HTC Desire Z: Rooting

This guide will walk you through the process of taking the HTC Desire Z from stock to having the ability to flash a custom recovery image & the latest version of CyanogenMod.

For other related guides please view the following:

• for the TMobile G2, see the TMobile G2 instructions.

Contents 1 Before you do anything — Make a backup 2 Downgrade to an exploitable Firmware 3 Root, S-OFF, the ClockworkMod Recovery & the Engineering HBoot for the HTC Desire Z 4 Flashing CyanogenMod

Before you do anything — Make a backup

Don't forget to back up your data. If you have synced the device with a Google account, then the contacts, calendar, Gmail, & select other Google-related data will not be lost and will come back after the next sync. However, you should backup anything you want to keep that is not stored on the SD card:

• SMS/MMS messages,
• Call Log,
• Bookmarks,
• Applications; use Titanium Backup or the Astro File Manager, for example,
• Any application data not on the SD card.

It would also be a good idea to backup everything stored on the SD card in the rare case the SD card must be formatted to resolve any major problems.

MyBackup Root, SMS Backup & Restore, and Call Backup & Restore are all free applications that can assist with backing up your data.

Downgrade to an exploitable Firmware

Firmware Downgrade: Froyo, Gingerbread

Root, S-OFF, the ClockworkMod Recovery & the Engineering HBoot for the HTC Desire Z

Before you begin, if VISIONary is installed on the HTC Desire Z, uninstall it before continuing.

1. You will need ADB on the computer to root the HTC Desire Z and to flash the necessary files for radio S-OFF. Follow the Android SDK guide, to get the ADB shell on the computer.
2. Download busybox, the ClockworkMod Recovery, the Engineering HBoot, gfree 0.7, psneuter, root_psn, Superuser package:
   • busybox: Download

     md5: 25c5db694c987995909cc3166d4f01b0

   • ClockworkMod Recovery: Download

     md5: cbc776e7941ebf030e9fa39473d5b6f1

   • Engineering HBoot: Download

     md5: d8f61830f104ff5d48b855bbe0d95f56

   • gfree 0.7: Download

     md5: 6916cf05b0805aeac9effdc1725aaa12

   • psneuter: Download

     md5: 89c2dec8d72d87b4c669f44dd31c8d17

   • root_psn: Download

     md5: c8fe38ef55eb8951def9ff17b2eb99c1

   • Superuser package: Download

     md5: 43d9a40b63e916635d5ad7ca32433fab

3. Unzip the zip files and copy the contents to the same folder as adb (the /platform-tools folder within the Android SDK folder).
4. Connect the HTC Desire Z to the computer via USB.
5. Make sure USB debugging is enabled on the HTC Desire Z by checking Settings » Applications » Development » USB debugging.
6. On the computer, open terminal and run the following commands:

   adb push busybox /data/local/tmp/

   adb push gfree /data/local/tmp/

   adb push hboot-eng.img /data/local/tmp/

   adb push psneuter /data/local/tmp/

   adb push recovery-clockwork-3.0.2.4-vision.img /data/local/tmp/recovery.img

   adb push root_psn /data/local/tmp/

   adb push su /sdcard/

   adb push Superuser.apk /sdcard/

   adb shell

   chmod 755 /data/local/tmp/*

   /data/local/tmp/psneuter

   NOTE: You will drop out of the shell after this command. Restart the shell using:

   adb shell

   cd /data/local/tmp

   ./busybox md5sum /dev/block/mmcblk0p18

   NOTE: Take note of this number, we will need it later. For the remainder of this guide, we will refer to this number md5 #1.

   ./gfree -f -b hboot-eng.img -y recovery.img

   ./root_psn

   sync

   NOTE: This may take a moment, just give it some time.

   ./busybox md5sum hboot-eng.img

   NOTE: Take note of this number, we will need it later. For the remainder of this guide, we will refer to this number md5 #2.

   ./busybox md5sum /dev/block/mmcblk0p18

   NOTE: Take note of this number, we will need it later. For the remainder of this guide, we will refer to this number md5 #3.

   • If md5 #1 & md5 #3 match, then gfree 0.7 failed to powercycle the eMMC chip on the device. Either the software version is too high and the device was not downgraded per the previous section, or you did something wrong. Try again or join #G2Root on Freenode for further help..
   • If md5 #2 & md5 #3 match, then everything should be fine and you continue on.
   • If md5 #3 does NOT match md5 #1 or md5 #2, then DO NOT REBOOT and join #G2Root on Freenode for further help.

   reboot

7. The HTC Desire Z is now rooted with S-OFF, the Engineering HBoot & the ClockworkMod Recovery. Continue to the next section.

Flashing CyanogenMod

Please follow the CyanogenMod guide to continue.