EDC17 Immo remove, work in progress

[svrecar]

Case Closed !

Here is tested solution for EDC 17 !

tested on...vw,audi,seat,skoda,citroen,ford,opel,renault, fiat and peugeot.


Immo is in MPC

search for this sequence in whole or just part of it:

F00FF480208B022022

Change it to:

F00FF4802000008212

done,

immo is off!

so you wont have to buy it elsewhere.


Press thanks!


Br,

[Nio]

Hi svrecar, maybe this post can help you!!!
http://www.digital-kaos.co.uk/forums/f178/edc17-any-immo-experts-here-315283/
Thanks for your help.

[svrecar]

Hi, Nio

I already read all the threads before opening new one.
Thanks for showing interest. :)

Br,

[jolidj]

nice post . the problem is to calculate the chk in eeprom. big problem :(

[H.Wessel]

hi

very interesting, coudl I have the pm to take a look inside?,

best regards
H.W

[tech_cz]

Could I also have the pass?

WBR, Marek

[Nio]

In case anybody interested in helping, this is how it looks:


<PARAMETER-NAME>OTP_Key</PARAMETER-NAME>
<PARAMETER-VALUE>0x00800020;0x80014000;0x3f01;0x88B51171;0x00800090 ;0x80010000;0x4001;0xDD921F64;</PARAMETER-VALUE>
</PARAMETER>
<PARAMETER>
<PARAMETER-NAME>OTP_OverView</PARAMETER-NAME>
<PARAMETER-VALUE>0x00800020;0x00800090;</PARAMETER-VALUE>
</PARAMETER>
</PARAMETERS>
</KWP2000-STYLE>
<CHECKSUMS>
<CHECKSUM>
<CHECKSUM-NAME>CB_cs</CHECKSUM-NAME>
<TARGET-START-ADR>0x80004000</TARGET-START-ADR>
<TARGET-END-ADR>0x8000fcfc</TARGET-END-ADR>
<CHECKSUM-ALG>CRC32</CHECKSUM-ALG>
<CHECKSUM-RESULT>0x2B7976CA</CHECKSUM-RESULT>
</CHECKSUM>
<CHECKSUM>
<CHECKSUM-NAME>CTPROT_cs</CHECKSUM-NAME>
<TARGET-START-ADR>0x80010000</TARGET-START-ADR>
<TARGET-END-ADR>0x80013ff8</TARGET-END-ADR>
<CHECKSUM-ALG>CRC32</CHECKSUM-ALG>
<CHECKSUM-RESULT>0x2B420407</CHECKSUM-RESULT>
</CHECKSUM>
<CHECKSUM>
<CHECKSUM-NAME>ASW0_cs</CHECKSUM-NAME>
<TARGET-START-ADR>0x80020000</TARGET-START-ADR>
<TARGET-END-ADR>0x8017fefc</TARGET-END-ADR>
<CHECKSUM-ALG>CRC32</CHECKSUM-ALG>
<CHECKSUM-RESULT>0x2B19FB7F</CHECKSUM-RESULT>
</CHECKSUM>
<CHECKSUM>
<CHECKSUM-NAME>DS0_cs</CHECKSUM-NAME>
<TARGET-START-ADR>0x801A0000</TARGET-START-ADR>
<TARGET-END-ADR>0x801ffefc</TARGET-END-ADR>
<CHECKSUM-ALG>CRC32</CHECKSUM-ALG>
<CHECKSUM-RESULT>0x2B3B9585</CHECKSUM-RESULT>
</CHECKSUM>
<CHECKSUM>
<CHECKSUM-NAME>VDS_cs</CHECKSUM-NAME>
<TARGET-START-ADR>0x80180000</TARGET-START-ADR>
<TARGET-END-ADR>0x8019fefc</TARGET-END-ADR>
<CHECKSUM-ALG>CRC32</CHECKSUM-ALG>
<CHECKSUM-RESULT>0x2BC33C68</CHECKSUM-RESULT>
</CHECKSUM>
<CHECKSUM>
<CHECKSUM-NAME>SB_cs</CHECKSUM-NAME>
<TARGET-START-ADR>0x80018000</TARGET-START-ADR>
<TARGET-END-ADR>0x8001fef8</TARGET-END-ADR>
<CHECKSUM-ALG>CRC32</CHECKSUM-ALG>
<CHECKSUM-RESULT>0x2B99B549</CHECKSUM-RESULT>
</CHECKSUM>
<CHECKSUM>
<CHECKSUM-NAME>TPROT_cs</CHECKSUM-NAME>
<TARGET-START-ADR>0x80014000</TARGET-START-ADR>
<TARGET-END-ADR>0x80017ef8</TARGET-END-ADR>
<CHECKSUM-ALG>CRC32</CHECKSUM-ALG>
<CHECKSUM-RESULT>0x2B1F24AE</CHECKSUM-RESULT>
</CHECKSUM>
<CHECKSUM>
<CHECKSUM-NAME>MWB26_cs</CHECKSUM-NAME>
<TARGET-START-ADR>0x00</TARGET-START-ADR>
<TARGET-END-ADR>0x00</TARGET-END-ADR>
<CHECKSUM-ALG>ADD8</CHECKSUM-ALG>
<CHECKSUM-RESULT>0xE326</CHECKSUM-RESULT>
</CHECKSUM>
</CHECKSUMS>


So now we have adresses for chks and otp in flash.

CHECKSUM-NAME TARGET-START-ADR TARGET-END-ADR CHECKSUM-ALG CHECKSUM-RESULT
CB_cs 0x80004000 0x8000fcfc CRC32 0x2B3305A3
CTPROT_cs 0x80010000 0x80013ff8 CRC32 0x2B4868DC
ASW0_cs 0x80020000 0x8017fff8 CRC32 0x2B379F9B
DS0_cs 0x801A0000 0x801ffff8 CRC32 0x2B117000
VDS_cs 0x80180000 0x8019fef8 CRC32 0x2B604782
SB_cs 0x80018000 0x8001fef8 CRC32 0x2B8DA03D
TPROT_cs 0x80014000 0x80017ef8 CRC32 0x2BBE930B
MWB26 0x0 0x0 0xFF1C



For instance:

Sia_CWWFS_C (1x1)

/-

-
0
- 0 129.00


Sia=Supervisor Immobiliser Authority
CW=description in german (Constant Werte)which is constant value
WFS=description in german (Weg Fahr Sperre)which is immobiliser (drive away lock)
C=constant


In attachement is all the files needed.
Any experts are highly appreciated to jump in. :)

Hence there are some files inside archive which shouldn't be public , please PM me for PW.

Br,

Can i have pass? i'll try...

[svrecar]

Nio,

Pls PM me again...i managed to delete some of the PM's :)

Br

[ecutuners]

EEPROM checksum for all edc17 we can do, contact if need

[svrecar]

Hi m8,

Pls chk your PM.

Br,

[cezarycezary8]

can you do the immo off on peugeot edc17c10?

[Lt Data]

svrecar (http://www.digital-kaos.co.uk/forums/members/114860-svrecar/), Please check your PM. :)

[Nio]

edc17 off solutions...

[RaraK]

Ill subscribe to this, i found out similar info in damos and other file i found from bosch.

maybe ill spend more time on it and figure something out to help maybe

[cezarycezary8]

Any news about this off edc17 ???

[IDispatch]

May I have password too?

[jolidj]

any solution aboute??

[bubu55]

If someone needs to vag immo off for EDC17 group I can do it

[snatchme]

Hello bubu55,

Can you please help me to get the immo off for this VAG EDC17C46?

Many thanks for the help.

Gr Snatchme

[tomtom0785]

@bubu - can you help me or give a hint how to do checksum calculation in EEPROM??

[atomiczen]

@bubu - can you help me or give a hint how to do checksum calculation in EEPROM??
i'm interested too...finded the right way to make eeprom checksum?

[912secured]

Think can emulator might be easier. Or just remove eeprom read calc and solder new in. Can make key so, immo off is harder than making key. For immo off post immo files then immo off for same and work with what he has otp and ctprot.

[fruti]

Here u go .. immo off

[hbalazs]

Hi

Can you please help me to get the immo off for this VAG EDC17C46?

Thx Balazs

[deltona1]

here pass in pm

[AUTOCRAFTS]

I need pass please

[GaizkaV8]

Pass to try? thanks

[kfprint]

Hi

Can you please help me to get the immo off for this VAG EDC17C46?

Thx Chris

235846

[k0mpresd]

Ill subscribe to this, i found out similar info in damos and other file i found from bosch.

maybe ill spend more time on it and figure something out to help maybe

well.............? slack. lol.

[svrecar]

Hi,

This work is done. can do Immo off in any med/edc 17, any make and model.
FYI, only flash is needed.
And firestator, pls dont spam this forum....you can do shit! I have sent you a file and was willing to pay you but, you were sending files to somebody else....and you sent 2 versions back, which didnt work,and no answer afterwards.

You can also clone, complete ecu, to another ecu, as long as it is the same bosch number as original one.

Br,

[bubu55]

I have created a software that I'm finishing, for automatic removal immo in all EDC17 ;)

All solution and sequences inside sw is tested ;)

I called it "IMMO destroyer", a little preview attached

[chli1976]

Is this soft also for VAG, PM me with more infos (price)

[svrecar]

Hahaha BUBU.....nice
How did you solve step sequence for finding location of immo in flash?

Br,

[svrecar]

and handling of different ecu versions ?

Br,

[macxlulu666]

very easy to immo off other group ,work bmw ,opel edc17 ,all PSA ,VAG etc ONLY BOSCH EDC17

for pcr2.1 is possible clone all tricore or unlock otp fuse

[bubu55]

Hahaha BUBU.....nice
How did you solve step sequence for finding location of immo in flash?

Br,

Yes ;)

Sw include:
-Vag EDC17/MED17
-Psa EDC17/MEDV17
-Fiat EDC17
-Ford EDC17 IMMO OFF
-Hyundai EDC17 IMMO OFF

More protocols will be available soon
Provided with dongle and lifetime upgrade for free

[Youneselm]

How much cost it?


Younes

[mancinofranco]

I'm interested how much?
Thank you.

[mancinofranco]

I'm interested how much? sw immo destroyer edc17
Thank you.

[ALVARES]

hi, I saw that was also released software ecuvonix, EDC17 immo unlock

[ampibali]

In case anybody interested in helping, this is how it looks:


<PARAMETER-NAME>OTP_Key</PARAMETER-NAME>
<PARAMETER-VALUE>0x00800020;0x80014000;0x3f01;0x88B51171;0x00800090 ;0x80010000;0x4001;0xDD921F64;</PARAMETER-VALUE>
</PARAMETER>
<PARAMETER>
<PARAMETER-NAME>OTP_OverView</PARAMETER-NAME>
<PARAMETER-VALUE>0x00800020;0x00800090;</PARAMETER-VALUE>
</PARAMETER>
</PARAMETERS>
</KWP2000-STYLE>
<CHECKSUMS>
<CHECKSUM>
<CHECKSUM-NAME>CB_cs</CHECKSUM-NAME>
<TARGET-START-ADR>0x80004000</TARGET-START-ADR>
<TARGET-END-ADR>0x8000fcfc</TARGET-END-ADR>
<CHECKSUM-ALG>CRC32</CHECKSUM-ALG>
<CHECKSUM-RESULT>0x2B7976CA</CHECKSUM-RESULT>
</CHECKSUM>
<CHECKSUM>
<CHECKSUM-NAME>CTPROT_cs</CHECKSUM-NAME>
<TARGET-START-ADR>0x80010000</TARGET-START-ADR>
<TARGET-END-ADR>0x80013ff8</TARGET-END-ADR>
<CHECKSUM-ALG>CRC32</CHECKSUM-ALG>
<CHECKSUM-RESULT>0x2B420407</CHECKSUM-RESULT>
</CHECKSUM>
<CHECKSUM>
<CHECKSUM-NAME>ASW0_cs</CHECKSUM-NAME>
<TARGET-START-ADR>0x80020000</TARGET-START-ADR>
<TARGET-END-ADR>0x8017fefc</TARGET-END-ADR>
<CHECKSUM-ALG>CRC32</CHECKSUM-ALG>
<CHECKSUM-RESULT>0x2B19FB7F</CHECKSUM-RESULT>
</CHECKSUM>
<CHECKSUM>
<CHECKSUM-NAME>DS0_cs</CHECKSUM-NAME>
<TARGET-START-ADR>0x801A0000</TARGET-START-ADR>
<TARGET-END-ADR>0x801ffefc</TARGET-END-ADR>
<CHECKSUM-ALG>CRC32</CHECKSUM-ALG>
<CHECKSUM-RESULT>0x2B3B9585</CHECKSUM-RESULT>
</CHECKSUM>
<CHECKSUM>
<CHECKSUM-NAME>VDS_cs</CHECKSUM-NAME>
<TARGET-START-ADR>0x80180000</TARGET-START-ADR>
<TARGET-END-ADR>0x8019fefc</TARGET-END-ADR>
<CHECKSUM-ALG>CRC32</CHECKSUM-ALG>
<CHECKSUM-RESULT>0x2BC33C68</CHECKSUM-RESULT>
</CHECKSUM>
<CHECKSUM>
<CHECKSUM-NAME>SB_cs</CHECKSUM-NAME>
<TARGET-START-ADR>0x80018000</TARGET-START-ADR>
<TARGET-END-ADR>0x8001fef8</TARGET-END-ADR>
<CHECKSUM-ALG>CRC32</CHECKSUM-ALG>
<CHECKSUM-RESULT>0x2B99B549</CHECKSUM-RESULT>
</CHECKSUM>
<CHECKSUM>
<CHECKSUM-NAME>TPROT_cs</CHECKSUM-NAME>
<TARGET-START-ADR>0x80014000</TARGET-START-ADR>
<TARGET-END-ADR>0x80017ef8</TARGET-END-ADR>
<CHECKSUM-ALG>CRC32</CHECKSUM-ALG>
<CHECKSUM-RESULT>0x2B1F24AE</CHECKSUM-RESULT>
</CHECKSUM>
<CHECKSUM>
<CHECKSUM-NAME>MWB26_cs</CHECKSUM-NAME>
<TARGET-START-ADR>0x00</TARGET-START-ADR>
<TARGET-END-ADR>0x00</TARGET-END-ADR>
<CHECKSUM-ALG>ADD8</CHECKSUM-ALG>
<CHECKSUM-RESULT>0xE326</CHECKSUM-RESULT>
</CHECKSUM>
</CHECKSUMS>


So now we have adresses for chks and otp in flash.

CHECKSUM-NAME TARGET-START-ADR TARGET-END-ADRCHECKSUM-ALGCHECKSUM-RESULT
CB_cs 0x80004000 0x8000fcfc CRC320x2B3305A3
CTPROT_cs 0x80010000 0x80013ff8 CRC320x2B4868DC
ASW0_cs 0x80020000 0x8017fff8 CRC320x2B379F9B
DS0_cs 0x801A0000 0x801ffff8 CRC320x2B117000
VDS_cs 0x80180000 0x8019fef8 CRC320x2B604782
SB_cs 0x80018000 0x8001fef8 CRC320x2B8DA03D
TPROT_cs 0x80014000 0x80017ef8 CRC320x2BBE930B
MWB26 0x0 0x0 0xFF1C



For instance:

Sia_CWWFS_C (1x1)

/-

-
0
-0129.00


Sia=Supervisor Immobiliser Authority
CW=description in german (Constant Werte)which is constant value
WFS=description in german (Weg Fahr Sperre)which is immobiliser (drive away lock)
C=constant


In attachement is all the files needed.
Any experts are highly appreciated to jump in. :)

Hence there are some files inside archive which shouldn't be public , please PM me for PW.

Br,

Hello svrecar.

Can you send me password this file.
Thank you.

Tapatalk-kal k?ldve az ?n GT-I9295-el

[soxten]

I try'd to buy from Ecuvonix but on this product they write "not available"?

Product:EDC17 Unlock IMMo

[ALVARES]

I wrote them. Software will ship by the end of the week.

[bubu55]

Good luck with ecuvonix solution :D

[yavirom]

I'm interested how much? sw immo destroyer edc17
Thank you.

[Am1n-0s]

i beleive in bubu55 solution

[ALVARES]

received today EDC17 software to unlock ecuvonix. now I have fae real test if it works,
I will let you know.

[Am1n-0s]

Let us know if works !

[ALVARES]

Tomorrow I have to do the test on fiat

[arvedo]

alvarez
immo off you can do with that software honda

[soxten]

Does the ECUvonix work?
I how now order that program.

BUT here is a company as can rewrite OTP area!
EDC17 Remapping, Immo Off etc (http://www.turnerdiagnostics.com/services/remapping-chip-tuning/edc17-remapping,-immo-off-etc.html)

"We can even rewrite the OTP (One Time Programming) sectors, allowing us to modify what was believed to be impossible by the manufacturers."

Do someone know more about this?

[ALVARES]

hi, today I tried immooff fiat freemont. Everything is ok. It works. Next week I have to try the Audi Q3

[soxten]

If you take a used ECU and do immo off on it and put in to a customers car, does customers car take the VIN from used ECU or where is the car vin stored?
Can be some problem if we change to a used ecu and then the customer go to VEG original service and they connect it up and having wrong VIN...

[maglaras]

before make chel sum corect fix the vin and all is ok

[soxten]

Maglaras: You write customers VIn to spare/used ECU and then do checksum?

[chriskross]

old VIN is still stored in ecu when doing immo OFF! :-(

[elektro128]

old VIN is still stored in ecu when doing immo OFF! :-(






not true.
You can change everything.

regards

[soxten]

Elektro128: THX!
If I change VIN and write it back by K-tag, do K-tak calc chksum?

[chriskross]

it is true when you JUST do immo OFF old vin is stored, when you change it yes that is a other story :-)

[elektro128]

i not have ktag - i think not calc checksum in eeprom area.

send me your file and data.

[ALVARES]

Q3 work 100%

[svrecar]

Here is tested solution for EDC 17 !

tested on...vw,audi,seat,skoda,citroen,ford,opel,renault, fiat and peugeot.


Immo is in MPC

search for this sequence in whole or just part of it:

F00FF480208B022022

Change it to:

F00FF4802000008212

done,

immo is off!

so you wont have to buy it elsewhere.


Press thanks!


Br,

[Am1n-0s]

how about toyota, mahindra, honda, mazda :)

no solution for this moment !

[Am1n-0s]

who have some solution for SID807,

This one i looked for it but really no one have a unlimited start of immo off on that brand.

[svrecar]

is this thread about siemens ??
does it say on which brands is tested ??

lol

[svrecar]

Honda and mazda is already done. 4 months ago! cloning and immo off. lol

[Am1n-0s]

Honda, you have tested or not ? what about toyota and mahindra?

[soxten]

Svrecar; is this correct to do immo off?

[soxten]

It look's like VIN is stored in many times in Eeprom.
Why?
1 VIN for every unit/funktion in the car?

[Am1n-0s]

vin have another location :)

[soxten]

So if you change to a used ecu and do immo off, where to change VIN for ecu?

[elektro128]

VIN change in eeprom.
need checksum calculation

[soxten]

How do checksum for Eeprom

[gttuning]

Here is tested solution for EDC 17 !

tested on...vw,audi,seat,skoda,citroen,ford,opel,renault, fiat and peugeot.


Immo is in MPC

search for this sequence in whole or just part of it:

F00FF480208B022022

Change it to:

F00FF4802000008212

done,

immo is off!

so you wont have to buy it elsewhere.


Press thanks!


Br,
i check edc17cp14
dont see :
F00FF480208B022022

Change it to:

F00FF4802000008212

[arvedo]

Help friends this is a honda nobody can help immo off
http://www.digital-kaos.co.uk/forums/f173/edc17c01-honda-accord-years-2008-immo-off-395134/

[elektro128]

arvedo (http://www.digital-kaos.co.uk/forums/members/278760-arvedo/)
I tried to help you.
I told you - send me a photo from fgtech software - maybe immo exist in OTP area.


you not sent photo :(

[elektro128]

soxten (http://www.digital-kaos.co.uk/forums/members/367769-soxten/)

I do not know :(
software exist to calc cs

algo - who explain?

[elektro128]

gttuning (http://www.digital-kaos.co.uk/forums/members/348469-gttuning/)

upload files from ecu

regards

[gttuning]

gttuning (http://www.digital-kaos.co.uk/forums/members/348469-gttuning/)

upload files from ecu

regards
check i cant see
thanks

[elektro128]

place ready

:)

[gttuning]

thanks i check this out!

[bearheroes]

8B022022 is repeated many times.Similar to F00FF480208B022022 only once...Which of all should be changed?

[yugo45]

soxten (http://www.digital-kaos.co.uk/forums/members/367769-soxten/)

I do not know :(
software exist to calc cs

algo - who explain?
Tango New update can do this.

[elektro128]

arvedo (http://www.digital-kaos.co.uk/forums/members/278760-arvedo/)

file to test

regards

[soxten]

Is immo of working by changing byte?

[Nio]

I check on edc17c09 psa group and i did not find F00FF480208B022022.. BR.

[chli1976]

I found only in bootmode read in VAG
Try to search 0F F4 80 20 8B 02 20 22

[soxten]

Ok, sounds to simple to work.
I get ECUVonix next week. And hope it works on VAG. :)

[ALVARES]

100$ works vag
I tried it on different vehicle. Great support from team ecuvonix. I had problems checksum file PSA. They arranged for me to file for free in a few hours.

[fsvsunix]

Here is tested solution for EDC 17 !

tested on...vw,audi,seat,skoda,citroen,ford,opel,renault, fiat and peugeot.


Immo is in MPC

search for this sequence in whole or just part of it:

F00FF480208B022022

Change it to:

F00FF4802000008212

done,

immo is off!

so you wont have to buy it elsewhere.


Press thanks!


Br,

Hello svrecar and thanks for pointing out this solution.

As i see in the code after a quick dissasemble there is a not equal operation that is nullified and the return operand that you are changing.

I assume that this is he part of the code that checks if the immo code i wrong.

But i have also found out that the search string that people has to search here is the 0FF480208B022022 without the F0 infront since F0 is part of the previous routine code.Actualy it is the part of a complete memory address that stores the a vlaue(probably immo code) for comparsion in the next lines..In some case there was en E0 or 11 before the actual hex string...

For example in one case there is 19 0f 74 11 "0F F4 80 20 8B 02 20 22"

The 19 0f 74 11 is part of the same function and the code is saving the memory contents of 74 11(0x1474) to the (x)15 register

So to sume up the actual byte of the code we are searching for is "0F F4 80 20 8B 02 20 22" .In some med17 ecu versions we will find it more then once but i assume it will always be the first code that does this comparsion.

Another thing that i was thinking is if the 00 00 00 00 is not the correct way to nullify the not equal (ne) function.Is the cpu accepting those zeros correctly or we are just saved by an exception handler?

I assume that the complete code of the hex string is this

ld32.w d15, [a0]0x1474 <---- memory address that changes some times from firmware to firmware
and32 d2, d4, d15
ne d2, d2, #0 <----nullified code
ret16

[svrecar]

@fsvsunix

you are correct. it is an exception handler.

Br,

[ALVARES]

here software EDC17 unlock by ecuvonix. It is not cracked. I have no idea how to make crack 243823

[arvedo]

Friends may correguir cks this eproms EDC17 honda

[yugo45]

OK,
8B022022 it been repeat many times ,my question is does it need to change 8B022022 everywhere in flash or NOT?
Let say if find 20 X 8B022022 do I need to change it in all 20 positions, or ONLY in position where is F00FF480208B022022?

In some ECU I do not find whole F00FF480208B022022 I find 0FF480208B022022 and most of them is 3 times repeat .
What about ECU that dose not have full F00FF480208B022022 , that has only 0FF480208B022022 ?
I assume 0FF480208B022022 needs to be change but which one at place 1 or 2 or 3?




This also has been ask in post # 82:

8B022022 is repeated many times.Similar to F00FF480208B022022 only once...Which of all should be changed?

Thanks in advance .

[chli1976]

I searched in VAG files and i can find in all bootmode files 3 times this 0FF480208B022022, change this adresses an try

[fsvsunix]

OK,
8B022022 it been repeat many times ,my question is does it need to change 8B022022 everywhere in flash or NOT?
Let say if find 20 X 8B022022 do I need to change it in all 20 positions, or ONLY in position where is F00FF480208B022022?

In some ECU I do not find whole F00FF480208B022022 I find 0FF480208B022022 and most of them is 3 times repeat .
What about ECU that dose not have full F00FF480208B022022 , that has only 0FF480208B022022 ?
I assume 0FF480208B022022 needs to be change but which one at place 1 or 2 or 3?




This also has been ask in post # 82:


Thanks in advance .

Read my post in the previous page.

The first string has the complete check routine of the actual (not 100% sure) immo code comparison but when you change sw number and different files only the first operand is changed in assembly. From the quick overview i did with ida i am sure that the code changes are just disabling a check between registers.And the logical point is that the first check is the one that needs to be changed.However i have not tried something untill today but as some guys here already did it would be good to give a feedback in detail to this effort...

[yugo45]

Read my post in the previous page.

The first string has the complete check routine of the actual (not 100% sure) immo code comparison but when you change sw number and different files only the first operand is changed in assembly. From the quick overview i did with ida i am sure that the code changes are just disabling a check between registers.And the logical point is that the first check is the one that needs to be changed.However i have not tried something untill today but as some guys here already did it would be good to give a feedback in detail to this effort...
I read your post ,and thank you for all informations, It was very helpful.
But what trigger my question is this 2 files.
2 different part numbers of ECU and 2 different Software versions, but both of the has same bytes in all 3 positions and both of them has :

-Position #1 = 19 0f 74 11 0F F4 80 20 8B 02 20 22

-Position #2 = DC 7D 8C F0 0F F4 80 20 8B 02 20 22

What we do in this situations, as you think it is position #1 but at first post was mention that should be position #2?

[esences]

try this .....

[mancinofranco]

IT MAY BE PASSWORD?
THANK YOU

[fsvsunix]

I read your post ,and thank you for all informations, It was very helpful.
But what trigger my question is this 2 files.
2 different part numbers of ECU and 2 different Software versions, but both of the has same bytes in all 3 positions and both of them has :

-Position #1 = 19 0f 74 11 0F F4 80 20 8B 02 20 22

-Position #2 = DC 7D 8C F0 0F F4 80 20 8B 02 20 22

What we do in this situations, as you think it is position #1 but at first post was mention that should be position #2?

Position 2 is never mentioned on previous posts or at least i have not noticed something.



The 19 0f 74 11 0F F4 80 20 8B 02 20 22 00 90

is the complete routine

19 0f 74 11 is the first operand. ld32.w d15, [a0]0x1474

0f f4 80 20 is the second and32 d2, d4, d15

8b 02 20 22 is the third ne d2, d2, #0

And there is a return which is not mentioned 00 90 ret16

according to the first post this is what he changed and when you search in the file with the F0 infront you will find it in the first line

F00FF480208B022022

Change it to:

F00FF4802000008212

So i assume since 2 or 3 guys did that and worked it is the first string found. Either it has F0 or E0 infront...

[yugo45]

I read your post ,and thank you for all informations, It was very helpful.
But what trigger my question is this 2 files.
2 different part numbers of ECU and 2 different Software versions, but both of the has same bytes in all 3 positions and both of them has :

-Position #1 = 19 0f 74 11 0F F4 80 20 8B 02 20 22

-Position #2 = DC 7D 8C F0 0F F4 80 20 8B 02 20 22

What we do in this situations, as you think it is position #1 but at first post was mention that should be position #2?


Position 2 is never mentioned on previous posts or at least i have not noticed something.


Sorry I did not say correct,
I meant since First Post say that F00FF480208B022022 needs to be change to F00FF4802000008212 and F00FF480208B022022 is in Position #2,
And you think Position #1 of 0FF480208B022022 needs to be change, My question is :
in those 2 dumps what need to be done Position #1 or Position #2?

This one is very tricky.

I hope this explains what I want to know.

Thanks

[fsvsunix]

Sorry I did not say correct,
I meant since First Post say that F00FF480208B022022 needs to be change to F00FF4802000008212 and F00FF480208B022022 is in Position #2,
And you think Position #1 of 0FF480208B022022 needs to be change, My question is :
in those 2 dumps what need to be done Position #1 or Position #2?

This one is very tricky.

I hope this explains what I want to know.

Thanks

Sorry i realy can not undarstand what you need to know..in my opinion change only the first string you find on a boot mode read.If this fails change them all and be kind enough to report...
As soon as i find something i will do too...If any member here needs to test edc17 or med17 immo of solutions please post a file so we can do some more tests.

[yugo45]

Sorry i realy can not undarstand what you need to know..in my opinion change only the first string you find on a boot mode read.If this fails change them all and be kind enough to report...
As soon as i find something i will do too...If any member here needs to test edc17 or med17 immo of solutions please post a file so we can do some more tests.
Thanks,
I wish other members start sharing them experience.
I will mine soon as I get chance to do immo off in EDC17 or MED 17.

It would be nice to know what really works since EDC 17 is not easy to do, you have to do it every time in boot mode , and remove form the car till you find out what really works.If you can do over OBD it would not be big deal. That way I like to know this.

[Nio]

Yugo45 ask just how to make off when are more equal bytes.

[yugo45]

Yugo45 ask just how to make off when are more equal bytes.

Exactly,,,,,,,,

[danielm]

Hello,
Can anyone with this EDC17 CP14?

Best regards

244846244846

[mexanico1971]

here software EDC17 unlock by ecuvonix. It is not cracked. I have no idea how to make crack 243823

some one got to clone the dongle !!

[arvedo]

here's friend

[kugglefischer]

Good luck with ecuvonix solution :D

hi bubu
id like to donate too..and get this med/edc 17 destroyer software!
please pm me with details...

im waiting!
good job!!!!
k

[kugglefischer]

here software EDC17 unlock by ecuvonix. It is not cracked. I have no idea how to make crack 243823

IF ANYone comes up with a solution for this.....im willing to donate to get it to work!

[kugglefischer]

some one got to clone the dongle !!
if someone has it..
please share it......

thanks

[fsvsunix]

Hello,
Can anyone with this EDC17 CP14?

Best regards

244846244846

Did it work? please report...dont just take something and leave without telling a thanks or it works...

[danielm]

hi,
I not pay for file
and not tested
and tried file with another friend and it did not work

Regards

[ALVARES]

IF ANYone comes up with a solution for this.....im willing to donate to get it to work!

I have the original software and dongle. I've posted before software. But I do not know how to make crack or how do you create a copy of the dongle.

[bearheroes]

hi,
I not pay for file
and not tested
and tried file with another friend and it did not work

Regards
ok then...next time you will ask for help,we will ask you payment...just for making you reply

[Meat-Head]

On topic

membef blackpiarate is wirth asking, there are software for fopying dongles

dumb question:/

what fo you use to read the flash?

[darrynf]

very interesting guys...any success? what about a decent checksum?
pls pm if possible..
Cheers all

[Meat-Head]

Why pm dk is the worlds best sharing webdite

[yugo45]

Position 2 is never mentioned on previous posts or at least i have not noticed something.



The 19 0f 74 11 0F F4 80 20 8B 02 20 22 00 90

is the complete routine

19 0f 74 11 is the first operand. ld32.w d15, [a0]0x1474

0f f4 80 20 is the second and32 d2, d4, d15

8b 02 20 22 is the third ne d2, d2, #0

And there is a return which is not mentioned 00 90 ret16

according to the first post this is what he changed and when you search in the file with the F0 infront you will find it in the first line

F00FF480208B022022

Change it to:

F00FF4802000008212

So i assume since 2 or 3 guys did that and worked it is the first string found. Either it has F0 or E0 infront...


Sorry I did not say correct,
I meant since First Post say that F00FF480208B022022 needs to be change to F00FF4802000008212 and F00FF480208B022022 is in Position #2,
And you think Position #1 of 0FF480208B022022 needs to be change, My question is :
in those 2 dumps what need to be done Position #1 or Position #2?

This one is very tricky.

I hope this explains what I want to know.

Thanks


Sorry i realy can not undarstand what you need to know..in my opinion change only the first string you find on a boot mode read.If this fails change them all and be kind enough to report...
As soon as i find something i will do too...If any member here needs to test edc17 or med17 immo of solutions please post a file so we can do some more tests.


Thanks,
I wish other members start sharing them experience.
I will mine soon as I get chance to do immo off in EDC17 or MED 17.

It would be nice to know what really works since EDC 17 is not easy to do, you have to do it every time in boot mode , and remove form the car till you find out what really works.If you can do over OBD it would not be big deal. That way I like to know this.


Yugo45 ask just how to make off when are more equal bytes.

Please can someone share experience and tell us what position needs to be change ,1 or 2 or all 3 needs to be change?
I know lot of people done this and it would be very nice to tell us this.

[soxten]

Do someone know how to do VW Passat 2010 MED17.1?

[yugo45]

Do someone know how to do VW Passat 2010 MED17.1?

In MED 17 you will find 3 X 0FF480208B022022, but I am asking for days what position needs to be change ?
If you find out this PLEASE share solution.

[soxten]

In MED 17 you will find 3 X 0FF480208B022022, but I am asking for days what position needs to be change ?
If you find out this PLEASE share solution.

Correct, Maps from Vw MED17 has 3x0F F4 80 20 8B 02 20 22
If someone knows if 1 or all 3 need to change, please write.

[arvedo]

Friend is very easy, do one by one and see which one works, no one will help here as this is very new immo
what you can do, is 3 parts and work. ;)

[soxten]

I thought that we all help each other ...
Problem for me is that car is 160km from me and I have the ECU here.

[soxten]

Here is original and immo off file from Citroen Berlingo 2012 EDC17C10 (ECUVoinix)
On line 0707F0 I get this diffrent byte
on= 0FF480208B022022
off=0FF4802000008212

and then something is changing on line 1FFF70 to 1FFFF0 and 3FEB70 TO 3FEBF0

see my files

[Meat-Head]

Sixten is this in flash ir eeerprom?

[Am1n-0s]

what about iveco edc17 ?

[soxten]

Sixten is this in flash ir eeerprom?

It`s Flash (maps)

[soxten]

what about iveco edc17 ?

ECUVonix can do Fiat EDC17CP49
do you have that box I can help you.

[chriskross]

Here is original and immo off file from Citroen Berlingo 2012 EDC17C10 (ECUVoinix)
On line 0707F0 I get this diffrent byte
on= 0FF480208B022022
off=0FF4802000008212

and then something is changing on line 1FFF70 to 1FFFF0 and 3FEB70 TO 3FEBF0

see my files

Chksum??

Gesendet von meinem GT-I9300 mit Tapatalk 2

[wahye]

hello to all i see that many members have a problem with checksum of edc17 maybe that link can help many members !!
EDC17 EEPROM Checksum calculator - ECU Calc (http://ecucalc.com/edc17-eeprom-checksum-calculator.htm)
Best Regards
wahye

[filutek]

Change one place....second item.(on= 0FF480208B022022 off=0FF4802000008212).

[yugo45]

Correct, Maps from Vw MED17 has 3x0F F4 80 20 8B 02 20 22
If someone knows if 1 or all 3 need to change, please write.

Position #2 needs to be change,but not 100% for MED 17 .
If you find out this please share it.


Here is original and immo off file from Citroen Berlingo 2012 EDC17C10 (ECUVoinix)
On line 0707F0 I get this diffrent byte
on= 0FF480208B022022
off=0FF4802000008212

and then something is changing on line 1FFF70 to 1FFFF0 and 3FEB70 TO 3FEBF0

see my files

It is checksum,
If you using Galletto 2 , it can calculate checksum in writing.

[Am1n-0s]

@yugo45

Galetto 2 calculate crc in vag only i think ?

[yugo45]

@yugo45

Galetto 2 calculate crc in vag only i think ?
Maybe you are right , it is possible .Did not have a chance to try other brands.
But checksum is not problem , any good tuner can do it for very low $$$.

[arvedo]

cks friends what checking tool.
gallettov 53
EDC17, med17
honda ok
mercedes ok
fiat ok
vag ok
psa ok
bmw ok
tested works perfect for me ;)

[Am1n-0s]

checksum is problem for eprom, not flash

[yugo45]

Immo off in Flash , do not need eeprom checksum.

[arvedo]

That's right, there are many companies that make immo off in eproms, but they do so you can not copy and you have to correct cks

[Am1n-0s]

i confirm that not work on iveco only flash !! need eprom edition and crc correction.

[arvedo]

iveco if it works, remove light on dash and everything is ok ;)

[Am1n-0s]

which light ?

it doesn't work with flash int need eprom edition.

[arvedo]

your studies and see that you can.
no'll help you, remember you back half a year ago.
quieria EDC17 immo off that.
you asked me 100 euros on a single solution.
you have to help a friend.
your have 32 posts and wanted money
jajajaja

[Am1n-0s]

i'm not asking i'm telling that off not work by editing flash on iveco baby :)

[Meat-Head]

your studies and see that you can.
no'll help you, remember you back half a year ago.
quieria EDC17 immo off that.
you asked me 100 euros on a single solution.
you have to help a friend.
your have 32 posts and wanted money
jajajaja

WHOA. DK is the worlds best sharing site, no money to change hands for things (postage and parts is fine) but any waving palms, nil poi

[arvedo]

friend to talk to AM1N-OS, always ask the money.
the free solutions given.
ask any password that the public, and only wants money.
friend sitting waiting jjajjaj

[Am1n-0s]

@arvedo

If you worked hard you know what's the meaning of a work !!!

you pass all your time leeching information, of course if you found it free you give it free, we worked hard to get the solution.

But i hope for you one day you work hard on a solution and you spend money then you give us free ;)

[arvedo]

friend I work hard every day and thanks to dk my business grows every day, but also give gifts to dk, and if I can help people do.
and also pay top dollar for software and files and give free here.
dk to help.
Greetings friends
;)

[Am1n-0s]

Do not argue with a fool, people can't differentiate between you

sorry, but i can't explain more.

[wahye]

hello to all i want to know something , after make this change on flash , and down with galetto , can anyone read eeprom after writing the modified flash ( after test it ) ? just to see the modification in eeprom after that !!
BR
wahye

[arvedo]

good idea man, I never i checked

[supersamy]

@yugo45

Galetto 2 calculate crc in vag only i think ?

Hi Amine,
Galetto 2 calculate crc in writing for all .....

[fsvsunix]

So to get back in topic..Can someone confirm what worked for him? I am not talking about the ecuvonix solution.I am talking only about the simple hex string replacement.

What point was the correct on edc17 and what on med17 ? Which edc17 or which med17 ?PLease be specific or do not post at all because the topic gets more and more confusing.

[wahye]

hello to all , i think the best way to make immo off is with eeprom change solution , i have some file with this solution for med17 and i found that have the same algo , with adresse ( sometimes ) different , so if i have more file eeprom immo off with the original flash and eeprom for edc17 for vag , PSA i will found the solution from eeprom !! so please for all members how have some edc17 immo off from eeprom post te file here to get the best solution , and of course we will share it for free !!!!
Best Regards
wahye

[autoelek]

Hi everyone, car which I have problem:

Audi A5 2.0 TDI engine code CAHA, 125kw, gearbox manual
2010, EDC17cp14, processor Tricore SAK TC1796.

I have try adapt by AN054 Abrites Function immo parts V adaptation BCM2 without success and by immo off function. Still I can see SAFE in dashboard.

I am asking if any members with experience with Abritus AN054 and EDC17cp14 can tell me how to do immo off on this vehicle ?

Many thanks in advance.

I attached ori files and ee2_off files made by ABRITES.

[yugo45]

Hi everyone, car which I have problem:

Audi A5 2.0 TDI engine code CAHA, 125kw, gearbox manual
2010, EDC17cp14, processor Tricore SAK TC1796.

I have try adapt by AN054 Abrites Function immo parts V adaptation BCM2 without success and by immo off function. Still I can see SAFE in dashboard.

I am asking if any members with experience with Abritus AN054 and EDC17cp14 can tell me how to do immo off on this vehicle ?

Many thanks in advance.

I attached ori files and ee2_off files made by ABRITES.

Try this.
Please report back.

[autoelek]

You don't attached any files

[yugo45]

Something is wrong with attachment or my PC .

It is attach now .

[autoelek]

Unfortunately, this modification does not work still SAFE in dashboard, I also before tried this method but its not good.

[yugo45]

Does your car runs, or start and die after 2 sec.?

[wahye]

Hi everyone, car which I have problem:

Audi A5 2.0 TDI engine code CAHA, 125kw, gearbox manual
2010, EDC17cp14, processor Tricore SAK TC1796.

I have try adapt by AN054 Abrites Function immo parts V adaptation BCM2 without success and by immo off function. Still I can see SAFE in dashboard.

I am asking if any members with experience with Abritus AN054 and EDC17cp14 can tell me how to do immo off on this vehicle ?

Many thanks in advance.

I attached ori files and ee2_off files made by ABRITES.

hello try this and report :

[drakov]

Test and report.......

[viorelloj]

hello.
I saw this change to be made ​​on EDC17.
but I want to know after I change to do cheksum,
you have to be to write it as it is.
when they write with Galletto asks me if I want to do chekcsum or. no
thank you very much

[arvedo]

friend always have to correct the cks so that everything is correct, otherwise the car will not start ;)

[Meat-Head]

OFF TOPIC:-

Did read about some car, for unkown reason flash get corrupt and it poured fuel down into one chamber
is there any rusk of something dimular gappening?

isht gatevut

[wahye]

but on FLASH we don't need to check checksum , checksum only for eeprom cause if you have change on eeprom and the checksum was wrong the flash edit many place ( or change all must info , data ) to get the good checksum after set the wrong checksum , and the cars will not start after that !!
Regards

[yugo45]

hello.
I saw this change to be made ​​on EDC17.
but I want to know after I change to do cheksum,
you have to be to write it as it is.
when they write with Galletto asks me if I want to do chekcsum or. no
thank you very much
Always use function calculate checksum. It is best to do this way.

[wahye]

anyone can post some files for sid807 flash + eeprom !!
im working on sid807 and i need more files !!
and some files for edc17cp52 too !!
Best Regards
wahye

[soxten]

Here is Immo off on Vw Passat EDC17CP14 by ECUvonix
Files are original
Flash_map
Immo_off file from ECUvonix
The read out from ECU after programing by K-tag

It look`s like K-tag do chksm, it is diffrent in file from Immo_off and Immo_off_read

No password.

(correct .zip is now on this post and working.)

[vp44]

Hi, ktag corrects always CS before writing flash.

[soxten]

Vp44 correct it change this and do something (chksm?) on 3 parts later in the file.

[soxten]

Here is immo off for Vw Tiguan 2010
03L906022RN
0281016155
EDC17CP14

Immo off from ECUvonix and program by K-tag clone.
K-tag do some chksm as you see in immo_off_read = This is a reading after I write the Immo off file to ECU.
(K-tag take 5-10min to recalc chksm when you writ immo_off file, so do not think you`r computer/k-tag has crash,died :)

No password

[soxten]

Here is immo off for Vw Tiguan 2010
03L906022RN
0281016155
EDC17CP14

Immo off from ECUvonix and program by K-tag clone.
K-tag do some chksm as you see in immo_off_read = This is a reading after I write the Immo off file to ECU.
(K-tag take 5-10min to recalc chksm when you writ immo_off file, so do not think you`r computer/k-tag has crash,died :)

No password



After my test,
Car starts and runs perfect BUT in info display i get "Key not found".....
How to fix this?

[soxten]

After my test,
Car starts and runs perfect BUT in info display i get "Key not found".....
How to fix this?


All working now.
I did get this from ECUvonix

"you just have to put it next to the antenna, a transponder. You do not need the original transponder. Even empty. antenna should see a transponder even when not working"

[soxten]

Here is Immo off on Vw Passat EDC17CP14 by ECUvonix
Files are original
Flash_map
Immo_off file from ECUvonix
The read out from ECU after programing by K-tag

It look`s like K-tag do chksm, it is diffrent in file from Immo_off and Immo_off_read

No password.


edit: this file did work but give faults on abs,climatronic etc so
here is the working file without fults

see that you need to chnage on 2 places same string by 4 bytes.

[chli1976]

edit: this file did work but give faults on abs,climatronic etc so
here is the working file without fults

see that you need to chnage on 2 places same string by 4 bytes.

Can you upload again the file with gives faults

[wahye]

good news !! today software edc17 immo off is cracked !!
i have my copy !!
Best Regards
wahye

[chli1976]

good news !! today software edc17 immo off is cracked !!
i have my copy !!
Best Regards
wahye

Where we can get the cracked soft

[wahye]

PATIENCE , THE SOFT IS NOT FINNISHED YET !!!!!!!!!!!

[jmcartec]

Must say its a huge start for this new deal EDC17 Immo off
great job wahye (http://www.digital-kaos.co.uk/forums/members/329547-wahye/)
!

[igorr]

good news !! today software edc17 immo off is cracked !!
i have my copy !!
Best Regards
wahye
I have this soft and it is virus infected

[Nio]

I modify this post because make a mistake. ecd17 have virus but not blocked other software. Regards.

[radsky]

You have from "original" source ? For me working like a charm. Good job Luis !

[chli1976]

Attention, after install edc17 software, cannot function other programs with LDR. Regards.

What is LDR

[tobygolf66]

where can i get cracked MEDC17 Destroyer or Ecuvonix MEDC17 off ???

[giuseppe1374]

please share

[hbalazs]

I not check virus!But work ok!

[datapage]

Bosch MED17.5MED17.5.5 VAG
I have to remove immobilizer
252598
Software Edc17 not work.

[didi_du_93000]

Hello all.

I need a IMMO off on a ECU EDC17 from Honda Accord 2008.
Inside it's TC1792.

I have asked all my chiptuner and no one have solution.
So I can pay for it.... otherwise i will buy new ECU from Honda shop!!!!

[antlio]

Hi

Try this and post results . First correct chm . Pass is in your pm .

regards

[didi_du_93000]

will give you reply monday.

Thanks a lot

[smt]

This soft cant work with PSA MEV 17.4 tested by my freind car start first time only

[blazej1200]

Hi needs help with the removal of immo mercedes w211 MED 17.7.1 Regards

[nizarben]

hello my friends
Can you please help me to get the egr off for vag simos pcr 2.1 golf 6 tdi 1.6

[didi_du_93000]

hello my friends
Can you please help me to get the egr off for vag simos pcr 2.1 golf 6 tdi 1.6


It's a thread for IMMO OFFFFFFFFFFFFFFFF!!!!!!!!!!!!!!!!!!!!!!!!!!

You are OUT topic!!!!!!!!!!

[antlio]

Hi

Try this and post results . First correct chm .Pass is in your pm .

regards

[blazej1200]

Tuesday I'll be testing and report Thank you very much

[ben jemia salim]

how can I blank push 46 with tango

[ben jemia salim]

you can help me or no ?

[raimi.s]

Hi. possible remove immo or do virgin in citroen with sid807evo 253169

[blazej1200]

Hi

Try this and post results . First correct chm .Pass is in your pm .

regards

Hi immo off solution does not work . No enable startup

[greg38]

Hello,

I need immo off for this ecu edc17U01

Thanks!

[smt]

ur file off pass on ur PM
scoda fabia 1.4 tdi

[datapage]

​HI,

I need immo off for this ecu MED17.5.2 JETTA 2012 0261S06216
TC2554161767
Thanks!

[greg38]

​HI,

I need immo off for this ecu MED17.5.2 JETTA 2012 0261S06216
TC2554161767
Thanks!255449

Try it and report. Pass PM

[datapage]

255489

255449

Try it and report. Pass PM
Greg38 file not work. tks

[greg38]

CKS is correct? Send me your eeprom.

[datapage]

255490eeprom ,Fgtech ok read and write correct sum fixes.

[smt]

ur file off

[datapage]

0261D06216 MED17.5.rar (http://www.digital-kaos.co.uk/forums/attachments/f178/255496d1397402118-edc17-immo-remove-work-progress-0261d06216-med17.5.rar)file is the same, already tested it does not work.

[datapage]

original file=start and stop, scaner ok.
first region modified,start and stop, ok scanner. immo active.
first and third area not work, no scanner.
3 modified region = no work, no scanner.

[datapage]

256029
Can someone pin code of this soft?

[didi_du_93000]

Hello,

I need IMMO OFF for EDC17C10 from PSA cars.

Do you know if IMMOTOOL from Tlemcen Electronic works with this ecu????
In attachment you will found the MAPS and Eeprom files.

Regards.

[turner]

Try this and report

[reda75]

@didi_du_93000

Immotool from tlemcen electronic work like a charm on edc17 psa.

[bubu55]

Hello,

I need IMMO OFF for EDC17C10 from PSA cars.

Do you know if IMMOTOOL from Tlemcen Electronic works with this ecu????
In attachment you will found the MAPS and Eeprom files.

Regards.


Your file immo off for free.
100% working, with extended rsa correction


If I help you pls push thanks button :D

[didi_du_93000]

I will give feedback tomorrow

[didi_du_93000]

Is it normal the car start but in limp mode?

[turner]

Is it normal the car start but in limp mode?

No

Are there any fault codes?

What was the reason for removing the immo?

What, if anything, have you changed or done to determine the cause of the problem?

[didi_du_93000]

No

Are there any fault codes?

What was the reason for removing the immo?

What, if anything, have you changed or done to determine the cause of the problem?


Need IMMO OFF because it's not the original ECU. I have bought the car without ECU inside.

I will check DCT tonight.

[bubu55]

Need IMMO OFF because it's not the original ECU. I have bought the car without ECU inside.

I will check DCT tonight.

Yes, it is normal.
You must remove associate dtc

[didi_du_93000]

I have tested on another car and full working, no limp mode!!!!

THANKS A LOT BUBU55

[brobble]

@datapage:
Try this file please! I had MED17.5 now to immo off. I changed second of 3 found strings. I have no car to test, onyl ecu on bench. But I can write the ecu with obd after immo off, so I think it works. Your file I made the same way.

Good luck.

Greetings MR...260281

[datapage]

car is not here, was vw agency.
he bought kit.

[faberEcu]

hi all,
i have big problem , i must make immo off on Opel edc17 c18
have make all know mod , but car start and stop
is possible have tested sol... file have tree region , i have try all and combinate this, same .. start and stop , special sol too. and combinate too ,,, never:beheaded::beheaded:
ori ecu was damage by fgtech 53 clone tricore boot , ecu ori not possible write now, ihave buy used same hardware and try immo off
ori file
regards

[milkatrek]

Its possible off?

WBR

[reproteq]

266316can test?
and post results.

[milkatrek]

not working

[zziad]

Its possible off?

WBR

hi mate
here is your :guns:..... off .. post result
pass in pm.

[milkatrek]

not working

[meteor80]

Hi.
I need to Immo Off:
EDC17 P608 CB.P83A
1037509562.P609830l
Hyundai IX35

Solution from first post doesn't work.
x`

[didi_du_93000]

Hello all,

Need a immo off for this ecu please.

IVECO 2014
EDC17C49
0281017455

You will found in this folder the full memory.
Thanks in advance.

[kire106ka]

Hello all,

Need a immo off for this ecu please.

IVECO 2014
EDC17C49
0281017455

You will found in this folder the full memory.
Thanks in advance.
Here is you'r file mate

[mohamedkey]

Peugeot 308 MEV17.4.2 immo off thanxxx.

[mayss]

Peugeot 308 MEV17.4.2 immo off thanxxx.

This is your file 274296. File have correct checksum. Write try and report.

[kennfeld]

Hi.
I need to Immo Off:
EDC17 P608 CB.P83A
1037509562.P609830l
Hyundai IX35

Solution from first post doesn't work.
x`


you found solution ? or ?

[milkatrek]

3.0tdi a5 please immooff

WBR


solved

[josecuervo]

hi can any one help me remove immo on this med17.5.2

[Edc17tricore]

Someone know what is switch for eliminate dash error message on vag after immo off?

I can pay for it ;)

[smt]

thers nt switch for this only eeprom immo off can eliminate the "immo safe" message pb ;)
for more info contact me by skype

[Edc17tricore]

thers nt switch for this only eeprom immo off can eliminate the "immo safe" message pb ;)
for more info contact me by skype

Thanks a lot, I try to perform immo off also in e2p

[Am1n-0s]

I can do immo off from eprom, you will not see anymore the 'immo safe' message again ;)

[Edc17tricore]

I can do immo off from eprom, you will not see anymore the 'immo safe' message again ;)

Yes, i am able to perform immo off in e2p by myself ;)

[bluetaily]

Doing immo off in e2p is possible with K-Tag?

[datapage]

I have problem with fgtech v53 after correcting checksun with Ols, he refuses to program ecu.
Original program file ok, that might be happening?
Beetle Car MED17.5.2 0261S07822 ecu, ecu used. immoof test. Fgtech v53

[Edc17tricore]

I have problem with fgtech v53 after correcting checksun with Ols, he refuses to program ecu.
Original program file ok, that might be happening?
Beetle Car MED17.5.2 0261S07822 ecu, ecu used. immoof test. Fgtech v53

Post file, i correct ck for you for write with fgtech ;)

[jruibarroso]

can you immo off my EDC17CP14 ?

thank you all

[datapage]

I need to hit in cheksun to program with fgtrech v53,
279760
I have problem with fgtech v53 after correcting checksun with Ols, he refuses to program ecu.
Original program file ok, that might be happening?
Beetle Car MED17.5.2 0261S07822 ecu, ecu used. immoof test. Fgtech v53

[Edc17tricore]

I need to hit in cheksun to program with fgtrech v53,
279760
I have problem with fgtech v53 after correcting checksun with Ols, he refuses to program ecu.
Original program file ok, that might be happening?
Beetle Car MED17.5.2 0261S07822 ecu, ecu used. immoof test. Fgtech v53

Attached
279922

[tobygolf66]

any news about immo off solution in eeprom ??
rgds