iPhone 3GS screwed

[normanbates]

Hi guys,

I need some serious help.

I have my uncles iPhone that he has knackered up. He bought it jailbroken and decided to 'go legit' and update to stock FW.

During the process something went wrong and now the iPhone is stuck in recovery and whenever I try to update I just get error 1015 at the very end of the firmware update stage.

It's an iPhone 3GS in white 16gb, model number: A1303, serial: 5K026AF43NQ

I've included the log file for the update process.

I've trawled the internet looking for solutions and I've tried the several methods to recover it but it just isn't having any of it.

 

[jaikob]

First off, no need to panic. Everything is fine.

A quick solution to your problem is to download TinyUmbrella, run the program, select the device in the menu to the left, and there should be a button called "Exit Recovery." Click that to kick the iPhone out of recovery.

I would also check the baseband. If it is on 6.15 you cannot install stock firmware. Ever.

You could also download the latest firmware file, option (or shift on windows) click the restore button in iTunes to restore to the file you downloaded.

 

[normanbates]

Thanks but it won't kick it out of recovery . I don't know what FW it was on or if what baseband it had. SHSH blobs aren't stored anywhere so I'm lost

 

[jaikob]

Thanks but it won't kick it out of recovery . I don't know what FW it was on or if what baseband it had. SHSH blobs aren't stored anywhere so I'm lost

Open TinyUmbrella again and save your SHSH files. It will attempt to get them from Cydia. Hopefully you have one you can use.

I would highly suggest you install a jailbroken firmware file (4.3.3) and see if it has baseband 6.15. 6.15 is used to unlock the phone, but it comes from the iPad, so your restores won't work.

 

[normanbates]

Open TinyUmbrella again and save your SHSH files. It will attempt to get them from Cydia. Hopefully you have one you can use.

I would highly suggest you install a jailbroken firmware file (4.3.3) and see if it has baseband 6.15. 6.15 is used to unlock the phone, but it comes from the iPad, so your restores won't work.

I've clicked on the save SHSH, don't know if it did anything, although there is now a .plist file in the .shsh folder.

Not sure if the SHSH upload directly to Cydia??

What's the best to jailbreak it with? I tried redsn0w earlier but it hung on the reboot part

 

[jaikob]

I've clicked on the save SHSH, don't know if it did anything, although there is now a .plist file in the .shsh folder.

Not sure if the SHSH upload directly to Cydia??

What's the best to jailbreak it with? I tried redsn0w earlier but it hung on the reboot part

First off, this is what I would try:

open up your hosts file (etc/hosts, or C:\Windows\System32\Drivers\etc\hosts)

And check for the line gs.apple.com.

If it is in there remove it and save the file.

----------------------------------------------------------------------

Download the latest firmware file. (can be found with a Google search).

Put your phone in DFU mode (hold Home + Lock for 13 Seconds, let go of power and keep holding home for 7 seconds).

Once iTunes tells you it has found a device in recovery (screen will be off), Option click (or shift for windows) the "Restore" button.

Browse for the file you just downloaded.

Let it do its thing.


---------------------------

If you get any error chances are you have 06.15.00 baseband or you have not removed the entry from the hosts file.

--------------------------------

At this point I would download or create a pwned 4.3.3 or 4.2.1 firmware file (hopefully you have an SHSH for it) with pwnagetool or equivalent.


You cannot go any higher than 4.2.1 if you have the new bootrom.

You also want to make sure that gs.apple.com points to cydia. You can do that through tiny umbrella with the option Modify host file on exit, or something like that.

Good luck! You haven't bricked your phone, just temporarily decommissioned it.

 

[normanbates]

I tried to do a normal restore with the cydia server and it gave error 1600, so just currently downloading the 4.2.1 ipsw. Fingers crossed

 

[jaikob]

I tried to do a normal restore with the cydia server and it gave error 1600, so just currently downloading the 4.2.1 ipsw. Fingers crossed

If your using the new firmware Cydia might not work. It's best to remove the entries from the host file and try with the latest version that is signed by Apple.

 

[jav6454]

Hi guys,

I need some serious help.

I have my uncles iPhone that he has knackered up. He bought it jailbroken and decided to 'go legit' and update to stock FW.

During the process something went wrong and now the iPhone is stuck in recovery and whenever I try to update I just get error 1015 at the very end of the firmware update stage.

It's an iPhone 3GS in white 16gb, model number: A1303, serial: 5K026AF43NQ

I've included the log file for the update process.

I've trawled the internet looking for solutions and I've tried the several methods to recover it but it just isn't having any of it.

Error 1015 is baseband and software mismatch. In other words, the baseband is usually a higher version than what the software you are installing brings.

I tried to do a normal restore with the cydia server and it gave error 1600, so just currently downloading the 4.2.1 ipsw. Fingers crossed

That error means USB error/USB miscommunication and/or problems with the jailbreak.

 

[normanbates]

Error 1015 is baseband and software mismatch. In other words, the baseband is usually a higher version than what the software you are installing brings.

I've been getting this trying to install 4.3.5

That error means USB error/USB miscommunication and/or problems with the jailbreak.

I got this trying to do a proper 4.3.5 install whilst in DFU mode

 

[jav6454]

I've been getting this trying to install 4.3.5


I got this trying to do a proper 4.3.5 install whilst in DFU mode

Was this iPhone unlocked at any point? Because so far this looks like a baseband 06.xx.xx problem.

 

[normanbates]

Was this iPhone unlocked at any point? Because so far this looks like a baseband 06.xx.xx problem.

I believe it was unlocked yes.

I had no look with the 4.2.1 (either official or pwnd) so tried to jailbreak with redsn0w 0.9.6rc16 but its now just stuck on Exploiting with limera1n and the iPhone is just showing the 'connect to iTunes' screen

 

[jav6454]

I believe it was unlocked yes.

I had no look with the 4.2.1 (either official or pwnd) so tried to jailbreak with redsn0w 0.9.6rc16 but its now just stuck on Exploiting with limera1n and the iPhone is just showing the 'connect to iTunes' screen

If it was unlocked then it used the iPad baseband version. Might I direct your attention to a message from the iPhone Dev Team here

Originally posted by iPhone Dev Team
Today we’re pleased to announce our free carrier unlock for iPhone3G/3GS owners with a baseband later than 05.13.04. The unlock for that baseband exploited the AT+XAPP command, thanks to a crash initially discovered by @sherif_hashim (@Oranav also found this crash). So what hole are we exploiting today, since Apple closed that AT+XAPP hole? Well, we’re exploiting the exact same hole!

It turns out that the very first iPad firmware 3.2.2 has baseband version 06.15.00 still vulnerable to AT+XAPP. The iPad baseband is built for the exact same baseband chip as the iPhone3G/3GS — they’re fully compatible! Some of us have been running 06.15 for weeks now on our iPhones in preparation for this release. (And some have known about this possibility of 06.15 on the iPhones for a while — kudos to @w1kedZ and @DHowett for keeping it hush!)

======

WARNING — YOU DO THIS AT YOUR OWN RISK! PLEASE UNDERSTAND THE CONSEQUENCES OF UPDATING TO 06.15.

There is no way to come back down from 06.15, and there’s no hiding the baseband version from Apple. You’ll be voiding your warranty in a very obvious way.
If some future baseband comes out with a critical fix, you won’t be able to update to it if it remains down in the 05.xx sequence (then again, you wouldn’t update to it if you wanted to keep your unlock anyway).
Starting with FW 4.2.1 if you have 06.15 on your iPhone you won’t ever be able to restore to stock firmware (it will fail). You’ll need to only restore to custom IPSWs (then again, if you’re unlocker you should already be doing that).
Unlockers have been reporting mixed results about GPS functionality at 06.15.00. Until we can track down what differentiates those who retain GPS vs. those who lose it, be conservative and assume you’ll lose GPS at 06.15.00. As we work on finding the cause (and possibly a fix), please report your personal findings in our comments section. (Update: early indications are that while 06.15.00 is capable of GPS, it will require some further hacks. But please still be conservative and assume you will lose GPS at 06.15, in case the hacks don’t work).

Certainly don’t update to 06.15 if you don’t need to! Only do this if you need the unlock and you’re stuck on 05.14 or 05.15, and you’re willing to assume the above risks.

 

[jaikob]

All he needs to do is install jailbroken firmware.

 

[saberahul]

Not that is really helps you but if you need to kick it out of recovery, you can try recboot (i believe that is what it is called).

 

[normanbates]

All he needs to do is install jailbroken firmware.

I've tried using redsn0w but it hangs at "Exploiting with limera1n" and the phone just displays the "connect to iTunes" screen.

Not that is really helps you but if you need to kick it out of recovery, you can try recboot (i believe that is what it is called).

I've tried RecBoot, and tiny umbrella but it just stays with the 'connect to iTunes' screen even though the pc programs report 'success'

Am I just trying to flog a dead horse here?

I've tried every 3GS recovery ipsw possible, official and custom. I don't know if when my uncle tried to do the update he used the 4.3.5 update or not (but then I presume he would as it would have just told him new software was available) and seeing as 4.3.5 isn't jailbroken so if he has surely it's screwed right?

* OK so googled and found that 4.3.5 has a tethered jailbreak available so I tried that. It exploited with limera1n and managed to get stuff loaded on the phone but now the phone is erroring when trying to do the firmware and has just flooded the screen with "please wait" and that's where I'm at

 

[jaikob]

I've tried using redsn0w but it hangs at "Exploiting with limera1n" and the phone just displays the "connect to iTunes" screen.



I've tried RecBoot, and tiny umbrella but it just stays with the 'connect to iTunes' screen even though the pc programs report 'success'

Am I just trying to flog a dead horse here?

I've tried every 3GS recovery ipsw possible, official and custom. I don't know if when my uncle tried to do the update he used the 4.3.5 update or not (but then I presume he would as it would have just told him new software was available) and seeing as 4.3.5 isn't jailbroken so if he has surely it's screwed right?

* OK so googled and found that 4.3.5 has a tethered jailbreak available so I tried that. It exploited with limera1n and managed to get stuff loaded on the phone but now the phone is erroring when trying to do the firmware and has just flooded the screen with "please wait" and that's where I'm at

This is what you need to do. Scrap resn0w and all these other programs. We are a mac forum so I will assume you have a mac. Download the latest version of pwnagetool.

Download the 4.3.3 stock firmware.

Feed firmware to pwnagetool.

Generate pwned firmware.

pwnagetool will help you put phone in DFU + exploit.

Open itunes.

Option click the restore button.

Browse to new firmware you created.

Phone will restore.

You may get error 1015, kick out of recovery with the button press.

Done.

Make sure you have cydia shsh server in hosts file.


If you have windows, I am sure you can download a firmware file somewhere. Or most preferably have a friend do it.

Edit, if you are connecting through a USB hub that won't work. Connect directly to the machine.

 

[normanbates]

I am Windows based I'm afraid. I have the stock firmware and can create a pwn'd version (through sn0wbreeze).

It just keeps failing

 

[fireshot91]

What worked for my 3GS was to create a custom 4.1 firmware with pwngetool, then use redsn0w to push it to the phone. At least, I think that's what I did.

 

[normanbates]

What worked for my 3GS was to create a custom 4.1 firmware with pwngetool, then use redsn0w to push it to the phone. At least, I think that's what I did.

Were you experiencing the same problems as me?

I can get it to download the jailbreak to the phone but it fails on the handset when it gets to NAND and firmware downloads (or something like that)

 

[arctyler]

the same thing happened to my brother, he brought it down to a computer store that fixes mac products and he also works for apple, and he fixed it for like 10-20 bucks

 

[silentarts]

For anybody with issues...

As a matter of fact i know how to solve it!!

1)Run redsnow as administrator

2)Go to start(on windows)

3Type in Task manager then open up(View running processes with Task Manager)

4)Go to process and find redsnow.exe

5)Now right click it and click on set affinity

6)Now check(click) on all the boxes) then press OK.

7)Close task manager and when it is in DFU mode keep holding onto the home button until the end of the jailbreak is complete.

Hope I helped!(just Jailbroke my iPhone 3Gs on iOS 4.1 using this process....untethered)

 

[terraphantm]

Did no one read the update log? He's on 06.15.00... so he has to use custom firmware

-------------------------------------------------------------------------------
 BEGINNING BOOT
-------------------------------------------------------------------------------
Sending boot code...AppleBCMWLANN88PlatformManager::handleBBNotificationGated(): Baseband Alive
AppleBCMWLAN::handleWatchdogTimeout(): Watchdog timer fired
AppleBCMWLAN::watchDogReset(): 0x300
AppleBCMWLAN::halt()
IOSDIOController::enumerateSlot(): Re-initializing SDIO device in slot: 0
IOSDIOController::enumerateSlot(): CMD5 failed with SDIO device on slot 0, SDIO Cmd Timeout
AppleBCMWLAN::watchDogReset() - driver not initialized, initDongle() omitted
AppleBCMWLANN88PlatformManager::handleBBNotificationGated(): Baseband Reset, wifi down
AppleBCMWLAN::halt()
- GKEY: 0x21
OK
Automagic-ing firmware from path /usr/local/standalone/firmware...
	- FLS file /usr/local/standalone/firmware/ICE2_05.16.02.fls and EEP file /usr/local/standalone/firmware/ICE2_05.16.02.eep are available
Automagic-ing firmware from path /usr/local/standalone/firmware -- All OK

Version ICE2-05.16.02 is available, [B]ICE2-06.15.00 is already loaded[/B]
Deciding whether to update or not...
	- Available version is older

!!! Exception at :0:
	- BBUReturnBadArgument(5)/15: Cannot perform an automatic update to a previous version
attempting to dump restore log
writing log file: /mnt1/restore.log