My own step-by-step installation process:-
Seczone Backup Process1 - Download the Virginizer Pack from this
link.2 - Extract and copy the entire directory into iPhone. This is done via WinSCP. Place it under /usr/bin directory.
3 - Load up puTTy. Login into your iPhone with the similar login/password as WinSCP.
4 - Change directory to the Virginizer Pack directory by typing "cd /usr/bin/virginizer_pack"
5 - Unload CommCenter, so that you can proceed with the seczone dump by typing "launchctl unload /System/Library/LaunchDaemons/com.apple.CommCenter.plist"
6 - Run the norz seczone dumper by typing " norz seczone.backup 0x3FA000 0x2000 ". You should see:-
CODE
# ./norz seczone.backup 0x3FA000 0x2000
geohot's nor dumper
all your norz are belong to us
super fast...just the way i like it
Dumping: A03E0000-A03EFFFF
Waiting for data...
Got Header: 77 0b cc
Increasing baud rate...
02 00 82 00 04 00 00 10 0E 00 A4 00 03 00
02 00 01 08 14 00 00 00 00 00 A4 00 03 00 09 00
00 00 33 2E 39 5F 4D 33 53 32 C3 0A 03 00
02 00 84 00 00 01 01 00 00 00 89 00 00 00 62 88
00 00 03 00 00 00 00 00 00 00 01 00 00 00 02 00
00 00 00 00 40 00 3F 00 00 00 00 00 01 00 08 00
00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 A6 03 03 00
02 00 85 00 02 00 FF FF 85 02 03 00
02 00 02 08 06 00 00 00 01 02 03 00 0E 08 03 00
Wrote: 0xa03e0000
Wrote: 0xa03e1000
Wrote: 0xa03e2000
Wrote: 0xa03e3000
Wrote: 0xa03e4000
Wrote: 0xa03e5000
Wrote: 0xa03e6000
Wrote: 0xa03e7000
Wrote: 0xa03e8000
Wrote: 0xa03e9000
Wrote: 0xa03ea000
Wrote: 0xa03eb000
Wrote: 0xa03ec000
Wrote: 0xa03ed000
Wrote: 0xa03ee000
Wrote: 0xa03ef000
Dumped
resetbaseband
This creates a file called seczone.backup in your /usr/bin/virginizer_pack directory.
7 - Close puTTy, and load up WinSCP , navigate to /usr/bin/virginizer_pack, and copy the seczone.backup to a folder of your choice.
Virginizing Process1 - Run puTTy , log into your iPhone , and change directory by typing "cd /usr/bin/virginizer_pack"
2 - Run iUnlock, together with the .fls file and elliteloader.bin by typing "iUnlock ICE03.14.08_G.fls eliteloader.bin"
You will see:-
CODE
iUnlock v42.PROPER -- Copyright 2007 The dev team
Credits: Daeken, Darkmen, guest184, gray, iZsh, pytey, roxfan, Sam, uns, Zappaz, Zf
* Leet Hax not for commercial uses
Punishment: Monkeys coming out of your ass Bruce Almighty style.
Sending Begin Secpack command
Sending Erase command
Waiting For Erase Completion...
Sending Write command
00%
05%
15%
25%
35%
45%
55%
65%
75%
80%
90%
Sending End Secpack command
Validating the write command
FW are equal!
Completed.
Enjoy!
3 - Update the baseband by typing this "bbupdater -v"
You will see:-
CODE
Resetting target...
pinging the baseband...
baseband unresponsive to pinging
Done
Your seczone is now repaired.
4 - REflash the 3.14.0 baseband firmware by typing this "bbupdater - f ICE03.14.08_G.fls -e ICE03.14.08_G.eep"
You will see this:-
CODE
Preparing to flash using /dev/tty.baseband at 750000 baud
Please reset target
Resetting target...
ProcessDetailUpdated: Boot-loader is active
ProcessDetailUpdated: EBL version: 3.9_M3S2 3..9
ProcessDetailUpdated: Boot mode is: CC
ProcessDetailUpdated: Baud rate set to 750000
ProcessDetailUpdated: Get flash id.
ProcessDetailUpdated: CFI stage 1
ProcessDetailUpdated: Flash ID is: 88620089
ProcessDetailUpdated: CFI stage 2
ProcessDetailUpdated: Boot process finished
ProcessOutlineUpdated: Reading SW version data
ProcessDetailUpdated: Receiving data.
ProgressUpdated: 100
ProcessDetailUpdated: Upload OK
ProcessOutlineUpdated: Process time was 133 msec.
Upgrade from to
Downloading EEP
ProcessOutlineUpdated: Start downloading from file ICE03.14.08_G.eep.
ProcessDetailUpdated: Sending sec-pack.
ProcessDetailUpdated: Load region 0
ProcessDetailUpdated: Sending end-pack.
ProcessDetailUpdated: Checksum OK.
ProcessDetailUpdated: Verify OK
ProcessOutlineUpdated: Process time was 1795 msec.
Downloading FLS
ProcessOutlineUpdated: Start downloading from file ICE03.14.08_G.fls.
ProcessDetailUpdated: Erasing the dynamic eeprom area
ProgressUpdated: 100
ProcessDetailUpdated: Sending sec-pack.
ProcessDetailUpdated: Load region 0
ProcessDetailUpdated: Sending data.
ProgressUpdated: 0
ProgressUpdated: 2
ProgressUpdated: 4
ProgressUpdated: 5
ProgressUpdated: 7
ProgressUpdated: 8
ProgressUpdated: 10
ProgressUpdated: 11
ProgressUpdated: 13
ProgressUpdated: 15
ProgressUpdated: 16
ProgressUpdated: 18
ProgressUpdated: 19
ProgressUpdated: 21
ProgressUpdated: 22
ProgressUpdated: 24
ProgressUpdated: 25
ProgressUpdated: 27
ProgressUpdated: 29
ProgressUpdated: 30
ProgressUpdated: 32
ProgressUpdated: 33
ProgressUpdated: 35
ProgressUpdated: 36
ProgressUpdated: 38
ProgressUpdated: 40
ProgressUpdated: 41
ProgressUpdated: 43
ProgressUpdated: 44
ProgressUpdated: 46
ProgressUpdated: 47
ProgressUpdated: 49
ProgressUpdated: 50
ProgressUpdated: 52
ProgressUpdated: 54
ProgressUpdated: 55
ProgressUpdated: 57
ProgressUpdated: 58
ProgressUpdated: 60
ProgressUpdated: 61
ProgressUpdated: 63
ProgressUpdated: 65
ProgressUpdated: 66
ProgressUpdated: 68
ProgressUpdated: 69
ProgressUpdated: 71
ProgressUpdated: 72
ProgressUpdated: 74
ProgressUpdated: 75
ProgressUpdated: 77
ProgressUpdated: 79
ProgressUpdated: 80
ProgressUpdated: 82
ProgressUpdated: 83
ProgressUpdated: 85
ProgressUpdated: 86
ProgressUpdated: 88
ProgressUpdated: 90
ProgressUpdated: 91
ProgressUpdated: 93
ProgressUpdated: 94
ProgressUpdated: 96
ProgressUpdated: 97
ProgressUpdated: 99
ProgressUpdated: 100
ProcessDetailUpdated: Load region 1
ProcessDetailUpdated: Sending data.
ProgressUpdated: 0
ProgressUpdated: 1
ProgressUpdated: 2
ProgressUpdated: 3
ProgressUpdated: 4
ProgressUpdated: 5
ProgressUpdated: 6
ProgressUpdated: 7
ProgressUpdated: 8
ProgressUpdated: 9
ProgressUpdated: 10
ProgressUpdated: 11
ProgressUpdated: 12
ProgressUpdated: 13
ProgressUpdated: 14
ProgressUpdated: 15
ProgressUpdated: 16
ProgressUpdated: 17
ProgressUpdated: 18
ProgressUpdated: 19
ProgressUpdated: 20
ProgressUpdated: 21
ProgressUpdated: 22
ProgressUpdated: 23
ProgressUpdated: 24
ProgressUpdated: 25
ProgressUpdated: 26
ProgressUpdated: 27
ProgressUpdated: 28
ProgressUpdated: 29
ProgressUpdated: 30
ProgressUpdated: 31
ProgressUpdated: 32
ProgressUpdated: 33
ProgressUpdated: 34
ProgressUpdated: 35
ProgressUpdated: 36
ProgressUpdated: 37
ProgressUpdated: 38
ProgressUpdated: 39
ProgressUpdated: 40
ProgressUpdated: 41
ProgressUpdated: 42
ProgressUpdated: 43
ProgressUpdated: 44
ProgressUpdated: 45
ProgressUpdated: 46
ProgressUpdated: 47
ProgressUpdated: 48
ProgressUpdated: 49
ProgressUpdated: 50
ProgressUpdated: 51
ProgressUpdated: 52
ProgressUpdated: 53
ProgressUpdated: 54
ProgressUpdated: 55
ProgressUpdated: 56
ProgressUpdated: 57
ProgressUpdated: 58
ProgressUpdated: 59
ProgressUpdated: 60
ProgressUpdated: 61
ProgressUpdated: 62
ProgressUpdated: 63
ProgressUpdated: 64
ProgressUpdated: 65
ProgressUpdated: 66
ProgressUpdated: 67
ProgressUpdated: 68
ProgressUpdated: 69
ProgressUpdated: 70
ProgressUpdated: 71
ProgressUpdated: 72
ProgressUpdated: 73
ProgressUpdated: 74
ProgressUpdated: 75
ProgressUpdated: 76
ProgressUpdated: 77
ProgressUpdated: 78
ProgressUpdated: 79
ProgressUpdated: 80
ProgressUpdated: 81
ProgressUpdated: 82
ProgressUpdated: 83
ProgressUpdated: 84
ProgressUpdated: 85
ProgressUpdated: 86
ProgressUpdated: 87
ProgressUpdated: 88
ProgressUpdated: 89
ProgressUpdated: 90
ProgressUpdated: 91
ProgressUpdated: 92
ProgressUpdated: 93
ProgressUpdated: 94
ProgressUpdated: 95
ProgressUpdated: 96
ProgressUpdated: 97
ProgressUpdated: 98
ProgressUpdated: 99
ProgressUpdated: 100
ProcessDetailUpdated: Sending end-pack.
ProcessDetailUpdated: Checksum OK.
ProcessDetailUpdated: Verify OK
ProcessOutlineUpdated: Process time was 1 min 52 sec.
Resetting target...
pinging the baseband...
issuing +cpwroff...
Done
To check if your baseband firmware is flashed properly, type "bbupdater -v"
You will see this:-
CODE
Resetting target...
pinging the baseband...
issuing +xgendata...
firmware: DEV_ICE_MODEM_03.14.08_G
eep version: EEP_VERSION:207
eep revision: EEP_REVISION:7
bootloader: BOOTLOADER_VERSION:3.9_M3S2
Done
Revirginizing process complete! 
What you need to do next is go back into iTunes and click that Update button, or Shift-Update if you already have the file on your desktop. Once iTunes has updated your iPhone, it will return you to the Activation screen again, but this time it's already 1.1.1.
You then follow the rest of the jailbreaking, and unlocking via this
thread.
But the first part of the process, i did it slightly different.
1. Slide to reach the emergency dial screen
2. enter *#307# and then press call
3. Your phone will ring itself,
make sure the dialed number on top of the screen is "O", then hit call again, press answer.
4. Press hold now and your phone will start ringing again
5. Press Dismiss and your phone will go into the contacts/dial screen
6. Press contacts from the bottom bar and add a contact
7. Add a contact with a random name and homepage as >> prefs://1F
8. Save it and click on the contact's homepage. this will take you straight into the setting menu of the iPhone, and you can take all the time to select a WIFI network!
Leave your phone like that now for a minute or two. Then shut down your iphone and restart.
8b. After the iPhone restarts it should have the Wifi icon showing at the top...if it does not do steps 1 - 8 again. If you do this right, your iPhone will remember your network and log into it automatically.
9. Once the wifi is working, do steps 1 - 5 again.
9a. For the next step add another contact give it another name and this time add the address as >>
http://jailbreak.toc2rta.com/10. Save the contact and then go to the 2nd url you just saved. Safari will load the page and then close automatically to the home screen (the screen that says activate iphone).
This is the TIFF exploit. You can now proceed to install TouchFree, jailbreak, and unlock your iPhone with the rest of the guide at that page.
After reinstalling, recustomising and syncing everything back, the end result:-

Good luck!
This post has been edited by stringfellow: Oct 24 2007, 03:51 PM