• Your favorite

    Apple

    ,

    iPhone

    ,

    iPad

    ,

    iOS

    ,
    Jailbreak
    , and
    Cydia
    site.
  • Downgrade 3G Baseband from 2.30 to 2.28

    For those who have wanted to unlock their iPhone 3G but have updated to the 2.30 baseband, hope is now here. Thanks to the work of dev pH, a tool has been created to downgrade your baseband, and allow a unlock to occur once again.

    only works for baseband 2.30 and bootloader 5.8

    (im sorry if the original post didnt clarify enough because doerrfan decided to reword things when he moved it )

    to check your bootloader version, visit:
    Baseband Commands - The iPhone Wiki

    (run at+xgendata in minicom)

    To run the pHaseBanDowngrader, connect via SSH to your iPhone and copy the downloaded folder (phasebandowngrader) into the folder "/Applications" on your iPhone.
    Note: The folder MUST named phasebandowngrader with lowercase letters!

    To run it, open MobileTerminal and type "login". The user is "root" and password is "alpine" by default. Then type: "cd / Applications/phasebandowngrader/", then, to run the downgrader, type "./phasebandowngrader"
    METHOD 2 (found by tattoo Jack)
    For other people who still needs a full instruction, here is an update to Tom's instruction.

    Download BBUpdaterExtreme here:
    RapidShare: Easy Filehosting

    Download BSPatch Here:
    GBAtemp.net :: Downloads :: ROM patchers & header info :: bspatch

    Here's where you'll need some command prompt skills. Extract the BSPatch program and iPhone_3G_02.28.00_baseband.zip and all related files into a folder you can remember (ex. Catcher). Also, place the ICE2_02.28.00.fls and downgrade.patch in the same folder (downgrade.patch is from Master geohot above found here: http://lpahome.com/geohot/downgrade.patch)

    Open your command prompt by hitting start, then run, and type in "cmd" without the quotes and hit enter. In the command prompt, you'll need to type

    cd Catcher

    "Catcher" is the example directory but you can replace it with wherever you've placed the BSPatch and ICE2_02.28.00.fls files in.

    Now type in:

    bspatch ICE2_02.28.00.fls patchedbaseband.fls downgrade.patch

    In the example folder, there will now be a new file called patchedbaseband.fls, which is pretty self explanatory.

    Copy that file back to your desktop or a folder that you can easily find and also copy ICE2_02.28.00.eep and BBUpdaterExtreme into the same place.

    Rename patchedbaseband.fls to ICE2_02.28.00.fls.

    Now that you have your patched baseband, your BBUpdaterExtreme and the .eep file in one place, you're ready to move them onto your phone.

    You'll need to know how to SSH into your iPhone, and I'm not going to go into detail about that, but you should be able to find that information easily.

    (you can also use DiskAid or Iphone Browser to upload the files instead of SSH)

    Copy the three files *ICE2_02.28.00.fls* - the new one that is patched
    ICE2_02.28.00.eep
    and
    BBUpdaterExtreme into /var/root
    (make sure you're not in private/var/root).

    Now, you'll need to find download and install Mobile Terminal, which can be found in Cydia or Installer, or I guess the new Icy.

    After you've gotten Mobile Terminal installed, open it up and follow these instructions carefully (capitalization counts!) to check what version of bootloader you have.

    (All case sensitive and you may need to use cd .. to change to the right directory you've uploaded the files to)

    1. Type in: su
    2. Type in the password: alpine
    3. Type in: chmod 755 BBUpdaterExtreme
    4. Type in: launchctl unload /System/Library/LaunchDaemons/com.apple.CommCenter.plist
    5. Type in: ./BBUpdaterExtreme queryversion

    Look for "Boot Loader Version:" in the output.

    Mine said "5.09" which I can only imagine means 5.9 so I did not have the availability to downgrade.

    Here you can stop if you're like me, and don't have the option to downgrade. You can restart your phone (because the phone is now not working since the CommCenter process has stopped running) to restore it to normal, or alternatively you can type in

    launchctl load /System/Library/LaunchDaemons/com.apple.CommCenter.plist

    But you may be in luck and have 5.8, in which case, continue on to the downgrade.

    Close Mobile terminal, re-open it, and type in the following commands.


    (All case sensitive and you may need to use cd .. to change to the right directory you've uploaded the files to)

    1. Type in: su
    2. Type in the password: alpine
    3. Type in: chmod 755 BBUpdaterExtreme
    4. Type in: launchctl unload /System/Library/LaunchDaemons/com.apple.CommCenter.plist
    5. Type in: ./BBUpdaterExtreme update -f ICE2_02.28.00.fls -e ICE2_02.28.00.eep
    6. Reboot your iPhone

    Check under Settings-General to see your (hopefully) downgraded baseband!
    simplified version of method 2 (Koolman0)
    For those of you that are still having problems This Should be more simple
    .................................................. .................................................. .........
    Download:
    1. Make a folder on your desktop
    2. Extract All to the same folder (All Three Files)
    3. In the Folder there should be a Shortcut file called "Prompt" open it
    4. Now type in:
      bspatch ICE2_02.28.00.fls patchedbaseband.fls downgrade.patch
    5. Now Make a New Folder in that Directory Call it "new"
    6. Three Files need to be copied To the "new" folder
      • patchedbaseband.fls
      • ICE2_02.28.00.eep
      • BBUpdaterExtreme
    7. Rename patchedbaseband.fls to ICE2_02.28.00.fls
    8. SSH into your iPhone
    9. Copy the Three files (patchedbaseband.fls, ICE2_02.28.00.eep, BBUpdaterExtreme) to /private/var/root
    10. Now go to MobileTerminal (on your iphone, This app can be Downloaded from Cydia or installer)
    11. Type in the Following Commands *****Case Matters*****
      1. Type in: su
      2. Type in the password: alpine
      3. Type in: cd /var/root
      4. Type in: chmod 755 BBUpdaterExtreme
      5. Type in: launchctl unload /System/Library/LaunchDaemons/com.apple.CommCenter.plist
      6. Type in: ./BBUpdaterExtreme queryversion
    12. NOTE:
      • if you see a 5.8 continue
      • if you see a 5.9 STOP this will not work for you Sorry
    13. Continue if 5.8
      1. Type in: su
      2. Type in the password: alpine
      3. Type in: cd /var/root
      4. Type in: chmod 755 BBUpdaterExtreme
      5. Type in: launchctl unload /System/Library/LaunchDaemons/com.apple.CommCenter.plist
      6. Type in: Type in: ./BBUpdaterExtreme update -f ICE2_02.28.00.fls -e ICE2_02.28.00.eep
      7. Reboot Device
    14. Once the iPhone has restarted go to Settings> General> About> At the bottom should say 02.28.00 (then you jump up and down in JOY)
    15. Last But not Least Unlock
    P.S.
    Here are the three Files you will be creating
    so just copy these to you iphone (continue from Step 8 or 9)
    Three Files inside this RAR
    this tool has been tested by multiple people and WILL NOT brick your device. if you have bootloader version 5.9 it will not work. you can try but it will not work (still no risk of brick)

    use at your own risk, but there is really no risk of doing any damage to your device unless you do something absurd

    MMI Members Download

    Apple Forums & iPhone Forums, Mods, Hacks, News, Themes, Downloads, and more! | ModMyi.com - Downloads - phasebandowngrader

    External Mirror

    phasebandowngrader.zip
    This article was originally published in forum thread: Downgrade 3G Baseband from 2.30 to 2.28 started by JStraitiff View original post
    Comments 341 Comments
    1. shahir29's Avatar
      shahir29 -
      Quote Originally Posted by shahir29 View Post
      when i go to phasebandowngrader is says permission denied. so i used winscp to ssh in an change octel file to 0755 but i couldnt find octel i only found this:
      any help?
    1. RHMobileJake's Avatar
      RHMobileJake -
      06.02 Thanks for the help though worked like a charm once I tried it your way
    1. JStraitiff's Avatar
      JStraitiff -
      Quote Originally Posted by cpjr View Post
      ^The bootloader itself is software....and depending on the version can be downgraded.

      (Not to say the phone will work afterwards, depends)
      like i said... depends on hardware
    1. StealthBravo's Avatar
      StealthBravo -
      nice write up
    1. ggab's Avatar
      ggab -
      Quote Originally Posted by ggab View Post
      So I checked my bootloader version and it said: "Boot Loader Version: ICE2_BOOT_05.08_G2M3S2" so I figured I was good to go with that 5.08 in there.

      I run the BBUpdaterExtreme per http://www.modmyi.com/forums/general...ml#post3877511 and after it runs through everything at the end it says:
      !!! Exception at :0:
      - BBUReturnError(1)/2:Unsupported memory class CodeClass for EEP transfer. Are you sure ICE2_02.28.00.eep is an EEP file?
      Re-enabling sleep....OK


      I rebooted and I'm still at 2.30 baseband. According to "Tom" at On the iPhone: 5.8 Exploit I'm screwed. He said "When you get the .eep error: Are you sure this is an eep file? Or something similar, that means your bootloader cannot be exploited, i.e. you're screwed for now."

      I don't get why I can't do this if I have the 5.08 bootloader? Anyone have any insight on that?


      Just saw that someone else at that same site had success with the same version of the bootloader that I have....
      Imanzano said...

      It worked with my 3g iphone boot loader ICE2_BOOT_05.08_G2M3S2
      firmware 2.2.1 baseband 02.30.

      Thank you George, and thank you Tom for your post, it helped me very much.

      Good luck




      Doesn't make me very happy! LOL
      In case anyone cares I used method 2 that involves using the bspatcher and it worked.
    1. KoolMan0's Avatar
      KoolMan0 -
      Quote Originally Posted by tattoojack View Post
      from geohots blog


      ...

      no offense jag0

      Got it to work
      Went from 02.30.03 to 02.28.00
      Thanks


      For those of you that are still having problems This Should be more simple
      .................................................. .................................................. .........
      Download:

      1. Make a folder on your desktop
      2. Extract All to the same folder (All Three Files)
      3. In the Folder there should be a Shortcut file called "Prompt" open it
      4. Now type in:
        bspatch ICE2_02.28.00.fls patchedbaseband.fls downgrade.patch
      5. Now Make a New Folder in that Directory Call it "new"
      6. Three Files need to be copied To the "new" folder
        • patchedbaseband.fls
        • ICE2_02.28.00.eep
        • BBUpdaterExtreme
      7. Rename patchedbaseband.fls to ICE2_02.28.00.fls
      8. SSH into your iPhone
      9. Copy the Three files (patchedbaseband.fls, ICE2_02.28.00.eep, BBUpdaterExtreme) to /private/var/root
      10. Now go to MobileTerminal (on your iphone, This app can be Downloaded from Cydia or installer)
      11. Type in the Following Commands *****Case Matters*****
        1. Type in: su
        2. Type in the password: alpine
        3. Type in: cd /var/root
        4. Type in: chmod 755 BBUpdaterExtreme
        5. Type in: launchctl unload /System/Library/LaunchDaemons/com.apple.CommCenter.plist
        6. Type in: ./BBUpdaterExtreme queryversion
      12. NOTE:
        • if you see a 5.8 continue
        • if you see a 5.9 STOP this will not work for you Sorry
      13. Continue if 5.8
        1. Type in: su
        2. Type in the password: alpine
        3. Type in: cd /var/root
        4. Type in: chmod 755 BBUpdaterExtreme
        5. Type in: launchctl unload /System/Library/LaunchDaemons/com.apple.CommCenter.plist
        6. Type in: Type in: ./BBUpdaterExtreme update -f ICE2_02.28.00.fls -e ICE2_02.28.00.eep
        7. Reboot Device
      14. Once the iPhone has restarted go to Settings> General> About> At the bottom should say 02.28.00 (then you jump up and down in JOY)
      15. Last But not Least Unlock

      ****Remember "Don't eat yellowsn0w!****



      P.S.
      Here are the three Files you will be creating
      so just copy these to you iphone (continue from Step 8 or 9)
      Three Files inside this RAR

      Good Luck and thank Everyone who made this possible
      Sorry I will Go back and Press the Thanks Button tattoojack
      lol
      Thanks


      Edit Here are some Pics

    1. reneki's Avatar
      reneki -
      NICE, it actually worked. But the only good that this will do is allow those who currently cannot use their phones because they unknowingly upgraded the firmware right? I mean doing this won't prevent you from having to do it again with 3.0 comes out right?

      so if your with a carrier already, this is completely useless? if not how so(curious)?
    1. CaCHooKa Man's Avatar
      CaCHooKa Man -
      darn.. i have 5.9
    1. wujek21's Avatar
      wujek21 -
      hi i done everything like is in post above and again nothing. i copy files into /private/var/root. i turn my mobile terminal on and i Type in: cd /var/root
      Type in: chmod 755 BBUpdaterExtreme
      Type in: launchctl unload /System/Library/LaunchDaemons/com.apple.CommCenter.plist
      Type in: ./BBUpdaterExtreme queryversion
      and again my iphone show me message there is no such filr or directory . i try many things and nothing.
    1. reneki's Avatar
      reneki -
      Quote Originally Posted by wujek21 View Post
      hi i done everything like is in post above and again nothing. i copy files into /private/var/root. i turn my mobile terminal on and i Type in: cd /var/root
      Type in: chmod 755 BBUpdaterExtreme
      Type in: launchctl unload /System/Library/LaunchDaemons/com.apple.CommCenter.plist
      Type in: ./BBUpdaterExtreme queryversion
      and again my iphone show me message there is no such filr or directory . i try many things and nothing.
      /private/var/root and /var/root are two different places...copy files into var/root and try again.
    1. replay187's Avatar
      replay187 -
      how can I check my bootloader??
    1. DaBossA's Avatar
      DaBossA -
      I still cant get this to work...I think the part Im doing wrong is with MobileTerminal...Can anybody explain that process clearer? Thanks...

      Quote Originally Posted by wujek21 View Post
      hi i done everything like is in post above and again nothing. i copy files into /private/var/root. i turn my mobile terminal on and i Type in: cd /var/root
      Type in: chmod 755 BBUpdaterExtreme
      Type in: launchctl unload /System/Library/LaunchDaemons/com.apple.CommCenter.plist
      Type in: ./BBUpdaterExtreme queryversion
      and again my iphone show me message there is no such filr or directory . i try many things and nothing.
      Yea I keep getting this same thing...
    1. i pimping's Avatar
      i pimping -
      i havent got var/root ive only got private/var/root
    1. webacct's Avatar
      webacct -
      method:2 worked like a charm for me
      I downgraded the baseband, installed yellowsn0w and unlocked my 3G phone previously jailbroken with 2.2.1 firmware
      btw /var/root and /private/var/root are the same folders
      /var is a symbolic link to /private
      Thanks to him121213 and tattoo jack
    1. i pimping's Avatar
      i pimping -
      i cant get past cd/var/root in terminal it says no such file or directory
    1. oldcoyoteinc's Avatar
      oldcoyoteinc -
      great work thanks for help
    1. Dblock0405's Avatar
      Dblock0405 -
      i got a 6.02 bootloader. any clue?

      im stuck i guess ima try the rest of the tut and reply

      yea i did it again and i got

      Boot Loader Version: ICE2_BOOT_06.02_G2M3S2
    1. thetoothfairy's Avatar
      thetoothfairy -
      Found this site on the internet...... thought it was cool to read about this topic and MMI

      Downgrade your iPhone 3G baseband from 2.30 to 2.28!
    1. Rob_Quads's Avatar
      Rob_Quads -
      I have read that there are 3 bootloaders depending on when your phone was made. Can you just clarify, does this mean (at the moment) its a fixed value that does not get changed with firmware updates etc i.e. if you 5.09 you have always had and always will (at the mo) have 5.09
    1. hondapro210's Avatar
      hondapro210 -
      I have also tried both methods!!
      pHaseBanDowngrader said succes and your baseband has been downgraded but the baseband was still at 2.30.03 after reboot...
      And method 2 ran the whole process and baseband stays the same after reboot.. my bootloader is at 5.08
      But i do remember seeing this!
      !!! Exception at :0:
      - BBUReturnError(1)/2:Unsupported memory class CodeClass for EEP transfer. Are you sure ICE2_02.28.00.eep is an EEP file?
      Re-enabling sleep....OK