Page 1 of 3 123 LastLast
Results 1 to 10 of 23
Discuss 3G S stuck on Recovery (blackra1n RC3 infinite loop)...Please help... at the Blackra1n (3G(S) jailbreak) - Hackint0sh.org; I'm a n00b and this my first posting here. Apologize if I sound stupid with ...
  1. #1
    Advanced Array

    Join Date
    Apr 2010
    Posts
    36
    Post Thanks / Like
    Downloads
    0
    Uploads
    0
    Rep Power
    0

    Default 3G S stuck on Recovery (blackra1n RC3 infinite loop)...Please help...

    I'm a n00b and this my first posting here. Apologize if I sound stupid with my questions. Any help would be a big life saver of my extremely important data.

    I'm trying to recover my iPhone 3G S and here are the specs:

    baseband version: 05.11.07
    Firmware verson: 3.1.2
    Serial: 87940****** (assume week 40). please confirm.

    Jailbroken with blackRa1n RC2 in 2009.
    Accidentally ran jailbreakme.com during the 4.3.3 PDF unlock timeframe in July 2011.
    Tried blackRa1n RC2 several times and would't boot but ran blackra1n RC3 and luckily it booted to the home screen.
    Unlocked with ultrasnow RC1 and tested with T-Mobile and it worked.
    2 days back: iPhone was dropped and glass fixed. In the process, I asked the repair guy to remove the tethered jb and go for a untethered jb and he screwed up in the process. Don't know what he did.

    I ran blackra1n RC3 50 times in a row without any success (by reading some of the other forums). I also used redsn0w with original 3.1.2 firmware and it didn't work either. The data I have (300+ photos, 20+ audio recordings, contact information) are all extremely important for me and I don't want to lose them at any cost.

    I wanted to add some information:

    All along, I was using iTunes 10.x and just formatted my machine completely and installed iTunes 9.1 64bit as I'm running Windows 7 home Premium 64 bit.

    Also, before I did the unlock last month, I saved the SHSH using TinyUmbrella:

    4234202094991-iphone2,1-4.1.shsh
    4234202094991-iphone2,1-4.3.3.shsh
    4234202094991-iphone2,1-5.0b1.shsh
    4234202094991-iphone2,1-5.0b2.shsh

    And after the unlock was done, I saved the SHSH files again:

    4234202094991-iphone2,1-4.1.shsh
    4234202094991-iphone2,1-4.3.3.shsh
    4234202094991-iphone2,1-5.0b1.shsh
    4234202094991-iphone2,1-5.0b2.shsh
    4234202094991-iphone2,1-5.0b3.shsh

    Will this help in any way to do a non-destructive restore to factory settings? Unfortunately, I didn't save the 3.1.2 SHSH file from Cydia when I jailbroke the iPhone.
    Again, stupidity and shear laziness.

    I also was reading these:

    Mostly iPhone hacking: Working iPhone recovery ramdisk with SSH ;-)
    http://www.hackint0sh.org/f201/168333.htm

    Do you think the attempts I made would have already wiped the data? I heard that unless you Restore directly thru iTunes, the data is still safe in the user partition.

    Will any great sould help me from dying? Losing data is like shooting myself.

    I wanted to give a shot and tried the RamDisk approach and followed the video. When I ran "irecovery -s" from command line, this is what I got:

    iRecovery - Recovery Utility
    by westbaer
    Thanks to pod2g, tom3q, planetbeing, geohot and posixninja.

    Found iPhone/iPod in Recovery mode

    =======================================
    ::
    :: iBoot for n88ap, Copyright 2009, Apple Inc.
    ::
    :: BUILD_TAG: iBoot-636.66
    ::
    :: BUILD_STYLE: RELEASE
    ::
    :: USB_SERIAL_NUMBER: CPID:8920 CPRV:15 CPFM:03 SCEP:03 BDID:00 ECID:000003
    D9DA1C9D8F IBFL:01 SRNM:[87940*****]
    ::
    =======================================

    [FTL:MSG] Apple NAND Driver (AND) RO
    [NAND] Found Chip ID 0x3295DE987A on FMI0:CE0
    [NAND] Found Chip ID 0x3295DE987A on FMI0:CE1
    [NAND] Found Chip ID 0x3295DE987A on FMI1:C8
    [NAND] Found Chip ID 0x3295DE987A on FMI1:CE9
    [FTL:MSG] FIL_Init [OK]
    [FTL:MSG] BUF_Init [OK]
    [FTL:MSG] FPart Init [OK]
    read new style signature 0x43313133 (line:375)
    [FTL:MSG] VSVFL Register [OK]
    [FTL:MSG] VFL Init [OK]
    [FTL:MSG] VFL_Open [OK]
    [FTL:MSG] YAFTL Register [OK]
    yaFTL::YAFTL_Open(l:2630): CXT is not valid . Performing full NAND R/O restore .
    ..
    [FTL:MSG] FTL_Open [OK]
    Boot Failure Count: 15 Panic Fail Cont: 0
    Delaying boot for 0 seconds. Hit enter to break into the command prompt...
    HFSInitPartition: 0x4fc7a000
    Kernelcache image not valid
    Entering recovery mode, starting command prompt
    ]

    It displays a error : "Kernelcache image not valid". What do I do here?

    Please help.
    Kindly help me come out of this black hole.
    Last edited by Olethros; 08-15-2011 at 07:36 AM.



  2. #2
    Super Moderator Array Olethros's Avatar

    Join Date
    Sep 2007
    Location
    Norway
    Posts
    8,360
    Post Thanks / Like
    Downloads
    0
    Uploads
    0
    Rep Power
    439

    Default

    Publish your prior restore logs. Please.

    Blackra1n & blacksn0w are very unreliable, you should have ditched these long ago.

    Yes if the phone wasn't restored via iTunes then your data should be intact.
    The article that you were looking at is old. This Mostly iPhone hacking: Booting SSH ramdisk on new devices is the latest version. Try that.

    Unfortunately you can't restore to 3.1.2 again (no SHSH blob).
    Please read the stickies & search forum before posting!
    How to report an iTunes restore/update fail in a useful manner
    -

    iPad 3G 64GB (4.3.3, Redsn0w) oldest SHSH 3.2.2
    iPhone 4 32GB (4.2.1, Redsn0w JB-monte) oldest SHSH 4.1
    iPhone 3GS 32GB (4.3.3; Pwnagetool) factory unlocked oldest SHSH 3.1
    iPhone 8GB (3.1.3; Pwnagetool) AT&T Locked - Unlocked with bootneuter

    -
    Did we solve your problem? Got a dollar or two spare ? Donate!

  3. #3
    Advanced Array

    Join Date
    Apr 2010
    Posts
    36
    Post Thanks / Like
    Downloads
    0
    Uploads
    0
    Rep Power
    0

    Default

    Million thanks to your reply.

    I only have the log that I showed you earlier since I ran second time and during second time, I stopped at the first irecovery -s after it printed "kernelcache image invalid".

    Out of my stupidity again, I ran blackra1n RC3 when the iTunes logo was showing and after that irecovery is not even seeing the 3G S. Even iTunes is not displaying the "Recovery" message. But, I have Mac OS X Snow Leopard and when I connect my 3G S, iTunes shows me the "Restore" message.

    Don't know what happened on Windows 7.

    Please help.

  4. #4
    Super Moderator Array Olethros's Avatar

    Join Date
    Sep 2007
    Location
    Norway
    Posts
    8,360
    Post Thanks / Like
    Downloads
    0
    Uploads
    0
    Rep Power
    439

    Default

    Quote Originally Posted by macnewbie20 View Post
    Million thanks to your reply.

    I only have the log that I showed you earlier since I ran second time and during second time, I stopped at the first irecovery -s after it printed "kernelcache image invalid".

    Out of my stupidity again, I ran blackra1n RC3 when the iTunes logo was showing and after that irecovery is not even seeing the 3G S. Even iTunes is not displaying the "Recovery" message. But, I have Mac OS X Snow Leopard and when I connect my 3G S, iTunes shows me the "Restore" message.

    Don't know what happened on Windows 7.
    I wasn't talking about iRecovery logs. I was talking about (any) iTunes restore logs you might have created during your attempts. Don't try to restore now just to create a lot.

    Try the procedure I linked to...
    It works from DFU mode, so should still work with the phone in the current situation.
    Please read the stickies & search forum before posting!
    How to report an iTunes restore/update fail in a useful manner
    -

    iPad 3G 64GB (4.3.3, Redsn0w) oldest SHSH 3.2.2
    iPhone 4 32GB (4.2.1, Redsn0w JB-monte) oldest SHSH 4.1
    iPhone 3GS 32GB (4.3.3; Pwnagetool) factory unlocked oldest SHSH 3.1
    iPhone 8GB (3.1.3; Pwnagetool) AT&T Locked - Unlocked with bootneuter

    -
    Did we solve your problem? Got a dollar or two spare ? Donate!

  5. #5
    Advanced Array

    Join Date
    Apr 2010
    Posts
    36
    Post Thanks / Like
    Downloads
    0
    Uploads
    0
    Rep Power
    0

    Default

    Thanks again.
    How do I get the iTunes restore log? Please advice. The only time I use iTunes is to see if the iPhone 3G S is connected thru USB and displays the "Restore" message.
    Btw, I checked the other link you have suggested. The first step confuses me. "Build the ramdisk as described in http://msftguy.blogspot.com/2010/05/working-ramdisk-with-ssh.html". What does this mean exactly and how do I do that?

    Btw, are you saying to abandon the method that I was using but stick with this new link?

    Please advice.
    Last edited by macnewbie20; 08-15-2011 at 08:36 AM.


  6. #6
    Super Moderator Array Olethros's Avatar

    Join Date
    Sep 2007
    Location
    Norway
    Posts
    8,360
    Post Thanks / Like
    Downloads
    0
    Uploads
    0
    Rep Power
    439

    Default

    Quote Originally Posted by macnewbie20 View Post
    Thanks again.
    How do I get the iTunes restore log? Please advice. The only time I use iTunes is to see if the iPhone 3G S is connected thru USB and displays the "Restore" message.
    Ok, then you probably don't have any restore logs. There is a link in the signature of every post I make which explains how to find/publish your iTunes recovery logs so we can better assist you.

    Quote Originally Posted by macnewbie20 View Post
    Btw, I checked the other link you have suggested. The first step confuses me. "Build the ramdisk as described in http://msftguy.blogspot.com/2010/05/working-ramdisk-with-ssh.html". What does this mean exactly and how do I do that?

    Btw, are you saying to abandon the method that I was using but stick with this new link?
    What I am saying is that the link you were originally looking at is mostly correct but some steps have become simpler. The link I pointed you to explains the simpler steps. Other than this, the remaining steps are identical to the old procedure you were looking at.

    I know it is confusing, there are now at least two or three pages that relate to making a SSH ramdisk. This procedure is recommended only for hackers with some experience. It is however the best way to get your data back.
    Please read the stickies & search forum before posting!
    How to report an iTunes restore/update fail in a useful manner
    -

    iPad 3G 64GB (4.3.3, Redsn0w) oldest SHSH 3.2.2
    iPhone 4 32GB (4.2.1, Redsn0w JB-monte) oldest SHSH 4.1
    iPhone 3GS 32GB (4.3.3; Pwnagetool) factory unlocked oldest SHSH 3.1
    iPhone 8GB (3.1.3; Pwnagetool) AT&T Locked - Unlocked with bootneuter

    -
    Did we solve your problem? Got a dollar or two spare ? Donate!

  7. #7
    Advanced Array

    Join Date
    Apr 2010
    Posts
    36
    Post Thanks / Like
    Downloads
    0
    Uploads
    0
    Rep Power
    0

    Default

    Thanks again.

    The original thread I was following has a link "Up to date instructions here". Is it recommended to follow the "Up to date" link or follow the one you had suggested?

    Couple of more things that I understood to get this going. Please correct me if I'm wrong.

    1. Download ipsw file from http://appldnld.apple.com.edgesuite....1_Restore.ipsw
    (iPhone1,1_3.1.2_7D11_Restore.ipsw).

    2. Unzip the ipsw shown on step #1.

    3. The instructions tell me this: "Note that you still need a pwned kernelcache (from a pwnageTool generated IPSW)".

    To do this, I need to download pwangetool 3.1.4 and use it to generate a pwnage version of the IPSW I downloaded in step #1.

    Previously, I was using iPhone2,1_3.1.2_7D11_Custom_Restore.ipsw as shown in the video and got the "kernelcache image invalid" error. In the video, just issuing irecovery -s to a iPhone in recovery mode showed no errors. But, in my case I'm getting the "kernelcache image invalid" error. This is where I'm stuck.

    Again, I have a 3G S (just to be sure).

    I think I'm inching closer.

    Please help.
    Last edited by macnewbie20; 08-15-2011 at 03:26 PM.

  8. #8
    Super Moderator Array Olethros's Avatar

    Join Date
    Sep 2007
    Location
    Norway
    Posts
    8,360
    Post Thanks / Like
    Downloads
    0
    Uploads
    0
    Rep Power
    439

    Default

    Quote Originally Posted by macnewbie20 View Post
    Thanks again.

    The original thread I was following has a link "Up to date instructions here". Is it recommended to follow the "Up to date" link or follow the one you had suggested?
    You need to follow a combination of the "up to date" and the "limera1n/tethered boot" instructions.

    The only thing you need from the "up to date" instructions is to make the SSH patched ramdisk.


    Quote Originally Posted by macnewbie20 View Post
    2. Unzip the ipsw shown on step #1.
    Without trying this myself, I can't really help you much more. However I think that the "easier/modern" approach is designed to work with a 4.1+ SSH patched ramdisk plus a pwnagetool patched kernelcache & ibss

    It doesn't hurt to boot a 4.1 ramdisk on your device, it won't break anything.

    The steps are much more complicated if you want to boot a 3.1.2 ramdisk.
    Please read the stickies & search forum before posting!
    How to report an iTunes restore/update fail in a useful manner
    -

    iPad 3G 64GB (4.3.3, Redsn0w) oldest SHSH 3.2.2
    iPhone 4 32GB (4.2.1, Redsn0w JB-monte) oldest SHSH 4.1
    iPhone 3GS 32GB (4.3.3; Pwnagetool) factory unlocked oldest SHSH 3.1
    iPhone 8GB (3.1.3; Pwnagetool) AT&T Locked - Unlocked with bootneuter

    -
    Did we solve your problem? Got a dollar or two spare ? Donate!

  9. #9
    Advanced Array

    Join Date
    Apr 2010
    Posts
    36
    Post Thanks / Like
    Downloads
    0
    Uploads
    0
    Rep Power
    0

    Default

    Thanks.

    I'm a newbie and couldn't quite follow on what you're saying and it is also confusing.
    As you said, I will follow the instructions you have specified previously. I'm confused on this:

    "4.1 + SSH patched ramdisk plus a pwangetool kernekcache & ibss".

    Please correct me if I'm wrong with the following approach:

    1. http://appldnld.apple.com/iPhone4/06...7_Restore.ipsw. If this is not the correct ipsw file, how do I get this: "4.1 + SSH patched ramdisk plus a pwangetool kernekcache & ibss"?

    2. In the "up to date" instructions, it says I have to use "itunnel_mux_r61 --ibec iBEC_file_from_custom_FW --ramdisk created_ramdisk.dmg.ssh --devicetree DevicetreeXXX.img3 --kernelcache kernelcache_file_from_custom_FW --ramdisk-delay 5".

    a. The first parameter comes from unzipping ipsw in step #1 or the you're going to suggest me.
    b. The second parameter: " --ramdisk created_ramdisk.dmg.ssh". How do I create one?
    c. The third parameter: "--devicetree DevicetreeXXX.img3". Where is this img3 file and what does the XXX mean here?
    d. The last parameter: kernelcache is what is got from the pwangetool.


    One more thing: I also did use redsnow 0.9.3 with iPhone2,1_3.2_Custom_Restore.ipsw and also iPhone1,1_3.2_Custom_Restore.ipsw and it patched the kernel and also uploaded ramdisk. I did this before I followed the ramdisk approach shown in the original video. I hope this didn't damage anything with my data. I'm petrified on this.

    Now, I feel the real pain in not backing up my data but I'm not going to give up.

    I think you're my only hope.

    Thanks.
    Last edited by macnewbie20; 08-15-2011 at 04:22 PM.

  10. #10
    Super Moderator Array Olethros's Avatar

    Join Date
    Sep 2007
    Location
    Norway
    Posts
    8,360
    Post Thanks / Like
    Downloads
    0
    Uploads
    0
    Rep Power
    439

    Default

    Quote Originally Posted by macnewbie20 View Post
    This is the correct original Apple IPSW. You need this as an input for Pwnagetool (or sn0wbreeze if you are on windows)

    Quote Originally Posted by macnewbie20 View Post
    If this is not the correct ipsw file, how do I get this: "4.1 + SSH patched ramdisk plus a pwangetool kernekcache & ibss"?
    You need to run Pwnagetool 4.1.3 http://blog.iphone-dev.org/post/1718.../ultra-recycle (pwnagetool 4.1.2 would probably also work) and make a custom IPSW
    Then either unzip the whole custom IPSW or use a zip utility to just extract kernelcache and ibss files from the custom IPSW (that is all you need).

    Quote Originally Posted by macnewbie20 View Post
    2. In the "up to date" instructions, it says I have to use "itunnel_mux_r61 --ibec iBEC_file_from_custom_FW --ramdisk created_ramdisk.dmg.ssh --devicetree DevicetreeXXX.img3 --kernelcache kernelcache_file_from_custom_FW --ramdisk-delay 5".

    a. The first parameter comes from unzipping ipsw in step #1 or the you're going to suggest me.
    b. The second parameter: " --ramdisk created_ramdisk.dmg.ssh". How do I create one?.
    allow me repeat myself
    Quote Originally Posted by Olethros View Post
    The only thing you need from the "up to date" instructions is to make the SSH patched ramdisk.
    Do you get the message now?? Use the booting instructions from Mostly iPhone hacking: Booting SSH ramdisk on new devices they are much simpler than the older "up to date instructions" because now we have a bootrom exploit for new bootrom 3GS (we didn't when the "up to date" instructions were written)


    Quote Originally Posted by macnewbie20 View Post
    c. The third parameter: "--devicetree DevicetreeXXX.img3". Where is this img3 file and what does the XXX mean here?
    You probably won't need this, but if you do - you can also extract this from the pwned custom 4.1 IPSW.
    The XXX refers to the cpu family
    In your case it will be DeviceTree.n88ap.img3

    Quote Originally Posted by macnewbie20 View Post
    One more thing: I also did use redsnow 0.9.3 with iPhone2,1_3.2_Custom_Restore.ipsw and also iPhone1,1_3.2_Custom_Restore.ipsw and it patched the kernel and also uploaded ramdisk. I did this before I followed the ramdisk approach shown in the original video. I hope this didn't damage anything with my data. I'm petrified on this.
    This should NOT have broken anything.
    Last edited by Olethros; 08-15-2011 at 04:46 PM.
    Please read the stickies & search forum before posting!
    How to report an iTunes restore/update fail in a useful manner
    -

    iPad 3G 64GB (4.3.3, Redsn0w) oldest SHSH 3.2.2
    iPhone 4 32GB (4.2.1, Redsn0w JB-monte) oldest SHSH 4.1
    iPhone 3GS 32GB (4.3.3; Pwnagetool) factory unlocked oldest SHSH 3.1
    iPhone 8GB (3.1.3; Pwnagetool) AT&T Locked - Unlocked with bootneuter

    -
    Did we solve your problem? Got a dollar or two spare ? Donate!


 

 
Page 1 of 3 123 LastLast

Similar Threads

  1. iphone 4 - stuck in infinite boot loop
    By the_gts in forum iOS 4.x (iPhone OS 4.x)
    Replies: 18
    Last Post: 09-26-2012, 10:31 AM
  2. iPhone 3GS, Stuck in recovery loop
    By filmsimon in forum Redsn0w
    Replies: 1
    Last Post: 09-27-2011, 02:07 PM
  3. boot loop recovery loop on FW 3.1.2 BL: 05.11.07 after blackra1n
    By Dirkdiggler in forum Blacksn0w (3G(S) unlock)
    Replies: 8
    Last Post: 03-09-2010, 11:51 PM
  4. Stuck in Recovery Loop after Upgrade to 3.1.2
    By bigbenjam in forum PwnageTool
    Replies: 11
    Last Post: 01-09-2010, 01:11 AM
  5. Replies: 3
    Last Post: 12-27-2007, 12:27 PM

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
Powered by vBulletin®
Copyright © 2014 vBulletin Solutions, Inc. All rights reserved.
Search Engine Friendly URLs by vBSEO
(c) 2006-2012 Hackint0sh.org
All times are GMT +2. The time now is 08:42 PM.
twitter, follow us!