Ok so i did something stupid I updated to iOS 5 now I want to downgrade but my device is stuck in recovery mode, I tried everything recboot, tiny umbrella etc. but they just reboot my iPhone and it shows recovery mode again. And when i try to restore to an official firmware (iOS 4.3.5) it says extracting software then verifying with apple, then for 5 to 10 minutes it says preparing iPhone for restore (nothing changes on the iPhone in this time still shows recovery). after that it throws me a 1604 error. I herd that putting the device in DFU will let it restore. But the problem is that when I try to enter it just reboots to recovery! PLEASE HELP

See:

http://theiphonewiki.com/wiki/index.php?title=DFU_Mode

http://www.hackint0sh.org/f137/54082.htm

Timing can be tricky/different if you are in a bootloop, but it's not an issue if you are stuck in recovery mode to switch to DFU (unless you have a physical hardware issue: home/power buttons are broken or your dock connector doesn't detect charge via the USB cable)

yep i got it in DFU using this method:

Kick the iPhone out of simple restore/recovery mode and make it reboot.
1. Connect iPhone and your PC/Mac, quit iTunes.
2. Hold Start/Sleep and Home for 10 seconds (I always count 100, 200, 300,...)
3. Let go of Home button but keep holding Start/Sleep until the Apple logo on the iPhone screen shows up.
4. Let go of Start/Sleep, the iPhone will boot

everything seemed to be going good but halfway through the restore it just gave me a 1015 error and booted up the iPhone in recovery

Originally Posted by Kumail

yep i got it in DFU using this method:

Kick the iPhone out of simple restore/recovery mode and make it reboot.
1. Connect iPhone and your PC/Mac, quit iTunes.
2. Hold Start/Sleep and Home for 10 seconds (I always count 100, 200, 300,...)
3. Let go of Home button but keep holding Start/Sleep until the Apple logo on the iPhone screen shows up.
4. Let go of Start/Sleep, the iPhone will boot

everything seemed to be going good but halfway through the restore it just gave me a 1015 error and booted up the iPhone in recovery

1015 is 100% okay/normal. Use FixRecovery from The Firmware Umbrella - TinyUmbrella to exit recovery mode.

i clicked fix recovery in tiny umbrella but now my iPhones screen is completely black and iTunes does not recognize a recovery device

Originally Posted by Kumail

i clicked fix recovery in tiny umbrella but now my iPhones screen is completely black and iTunes does not recognize a recovery device

I did NOT say that you should use "fix recovery" inside TinyUmbrella, there is a separate FixRecovery tool available for download from The Firmware Umbrella - TinyUmbrella

Did you perform the restore in DFU mode or did you also use a tool like iREB or redsn0w or pwnagetool or sn0wbreeze to enter pwned dfu mode?

i did the restore in dfu mode. now my iPhone shows recovery mode. and i have also tried it in recovery mode. i haven't done it in pwned dfu

and yes i also have used fix recovery and recboot they both reboot the iPhone to the recovery screen

Originally Posted by Kumail

i did the restore in dfu mode. now my iPhone shows recovery mode. and i have also tried it in recovery mode. i haven't done it in pwned dfu

Don't do it in pwned DFU (I don't think that will help you)

Use fixrecovery-win
or fixrecovery-osx

Be sure to run the version for 4.3 not the version for 4.2.1 (they are both in the zip you download)

i used fix recovery mac. it just shows some text then reboots to recovery mode. here is what it said in the terminal


Last login: Thu Aug 18 13:36:56 on ttys000
Kumails-Mac:~ Kumail$ /Users/Kumail/Downloads/fixrecovery-osx-4/fixrecovery43 ; exit;
Initializing libpois0n
No matching processes belonging to you were found
Waiting for device to enter DFU mode
opening device 05ac:1227...
Found device in DFU mode
Checking if device is compatible with this jailbreak
Checking the device type
Identified device as iPhone2,1
Preparing to upload limera1n exploit
Resetting device counters
Sending chunk headers
Sending exploit payload
Sending fake data
libusb:error [darwin_transfer_status] transfer error: timed out
Exploit sent
Reconnecting to device
libusb:error [darwin_close] USBDeviceClose: no connection to an IOService
Waiting 2 seconds for the device to pop up...
opening device 05ac:1227...
Preparing to upload iBSS
Checking if iBSS.n88ap already exists
Preparing to fetch DFU image from Apple's servers
Fetching Firmware/dfu/iBSS.n88ap.RELEASE.dfu...
[==================================================] 100.0%
Uploading iBSS.n88ap to device
[==================================================] 100.0%
libusb:error [darwin_reset_device] ResetDevice: device not responding
Reconnecting to device
libusb:error [darwin_close] USBDeviceClose: no connection to an IOService
Waiting 10 seconds for the device to pop up...
opening device 05ac:1281...
Setting to configuration 1
Setting to interface 0:0
Preparing to upload iBSS payload
Loaded payload for iBSS on n88ap
Resetting device counters
Uploading iBSS payload
[==================================================] 100.0%
Executing iBSS payload
Initializing greenpois0n in iBSS
Checking if device is already jailbroken
Booting jailbreak ramdisk
BOOT: Preparing to upload ramdisk
[==================================================] 100.0%
Executing ramdisk
Setting kernel bootargs
Preparing to upload devicetree
Checking if DeviceTree.n88ap already exists
Preparing to fetch firmware image from Apple's servers
Fetching Firmware/all_flash/all_flash.n88ap.production/DeviceTree.n88ap.img3...
[==================================================] 100.0%
Resetting device counters
Uploading DeviceTree.n88ap to device
[==================================================] 100.0%
Loading devicetree
Preparing to upload kernelcache
Checking if kernelcache already exists
Fetching kernelcache.release.n88...
[==================================================] 100.0%
Resetting device counters
[==================================================] 100.0%
Hooking jump_to command
libusb:error [darwin_transfer_status] transfer error: timed out
Exiting libpois0n
logout

[Process completed]