like this

 

[sd_shadow]

maybe, but likely what ever is causing the batch to fail, may still be a problem in vm
but can't be sure until you try

Sent from my MB870 using Android Central Forums

 

[sd_shadow]

ok maybe back up a few steps
phone is running 2.3.5 system version 1.3.418 correct?

flashing 2.3.4 sbf only takes 10 mins or so
and can root it with Pete's root tools in my list
sd_shadow's list of links for Droid FAQs, SBF, Rooting, ROMs.... https://docs.google.com/document/d/1Goawxdx_UBF4Y8lqzHYWf8Ha3yUcRK4faq0UWIlXLWA/edit
then use voodoo in this thread
take update, or just stay on 2.3.4
all custom roms are flashed on 2.3.4, except eclipse requires 2.3.5

edit: if you are going to root, you should learn how to use rsd lite, to flash .sbf/firmware
HowTo: Perform a SBF ("factory restore") of your Motorola Droid X2
or use ezSBF (slitaz/linux live boot cd/usb) it's in my list

Sent from my MB870 using Android Central Forums

 

[Big Spartacus]

ok maybe back up a few steps
phone is running 2.3.5 system version 1.3.418 correct?

flashing 2.3.4 sbf only takes 10 mins or so
and can root it with Pete's root tools in my list
sd_shadow's list of links for Droid FAQs, SBF, Rooting, ROMs.... https://docs.google.com/document/d/1Goawxdx_UBF4Y8lqzHYWf8Ha3yUcRK4faq0UWIlXLWA/edit
then use voodoo in this thread
take update, or just stay on 2.3.4
all custom roms are flashed on 2.3.4, except eclipse requires 2.3.5

edit: if you are going to root, you should learn how to use rsd lite, to flash .sbf/firmware
HowTo: Perform a SBF ("factory restore") of your Motorola Droid X2
or use ezSBF (slitaz/linux live boot cd/usb) it's in my list

Sent from my MB870 using Android Central Forums

Yeah man, I've read all those tutorials and it was an journey. I downgraded to 2.3.4 and tried to use pete's tool and kept getting stuck. then I went for this 2.3.5 method and kept getting stuck at various points....but you'll be happy to know I'm pretty sure the usb version just worked!!!

and by pretty sure I mean I've already used voodoo to protect the root (if I'm saying that right) so F YEAH and thanks for all the help


and I have one more question.....since I've started this rooting process, I've had a triangle where I used to have a little 3g logo, and no phone service. If I understand what I read, that means there is a problem with the kernel?? Again I'm basing this around my understanding of radio's on blackberrys

 

[sd_shadow]

ok, if you are going to flash a rom, voodoo's su backup needs to removed first
edit: i would try dialing *228, to resync with Verizon


Sent from my MB870 using Android Central Forums

 

[Big Spartacus]

ok, should I Temp. un-rpoot? Or is that kinda defeating the purpose

 

[sd_shadow]

no temp un root, is done before e installing update
should be option to delete backup if not voodoo is not protecting root
don't need voodoo, unless phone is on 2.3.4 & you are taking update to 2.3.5 there will not be any more updates from moto

Sent from my MB870 using Android Central Forums

 

[sd_shadow]

back to 3g, try menu/ system / mobile network check data

Sent from my MB870 using Android Central Forums

 

[Big Spartacus]

ok, the option is there, I just wasn't sure.

and I'm on 2.3.5, so then I don't really need voodoo?

 

[sd_shadow]

no moto is done with dx2
and custom roms don't have the updater files
your 3g is back?

Sent from my MB870 using Android Central Forums

 

[Big Spartacus]

Yuup, *228 did the trick