Hack the iPhone

How to repair the baseband on unlocked 1.0.2 firmware to upgrade to 1.1.1 firmware

(Windows XP / Vista)

What I used: iPhone with 1.0.2 firmware (hardware unlocked), iTunes 7.4.3.1




Hats off to the iPhone Elite Dev Team for coming up with this process that fixes the security zone that is damaged by unlocking the iPhone using anySIM 1.0x programs and its variants iUnlock, Unlock.app or the hardware unlock method.

This procedure will fix your baseband so that you can take a previously unocked 1.0.2 iPhone and safely update it to 1.1.1 firmware. No one else should use this guide.

This is the project page for the iPhone Elite Dev Team for this process.

Step 1.

Download the virginizer package here. I have compiled the two downloads the iPhone Elite Dev Team hosts on their site, just to eliminate any possible mistakes in finding all the needed files, or in properly merging them.

Step 2.

I am going to make a lot of assumptions here, so make sure you are following all of this.

You must have:

• an iPhone with 1.0.2 firmware which is currently working.
• a fully charged battery.
• 03.x series modem firmware (mine is 03.14.08_G).
• a patched lockdownd file already installed. If you don't and use a non-AT&T SIM your iPhone will leave you at the activate screen which you will need to bypass before continuing.
• BSD SubSystem and OpenSSH installed.
• Mobile Terminal or Term-vt100 installed (just in case you lose Wi-Fi).
• the ability to use WinSCP and PuTTY to transfer files and send commands via SSH to the iPhone.

Step 3.

Close iTunes if it is open. Press CTRL ALT DELETE to launch the Windows Task Manager. Click on the “Processess” tab. If you see iTunes.exe, iTunesHelper.exe or iPodServices.exe, then select them one at a time and click the “End Process” button and then click “Yes” at the pop up warning message.

Step 4.

If you are using any program (like Services) that gives you the ability to turn off your SSH server on your iPhone, then make sure your SSH server is turned on right now.

Also, make sure to press your Home button, then press "Settings", "General", "Auto-Lock" and "Never". It would be disastrous if the iPhone went into sleep mode during this process.

Step 5.

Download WinSCP here. Launch WinSCP. Copy the "virginizer_pack" folder (which you downloaded in Step 1), to the /usr/bin directory on the iPhone. Click "Copy" in the pop up.




Go into the virginzer_pack folder on the iPhone. Make sure the following files all have executable permissions (preferably 0755) set so they will run:

bbupdater, eliteloader.bin, iUnlock, norz, virginator.sh

If you don't know how to change the permissions, click the file you want to change, and click the "F9 Properties" button.




Enter 0755 into the field next to "Octal". Then click the "OK" button. Do this for every file.




Your folder should look like this when you are done.

Step 6.

Download PuTTY here. Launch PuTTY. This will allow you to enter commands to execute on the iPhone. I did this on my computer since I needed to take screen shots, but you could do this directly from your iPhone if you have a terminal application installed. Enter your iPhone's IP address in the "Host Name (or IP address) box and click "Open".




You will be prompted: "login as:" Type: root    PRESS RETURN

You will be prompted to enter root's password. Enter the password and PRESS RETURN.

Type: cd /usr/bin/virginizer_pack    PRESS RETURN

Type: ./virginator.sh    PRESS RETURN

You'll get a message and you'll have a choice to make. Type: 1    PRESS RETURN




At the next quesiton, type: 2    PRESS RETURN




Type: yes    PRESS RETURN   A lot of code will scroll by. It will finish quickly.




Note: at ths point a seczone.backup file has been created. If you go back to WinSCP, you can be extra paranoid if you want and back that file up right now. Close WinSCP at this point. It will interfere later on if it isn't.








At the next question, type: yes    PRESS RETURN




Type: yes    PRESS RETURN




A lot of code will scroll by as the flashing process continues. Eventually it will end with a prompt symbol.




If you haven't already quit WinSCP, you should now. I noticed that even after closing it the following command didn't work for a couple minutes. So if it fails the first time, try it again later.

At the prompt symbol, type: ./bbupdater -v    PRESS RETURN

You should have the same output I have here.




You can close PuTTY and restart the iPhone.



Note: Your iPhone is now running 1.0.2 firmware with repaired 03.14.08_G modem firmware. Continue below to update your iPhone to 1.1.1 firmware and 04.01.13_G modem firmware. Your iPhone will be locked after continuing.

Step 7.

Launch iTunes and click "Install" at this pop up.




I've updated A LOT of iPhones in my time and this one took a very long time to update. So don't panic.




When the iPhone starts it'll be at the activate screen. iTunes will display the Welcome to Your New iPhone screen.




While I'm not going to go into depth on this, you could use the emergency keypad exploit (dial *#307# then 0 then make a contact with a home page URL of prefs:) to go into the settings screen to verify that you are on 1.1.1 with a modem version of 04.01.13_G. But you really don't need to.

I recommend now following this tutorial Step 1 tutorial.