[How To] Root 4.5.621 with magic md5 (does not require Milestone SBF)

[sd_shadow]

updated many times see change log


new easier root for DX, D2, & D2G

[ROOT] Framaroot, a one-click application to root (2.14 MB)and it's an apk!




-------------------------------------------------------------------------------------------------------------------------------------------------
root created by phifc, original ezSBF by 1kds, and modified by bhigham


DX ezSBF 2.3.4/4.5.621
1. download an .iso file
2. burn to cd or usb with disc image burner
3. verify files on CD/USB are correct
4. reboot pc from boot cd or usb
5. follow onscreen instructions




option 1. Flash MB810 2.3.4 SBF is only needed, to restore factory image when phone is not working correctly, not needed to just to root



ezSBF and root cd
Droid_X_621-SBF-and-RootCD-2nd_edition.iso 225.00 MB
MD5 Sum: 6f3618c5000de5214362f7ae717b9c0b
Dev-Host - Droid_X_621-SBF-and-RootCD-2nd_edition.iso - The Ultimate Free File Hosting / File Sharing Service

this version works correct, but android recovery instructions say hold x, should say hold menu button
Droid_X_621-ezSBF-and-RootCD.iso (225MB) MD5: c4961b5b93aa1b2881023d3f3e3f4ea4
Dev-Host - Droid_X_621-SBF-and-RootCD.iso - The Ultimate Free File Hosting / File Sharing Service
Download Droid_X_621-SBF-and-RootCD.iso from Sendspace.com - send big files the easy way
https://docs.google.com/file/d/0B1hcBgk_03_aS0hldl94Zzd3WjQ/edit?usp=sharing

How to verify the file was downloaded correct with
MD5/SHA-1 Hash Checksums

Root Only option
-Tomsgt123

Droid2_D2G_DX_DX2-RootCD-2012.iso(54mb)md5 Hash:7BAEE9C34F6EF7AD0B4FA219AE387C68
Droid2_D2G_DX_DX2-RootCD-2012.iso
https://rapidshare.com/files/1493446314/Droid2_D2G_DX_DX2-RootCD-2012.iso
https://docs.google.com/file/d/0B1hcBgk_03_aU1Bpc0VuQUJfQnc/edit


what is ezSBF?
original [TOOL] ezSBF (not for 2.3.4)

Don't let the word Linux scare you, this is just a cd you burn, nothing installs to your pc. Once you burn this CD you are ready to SBF flash anywhere you have a computer, no net connection needed to download any files.
This is an .iso file. It is a complete Linux operating system that you will download, burn to CD (or USB) then boot your pc from CD or USB, this allows your pc to reboot into a different operating system.

Instructions (Mac):
Download .iso
Use Disk Utility (built in) to burn iso file to a CD (instructions)
Shut computer down
Hold c key, push power and hold c until you see the Linux OS start
Hit enter at the yellow "boot baby... boot" screen
You will see yellow dots for 3-5 minutes then the script will start


Instructions (Windows):
Download .iso
Burn iso image to a disk (Instructions, win 7) - Vista and XP)
Reboot PC
Hit F12 (sometimes F8 or esc) during boot to go to boot menu (possibly google search how to boot your specific pc from CDROM)
Select boot from CDROM (or USB if you used a flash drive)
Hit enter at the yellow "boot baby... boot" screen
You will see yellow dots for 3-5 minutes then the script will start


Live USB Instructions (Windows):
(Instructions from pendrivelinux.com)(thanks)
Download UNetBootin for Windows
Download your favorite Linux ISO
Double click the Unetbootin Executable to start the program
(1) Click the Diskimage radio box
(2) browse to select your ISO
(3) Set your target USB drive
(4) click OK to start the creation





(5) After the USB drive is done select reboot.
(6) During boot enter the boot menu and change USB to boot first, save and reboot.
(7) When booting from UNetbootin select SliTaz

if cd/usb flash drive is made correctly you will not have Droid_X_621-ezSBF-and-RootCD.iso or Droid2_D2G_DX_DX2-RootCD-2012.iso on cd
you will have a folder named 'Boot'
with two files and a folder in the boot folder

usb flash drive may have a few more files



Capture.PNG
Hit enter at the yellow "boot baby... boot" screen

You will see yellow dots for 1-3 minutes then the script will start
rootscreen2.PNG

root only
multi root.PNG

ezSBF and root
2.3.4 ezSBF & root for DX.PNG

basically read onscreen directions

don't use numbers on right side of your keyboard, just use the ones above qwerty


select flash sbf only if phone is not working correct or you do not have 621 on phone yet
follow onscreen directions

root
select root DX
follow onscreen directions

turn phone on, connect to pc with usb cable

check usb debugging (settings/apps/development)
select charge only usb mode in top status bar

press continue
adb will push

data/local.prop /data/preinstall_md5/magic.md5

program will prompt you to
manually reboot phone to bootloader (Hold volume up+down buttons and power button, or hold Vol.Down and Camera and wait for the screen to flash)
program will will be flash repacked sbf (less than 50mb)
Program will reboot phone twice, very important (reboot just replaces the local.prop, but the old local.prop is still in memory, till second reboot)
adb pushes su,superuser, and busybox
program will reboot to recovery,
manually wipe cache (should auto reboot to recovery, at android andy press both volume buttons, if it doesn't press home button and hold it in then press your power button, hold it in also till you see a triangle on the screen w/ android andy then press both volume buttons)
then select reboot
rooted

error info
when running the program you may see these errors
rm failed for /data/preinstall_md5/magic.md5 no such file or directory
no root.img.gz no such file or directory
rm failed for /data/preinstall_md5/magic.md5 read only file system

that is fine, it will still work


after flashing files in bootloader, phone reboots to bootloader, instead of normal android operating system..... now what?
try disconnecting usb, pull battery,wait a few secs, replace battery, reboot, wait for reboot to complete, reconnect usb


don't want to reboot pc try
Using Oracle VM VirtualBox, and Magic MD5 root iso

If you planning on making nandroid backups or flashing roms
read [HOW TO] Install/Use Droid 2 Bootstrap





bhigham/beh modified the root method
based on New D2 root method for stock 2.3.4 (621/622) found (Droid2, R2D2)

How this works

Originally Posted by phifc There's an exploit in loadpreinstall.sh. It compares md5 sum files of preinstalled apps and if they're different, copies the md5 to the local cache. The preinstall just has an empty file in app/ so it will parse the md5 for it. Instead of an md5 sum, it contains a local.prop that allows adb root shell. So the system thinks it's copying the md5sum to the cache when it bounces off the symlink and overwrites the /data/local.prop, giving adb root on next reboot

originally posted by bhigham/beh
Since all these devices (Droid 2/R2D2/D2G/DX2 and DX seem to be vulnerable to the same exploit found by phifc at
http://rootzwiki.com...nd-droid2-r2d2/
I have assembled rooting methods for all of them in EzSbf style CD. I have tested it on my D2G, and the same method has been tested by multiple users on the D2/R2D2, and has worked fine.
Credit for this method go to phifc, djrbliss, and the others who developed the method.
I have simply taken the method, and assembled the tools.
Credit for the idea behind the CD method should go to 1KDS, as I have mostly patterned this CD after his method.
Credit should also go to Skrilax_CZ, as without his Motorola Android Firmware (De)packer, we wouldn't be able to have a 55 meg CD that covers multiple devices.
Special thanks also to themib for testing and troubleshooting on the DroidX2. In fact, since I don't have a DX2, he actually did a majority of the work in finding a method that would work (the method for the D2 and D2G doesn't quite work), and then we worked together to get it assembled and working.

This CD is for the D2,R2D2, D2G, and DX on Android version 2.3.4, and the DX2 on 2.3.5.
One note if you have troubles with it not working. It might be necessary to disconnect the phone after it flashes the preinstall and reboots. It seems that some phones may not complete the reboot process before being rebooted by ADB, so you may need to disconnect the phone when it starts booting, and let it boot fully before hooking it back up. when hooked back up, it will be rebooted, and should go on with the process like normal.

Of course, like all other things here, I have done my best on this, but there are no guarantees, and anything you do on your phone is at your own risk.

My Lists

Magic MD5 Root 2.3.4 for D2, R2D2, D2G, DX and 2.3.5 for DX2 - Google Docs

sd_shadow's [Collection] of Links: FAQs, Guides, Rooting, SBFs, ROMs... - Google Docs





updated
07 Sept 2012
25 Sept 2012 added bootloader and recovery details
02 Oct 2012 added mac info
10 Oct 2012 added error info
19 Oct 2012 added more links and error info
26 Oct 2012 added mirrors
18 Nov 2012 added MD5 & SHA-1 Checksum Utility: verify the hash checksum to ensure the file integrity is correct with the matching file
09 Dec 2012 major rewrite
31 Jan 2013 don't want to reboot pc try Using Oracle VM VirtualBox, and Magic MD5 root iso
07 March 2013 added ezSBF DX621 links and other edits
29 March 2013 added updated ezSBF version
07 April 2013 added [video]]Tomsgt123
25 April 2013 added [ROOT] Framaroot, a one-click application to root
27 April 2013 added framaroot video
01 May 2013 added link instructions

[Ads]

[thomasmbl]

I left my phone plugged in then restarted my computer then the baby screen (yellow scrren). But its loads for bout 2 mins thenvit start goin through allcthis stuff.then ask me for sound card i click yes then it says flash sbf n root n shutdown.i went to root but it took me to something like a desktop.im lost please help

Sent from my N860 using Xparent ICS Tapatalk 2

[sd_shadow]

use the numbers above qwerty not the ones on the right

Sent from my DROID X2 using Droid X Forums

[thomasmbl]

use the numbers above qwerty not the ones on the right

Sent from my DROID X2 using Droid X Forums

Can u explain wat to do step by step.i did the step to install sbf 621 n.so now what do i do

Sent from my N860 using Xparent ICS Tapatalk 2

[sd_shadow]

Reboot PC
Hit F12 (sometimes F8 or esc) during boot to go to boot menu
Select drive image is on
wait for yellow "boot baby... boot" screen
You will see yellow dots for 3-5 minutes then the script will start

select DX
don't use numbers on right side of you keyboard, just use the ones above qwerty

turn phone on, connect to pc with usb cable

check usb debugging (settings/apps/development)
select charge only usb mode

press continue
adb will push

data/local.prop /data/preinstall_md5/magic.md5

reboot phone to bootloader
flash repacked sbf (less than 50mb)
reboot twice, very important (reboot just replaces the local.prop, but the old local.prop is still in memory, till second reboot)
adb pushes su,superuser, and busybox
reboot to recovery, wipe cache
reboot normally
rooted

[sd_shadow]

flash sbf n root n shutdown.i

what image are you using, this one does not have a sbf option
don't use the d2 2.3.4/4.5.621 sbf
what is the name of the iso file you burned?

edit: you want Droid2_D2G_DX_DX2-RootCD-2012.iso

[TheHokeyPokey]

Do you have to download the ImgBurn, or can you just use the built in Windows burner?

[towbiz]

Do you have to download the ImgBurn, or can you just use the built in Windows burner?

If your using windows 7 no ( it has a ISO burner built in) if its XP then yes (use imgburn)

Sent from my DROIDX using Droid X Forums

[TheHokeyPokey]

My droid X doesn't have a USB connection notification allowing me to select charge only mode. Is there a driver I need to install to my PC?

[newmanx4]

You need the Motorola drivers. I can't grab a link right now but they can be found on Motorola's website.

Sent from my Black Iced X