iPhone | How to Unlock a 1.1.1 or 1.1.2 Upgraded iPhone Using Windows !!!

December 31st, 2007

These are instructions are on how to unlock a 1.1.1 iPhone or an iPhone that has been upgraded to 1.1.2 firmware. These instructions do not work for a 1.1.2 iPhone new from the store.

If your firmware is 1.1.1 please use iTunes to update to latest firmware(1.1.2) before starting this tutorial! You need to do this otherwise the unlocker used in this tutorial won’t work.

DOWNGRADE TO 1.1.1

For this you will need iBrickr 0.91, iTunes 7.5, and iPhone Firmware 1.1.1

- Update iTunes to get the latest version.
- Download iBrickr 0.91 from here: http://ibrickr.com/downloads/ibrickr_v0.91.zip

- Download iPhone Firmware 1.1.1 from: here : http://appldnld.apple.com.edgesuite….a_Restore.ipsw

Step One
Connect your iPhone to your PC and launch iTunes

Step Two
Press and hold Home and Power button of your iPhone at the same time. Once the screen turns black, release the power button but keep on holding the Home button until Apple logo changes to the restore screen. Note: The screen may also just stay black. This is normal. Just hold the home button till iTunes detects the iPhone.

Step Three
iTunes will then detect an iPhone in restore mode.

Hold down the Shift key and click Restore.

A dialog window will appear asking you to select the firmware to restore to. Select the 1.1.1 firmware we downloaded earlier (iPhone1,1_1.1.1_3A109a_Restore.ipsw)

At the end of the restore you will get Error 1015. This is okay. Simply click the Ok button.

Another popup will appear telling you your iPhone is in recovery mode. Click the Ok button.

Step Four
Exit iTunes by selecting Exit from the File menu. Press Control+Alt+Delete on the keyboard. Select to Start Task Manager.

Click to select the Processes tab from the Windows Task Manager window.

Select iTunesHelper.exe from the list of processes and then click the End Process button. A popup will appear asking you to confirm the end process. Click the End Process button from the popup.

You can now close Windows Task Manager by click the X at the top right of the window.

Step Five
You will notice your iPhone is still in recovery mode. To exit recovery mode launch iBrickr.exe which you downloaded earlier.

Click the Boot the phone link.

iBrickr will say Please wait while iBrickr tries to fix your phone.

The iPhone will reboot and display the Activate screen again!

You can now close iBrickr.

JAILBREAK 1.1.1

Step One
At the “Activate iPhone” screen move the slider to the right for emergency calling.

Step Two
Dial “*#307#” then press the Call button.

Step Three
You will hear the phone call itself. Use the back arrow to clear the number you just enter. Now dial “0″ then press the Call button.

Step Four
Now you will be able to see the incoming call. Press the Accept button.

Step Five
Now press the Hold button to put the call on hold.

Step Six
The phone will call itself again. This time press the Decline button.

Step Seven
We now are shown the keypad again. Click the contacts tab at the bottom. We are now presented with an empty contacts menu. Click the plus(+) button to add a new contact.

Step Eight
Press Add New URL.

Step Nine
Input prefs: as the url then press the Save button.

Step Ten
Press Add New URL again.

Step Eleven
Input http://jailbreakme.com as the url then press the Save button.

Step Twelve
Now in the contact view you will see the 2 urls. Press the prefs: url.

Step Thirteen
This will bring up the iPhone’s Settings Menu. Select your wireless network from the Wi-Fi category. Press the Settings button at the top left to go back to the Settings Menu.

Step Fourteen
Select the General category from the Settings Menu. Then select the Auto-Lock subcategory.

Press to select Never from the list of Auto-Lock times.

Press the Settings button at the top left to return to the settings window.

Step Fifteen
Press the Home button. At the “Activate iPhone” screen move the slider to the right for emergency calling.

Step Sixteen
Now dial “0″ then press the Call button.

Step Seventeen
Now you will be able to see the incoming call. Press the Accept button.

Step Eighteen
Now press the Hold button to put the call on hold.

Step Nineteen
The phone will call itself again. This time press the Decline button.

Step Twenty
We now are presented with our contacts menu. Press to select the contact we added.

Step Twenty One
Press the http://jailbreakme.com url. This will open Safari and take you to jailbreakme.com

Step Twenty Two
Scroll down to the bottom of the page and press Install AppSnapp.

Phone will return to activation screen, but don’t panic, just wait. iPhone should automaticly restart after almost a minute. When the phone starts again, it should no longer say Slide to emergency, but rather Slide to Unlock. This means it was successfull!

UNLOCK 1.1.1
To Unlock the iPhone you will need WinSCP, and anySIM 1.2u

- Download WinSCP from: here : http://winscp.net/download/winscp405setup.exe
- Download anySIM 1.2u from: here : http://iphone-elite.googlecode.com/f…ySIM1.2.1u.zip

Step One
To unlock 1.1.1 we will need to have SSH installed. From your springboard press to run the Installer application.

Press to select the Install tab at the bottom.

Press to open the System category.

From the System Category press to select BSD Subsystem. Then press the Install button at the top right of the screen.

When prompted select Install again to begin the installation.

Once the install has finished you will be placed back at the Category list.

Press to select the System category.

Press to select OpenSSH from the list of packages.

Press the Install at the top right of the screen. When prompted press Install again to begin the installation.

Step Two
Extract anySIM1.2.1u.zip that you downloaded earlier. A folder will be extracted called anySIM1.2. Rename this folder to anySIM.app. Note***: Capitilization matters!

Step Three
Install and launch WinSCP that you downloaded earlier.

Enter your Host Name as the iPhone’s IP Address. To find the iPhone’s IP Address select Settings from the springboard, then select Wi-fi from the Settings list. A list of networks will appear. Press the blue circle with the right arrow next to your network name. You will then be shown your IP Address.

Set the User name to root and the Password to alpine. Click the Login button.

A dialog box will appear asking you to save the RSA key. Click the Yes button.

Step Four
On the left side of the window you will see your local file system. On the right side of the window is the iPhone’s file system.

On the left side navigate to where you stored anySIM.app.

On the right side navigate to the root directory on the iPhone. Do this by click the .. folder a few times until you see Applications.

Drag anySIM.app from the left side ontop of the Applications folder on the right. Press the Copy button from the popup window that appears.

Step Five
Double click the Applications folder. Double click anySIM.zpp. Right click anySIM and select Properties.

From the properties window select all the permission checkboxes next to X. Then click the Ok button.

Step Six
Turn off your iPhone by holding down the Sleep/Wake button for 3 seconds. Then move the on screen slider to the right to power off the iPhone.

Step Seven
Turn the phone back on by pressing the Sleep/Wake button.

Step Eight
Notice you will now have an anySIM icon on your springboard!

Press the anySIM icon to begin the unlock.

Make sure your authorized SIM is in the phone and press the Ok button.

Slide to slider to right to begin unlocking

Scroll down and press Unlock my phone

Once its done click the Ok button. and you will be returned to your springboard.

UPGRADE TO 1.1.2
- Download the Jailbreak 1.1.2 package from: here http://conceitedsoftware.com/iphone/1.1.2-jailbreak.zip

- Download the new ipetools from: here http://iphone-elite.googlecode.com/files/ipetools.zip

Step One
Launch Installer from your springboard.

Select Install from the tabs at the bottom.

Scroll down and select Tweaks (1.1.1) from the list of categories.

Press to select OktoPrep from the list of Packages.

Press the Install button at the top right and corner of the screen.

Press Install again to begin the installation.

When OkPrep finishes you will be notified that it is now okay to upgrade to 1.1.2. Press Ok.

Step Two
Reboot your phone by holding down the Sleep/Wake button for three seconds. Move the power slider to right to power down. Then press the Sleep/Wake button again to power back on.

Launch iTunes.

Name your iPhone if it asks then click the Done button.

Step Three
If you get a dialog window asking you to update to then click the Install button.

Otherwise click the Update button to update to 1.1.2

Once complete a dialog box will appear letting you know you have updated successfully.

When it finishes updating, the iPhone will have been restarted. The new emergency slider and connect to iTunes image will be on the iPhone.

Step Four
Close iTunes then extract the 1.1.2-jailbreak.jar we downloaded earlier. A folder will be extracted called 1.1.2-jailbreak.

Double click windows.bat from within this folder to start the jailbreak.

Step Five
A popup will appear asking you to enter the desired password and whether or not to enable SSH. Make sure you check to enable SSH and then press Jailbreak!

Whens it done a popup will appear letting you know the jailbreak has been successful! During this process the phone may be rebooted a few times.

Step Six
From your springboard press to run the Installer application.

Press to select the Install tab at the bottom.

Press to open the System category.

From the System Category press to select BSD Subsystem.

Then press the Install button at the top right of the screen. When prompted select Install again to begin the installation.

Once the install has finished you will be placed back at the Category list.

Step Seven
Extract ipetools.zip that we downloaded earlier. You will extract a folder called ipetools. Inside this folder is “ipe-lockdownd-tools.tgz”. We need to copy this to the iPhone.

Go back to WinSCP. Log back into your iPhone using the same procedure as before.

On the left navigate to the folder that contains “ipe-lockdownd-tools.tgz” and on the right navigate to your root directory. Copy “ipe-lockdownd-tools.tgz” to your root directory.

Step Eight
Select Open Terminal from the Commands menu.

You may be asked to Confirm. Click Ok.

Step Nine
Enter the following commands then press the Execute button after each line:

cd /
cp /usr/libexec/lockdownd /usr/libexec/lockdownd.bak
tar -xvzf ipe-lockdownd-tools.tgz
cd ipetools
./ipatcher -a

Step Ten
Reboot your phone by holding down the Sleep/Wake button for three seconds. Move the power slider to right to power down. Then press the Sleep/Wake button again to power back on.

Step Eleven
Go back to WinSCP. Log back into your iPhone using the same procedure as before.

Step Twelve
Select Open Terminal from the Commands menu.

You may be asked to Confirm. Click Ok.

Step Thirteen
Enter the following commands then press the Execute button after each line:

killall -9 lockdownd
cd /ipetools
./bricktool

Step Fourteen
Reboot your phone by holding down the Sleep/Wake button for three seconds. Move the power slider to right to power down. Then press the Sleep/Wake button again to power back on.

You can now put in any SIM. You have an unlocked iPhone!!!

more info on ipmart-forum

http://www.ipmart-forum.com/showthread.php?t=205259&highlight=iphone