How to activate, jailbreak and unlock 1.1.4 firmware with iPlus (3.9 / 4.6 bootloader)

Aviegas has created a great program for Windows users who want to activate, jailbreak, and unlock the iPhone. This is supposed to work in any scenario and for 3.9 and 4.6 bootloaders. You must restore to 1.1.4 first however. If you do have the 4.6 bootloader then it will be downgraded to the new 3.9 fake blank bootloader (which allows for restoration to 4.6). This program will also install a custom payload of critical programs like: Installer, Community Sources, BSD Subsystem, OpenSSH and Terminal, along with some critical fixes as well. It should only take you a few minutes to get through this process. You can read the thread Aviegas started here to discuss this program.

Thanks go out to: GeoHot, cRACKn, MuscleNerd, BaalBeck, aCujo, George Zhu, Tim Schuerewegen, many others, and the iPhone Dev Team.

I have added a troubleshooting section at the bottom of this tutorial as there are a few problems out there. Fortunately they all have simple solutions.


You should read my Warning to all iPhone owners page before proceeding.

If you’d like to see a very boring video of this process (it didn’t even take me 5 minutes to complete it), then check out this video I shot. The iPhone used here has a 3.9 bootloader.

Step 1.

Connect the iPhone to iTunes. Make any needed backups.

Put the iPhone into DFU mode. Do this by pressing and holding both the Sleep/Wake button and the Home button for 10 seconds. At this point the screen will turn black, and the iPhone will appear to be off.

A pop up will appear. Click OK.

iTunes will now display this.

Download the firmware restore file for 1.1.4 here. Remember where you put this file and do not decompress it.

Press the Shift key and click Restore. A file browser window will open. Navigate to where the firmware file was downloaded, select it, and click Open.

Various messages will appear while the process continues.

When it has finished you should see this screen next in iTunes.

Eject the iPhone from iTunes and close iTunes. Next press CTRL and ALT and DEL. The Windows Task Manager will open. Look for iTunesHelper.exe. Highlight it and click End Process.

Click Yes.

Step 2.

Download iPlus version 1.2 here. Decompress the file and you will be left with a folder on your desktop. If you live outside the United States, you should also download the International support package, which will include some additional, necessary files. Just rename the file you download and decompress to, then place it into the iPlus1.1 program folder, overwriting the existing file. If you live in Brazil, then download this support package instead, and also rename it and overwrite the existing file.

Note: the international packages contain a program that is superior to iWorld. You will now have full caller ID support. To check the supported countries visit this site.

Note: you do have the ability to use custom payloads with iPlus. What you would do is swap out the file that is in the iPlus folder with your own, and it will automatically load up the phone with the programs contained within it.

If you are feeling adventurous then grab this file here and try it out. It will install the following: Cydia and Telesphoreo (instead of BSD Subsystem), Installer, Community Sources, Fake BSD Subsystem (to allow Installer packages that require BSD to install), OpenSSH, SummerBoard themes directory fix, and Term-vt100.

Click the Start button and select Run…

Type cmd and click OK.

In the window that appears type:

cd desktop/iPlus1.2
iplus -u

The iPhone will display this graphic. Then code will scroll by rapidly. This particular iPhone I used had a 4.6 bootloader.

You will also see this output in the DOS window.

Some more text will go by. Notice the two statements that say “crapped”. This means you will need to restore the iPhone again to 1.1.4 firmware and rerun iPlus again. Some have been able to just run the command iplus -u a second time.

The iPhone will reboot and return to the emergency slide to unlock screen. Then within a minute or so you will get the repair needed message. I also saw an error message in the Terminal “Could not read data from URL…”

If this happens, first try running the command iplus -u again, if that doesn’t work then restore to 1.1.4 firmware again (Step 1) and rerun iPlus 1.2 (Step 2).

When you run iPlus again, you should see a screen like this. You will know the unlock process works when you see a long list of “wrote” statements with addresses next to them. You should not see “crapped” this time. The iPhone will then reboot.

The iPhone will next reboot and you will be at the slide to unlock screen. More text will appear in the DOS window. You should at this point have a cell phone signal.

You’ll be at the slide to unlock screen. The edit home screen message will appear. You should now have signal bars.

Wait about one minute, and the iPhone will reboot again. Now it is safe to use.

Swap out your SIMs and test (if needed).

Step 3.

If you go to your About screen, you’ll see you are on 1.1.4 firmware and its matching baseband.

I ran the program Baseband Info before and after this hack. The one on the left shows the 4.6 bootloader. The one on the right shows the 3.9 bootloader with the EEPROM version from the 4.6 bootloader. That’s the tell tale sign.

If you launch the Maps application and press the lower left icon, it will locate your approximate position.

Launch the Installer. It will start at the Featured page. If you press the Uninstall button at the bottom, you’ll see how many applications were installed by iPlus. These applications also have the common fixes installed (Terminal and BSD Subsystem).

If you should use the Terminal, enter alpine as the password.


No system audio?   Press Settings, General, Reset, Reset All Settings.

No Installer installed?   Download this file. Decompress the zip, then drill down into the folders to this file: libreadline.5.2.dylib   Copy this file onto your Mac and put it in this folder path /opt/local/lib   You could then simply repeat the entire process again, or you could also manually install the Installer by reading this page and performing steps 5 through 7.

Mail crashing?   Launch the Terminal on the iPhone and enter: chown -R mobile /var/mobile/Library/Mail