Ursprungligen postat av iloveiphone @ dev-teams forum
Here is my official 3GS JB Unlock guide for DUMMIES (includes me):
First I wanted to thank Dev Team and ALL active participating members who throw their time out to answer people's questions! My phone would not be on OS4 without them! Thanks guys.
Ready? Here we go...
1. Once you meet the criteria above then you should be ready to JB and lock your iphone 3GS. If your not sure if you have the old bootrom, check the model of your phone (settings --> general --> about), generally MB = oldbootrom and MC = newbootrom. Also, check the 4th and 5th number of your serial #, if its less than 40 then its definitely the old bootrom. FYI: The first two serial #s are the factory numbers, the third is the year your phone was made in, the following 2 (which we are focusing on) is the week the phone was made in during that year. Lastly, make sure your phone has been previosuly jailbroken and NOT by spirit. If you already JB with spirit, downgrade to 3.1.x then jailbreak with blackrain (make sure you have SHSH on file and connect to sauriks host server--google for further instructions).
2. Met the criteria?
Alrighty, for windows users like myself who cannot use pwnage tool for any reason, google "crispytech 3gs os4 custom firmware" and click on the link that leads you to the crispytech website. After hours of researching, I found this website to be the most reliable. The website contains all the necessary custom ipsw for 3GS and 3G users. Regardless if you have a mac or not, you can use this website to prevent any stress or hassle with pwnage tool. For 3GS users, download the 3GS ipsw that is clearly listed for unlockers. DO NOT DOWNLOAD THE OFFICIAL CARRIER ipsw! Please read carefully.
3. Once you've obtained your custom ipsw for 3GS (or 3G), you'll need to put your phone into recovery mode. I noticed many people are getting "error 16xx" (which means theres a problem extracting the ipsw you have) because they are in DFU mode or they put their phone in recovery mode incorrectly. Many websites show instructions for recovery mode by pressing home and power button simultaneously (while phone is plugged) until itunes recognize it is in recovery, but this method didn't work for my phone nor my gfs or my friends and other members from this website! Instead, turn off your phone, open itunes, press and hold home button continuously as you plug in the usb to your phone, then you should see a usb and itunes logo on your phone and itunes should say your in recovery mode. Problem with method 1, as listed earlier, is that the phone doesnt show the usb and itunes logo but the itunes says the phone is in recovery and I noticed this was mainly the problem many people were experiencing as well as me when they got the error 16xx. There might be some miscommunication between the phone and itunes, regardless, method 2 has worked flawlessly for me. I just JB unlocked my 3GS, my gfs, my neighbors. Were all on T-mobile btw.
4. Once your phone says its in recovery mode, press the keyboard shift button + restore and select the custom ipsw that you downloaded from the website. You'll first see the pineapple logo (which means success!) and the process should take no more than 10 minutes.
5. Once its done, your phone will be restarted and you'll be sent to the home screen. Open cydia, select the ultrasnow repo (already added) and install ultrasnow if you need unlock.
I hope this helps! Good luck to all! Once again, thanks a bunch to the ones that are putting effort in helping others!
FYI: The custom ipsw that you downloaded from the crispytech was pwned by 4.0.0 (not 4.0.1 !).
If it works, please leave a comment and let me know! Just so I know that I am being a tad bit helpful for you guys...
-iLoveiPhone