NefMoto

Hi guys,

I have a 2004 A4 1.8T BEX manual

The cluster packed up , so i bought a second hand one knowing that  it will need reprogramming.I took the car to the Audi dealer near me about a hour later he called me and said they could not do it they cant get the nessessary codes,while telling me this he throws in that a new cluster is the best option,so i left and towed the car to a well known machanic here.

He reckoned that we could do a immo 3 defeat and then it would not matter what cluster is in the car it will start even without one.So he took the ECU out and desoldered the 95040 eeprom,he put it in his programmer read the file in hex code saved it as bin file.He called someone who emailed him the bin file which he then dumped on the eeprom ,soldered it back on and put the ecu back.The car would not start at all just swings the motor.I decided to do some of my own digging and saw that you only needed to change 4 values.and you could use winhex,i took the printed document to him and he changed the values in his hex editor.The car started but only for two seconds again,i then remembered that we did the change to the modified file from his friend and not from the original file.I downloaded Winhex and took it to him and installed it on his laptop and that is as far as we got.If anybody here can be of help it would be great,i just want to know do i just compute hash 16 bit then modify and save the file or what,or does the car change the values again when plugged in

Hi,

Firstly, get a vagcom-log to see what codes are thrown.

Secondly, i suspect there are some essential bytes not correctly setted.

Can you ask your mechanic to give you the read-out of your ecu's eepromchip?
Before he did anything to it ? And please post it up, right here, as a zip or rar-file.

I'll have a look to it.

PvL

Thanks Pvl

Here is my original EEprom file form the 95040

If you can help me i will owe you a case of beer

Regards

Hah, Deal ! :)

First get me the real dump ;)

The file you've posted contains no useable or processable info.

Please doubleclick the screenshot i've made for you, to have a look..  I was expecting something different ;)

Please ask your mechanic to give you the correct readed-out file,
and post it over here.

Thanks,

PvL

Ok

The mechanic is using a MEC programmer to read the chip he desolders the 95040 then he puts it in the programer and reads the data,and this is the data that he read.

Should the data from the 9540 look different?
Maybe he should use a different program to read the data from the chip then.
I know he is reading it as 16bit

Hello giantmidget,

I get the feeling your 'mechanic' isn't on-par with the stuff he is trying to do.

Let's recap : the 95040-dump you've sended, looks like a config-file of his programmer,
                   and has nothing to do with the real data which is normally stored in this
                   eeprom.

It's nice that he has 'a' MEC-programmer, but can you also tell me, if it supports the 95040 chip (http://datasheets.pl/S/ST/ST95020.pdf) ? a programmer-type or a check in the software
he received with the actual programmer would be a good thing to start with. Don't get me wrong, i'm ruling-out the possibility that the programmer did not read it correctly, and for
some kind or reason dumped a config-file of the programmer itselfe into the file it created on his pc...  Otherwise i cannot tell you why the content is totally wrong.

You also sayed, that he sended off this file to a guy, and they modified it, and sended back the modified file. Can you ask your mechanic to also give your that file, and please post that also over here ? As i'm very interested to see what the content of that file is.
In other words : they had to tell your mechanic, that he was doing something wrong with his programmer, or did something wrong while saveing the content to disk of your eprom.

Is your original 95040-chip OVERWRITTEN by your mechanic ? or did you used a new chip ?

All these questions are quite critical. I'll explain later. This to prevent further errors, and get you a proper file to write-back.

Don't worry, i'll get you the dump you need, but first i want some answers, as i'm getting the feeling a terrible mistake was made by your 'mechanic'.....   But that depends on the answer and the 'modified' dump he got from his email-friend.

I get the feeling he wrongly saved your original dump of the 95040, and therefore you are in some problems now. All chips which are then send to you, will fail, if specific procedures are not followed. Please post the dump that he writed back to your chip and soldered back, that ran for 4 seconds.

Thanks,

PvL.

Hi Pvl,

Thanks for the info:

Contained here are the bin files:

Sorry rest of files here:

These are tall the available files


Regards

Well....  at last some useable/processable stuff this time.

I think this should fix 2 things. You now have a proper original file back, and a
proper off-file.

Check the content of the archive i made. Also added a picture what my software says
about the modded first file..  But it will not report checksum-problems !!!!

Load my files up beside your 3 'original' files, and compare..  you'll see where things
go wrong ;)

Your mechanics-friend better get some extra tools for this kinda stuff..  The hint is in the pic ;)

And for the record..  always keep the original read-out saved. It might me of use, later-on ;)

If my off-file does not work, please also report over here, and we'll take another approach.

Have fun reprogramming and soldering ! Good luck.

Cheers,

PvL

Hi Pvl,

Dumped your immo file , fan on car came on instantly then every couple of seconds.
Car only swings does not fire up at all.
Vcds does not want to read the car at all.

Just a question if the immo is defeated ,then it would not be neccessary to reprogram cluster or would it , the cam bus t the cluster is giving problems.

Regards

Gmidget

VSDS

Hi,

Abouth the rest of the eeprom-content i cannot judge, because there are no tools which i am aware, that do the complete checksum-checking of the immo-eeprom. Therefore i think
this is a bit trickey with your current (perhaps wrongly) read-out dump.

Before commenceing starting, i would stress to firstly hook-up vcds, and see if communication is possible. Ifso, then you may try to start the engine. Ifnot, no reason to start, cause the ecu ain't working/responding.

I always check my ecu's on the workbench if they are able to communicate (before i stick them into any car). Untill now, no dead ones encountered here, so i guess my tools work correctly. I have the blue vagcom KKL-dongle to check them out with. And made myselfe a benchflash cable (also useable to do vagcom-communications with). This benchflashcable would be very handy for your mechanic or yourselfe to check-out your ecu before you put it back into your car..

Is your ecu in any other way 'modified' (chipped/not standard) ?

Next file i'm including is a virgin immo-off chip. Please write that to the chip, and VERIFY
with the programmer, the written content matches the buffered content on the pc.

Then solder it back, and if you can, do a bench-test on the ecu. It shall respond with vagcom 100%. Or your ecu is damaged. It's hard to diagnose like this, what is all happening over there, and putting the finger onto the wrong item. I hope you understand.

Vagcom cannot communicate with channel 1, your log says. Good one, you've posted this. It tells you, that the immo-chip is not correct, or that something is wrong with it.

Have a try with the added eeprom, and let me know.

Before you even think of starting the engine, hook up vcds, and see if you can communicate with the ecu and this dump programmed into the eeprom. I think the immobiliser will still kick-in, but now you can PAIR your ecu with the NEW clock again ;)

But really we want channel 01 responding again in vagcom (vcds)..  no matter what codes it throws..  it's a beginning.

PvL

b.t.w. the mechanic didn't solder the chip wrongly orientated back, did he ? then you'll
FRY the 95040, but the ecu, if shutted down quickly is still o.k. You only need a new
(programmed) chip.

Let me know how things evolve over there...

Cheers,

PvL

   
Hi,
 
No i watched him and the chip was soldered on correctly , we checked the data three times to make sure the data was programmed correctly.
 
I will try the virgin dump on Monday hopefully i will succeed.
 
i can not thank you enough for the info that you have provided me with thus far ,it has been a great help.
 
Just  a question does the cluster matter in the immo defeated mode? , i have the correct cluster a BoschRB4 900N ,but will a 900H also work under the defeated mode.

Regards

Did you fix this, the checksum is incorrect in the "fixed" file last posted, i do not know if i looked at the proper one which is assumed to be fixed.  If not post i will checksum whole file for you.

Hi,

The file named Bex rar,contains my files and the corrected ones from Pvl.

if i understand the hex edditing correctly, colum 2 needs to be added onto by one,and colum E needs to subtract by two ,thats all and the car should then be able to start,this car is giving me nightmares,when it comes to the software part i am still learning,but with the mechanical no problems,I hydrolic locked the car here during the heavy rains and i did the engine myself,just needed to set the throttle body again because it was missing,that being said i need to school myself properly times have moved on,in some opels you just remove the chip and youre done,just this car that is giving me headache,it should be simple remove 95040 read,change and dump.

Any help would be great Rarak

Sorry coum E minus one not two

row 2, FFFF-(sum of row except last two bytes)
row 3, FFFE-("                                             ")
etc....j

checksum is low high(if thats what its called couldnt figure the word i want to use)
ex:

row 2 checksum is 18 FE
your math should have given you FE18 just swap them around

Got it?

Mr. Midget...

Let's do a basic test. To ensure your ecu ain't faulty.

Take my virgin off file. Write it to the chip. Solder the chip back.

Nowthen, do NOT put the ecu in the car. leave it on the bench.

Get a nicely charged carbattery, that does 12+ volts.. MEASURE !!!

Get your vcds-cable/laptop.

Look to the attached scematic and hook it up like that.

VCDS should be able to make contact with the ecu on channel 1.

If not, your ecu is the fault. Look NO further.  ECU-problems.

I use this scematic over here, to benchflash them. Even is immo is ON !!!

Or do a quick diagnose if the ecu is o.k.  Never had a failing ecu.

Report back if this has worked, with the re-programmed virgin chip in it.

Thanks,

PvL

Hi,

Thank you Pvl for the diagram it will help a lot,and thanks for all the help you have given me so far,and to Rarak thank you.

Yesterday we managed to break off one of the eeprom's pins,guess it was just a matter of time because off all the soldering.n
Now i have to wait a couple of days for a new chip or chip's.

i was able to get some info yesterday with the supervagcom,like the new or  used cluster that was  now installed.I still think that the mechanic is not doing the checksums correctly,but with the new chip and Pvl's virgin dump maybe things will pan out better.

I might as well do  a tune on the Ecu as well,I will look into that and post what i can.

Rarak,the immo defeat you did for  the 9540 that i saw,are the checksums corrected there?i also think my original file is gone.Can my ecu perhaps be bricked?

Anyway thanks for all the help you guy's are the business.

Ouch! drop the virgin immo dump in and see what happens, or write your old one in, post just what you think is the original and ill check it for you.

The original immo file has dissapreared.F$#$

I am going to put in Pvl`s Virgin Immo dump file,hope it works , but i still need the thing defeated and my mechanic is starting to piss on my face.

Please if you Rarak or Pvl have a defeated file for the BEX that you have tested help a guy out.

Virgin will also do a temp-defeat. Don't attach clocks yet. First do the bench-test if
it responds with the virgin chip, to your vcds. No need to place it in the car yet, before
you've tested it on the bench. If it fails to communicate on the bench, there is more
work to do.

Was there already earlier soldering or flashing done to the car, as of engine-software ?
(the main flashrom)

Ifso, time to get your mechanic to unsolder the flashrom, if you do not have a flash-
interface like galleto or kwp2000+ or newer ones like MPPS or more expensive flashtools
to read-out on the bench to check if the checksum is correct, or that there is even content
in the flashrom....

Keep us posted of your findings,

Cheers,
PvL

Was this it?

skc is 61472 or 8432, i forget how you convert it

20F0h = 8432
F020h = 61472

if you can add the file, i can have a look for you what skc it has ;)

Mr Pvl,

Ho are you doing.

How do you get the skc code? , via hex editor.

Rarak thanks for the help

Still waiting for the chip , so when it comes should i dump the Bex immo defeat file in first and see what happens,or should i dump Pvl`s Virgin dump into the eeprom and then solder it on.I ordered 25 of them just in case,just wish i could program them without removing them,we did tru to solder wires to the ECU and a IC socket so we can make the programming easier but no luck.

I just want this freaking car to start,and i heard that you marry the key again the light will go off.

Still pissed off that my original file is missing in action.

You guys must have a great weekend.

Hi,

Please firstly tell me, when you programmed the new 95040 with the virgin immo off chip,
hooked vcds up on the bench (NOT IN THE CAR) if it is responding, and upload the vcds-log
over here from channel 1 (engine).

If that works, we'll continue with keys and stuff. I firstly want to see basic functionality.

Without it, all other efford/time spended is useless.

Awaiting your vcds-log. As described earlier, hook it up like that (use the scematic) and you can properly check your ecu. If the ecu is not working, it has to sense to put it back into
the car and overwatch things to fail again, and return over here telling other stuff that isn't essential for the problems you are not encountering.

Cheers,

PvL

Hi guys,

The 95040 chips arrived only this morning,yesterday was public holiday,the mechanic just dumped one of the immo off files to check,and there is communication on channel one so is Ecu is fine.

Tomorrow I will go to his place and have him program a brand new chip with the virgin dump Pvl supplied and I will see what's going on there,I will post the Vcds results or let's hope I get it started,I also ordered a kess tuning kit from China should be here by Friday,then I can post a original bex files if anybody should need it,I also have a friend with a tuned file that I will extract and put up here,his car pulls really strong.First things first have to get my baby to start.At least I have 100 95040 eeprom chips now.

Regards

Gmidget

Ok

Now my cluster is displaying a def code as well as the safe one how lovely.
I have attached the Vcds file as well as the Immo Defeated file i used ,am i on the right track? or am i going to get blindsided and run over by a buss.

The alarm is till going haywire so i disconnected the horn.

I obtained the import code its 996 and the Workshop 1076.

Even with the Virgin dump login  proves very difficult..
Is my defeated file correct if anyone can be so kind to check.

checksum is incorrect, attached is fixed.

Thank you very much will dump it in tomorrow morning and then hopefully she will start

Hi,

None of the immo off files worked for me.

I did however manage to obtain my original file and defeated it and car starts , the file on this thread is for a Audi A6 2002 not a BEX A4 Audi , i have attached a Defeated immo 3 file on a new thread should anyone need one.

Now my car alarm is still going off , and the remote needs programming , i have taken the car away from the mechanic and with the help on this forum and its members i was able to do the defeat myself.

Car is however still showing safe on cluster , but she starts

Any idea how to make the instrument cluster happy?