HTC Thunderbolt Gets Root !!! [UPDATE]

We’re not too surprised that this stuff happens so quickly anymore, but just a day after its launch the HTC Thunderbolt has gotten permanent root. Details are a bit scarce, but devs at XDA say they’re waiting for a working recovery before they release the method. This process shouldn’t take too long so be on the lookout for instructions in this thread and let us know when they get around to posting them.



High props to Jamezelle and all the AndIRC team

Jamezelle, jcase (that’s me), and all of AndIRC (i.e. everyone – AndIRC is an open dev group), the same folks who rooted the pre-production Thunderbolt in February, proudly present:

A Very Dirty HTC Thunderbolt Root V1.02 2011/03/18


  • Root with read/write access to /system
  • Ability to downgrade and flash any RUU (i.e. signed firmware)


  • No custom recovery [yet]
  • No custom kernels [yet]
  • The root procedure currently requires flashing a slightly older version of the firmware (RUU_Mecha_VERIZON_WWE_1.05.605.0_Radio_1.07.00.0108r_NV_8K_1.38_9K_1.54_release_166255), which could potentially have more bugs. Right now, we cannot confirm whether LTE/battery bugs are present in this version or not. However, you can always flash back to stock, thereby losing root, if you experience problems (we will provide instructions for this very soon).
The method of rooting your Android device as described in the article herein is solely for enthusiasts and not for the faint of heart.IT WILL WIPE YOUR DATAIT WILL WIPE YOUR DATAIT WILL WIPE YOUR DATA

Android Police and Team AndIRC disclaim all liability for any harm that may befall your device, including – but not limited to – bricked phones, voided manufacturer warranties, exploding batteries, etc.

The instructions below assume you already have a strong familiarity with adb command lines – this is not for beginners.

If you’re unfamiliar with some of the terms, hit up our primers here:


  • Team AndIRC
  • Busybox was pulled from a CyanogenMod ROM, source should be availablehere
  • psneuter was pulled from somewhere, credit to scotty2, source here
  • All firmware credit goes to 911sniper
  • Will and Artem from Android Police for editorial help

If I missed anyone in the credits, it was unintentional and I will fix it after some sleep. Lots of people had their hands in on this project.

Note: Watch this space for updates and other improvements to the current root method (updated instructions will be versioned and dated).

Step 1

First, download these files:

Also make sure adb is working prior to attempting.

Step 2

Setup busybox, and psnueter. Unzip and run the following commands:

adb push psneuter /data/local/

adb push busybox /data/local/

adb shell chmod 777 /data/local/psneuter

adb shell chmod 777 /data/local/busybox

Step 3

Unzip and push su to /sdcard:

adb push su /sdcard/su

Step 4

Unzip to your sdcard

Step 5

Gain temp root, and flash the custom misc.img:

adb shell

Now the shell should display “$”



You will now be kicked out of adb, and adb will restart as root. Let’s confirm the md5 of misc.img:

adb shell

At this point, the shell should display “#”


/data/local/busybox md5sum /sdcard/misc.img

Output should be c88dd947eb3b36eec90503a3525ae0de. If it’s anything else, re-download the file and try again.

Now lets write misc.img:

dd if=/sdcard/misc.img of=/dev/block/mmcblk0p17


Step 6

Here you will rename the ruu as and place it on your sdcard, then flash it:

adb reboot bootloader

Your device should now be booting into the bootloader and checking the image. Once this flashes and you are rebooted, write protection to /system has been disabled. Please repeat step 2 and get psnueter and busybox back on your phone.

Now delete off your sdcard.

After that, make sure to re-enable USB debugging and installing from unknown sources.

Now run:

adb shell


At this point, you should have root.

Now remount /system:

mount -o remount,rw -t ext3 /dev/block/mmcblk0p25 /system

/data/local/busybox cp /sdcard/su /system/xbin/su

chown 0:0 /system/xbin/su

chmod 4777 /system/xbin/su


Step 7

Install Superuser from the Market.

Step 8

Reboot your phone. You should be done and have full perm root.


If you have problems getting su to work, a couple extra reboots will likely fix it. If you still have problems come to the chat: #thunderbolt or use

We will now start working on getting full S-OFF, which will allow custom recoveries, ROMs, etc.

Donations for further Thunderbolt development are welcomed – team AndIRC and lead developers jcase and Jamezelle don’t even have Thunderbolt devices, and while we managed to get this far without one, having it would significantly improve the chances of getting full S-OFF.

You can donate to Jamezelle, even if it’s just $1, and get him a Thunderbolt here.


Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )


Connecting to %s