Pages: 1 ... 3 4 [5]
Author Topic: remove tprot from protected vag ecus?  (Read 61971 times)
bhp4ever
Newbie
*

Karma: +0/-0
Offline Offline

Posts: 1


« Reply #60 on: October 19, 2014, 02:31:35 PM »

PLEASE NOTE...THIS IS NOT MY WORK...

So here is fully disclosed version. It worked on 2.0TDI engine but sure if will work on others.

Tprot patch

To be able to flash files trough OBD in Tuning Protected ECU's such as EDC17 all yuo need to do is:

1 - Read full ecu in bootmode
2 - Open file in hex editor
3 - Find in Hex following string "3C2B" It usually appears very close to the beginning of the file not in the map area.
4 - Replace with "OOOO"
5 - Flash modified file back in bootmode
6 - You can now flash maps trough OBD. RSA signature check is bypassed.



Logged
TCSTigersClaw
Sr. Member
****

Karma: +15/-6
Offline Offline

Posts: 353



« Reply #61 on: October 19, 2014, 11:36:20 PM »

I would not recommend doing anything to MED/EDC 17 manually , they are very different from ME7.5 MED9 and I have seen a lot of trouble and changes with simple Factory Updates.

OTP areas CAN be re-written with tools like VAS and also recently I came upon a TPOT3 MED17 that wasnt able to be patched because of a recent Dealer Update (1.4 TSI) .

Anyway the bottom line is ,don`t bother to do anything without a tool ,these ECU`s are expensive :/
Logged

VAG cars newbie tuner Smiley
prj
Hero Member
*****

Karma: +1072/-480
Offline Offline

Posts: 6035


« Reply #62 on: February 20, 2015, 12:57:21 AM »

Volvo EDC17CP48 can be done by X17 now.
Logged

PM's will not be answered, so don't even try.
Log your car properly - WinOLS database - Tools/patches
k0mpresd
Hero Member
*****

Karma: +146/-54
Offline Offline

Posts: 1655


« Reply #63 on: February 20, 2015, 08:33:44 AM »

med17.5.2 vr/w/chk via obd now too.  Smiley
Logged
_mumin_
Jr. Member
**

Karma: +2/-0
Offline Offline

Posts: 46


« Reply #64 on: February 21, 2015, 10:08:37 AM »

med17.5.2 vr/w/chk via obd now too.  Smiley

Upon my request  Grin Cool
Logged
salex
Newbie
*

Karma: +0/-0
Offline Offline

Posts: 8


« Reply #65 on: February 21, 2015, 10:15:44 AM »

it was high time!
Logged
_mumin_
Jr. Member
**

Karma: +2/-0
Offline Offline

Posts: 46


« Reply #66 on: February 21, 2015, 10:29:41 AM »

it was high time!

Yes it was , but i had answer from MMS that no one requested this protocol before  Grin

BTW . MPPS also added Med17.5.2 by OBD but i haven't tested it successfully ... X17 works ok - tested Smiley
 
« Last Edit: February 23, 2015, 11:19:16 PM by _mumin_ » Logged
terminator
Sr. Member
****

Karma: +15/-4
Offline Offline

Posts: 425


« Reply #67 on: February 21, 2015, 03:38:03 PM »


BTW . MPPS also added Med17.5.2
 

via OBD???
Logged
tabster
Newbie
*

Karma: +1/-0
Offline Offline

Posts: 15



WWW
« Reply #68 on: February 22, 2015, 01:17:24 PM »

Yes it was , but i had answer from MMS that no one requested this protocol before  Grin

BTW . MPPS also added Med17.5.2 but be careful it crashed my ecu ... X17 works ok - tested Smiley
 

MPPS protocol only works if you have made "Unlock" by boot beforehand.
Logged
_mumin_
Jr. Member
**

Karma: +2/-0
Offline Offline

Posts: 46


« Reply #69 on: February 23, 2015, 11:22:08 PM »

MPPS protocol only works if you have made "Unlock" by boot beforehand.

Yes , i have removed TPROT first , but it hasn't worked for me ... i got reply from AMT that i should use golf med17.5.2 instead of scirocco that i used.
I have to test this.
Logged
tabster
Newbie
*

Karma: +1/-0
Offline Offline

Posts: 15



WWW
« Reply #70 on: February 28, 2015, 06:43:01 AM »

Under Scirocco is the general " ALL TFSI MED17" protocol.

Use the one listed as MED17.5.2 shown here:

Logged
nano
Newbie
*

Karma: +1/-1
Offline Offline

Posts: 19


« Reply #71 on: March 09, 2016, 05:21:12 AM »

PLEASE NOTE...THIS IS NOT MY WORK...

So here is fully disclosed version. It worked on 2.0TDI engine but sure if will work on others.

Tprot patch

To be able to flash files trough OBD in Tuning Protected ECU's such as EDC17 all yuo need to do is:

1 - Read full ecu in bootmode
2 - Open file in hex editor
3 - Find in Hex following string "3C2B" It usually appears very close to the beginning of the file not in the map area.
4 - Replace with "OOOO"
5 - Flash modified file back in bootmode
6 - You can now flash maps trough OBD. RSA signature check is bypassed.


do you mean that with tprot of RSA data is not checked by ecu? only need a checksum like old ecu?
Logged
Pages: 1 ... 3 4 [5]
  Print  
 
Jump to:  

Powered by SMF 1.1.21 | SMF © 2015, Simple Machines Page created in 0.039 seconds with 18 queries. (Pretty URLs adds 0s, 0q)