How To: Root a Donut Phone (Android 1.6)

October 15, 2009 in Featured

Ok, just to make this a little easier for everyone I figured I would do a video of how to root a stock Donut phone from beginning to end (all the steps are already on the site but I figured I would put them together in one post to make life easy).

I. Get Back to Cupcake

G1 Unroot Process

myTouch Unroot Process

Magic Unroot Process

Most of the procedures entail either putting the IMG.nbh file on the sd card and booting into bootloader and flashing it OR connecting the phone via HTC Sync to the computer and running an RUU to get back.

II. Root The Cupcake Phone with One Click Procedure

G1/MyTouch One Click Process

Magic One Click Process

All of the 1 click rooting procedures are putting the Flashrec.apk file and a recovery image on the SD card, installing Flashrec and then using it to flash the new recovery image. You WILL NOT have internal root access after this procedure (it only allows us external root access from recovery) so you MUST goto the next section to finish.

III. Load a Custom ROM

G1/MyTouch Load a ROM Process

Magic Load a ROM Process

All of these procedures consist of partitioning the SD card then putting a ROM on the SD card and then loading the ROM. In the case of the G1, you also have to update the radio and SPL (if you do not have the current version, if you do then do NOT load them again).

215 responses to How To: Root a Donut Phone (Android 1.6)

  1. Dear UnLockr:

    Since the HTC Eris is similar to the Magic/MyTouch, will the downgrade procedure work if I have downloaded the 2.1 leak for the Eris?

  2. Hi I recently tried rooting my g1 running 1.6 but had many of the previously listed issues that other users were having. Particularly problems with the radio install. At this point I just want to get the phone back to factory and let the T-mobile updates take it back up to cupcake. I successfully took it back to RC29 per your procedure (thank you!) but when the phone said it was ready for updating this morning the update failed and the phone is still at rc29. I then tried your update procedures to take it up to donut and then cupcake but failed. After bring the phone back to rc29 I did the one touch root. Is this what is preventing the update from installing correctly? Should I try rc29 again and not do the one touch root. is there a way to undo the one touch root with out having to do the rc29 backup again. It took many tries to get the rc29 file to take before getting past the rainbow screen and the error 10 message.

  3. Well hello there mate i m getting big trouble wid my g1..its DRC92 …dont know that is it Us or Uk version and other thing is that i m updated to unroot 1.6… and got some keyboard problem like when i type

    y it type y9

    0 it type 60

    is this my fone problem or the os problem

  4. I am trying to downgrade my mytouch running 1.6 to 1.5 in preparation for rooting it, but I can’t seem to get the sappimg.nbh file on the megaupload site (site says that the file was removed and I don’t see any letters/numbers to type in in the top corner, like a previous thread states). Yesterday I searched for this file at other sources and almost picked up a virus on my PC.

    Can someone point me at a definitive URL for grabbing that file, please?

    • Reji,

      Thanks for letting me know the link was down. Reuploaded it and changed the link, try again.

  5. when i hold the end key and camera key the red green blue white screen comes up it says
    dre100 pvt 32b
    hboot-0.95.000
    cpld-4
    radio-2.22.23.02

    sep 2 2008

    it goes to a white loading screen says “no image file”. then goes back to colored screen and says serial0 in then middle of the screen

  6. how do i format my sd card to FAT32?

  7. jedi said on May 25, 2010

    FYI megaupload’s ‘ADS’ tried to give me a trojan. isn’t there a better site to upload the files to? pretty sure rapidshare is a much less bunk approach.
    plus i cant download from megaupload on the phone.

  8. marc said on May 27, 2010

    hi! having european htc dream g1 with 1.6 software. when trying to “downgrade” i always get the “not allowed” message in the rainbow screen and that’s it. tried the fat32 thing, re-downloaded the files, tried starting update.zip from the generic bootloader: all of it does not work. after 3 hours of trying and reading in fora i am sick and tired. i used to have a nicely rooted g1, now after recieving an refurbished device, i cannot root it anymore. sucks! thanx for help!

  9. IHavee a Brand New Tmobile G1, it came with 1.5 but than I uprgraded to 1.6, but I was wondering does this method still work on my g1? And what are the pros and cons of the rooting the g1? Will it break my phone or mess it? And will I still be able to use 3G data, phone calls, texting and browsing when rooted and using a custom roms?

    • Roberto,

      Yes it works but look for the updated version of the procedure on the site (just easier to understand).
      no it will not mess up your phone and yes all features including 3g will work (check the ROM you want to use though for know issues using that specific ROM like no Bluetooth etc).
      Good luck!

  10. Sad that it requires a downgrade to 1.5 since that doesn’t work without a GoldCard (and I don’t know if that will work because I refuse to go through that mess).

    Wish someone would focus on a 1.6 root and leave 1.5 in the past.

    • Joop,

      The issue is that the only way devs know how to root 1.6 is to downgrade to 1.5 where the there is an exploit for us to root with… Goldcard is actually pretty easy. Just follow our How To Create a Goldcard procedure on the site word for word. Shouldn’t take more than 15 minutes. Good luck!

      • the only problem with that answer dave, is that the revskills website is no longer operational…If I had the ability (in a short amount of time) I would endeavor to do it myself.  But, as it stands, I lack the precise expertise…

  11. Every where that I’ve looked to download sappimg.zip, the .zip file is corrupt. I’ve downloaded it multiple times from several different sites. Any help there?

  12. Can’t seem to access steps 2 and 3. Is it just me?

  13. I do all that is in the instructions but when i wanna install the spl it says:
    E: no signature (5 files)
    E: verification failed…
    What did i wrong?

  14. does this work on firmware 1.6?

  15. so you mean 1.6 can’t be rooted it’s self you have to use 1.5 if you want a rooted phone.

    • Y3kgin,

      No, you have to downgrade the G1 or MyTouch to 1.5 then root them then upgrade back to 1.6 or higher.

  16. I’m trying to figure out how to root my Zio android which is on donut, help me please. Thank you

  17. PLEASE HELP ME…. i HAVE htc dream g1,,with 1.6,,its DRC92,,i downloaded da dreaimg.nbh file and put it in my sd card,,when i go into da bootloader,,it displays 3 colors den says checking..somthing else and then says NOT ALLOW**..den goes back to da 3 colours screen and says serial 10…wt to do please help..and i also tried to simply put in da cupcake rom,,wdot using da dreaimg.nbh file but when i try to update it it says installing updates and den says faild to install,,please help…I WOULD APPRECIATE THAT U TELL ME DA SOLUTION AT MY maiL ADDRESS.. maani94@gmail.com… hope to revieve ur mail as i dont use my pc more often but do check my mail regularly via my phone mail..please help..

  18. Could someone please tell me if this tutorial works with a mytouch 3g that came with android 1.6…PLEASE HELP ME

  19. what about a devour?

  20. Killing ADB Server…

    OK

    Starting ADB Server…
    * daemon not running. starting it now on port 5037 *
    * daemon started successfully *

    OK

    Waiting for device…

    OK

    Pushing rageagainstthecage…
    1464 KB/s (0 bytes in 585731.000s)

    OK

    chmod rageagainstthecage…

    OK

    Running rageagainstthecage…
    ROOTED

    Getting mount path…
    /dev/block/mtdblock0
    OK

    Remounting system with read-write access…

    OK

    Pushing su…
    547 KB/s (0 bytes in 26264.000s)

    OK

    Pushing superuser.apk…
    1364 KB/s (0 bytes in 196521.000s)

    OK

    chmod su…

    OK

    Remounting system with read-only access…
    mount: Device or resource busy

    OK
    and not rooted what is my problem

  21. hi i would like to root my acer e120 android 1.6? Can i use mytouch unroot process? Thanks

  22. PLEASE HELP ME…. i HAVEGOOLE G1,,with 1.6,,its DRC92,,i downloaded da dreaimg.nbh file and put it in my sd card,,when i go into da bootloader,,it displays 3 colors says checking.. and then says NOT ALLOW…den goes back to da 3 colours screen and says serial 10…wt to do please help..MY EMAIL mobi_zaje@ymail.com

  23. would this work on a htc tattoo?

  24. is this still working and can this procedure flash the cyanogenmod7 rom? pls reply.. 

    thank you and more power.. :)

  25. will this work in HTC TATTOO?

1 3 4 5