NefMoto

Hey guys,

Im new to all this and getting a crash course.

My problem is, i had a friend flash my 551al with a stage 2 tune. Have no idea who wrote it. When it finished the car wouldnt start. He gave up trying to fix it. When trying to rewrite it said it needed to finish to process.

So i started to do it myself. I was able to get into boot mode and write a different bin. I over looked and it was for an s4 no immo. I now have the stock tune for the 551al ready.

Now i cant write or read anything as it says the immo is unatherized. Cant get into boot mode. Also jumped the pins and the ecu will go into defualt but cant connect to it.

I also cant connect to vag com. Port is fine but says no interface. Was able to connect before the flash.

To my understanding the tune shouldnt effect the immo as its on the eprom. I should be able to just falsh the stock tune and be done?

Any help would be greatly appreciated.

As long as both files are for a apb and you wrote a non immo file to the car and it was a complete write it will work fine. Because the s4 had no immo if its written over a immo flash it will work just fine.  Sounds like you have a issue with programming not complete and the ecu is stuck in program mode. Other port flashing tools like mpps will bipass immo and force write the file. If you dont have mpps youll need to bootmode flash the car. Nefmoto is bata ajd does NOT support boot mode at this time. Galletto works for bootmode and a cheap ft232rl cable but you need to change the serial number in your cable 9r in the galletto exe file wih a hex editor. Regardless ypull need to use mprog to ether read the serial from the cable or youll need to flash the cable with the galletto serial number.
Im not trying to rub salt in but you guys (noobs) need to learn what your doing before flashing who knows what to someones car without having a clue what youre doing.

This leads to another topic dont cross flash unless you know how to recover. Changing software versions risks brick

I honestly think it's because Nef is now the main point of contact for flashing S4s and 1.8ts.  As such, people are just buying a $5 cable and flashing random files on the internet.

They have no idea how to log, what they've flashed or any concept of what's been changed.  They just want a free Stage 2 tune and not care about contributing.

It's not even that, but they don't read ANY of the documentation that exists and now it's just more and more "I can't connect" or "I've bricked my ECU".

yah mate this is like the 3rd post like dat in like 2 dayz

So i need galletto. I have a non chip and a chipped cable. No clue what they are. One is the cheap blue for vag com and the other chipped and black for nefmoto.

Change the serial in the exe with hex and should connect in boot mode to flash.

I was kinda forced to do this. I didnt flash it the first time and had no intentions on learning this. I even said make sure its the right file lol. Now im on my own to fix this issue.

At this point im just looking to get the stock tune back in it. Ill see what i can do to get galletto to work. Hopfuly one of the cables will work with it.

Thats what I thought. But before I flashed the s4 tune it was able to connect in boot mode. Then I wrote the bin in. After the flash it now says 0 bytes and can find the ID when trying to connect.

Another problem I found was the drivetrain errors. When trying to write the bin it says Immo unauthorized. It will then disconnect and says waiting for user to connect. After reconnecting it will then try to finish the flash but says "Too many consecutive unsolicited messages from ECU, disconnecting.".

I then hooked a scanner up to it to pull codes and says there is a communication problem with the trans and other components. Makes sense as I have a tip and the tune is not.

I was also wondering if this is ok. When connecting its in kwp2000. It will then switch to KWP1281 session and then switch back to kwp2000 after it has fully connected. It didn't do this before. It was always KWP1281.

Here is the log for trying to flash the stock tune.

Writing ECU flash memory.
ECU reports programming session preconditions have not been met.
Reasons preconditions failed:
-Immobilizer not authenticated
Continuing despite programming session preconditions not being met.
Negotiating communication timings.
Successfully changed to new communication timings.
Requesting security access.
ECU reports that security access is not supported.
Starting diagnostic session.
Too many consecutive unsolicited messages from ECU, disconnecting.
Disconnecting...
Disconnecting because no response was received for the Stop Communication message.
Disconnected
Waiting for user to reconnect to ECU before continuing...
Switching to KWP2000 session.
Validated FTDI device is in dumb mode.
Disconnected
Waiting for user to reconnect to ECU before continuing...
Connecting...
Starting slow init connection.
Connecting to address 0x01.
Slow init failed.
Disconnected
Waiting for user to reconnect to ECU before continuing...
Connecting...
Starting slow init connection.
Connecting to address 0x01.
Slow init failed.
Disconnected
Waiting for user to reconnect to ECU before continuing...
Connecting...
Starting slow init connection.
Connecting to address 0x01.
Slow init succeeded.
Switching to KWP1281 session.
KWP1281 connect info: 4B0907551F  2.7l V6/5VT     G   0001

Yes,I agree,but.........
And this should also be said.
Tuning engines is one thing and being a software engineer is another.Now,there are a few who can do both but not many.

That being said this is an open forum spouting the virtues of DIY. However it is quite obvious that many of the more experienced and practiced on here make there living from it,and you don't need to look far beneath the surface of this forum before you find at the very best,irritation and frustration with noobs. And very often a not so thinly veiled undercurrent of contempt.

Don't get me wrong I like it here,but weather by design or by coincidence the forum is absolutely horrible to navigate and learn from.There are no concise tutorial explanations for the most necessary subjects,anywhere obvious.They are there,but hiding in plain sight.And for the most part written in lots of different posts all over the place.
Should a noob want to know something they risk the usual bombardment of unhelpful,confidence crushing criticism that comes from the usual suspects,who I suspect are often the ones who don't really want to share any of there knowledge with anyone but do get something from being belligerent and obstructive at best.
I often read posts by people who just want answers and instead are met with contempt and hostility.
I find it very interesting that the noob section where..... "there are no dumb questions,just bad answers", is where most of the contempt is to be found.........How Ironic!
Perhaps that says more about the true personality of the contemptuous than that of the noobs.........

To a point I do understand it.It's a common but unfortunate by product of human nature.
It's far easier and more satisfying to a certain type of personality to be oppressive and belligerent than to be helpful and compassionate....Especially when they get money from it.......Such a terrible shame really.

But then I suppose those personality's can always justify it to themselves by saying "I put the work in".
And to them I would say......... "Well done,That must be why your so awesome then".

All the very best
O.T.  
 

Just so you guys know, I'm not a complete noob. I have had my fair share of projects and completely understand the concepts of how and why tune/maps work.

Some get the enjoyment with programing and making their own tunes. I am not one of them. I like to build and get it custom tuned. I'm just in a pickle as it cost hundreds to go get it tuned when at the end of the summer i'm going to be doing a custom build. Get a tune for a couple of months with a poppy stall. Kind of a waste of money.

In this case friend said he could flash a tune. So I let him as I wanted to have some fun as I wont be driving it for a year or more. Plus the only thing I dont want to brake is the heads and block. The stall stucks already so pretty sure my fun will be short.

What's really messed up is I was able to get a different bin in but the wrong one. If I clicked the right one I wouldn't be here lol.

This is what i'm working on. Maxed out the stock fuel map at 17psi.

I've literally spent 15 years trying to distill information into a few places, almost all of which go completely ignored by noobs.

If there is contempt, it is because there is a small (but increasing) minority of people who refuse to read any of it before posting.

Hello Nyet.....
I suspected that may catch your attention.
However it wasn't a directed comment and neither was the post in general.More of an observational overview,as I find it.
I am a beneficiary and proponent of your work,and indeed have defended it on this forum and others.

But I stand by my comments in the general sense.
I did start my post with the words "I agree" and I do. I also agree with you, that there is a minority who will always try to avoid any effort in learning.
And yes...I can see that would be frustrating.
However there is also a small minority who, shall we say. "Find it very comfortable being a big fish in a very small pond".

All the very best
O.T.

 
 

I'm fine with that if they are open about what they know. But if they do not, it is distasteful in the extreme. There is no point in calling people dumb if you can't be bothered to ever explain what you know.

Ok. So I have galletto and its in boot mode.

I got the stock file from here.

I get seed key ok
Start writing
Error writing

I tried starting the boot mode process over a few times.

What else should I try?

So I been working on this for hours trying to get a good tune in.

I get it in boot mode with galletto. Now galletto will not read the ecu. But it is 100% in boot mode.

This is how far I got. I get it in boot mode with galletto ready with the stock bin. I then hit continue and galletto will start writing. A prompt pops up asking to turn the key off for ten seconds. Now before this nothing loads as on the bottom of galletto. It always says 0% and 0 seconds. After hitting ok for turning the key of the prompt will load and asks to turn the key back on. I turn it ok and click ok. But it seems as nothing changed.

In the log after it says start writing. It says no file selected. But still loads the prompt to turn the key off. My guess is, its in boot mode, tries to load a bin but wont, and then shows the prompt to close the ecu to take it out of boot mode?

I been working on this for many hours and tried galletto around 50 times.

In vag com it wont read the engine. But does connect for the auto trans. Get Powertrain Data Bus: Missing Message for a code. The trans is in limp mode and seems it never comes out of it.

Any help would be appreciated. Just a shove in the right direction. Thanks

Make sure its 800bb and not 400bb

Im slowly figuring it out.

First, i was tired of being in the garage trying to figure this out.

So i made a bench harness. It finally works and was able to flash a stock 551al tune.

Now i want to make sure i have the right eeprom file. I have the eeprom tool but no command is working in boot mode. So im trying to figure whats missing.

Does anyone have the stock eeprom file for a 551al? I cant find it. And if I did write in the stock eeprom file, will the immo key match the car or do I need to do the immo defeat?

you dont wanna do that. the eeprom cant be written over unless on the bench so its still the right eeprom. if you write another eeprom to the ecu the car wont start because the skc wont match the cluster.

Good to know and thanks.

After the bench I realized galletto never linked up with the car right. It was in boot mode but just wouldn't read or write.

With the bench it works perfectly. Wasted over 10 hours trying to do it in the car.

So now I do have the stock bin for the 551al. Didnt check it (still learning) but it was from the forums stock files.

Thats all I wanted to do but since I still have it on the bench, Im wondering how hard would it be to delete the secondary water and air pumps, rear o2s, evap system and brake/headlight warning lights.

If its hard to do, ill use the stock 551al for now and practice on the 551t.

Now with the 551t someone already had their hands in it. Need to read that eeprom as they replaced it and then some.

sai, evap, cat, egt, ds o2 sensors are not too hard to remove. i think the water pump wont even throw a open circuit code when removed. The project configuration block is how you enable and disable emissions testing along with other things like misfire detection, vvt diagnostics etc. its a simple bit switch to enable or disable, normally 1= active 0=inactive. Example: catalyst diagnostics (CDKAT in most files) 1>0 no catalyst diagnostics. Just because the cat was coded out that doesnt mean that the down stream o2 sensor can be removed, matter of fact it still need to work as intended and any issues with the sensor would still throw codes. switching off diagnostics is one thing removing hardware is another. read the s4 wiki under tuning it will tell you exactly what you need to do to remove the hardware you dont wanna keep. also sense your car is a auto id swap to the s4 l box file. the s4 m box is the most publicly defined apb file and the l box is the auto equivalent to it so the m box map pack works with the l box flash / tune. also writing the m/l box file to any apb ecu will immo off it in flash. just write it on the bench first  ;)
   good luck

No you don't. That is utterly pointless.

Start from stock, don't waste time of other people's crap, especially if it is on a riser, encrypted, etc.

Does anyone have or know where the stock files are for the 551T? I looked and searched but cant find it.

Mainly looking for the eeprom file.

I read both files and cant flash anything back to it. It will flash its own tune back to itself and thats it. It wont even let me load its own eeprom file back to itself. I turned off IMMO in Hxd and didnt help.

I did a checksum and says its not the correct length but thats what I read from it. Right now im just looking to get it back to OEM specs.

Here are the files I read from it.

More info: 2001 A6 2.7t APB tip 4B0 907 551 T. 26SA7093 1159 0366

Here is a link to the file I needed.
http://nefariousmotorsports.com/forum/index.php?topic=2934.0 (http://nefariousmotorsports.com/forum/index.php?topic=2934.0)

It will start writing, gets to 6% and stops. Says writing error.

Did you remove the daughter board?

No. Everything is still on it. Not a plug and play type deal. Everything has been soldered in place.

I did just noticed another small chip under the riser. Couldn't tell you what it is. Would have to take it all off.

That your problem, that's an encryption chip.
Remove daughter board and all you can read and write all you want :)

So there is no way around it other then de-soldering the eeprom?

I haven't done it in years. Be easier if there was a work around.

I was able to remove the daughter board. Was just stuck and had to man handle it.

I just dont understand the point of having the encrypted chip. Im able to read and see the tune properly, just cant flash anything to it. How is that protecting their tune?

Here is the info and DTCs nefmoto read. Can read in standard but not programming.

Maybe. Lots of tunes have ASM changes and bogus maps.

I'm pretty sure if you compare it to a stock file, there is a little segment that is not a map that has been changed.
That's the encryption chip's write protection.
The content of the 29F chip is fine and without error, but if you read it
The data has to pass through the encryption chip and messes with the data.
And it does the same thing when trying to write to it, therefor the ECU rejects the data.

The tune was burned to the chip and then soldered to the daugtherboard.

Just get yourself a new daugtherboard without an encryption chip.

I posted the files earlier. If someone wants to look you can. Your differently going to know more then me.

Right now im at the point of knowing how to bench test, read and write. Use me7sum and me7check, still learning the commands. First time ever using commands. Learning HxD for changing the cable and turning off the IMMO. I have tuner pro and read through on how to use it but its allot to remember. I have so much more to learn.

The eeprom is soldered to the daughter board. The daughter board splits at the extensions that rises the board up leaving the pins exposed. If I did solder it, I was thinking about de-soldering the eeprom and soldering it to the exposed pins. Leaving me room for error. And if I did make an unrecoverable error, I could take the extensions off and start over to the board itself.

It took me a second to realize it says mtm. https://www.mtm-online.de/en/tuning/Audi

Another pic

You can't write through the encryption board. Honestly though, just solder in a new 800BB, and quit wasting your time.

Buy something like this:
https://www.evc.de/en/image_any.asp?title=EAD610&img=adapter/ead/ead610.jpg&urlback=/en/product/adapter_ead.asp%23EAD610

Desolder chip from mtm board and stick it in :)

It looks like the board has a separate port on the side for reading and writing to the chip,
That bypasses all the protection.

So another option would be to backtrace and make your own plug? :)

this x1000

So I stopped working with that 551T. I can get my hands on a different 551T or 551R.

If you guys could clear something up for me that would be great.

So I been reading over and over the s4wiki for tuner pro. I figured I would start with turning off the SAI, EVAP, O2s, ect... Before I touch fuel, boost, timing. So I can get use to the process and if I did something wrong the car wont get hurt.

First question is, what is the difference from a 6spd to a tip in turner pro?

I have the XDF provided and is for a 551M. I used the stock 551AL bin with good checksum. I deleted a few things like SAI, EVAP and O2s.

Flash it to the 551AL and it will start. But now the TIP trans is in limp mode. Same with the community tune.

What am I missing to compare the tip to the 6spd? The XDF?

Depends on the file. Some files are only for a certain trans. Some have multiple maps to support both, and the ECU can be told which one to use via coding (using VCDS).

So it would be the 551M XDF giving me problems. Doesn't have the tip files for the 551AL files to be displayed.

Where would I get a XDF 551AL file?

4B0, 4Z7, or 8D0?

Has literally nothing to do with the XDF btw.

4BO

What could it be then? I have the original 551AL and eeprom. I delete a few things following the s4wiki and throws my tip into limp mode. Says no communication. Says the exact same thing as if I flashed a tune for a 6spd.

The only thing that is not the 551AL is the 551M XDF from s4wiki. I flash the original bin back and everything is back to normal.

Why are you using the 8D0..551M xdf  with a 4B0 file?

Because I cant find a the right xdf.

You need to do some more reading. It's hard to guide someone when they don't have the basics covered.

You can use the 8D0-551L file with the 8D0-551M xdf

Will that have any conflict with the IMMO 4B090511AL.

This is my understanding of it.

The XDF reads the layout for the maps/tune bin file. The 8D0551M XDF is for a manual S4. Im putting a 4B090511AL tip A6 file in it.

Now this is where im kinda stuck. So the XDF file already has a pre-layout for the tune of an APB manual. Why that tune will start my APB A6. And their is no communication to the tip as their are no files for the tip. The XDF cant read the tip files as its not laid out for it.

I can either make a custom XDF for the 511AL, I dont want to do this at this point in time. Or find a 511AL XDF file. Or any APB tip XDF and defeat the IMMO?

Someone did say they made the files to convert to tip and put it in the definitions section. He did this for the community tune as it is for a manual.

I looked high and low, couldn't find it.

I also looked everywhere for my stock XDF and got nothing. Im thinking I can use any APB tip XDF and should work if I use the 511AL tune to it.

If my understanding of it is wrong, please clarify. I read and then read again, then followed the steps in s4wiki. Having another description worded differently might help the noobs get a better understanding of it.

Thanks

 

The 8D0..551L has no immo.


No, the 8D0..551M xdf is ONLY for the 8D0..551M file. Period. It just happens to be the 8D0.551L file is similar enough to the M for the xdf to work with it.. In general, you cannot do this.

It has nothing to do with tip/manual. Bins are paired with a single xdf. They rarely have the same map layout.

Thats what I first thought as s4wiki said "You'll need one specific to the ECU you are using."

How would I get one for my ECU?

I kinda already asked this but dude said to keep reading. Thinking there is a work around or something.

I searched every data base with stock files and only could find the stock bin.

You can flash 8D0..551L to your ECU

i think i said that like 2 pages ago.

So the 551M and 551L are just base XDFs for all 2.7t or just the apb. M being manual and L being auto.

I was confused with what it mean on finding an xdf.

Sorry if I was told the L would work already. Must of over looked it. I will load up the 551L later and give it a try.

Dont give up on me guys. I must be hard headed and need to be told more then once. But im slowly getting it.

http://nefariousmotorsports.com/forum/index.php?topic=11027.5;wap2

Read that post from me. :) There is not just a base XDF.

NO, they just happen to be able to share the same XDF.

Hey guys,

So im back at it. Been busy with work and kids.

I found a 8D0...551L XDF. Still cant find the original 551L XDF.

This one will work and is confirmed on minor adjustments to the stock bin.

With comparing my 551AL.bin to the communities stage 2 bin,  my blocks looks very crud. Its difficult to understand the blocks when they are not in order for values. With the communities tune it is in a acceding order.

This makes me think my XDF is not a perfect match to my bin file?

Right now im pushing 17psi. SAI, Secondary water pump, Kombis, Cats, Brake boost pump and EVAP have all been deleted.

Has 3" DP, Intake Spacers, 4" Intake (stock maf), Adjustable DV, Boost Controller, No N75 (plugged in), XS bi Pipes, All new rubber pipping.

This is what I have so far with the tune. I have not flashed it yet. I already did corrections on the check sums and is all good.

File for the modified 4B0907551AL.bin

File for the 8D0907551L.XDF im using.

Why are you still insisting on using the wrong XDF?

WTF is going on here? I'm getting ready to delete this whole thread.

What im I missing here.

Was told to use the 551M XDF but that is for a manual. Then told to use the 551L XDF with the 551AL.bin tip.

Either Im over seen something or you guys are not explaining it good enough.

If what im doing is not correct, then from rereading, I should be using the 551M.xdf with the 551L.bin???

"You can use the 8D0-551L file with the 8D0-551M xdf"

So I dont use my 551AL.bin at all.

I get the 8D0-551L.bin and use it with 8D0-551M.xdf then flash it to my 4B0-551AL box?

If this is not how its done, then I have no clue.

The mbox xdf will work for the lbox auto file. They are from the same year and have the same offsets for map locations. Thats what i said 4 pages ago. Whst i also said is if you have a immo issue flashing a lbox file to your ecu will bipass immo and the car will start amd run just fine. B chassis cars in usa did not have immo until b6 so cross flashing a apb file from a b chassis car will bipass immo. I feel like this is tje 4th or 5th time this was covered in this thread not to mention the 40 zillion other times its been covered. It gets really old spewing the same info over and over when its cover x50 times over. If you can not fix the car yourself pay someone who can.
Im done on this thread.

This is where im confused.

I did the Mbox xdf with my ALbox file. But was told this was wrong?

So then I thought of using the Mbox xdf with the 8D0-551L file. Maybe thats what you guys meant.

But your saying "The mbox xdf will work for the lbox auto file.".

Just to clear this up the final time.

Ill be using the 8D0-551M.xdf with the "lbox" 8D0-55L.bin and flash it to my 4B0-551AL box.

The IMMO problem was with the other ECU. But either way this will bypass it.

I do appreciate the help.

The 8D0 M xdf HAPPENS to work with the 8D0 L bin. This kind of compatibility is uncommon.

Generally an xdf will work with ONLY ONE version of binary (there are a few more exceptions, but they are rare)


This.

Im starting to understand.

So I just happen to be a lucky one and able to use the L-bin with the M-xdf. Where do you find the definition xdf for other models. Say I needed an xdf for the AL, how would you get it? I still yet to find one. I haven't read much on this yet. Maybe the AL is only hard to find because you can use the L.

I did flash the L to my AL box. Used the community blocks for the boost and fuel. Adjusted a few things for the 50/50 DVs.

Now im figuring out on deleting the rear o2s. I followed s4wiki. No cats, want rear o2 unplugged, disable heater ect...

Getting codes for heater on o2s. So I have to do some more reading. Checksums are all good.

But the A6 is running way way better then before. With the DVs and evap not there, it idled pretty bad. Now its perfect. I am getting a misfire on high boost but think it could be the plugs. Been a few months since the last change and are v power copper gaped at 030. They dont last to long.

Thanks again for all the help. Time was not wasted.

By and large, there is no "finding". You do the work and find the maps yourself, or convert to a binary that you do have an XDF for.

This is why noobs who demand xdfs (without understanding what is involved in generating one) annoy the people who have actually done that work.