教你如何 root / unroot 你的 Samsung Galaxy Note

*****************************************************************************
如果你的 Galaxy Note 已經升級新韌體 ZSLA2 或是 ICS 4.0
請使用新方法 root

12-2-10 Galaxy Note ZSLA2 韌體版本的 root 方式


*****************************************************************************

幾天前 Mowd 拿到了 Samsung Galaxy Note
經過幾天之後,為了安裝 Taitanuim Backup 以及消除快門聲音
Mowd 決定 root 我的 Galaxy Note
上網找了些方法之後決定使用 XDA 論壇上的「Easy Rooting Toolkit [v1.0](zergRush Exploit)」
XDA 論壇連結:http://forum.xda-developers.com/showthread.php?t=1329360


root 過程非常簡單,步驟如下:

1. 確定你裝了Samsung Kies
2. 進入「設定」->「應用程式」->「開發」,將 USB 偵錯打勾
3. 進入「設定」->「顯示」->「螢幕逾時」,設成 10 分鐘防止 Note 進入待命模式

根據你的需求下載以下檔案並解壓縮:
root 檔案:
unroot 檔案:
如果要 root 的話,只要點兩下 runme.bat
如果要 unroot 的話,則點擊 runme-UNROOT.bat

root 時可以看到以下輸出
結束之後,你的 Galaxy Note 就 root 完畢了

—————————————————————
Easy rooting toolkit (v1.0)
created by DooMLoRD
using exploit zergRush (Revolutionary Team)
Credits go to all those involved in making this possible!
—————————————————————
[*] This script will:
(1) root ur device using zergRush exploit
(2) install Busybox (1.18.4)
(3) install SU files (3.0.5)
[*] Before u begin:
(1) make sure u have installed adb drivers for ur device
(2) enable “USB DEBUGGING”
from (Menu\Settings\Applications\Development)
(3) enable “UNKNOWN SOURCES”
from (Menu\Settings\Applications)
(4) [OPTIONAL] increase screen timeout to 10 minutes
(5) connect USB cable to PHONE and then connect to PC
(6) skip “PC Companion Software” prompt on device
—————————————————————
CONFIRM ALL THE ABOVE THEN
請按任意鍵繼續 . . .
— STARTING —-
— WAITING FOR DEVICE
— cleaning
— pushing zergRush”
720 KB/s (23052 bytes in 0.031s)
— correcting permissions
— executing zergRush

[**] Zerg rush – Android 2.2/2.3 local root
[**] (C) 2011 Revolutionary. All rights reserved.

[**] Parts of code from Gingerbreak, (C) 2010-2011 The Android Exploid Crew.

[+] Found a GingerBread ! 0x0002e118
[+] Found a Samsung, running Samsung mode
[*] Scooting …
[*] Sleeping a bit (~40s)…
[*] Waking !
[*] Sending 149 zerglings …
[*] Sleeping a bit (~40s)…
[*] Waking !
[*] Sending 189 zerglings …
[+] Zerglings found a way to enter ! 0x18
[+] Overseer found a path ! 0x00030610
[*] Sleeping a bit (~40s)…
[*] Waking !
[*] Sending 189 zerglings …
[+] Overseer found a path ! 0x000306d8
[*] Sleeping a bit (~40s)…
[*] Waking !
[*] Sending 189 zerglings …
[+] Zerglings caused crash (good news): 0x40322cd4 0x0074
[*] Researching Metabolic Boost …
[+] Speedlings on the go ! 0xafd25b15 0xafd395df
[*] Sleeping a bit (~40s)…
[*] Waking !
[*] Sending 181 zerglings …

[+] Rush did it ! It's a GG, man !
[+] Killing ADB and restarting as root… enjoy!
— WAITING FOR DEVICE TO RECONNECT
if it gets stuck over here for a long time then try:
disconnect usb cable and reconnect it
toggle “USB DEBUGGING” (first disable it then enable it)
— DEVICE FOUND
— pushing busybox
1429 KB/s (1075144 bytes in 0.734s)
— correcting permissions
— remounting /system
— copying busybox to /system/xbin/
2099+1 records in
2099+1 records out
1075144 bytes transferred in 0.141 secs (7625134 bytes/sec)
— correcting ownership
— correcting permissions
— installing busybox
— pushing SU binary
694 KB/s (22228 bytes in 0.031s)
— correcting ownership
— correcting permissions
— correcting symlinks
— pushing Superuser app
2801 KB/s (762010 bytes in 0.265s)
— cleaning
— rebooting
ALL DONE!!!
請按任意鍵繼續 . . .

在〈教你如何 root / unroot 你的 Samsung Galaxy Note〉中有 41 則留言

    1. Mowd 文章作者

      目前你是第一位反映有病毒的人,請問Nod32將他判斷成什麼病毒?有一些防毒軟體看到.bat就開槍

      回覆
  1. kk

    1. 確定你裝了Samsung Kies
    ,請問在那裝,還有都弄好了,在WIN電腦直行,那手機要和電腦如何連線…謝謝

    回覆
    1. Mowd 文章作者

      因為刷機若一不小心很有可能會然手機開不了機,所以建議你可以請有經驗的朋友幫你操作

      回覆
  2. Winmax

    我按照了以上的setting同埋connect左部note去電腦度,之後再donble click個runme.bat,彈左個window出黎,有句野
    :deamon started successfully, 之後一直都沒有反應,而部note又未root,請問有何解決方法呢~?謝謝

    回覆
  3. Winmax

    確定已安裝Kies
    請問如何查看韌體版本及如果韌體版本不是KK1的話就不能root嗎? 謝謝

    回覆
    1. Mowd 文章作者

      韌體版本在設定 -> 關於手機那邊就可以看了
      這版的 root 只能用在 KK1 喔

      回覆
    1. Mowd 文章作者

      使用本篇方法不會計算刷機次數,因此如果unroot或是全部都刷回原廠的話應該還是有保固的

      回覆
  4. lam

    剛買galaxy note回來
    基頻版本N7000XXLA4
    核心版本剛由LA2刷回N-7000KK1-CL706440se.xxxxxxxx
    版本號碼 GINGERBREAD.ZSKK1
    請問係咪已經可以root機?????

    回覆
  5. lam

    另外想問
    由於之後要把LA2核心版本轉回ZSkk1
    所以上網找了教學
    教學係利用odin刷回核心版本kk1
    \N7000ZSKK1檔案有4個
    CODE_N7000ZSKK1_CL706440_REV02_user_low_ship.tar.md5
    GT-N7000-MULTI-CSC-OZSKK1.tar.md5
    MODEM_N7000XXKJ6_REV_05_CL1070146.tar.md5
    Q1_20110914_16GB.pit
    上網有一些人就說只要刷
    CODE_N7000ZSKK1_CL706440_REV02_user_low_ship.tar.md5或者MODEM_N7000XXKJ6_REV_05_CL1070146.tar.md5
    但有一些教學就要你4個檔案都放左odin刷一次
    而且odin 教學中….
    我看到有一些是這樣:把 「re-partition」勾起來 (Auto Reboot 與 F. Reset Time 預設
    有一些就連「re-partition」勾起來
    小弟想知道三者關係??

    回覆
  6. lam

    我本來的N7000基頻版本是LA4,核心版本是LA2
    經過刷回舊的核心後,只是核心版本變了KK1。
    基頻版本沒有改變,正常嗎?

    回覆
  7. Eason

    你好 我是使用NOTE 版本ZSLPF 可以幫我看一下我ROOT失敗原因 感恩

    —————————————————————
    Easy rooting toolkit (v4.0)
    created by DooMLoRD
    using exploit zergRush (Revolutionary Team)
    Credits go to all those involved in making this possible!
    —————————————————————
    [*] This script will:
    (1) root ur device using latest zergRush exploit (21 Nov)
    (2) install Busybox (1.18.4)
    (3) install SU files (binary: 3.0.3 and apk: 3.0.6)
    (4) some checks for free space, tmp directory
    (will remove Google Maps if required)
    [*] Before u begin:
    (1) make sure u have installed adb drivers for ur device
    (2) enable "USB DEBUGGING"
    from (Menu\Settings\Applications\Development)
    (3) enable "UNKNOWN SOURCES"
    from (Menu\Settings\Applications)
    (4) [OPTIONAL] increase screen timeout to 10 minutes
    (5) connect USB cable to PHONE and then connect to PC
    (6) skip "PC Companion Software" prompt on device
    —————————————————————
    CONFIRM ALL THE ABOVE THEN
    請按任意鍵繼續 . . .
    — STARTING —-
    — WAITING FOR DEVICE
    * daemon not running. starting it now *
    * daemon started successfully *
    — creating temporary directory
    mkdir failed for tmp, File exists
    — cleaning
    rm failed for *, No such file or directory
    — pushing zergRush
    1441 KB/s (23060 bytes in 0.015s)
    — correcting permissions
    — executing zergRush

    [**] Zerg rush – Android 2.2/2.3 local root
    [**] (C) 2011 Revolutionary. All rights reserved.

    [**] Parts of code from Gingerbreak, (C) 2010-2011 The Android Exploid Crew.

    [-] Not a 2.2/2.3 Android …
    — WAITING FOR DEVICE TO RECONNECT
    if it gets stuck over here for a long time then try:
    disconnect usb cable and reconnect it
    toggle "USB DEBUGGING" (first disable it then enable it)
    — DEVICE FOUND
    — pushing busybox
    2687 KB/s (1075144 bytes in 0.390s)
    — correcting permissions
    — remounting /system
    mount: permission denied (are you root?)
    — checking free space on /system
    0 KB/s (439 bytes in 1.000s)
    df: /mnt/.lfs: Function not implemented
    — Free space on /system : 19244 bytes
    — no cleanup required
    — copying busybox to /system/xbin/
    /system/xbin/busybox: cannot open for write: Read-only file system
    — correcting ownership
    Unable to chmod /system/xbin/busybox: No such file or directory
    — correcting permissions
    Unable to chmod /system/xbin/busybox: No such file or directory
    — installing busybox
    /system/bin/sh: /system/xbin/busybox: not found
    — pushing SU binary
    failed to copy 'files\su' to '/system/bin/su': Read-only file system
    — correcting ownership
    Unable to chmod /system/bin/su: No such file or directory
    — correcting permissions
    Unable to chmod /system/bin/su: No such file or directory
    — correcting symlinks
    rm failed for /system/xbin/su, No such file or directory
    link failed Read-only file system
    — pushing Superuser app
    failed to copy 'files\Superuser.apk' to '/system/app/./Superuser.apk': Read-only
    file system
    — cleaning
    — rebooting
    ALL DONE!!!
    請按任意鍵繼續 . . .

    回覆
  8. owo

    下載完後進行手動病毒掃描
    顯示有病毒耶?!
    *****************************************************
    // {防毒軟體}avast 免費版 7.0.1456
    // {[病毒碼}2012-07-23

    # {檔案名稱}DooMLoRD_v1_UNROOTING.zip
    沒有顯示病毒

    # {檔案名稱}DooMLoRD_v4_ROOT-zergRush-busybox-su.zip\files\zergRuch
    {嚴重度}低
    {狀態}PUP : ELF:Lootor-H [PUP]

    *********************************************************
    VirusTotal 線上病毒掃描網站:
    # {檔案名稱}DooMLoRD_v1_UNROOTING.zip
    https://www.virustotal.com/file/3610a469986f5c8ce20c4a723615fea5d286b20d4c0b01edb679e5b1c1626040/analysis/

    # {檔案名稱}DooMLoRD_v4_ROOT-zergRush-busybox-su.zip
    https://www.virustotal.com/file/6781252e1ce4784c0cebc39010cc2e03e9aa0925e71845e5d0644a2cc30abf99/analysis/

    回覆
    1. Mowd 文章作者

      取得root的方式基本上就是對Android Linux做破解系統的動作
      所以這是正常的

      回覆
  9. vik

    我的韌體版本是1.0的,可是怎麼沒辦法破解?

    按完任意鍵就沒動靜了@@?

    我是漏了什麼嗎?

    回覆

發佈回覆給「frank」的留言 取消回覆

發佈留言必須填寫的電子郵件地址不會公開。 必填欄位標示為 *