Hack the iPhone

How to repair the baseband on unlocked 1.0.2 firmware to upgrade to 1.1.1 firmware

(intel / PPC Mac)

What I used: iPhone with 1.0.2 firmware (hardware unlocked), OS X (10.4.10 & 10.5), iTunes 7.4.2




Hats off to the iPhone Elite Dev Team for coming up with this process that fixes the security zone that is damaged by unlocking the iPhone using anySIM 1.0x programs and its variants iUnlock, Unlock.app or the hardware unlock method.

This procedure will fix your baseband so that you can take a previously unocked 1.0.2 iPhone and safely update it to 1.1.1 firmware. No one else should use this guide.

This is the project page for the iPhone Elite Dev Team for this process.

Step 1.

Download the virginizer package here. I have compiled the two downloads the iPhone Elite Dev Team hosts on their site, just to eliminate any possible mistakes in finding all the needed files, or in properly merging them.

Step 2.

I am going to make a lot of assumptions here, so make sure you are following all of this.

You must have:

• an iPhone with 1.0.2 firmware which is currently working.
• a fully charged battery.
• 03.x series modem firmware (mine is 03.14.08_G).
• a patched lockdownd file already installed. If you don't and use a non-AT&T SIM your iPhone will leave you at the activate screen which you will need to bypass before continuing.
• BSD SubSystem and OpenSSH installed.
• Mobile Terminal or Term-vt100 installed (just in case you lose Wi-Fi).
• the ability to use Fugu (or any other file transfer program like Transmit) to transfer files via SSH to the iPhone.

Step 3.

Plug in your iPhone to your Mac. Quit/close iTunes. Don't just minimize it, shut it down. If you have the iTunes Helper open, you must quit that as well. To determine if they are running, open the Activity Monitor program found in the Utilities folder inside of the Applications folder. If it is running, highlight it in the list and click the "Quit Process" button.

Step 4.

If you are using any program (like Services) that gives you the ability to turn off your SSH server on your iPhone, then make sure your SSH server is turned on right now.

Also, make sure to press your Home button, then press "Settings", "General", "Auto-Lock" and "Never". It would be disastrous if the iPhone went into sleep mode during this process.

Step 5.

Launch Fugu. Copy the "virginizer_pack" folder (which you downloaded in Step 1), to the /usr/bin directory on the iPhone.




Go into the virginzer_pack folder on the iPhone. Make sure the following files all have executable permissions (preferably 0755) set so they will run:

bbupdater, eliteloader.bin, iUnlock, norz, virginator.sh

If you don't know how to change the permissions, simply right click the file and select "Get Info".




Enter 0755 into the field next to "Octal Mode Representation:". Then click the "Apply" button. Do this for every file.




Your folder should look like this when you are done.

Step 6.

Launch the Terminal. I did this on my Mac since I needed to take screen shots, but you could do this directly from your iPhone.

Type: ssh -l root (your iPhone's IP address)    PRESS RETURN
Type: (your password at the prompt)    PRESS RETURN
Type: cd /usr/bin/virginizer_pack    PRESS RETURN
./virginator.sh    PRESS RETURN




Now just follow the prompts.

Type: 1    PRESS RETURN




Type: 2    PRESS RETURN




Type: yes    PRESS RETURN




Note: at ths point a seczone.backup file has been created. If you click "Reload" in Fugu you can be extra paranoid if you want and back that file up right now. Close Fugu when you are done.








Type: yes    PRESS RETURN




Type: yes    PRESS RETURN




A lot of code will scroll by as the flashing process continues. Eventually it will end with a prompt symbol.




If you haven't already quit Fugu, you should now. I noticed that even after closing it the following command didn't work for a couple minutes. So if it fails the first time, try it again later.

Type: ./bbupdater -v    PRESS RETURN

You should have the same output I have here.




You can close the Terminal and restart the iPhone.



Note: Your iPhone is now running 1.0.2 firmware with repaired 03.14.08_G modem firmware. Continue below to update your iPhone to 1.1.1 firmware and 04.01.13_G modem firmware. Your iPhone will be locked after continuing.

Step 7.

Launch iTunes and click "Install".




I've updated A LOT of iPhones in my time and this one took a very long time to update. So don't panic.




When the iPhone starts it'll be at the activate screen. iTunes will display the Welcome to Your New iPhone screen.




While I'm not going to go into depth on this, you could use the emergency keypad exploit (dial *#307# then 0 then make a contact with a home page URL of prefs:) to go into the settings screen to verify that you are on 1.1.1 with a modem version of 04.01.13_G. But you really don't need to.

I recommend now following my Step 1 tutorial to proceed with the jailbreaking and unlocking of the iPhone.