kw1281test: A Free VDS-Pro / VagTacho Alternative

[jakej78b]

Hi gwenounos,

Have you done any hacking on the ECU or only on the clusters? Sorry if the question has already been answered. A few weeks back I read about 10 pages of this but at this point it would take a looooong time to go back and read it all. Perhaps you should put an FAQ on the OP with common requests like the remote window roll down mod, etc.

I'm trying to see if it would be possible to do an immobilizer delete on the ECU so that the cluster and key is not required to run the engine.

Cheers,
Jake

 

[gmenounos]

Have you done any hacking on the ECU or only on the clusters? Sorry if the question has already been answered. A few weeks back I read about 10 pages of this but at this point it would take a looooong time to go back and read it all. Perhaps you should put an FAQ on the OP with common requests like the remote window roll down mod, etc.

Yes, I've been playing around with various ECUs lately and am pretty close to releasing a version that can do an immobilizer delete/undelete.
I agree that a FAQ would be helpful, especially now that this conversation has grown to over 500 posts. Hopefully I'll have time to start one soon.

 

[Mozambiquer]

Yes, I've been playing around with various ECUs lately and am pretty close to releasing a version that can do an immobilizer delete/undelete.
I agree that a FAQ would be helpful, especially now that this conversation has grown to over 500 posts. Hopefully I'll have time to start one soon.

The immobilizer delete would be awesome!

 

[pkhoury]

The immobilizer delete would be awesome!

I concur as well. Not sure if it means I might be able to move my EDC15 to another car, as I'm currently shopping for another ALH Golf. Someone pulled in front of me yesterday, so I wrecked my Golf (frame is destroyed, so it's a parts car now).

 

[gmenounos]

I concur as well. Not sure if it means I might be able to move my EDC15 to another car, as I'm currently shopping for another ALH Golf. Someone pulled in front of me yesterday, so I wrecked my Golf (frame is destroyed, so it's a parts car now).

You don't need an immobilizer delete to move your ECU to another car. You just need the SKC from both cars and then you can pair the cluster and ECU in the new car: http://wiki.ross-tech.com/wiki/index.php/Immobilizer_III_ECU_Swapping

 

[pkhoury]

You don't need an immobilizer delete to move your ECU to another car. You just need the SKC from both cars and then you can pair the cluster and ECU in the new car: http://wiki.ross-tech.com/wiki/index.php/Immobilizer_III_ECU_Swapping

Super cool. @alphaseinor mentioned that and it didn't click. Apologies in advance, but a lot of things are still fuzzy after the wreck.

Now, to clarify, this is only on an immo3 vehicle, right? So 2002 or 2003?

 

[geezer88]

I bought a VW nav radio at the local Good Will store, without thinking about security codes. I don't have a VW, I just want to use it in my shop. I only paid $8 for it, so it is no big deal if it becomes a boat anchor.

Is there a way to get the free-vds-vagtacho to talk directly to the radio to find the code? I have a generic usb to obd2 gizmo.

thanks, tom

 

[Nuje]

At the risk of venturing off-topic, if you get the serial number off the stereo (14-digit, starts with VWZ...), and you get along well with the folks at your VW dealership, they can get the security code for you via ODIS (official factory diagnostic tool).
They also need to be plugged into a car to access its VIN, but literally any VW car will suffice (e.g., for the stereo out of a 2002 Jetta, the tech plugged into ODIS with the car he was working on: a ~2017 Passat).

 

[geezer88]

They also need to be plugged into a car to access its VIN, but literally any VW car will suffice (e.g., for the stereo out of a 2002 Jetta, the tech plugged into ODIS with the car he was working on: a ~2017 Passat).

Thanks, I was hoping to hear that.

 

[gmenounos]

I bought a VW nav radio at the local Good Will store, without thinking about security codes. I don't have a VW, I just want to use it in my shop. I only paid $8 for it, so it is no big deal if it becomes a boat anchor.

Is there a way to get the free-vds-vagtacho to talk directly to the radio to find the code? I have a generic usb to obd2 gizmo.

thanks, tom

If it's a VW Premium V radio made by Delco, you can use the DelcoVWPremium5SafeCode command to retrieve the SAFE code. Mike Naberezny has reverse engineered many MKIV radios and found ways to retrieve the SAFE code: https://github.com/mnaberez/vwradio
Unfortunately, the only model that I own and that he's reverse engineered is the Delco Premium V so that's the only one that kw1281test supports. I could probably add support for some of the other radios if I owned any.

 

[gmenounos]

Super cool. @alphaseinor mentioned that and it didn't click. Apologies in advance, but a lot of things are still fuzzy after the wreck.

Now, to clarify, this is only on an immo3 vehicle, right? So 2002 or 2003?

Yes, Immo3. Immo2 instructions are here: http://wiki.ross-tech.com/wiki/index.php/Immobilizer_II_ECU_Swapping

 

[pkhoury]

Yes, Immo3. Immo2 instructions are here: http://wiki.ross-tech.com/wiki/index.php/Immobilizer_II_ECU_Swapping

Perfect. Looking forward to trying this when I get back to Texas. Took delivery today of a silver 2004 Golf GLS TDI, to replace the one that was destroyed.

 

[Mozambiquer]

I sent Greg a PM about this, but I also know there are other guys who follow this thread who may know what I am doing wrong. I am trying to do the CCM mod for the rear hatch unlock when doors unlocked. I did that on my other 05 passat wagon, and got another one, and want to do the same thing, but I have not been able to get through. Here is what I am getting:

KW1281Test 0.51-beta (https://github.com/gmenounos/kw1281test/releases)
Args: COM4 9600 46 readeeprom 04370
Opening serial port COM4
Sending wakeup message
Reading sync byte
Keyword Lsb $01
Keyword Msb $8A
Protocol is KW 1281 (8N1)
Unhandled exception: System.InvalidOperationException: Received block end $20 but expected $03
   at BitFab.KW1281Test.KW1281Dialog.ReceiveBlock() in C:\Users\gmeno\src\kw1281test\KW1281Dialog.cs:line 499
   at BitFab.KW1281Test.KW1281Dialog.ReceiveBlocks() in C:\Users\gmeno\src\kw1281test\KW1281Dialog.cs:line 458
   at BitFab.KW1281Test.KW1281Dialog.ReadEcuInfo() in C:\Users\gmeno\src\kw1281test\KW1281Dialog.cs:line 77
   at BitFab.KW1281Test.Program.Kwp1281Wakeup(Boolean evenParityWakeup) in C:\Users\gmeno\src\kw1281test\Program.cs:line 275
   at BitFab.KW1281Test.Program.Run(String[] args) in C:\Users\gmeno\src\kw1281test\Program.cs:line 217
   at BitFab.KW1281Test.Program.Main(String[] args) in C:\Users\gmeno\src\kw1281test\Program.cs:line 27

 

[Nuje]

Do the other functions work correctly? Like, can you do a full EEPROM dump? Can you read other addresses?
Maybe try different baud rate - "COM4 10400 46...."

Some CCMs for me have had the applicable bits at addresses 04352, 04353, 04354.

Just throwing ideas out there.

 

[Mozambiquer]

Do the other functions work correctly? Like, can you do a full EEPROM dump? Can you read other addresses?
Maybe try different baud rate - "COM4 10400 46...."

Some CCMs for me have had the applicable bits at addresses 04352, 04353, 04354.

Just throwing ideas out there.

I actually got it to work, and was going to report, but got called out on the tow truck for a couple hours...
I tried several times, then decided to get into the instrument cluster. After that, I was able to read the ccm and change those bits. Not sure why it wasn't working before.

 

[caffeine]

Tried out the EDC15 dump command on an 03 ALH ECM and it's working well on that one as well.

Further notes on the City Jetta cluster I've been tinkering with; it will NOT pair with an IMMO2 ECM like other IMMO3 clusters, but will pair with an IMMO3 Mk4 ECM, although I had to clone the immo stuff from another paired cluster to make it work. They must have added some extra checks to the immobilizer system in the Mk4.5s.

 

[BrierSteph]

I am sure this has been asked, but I couldn't find it in this thread - Will this code work for an Immo4 on a 2008 VW GTI MkV?

I replaced the dead instrument cluster with one from a wrecked GTI at Pick n Pull and the new used cluster now lights up. Sadly, the ECU on that wreck had a broken case, so I didn't take it. But I am having trouble finding someone in all of Seattle who can reprogram to the new cluster. Even the dealers seem clueless and/or unwilling. Sheesh, it's not like my cluster is the first one ever to die! So now I am contemplating a DIY....scary. I would LOVE it if your code would work for me!

Thanks - Stephany

 

[gmenounos]

I am sure this has been asked, but I couldn't find it in this thread - Will this code work for an Immo4 on a 2008 VW GTI MkV?

Unfortunately it only works for Immo2/Immo3 cars. I don't have any Immo4 equipment to test it on, but even if I did, I believe they all require the CAN Bus for diagnostics: https://www.ross-tech.com/vcds/canbus.php
kw1281test only supports communication over the K-Line.

 

[BrierSteph]

Unfortunately it only works for Immo2/Immo3 cars. I don't have any Immo4 equipment to test it on, but even if I did, I believe they all require the CAN Bus for diagnostics: https://www.ross-tech.com/vcds/canbus.php
kw1281test only supports communication over the K-Line.

Thanks for the fast reply. I really appreciate it - even if I am still stuck. All the work you have done and this thread is amazing!

 

[TdiRN]

I've been attempting to run the program you wrote but keep getting unhandled exception....timeout errors. I've got the COM port right and have changed the baud rate but nothing seems to work.

Opening serial port COM5
Sending wakeup message
Reading sync byte
Unhandled exception. System.TimeoutException: The operation has timed out.
at System.IO.Ports.SerialStream.ReadByte(Int32 timeout)
at System.IO.Ports.SerialPort.ReadByte()
at BitFab.KW1281Test.Interface.ReadByte()
at BitFab.KW1281Test.KW1281Dialog.WakeUp(Byte controllerAddress)
at BitFab.KW1281Test.Program.Main(String[] args)

Any thoughts?

 

[TdiRN]

There is no log file being generated that I can find.....

 

[gmenounos]

What kind of cable are you using to connect to the car?

If there's no log file, that could be because you're running an older version before I added the log file feature. The latest release is here: https://github.com/gmenounos/kw1281test/releases/tag/v0.55-beta
If you're running something older, try downloading the latest one and see if it works better.

 

[TdiRN]

KII- USB with virtual com port

 

[TdiRN]

Just re-ran it with the new version:

KW1281Test 0.55-beta (https://github.com/gmenounos/kw1281test/releases)
Args: COM5 10400 17 DumpEeprom 204 6
Opening serial port COM5
Sending wakeup message
Reading sync byte
Unhandled exception: System.TimeoutException: The operation has timed out.
at System.IO.Ports.SerialStream.ReadByte(Int32 timeout)
at System.IO.Ports.SerialStream.ReadByte()
at System.IO.Ports.SerialPort.ReadByte()
at BitFab.KW1281Test.Interface.GenericInterface.ReadByte() in C:\Users\gmeno\src\kw1281test\Interface\GenericInterface.cs:line 33
at BitFab.KW1281Test.KwpCommon.WakeUp(Byte controllerAddress, Boolean evenParity) in C:\Users\gmeno\src\kw1281test\KwpCommon.cs:line 47
at BitFab.KW1281Test.Program.Kwp1281Wakeup(Boolean evenParityWakeup) in C:\Users\gmeno\src\kw1281test\Program.cs:line 275
at BitFab.KW1281Test.Program.Run(String[] args) in C:\Users\gmeno\src\kw1281test\Program.cs:line 189
at BitFab.KW1281Test.Program.Main(String[] args) in C:\Users\gmeno\src\kw1281test\Program.cs:line 28
KW1281Test 0.55-beta (https://github.com/gmenounos/kw1281test/releases)
Args: COM5 9600 17 DumpEeprom 204 6
Opening serial port COM5
Sending wakeup message
Reading sync byte
Unhandled exception: System.TimeoutException: The operation has timed out.
at System.IO.Ports.SerialStream.ReadByte(Int32 timeout)
at System.IO.Ports.SerialStream.ReadByte()
at System.IO.Ports.SerialPort.ReadByte()
at BitFab.KW1281Test.Interface.GenericInterface.ReadByte() in C:\Users\gmeno\src\kw1281test\Interface\GenericInterface.cs:line 33
at BitFab.KW1281Test.KwpCommon.WakeUp(Byte controllerAddress, Boolean evenParity) in C:\Users\gmeno\src\kw1281test\KwpCommon.cs:line 47
at BitFab.KW1281Test.Program.Kwp1281Wakeup(Boolean evenParityWakeup) in C:\Users\gmeno\src\kw1281test\Program.cs:line 275
at BitFab.KW1281Test.Program.Run(String[] args) in C:\Users\gmeno\src\kw1281test\Program.cs:line 189
at BitFab.KW1281Test.Program.Main(String[] args) in C:\Users\gmeno\src\kw1281test\Program.cs:line 28

 

[gmenounos]

Can you run VCDS, go into the Options screen and make sure that "Boot in intelligent mode" is NOT checked?

If you need to un-check it, click "Save" and then unplug the cable from your laptop and plug it back in so that it boots up in dumb mode.

 

[TdiRN]

That wasn't checked....heres what I get now:

KW1281Test 0.55-beta (https://github.com/gmenounos/kw1281test/releases)
Args: COM2 9600 17 DumpEeprom 204 6
Opening serial port COM2
Unhandled exception: System.IO.FileNotFoundException: Could not find file 'COM2'.
File name: 'COM2'
at System.IO.Ports.SerialStream..ctor(String portName, Int32 baudRate, Parity parity, Int32 dataBits, StopBits stopBits, Int32 readTimeout, Int32 writeTimeout, Handshake handshake, Boolean dtrEnable, Boolean rtsEnable, Boolean discardNull, Byte parityReplace)
at System.IO.Ports.SerialPort.Open()
at BitFab.KW1281Test.Interface.GenericInterface..ctor(String portName, Int32 baudRate) in C:\Users\gmeno\src\kw1281test\Interface\GenericInterface.cs:line 23
at BitFab.KW1281Test.Program.OpenPort(String portName, Int32 baudRate) in C:\Users\gmeno\src\kw1281test\Program.cs:line 325
at BitFab.KW1281Test.Program.Run(String[] args) in C:\Users\gmeno\src\kw1281test\Program.cs:line 153
at BitFab.KW1281Test.Program.Main(String[] args) in C:\Users\gmeno\src\kw1281test\Program.cs:line 28
KW1281Test 0.55-beta (https://github.com/gmenounos/kw1281test/releases)
Args: COM5 10400 17 DumpEeprom 204 6
Opening serial port COM5
Unhandled exception: System.IO.FileNotFoundException: Could not find file 'COM5'.
File name: 'COM5'
at System.IO.Ports.SerialStream..ctor(String portName, Int32 baudRate, Parity parity, Int32 dataBits, StopBits stopBits, Int32 readTimeout, Int32 writeTimeout, Handshake handshake, Boolean dtrEnable, Boolean rtsEnable, Boolean discardNull, Byte parityReplace)
at System.IO.Ports.SerialPort.Open()
at BitFab.KW1281Test.Interface.GenericInterface..ctor(String portName, Int32 baudRate) in C:\Users\gmeno\src\kw1281test\Interface\GenericInterface.cs:line 23
at BitFab.KW1281Test.Program.OpenPort(String portName, Int32 baudRate) in C:\Users\gmeno\src\kw1281test\Program.cs:line 325
at BitFab.KW1281Test.Program.Run(String[] args) in C:\Users\gmeno\src\kw1281test\Program.cs:line 153
at BitFab.KW1281Test.Program.Main(String[] args) in C:\Users\gmeno\src\kw1281test\Program.cs:line 28
KW1281Test 0.55-beta (https://github.com/gmenounos/kw1281test/releases)
Args: COM5 9600 17 DumpEeprom 204 6
Opening serial port COM5
Unhandled exception: System.IO.FileNotFoundException: Could not find file 'COM5'.
File name: 'COM5'
at System.IO.Ports.SerialStream..ctor(String portName, Int32 baudRate, Parity parity, Int32 dataBits, StopBits stopBits, Int32 readTimeout, Int32 writeTimeout, Handshake handshake, Boolean dtrEnable, Boolean rtsEnable, Boolean discardNull, Byte parityReplace)
at System.IO.Ports.SerialPort.Open()
at BitFab.KW1281Test.Interface.GenericInterface..ctor(String portName, Int32 baudRate) in C:\Users\gmeno\src\kw1281test\Interface\GenericInterface.cs:line 23
at BitFab.KW1281Test.Program.OpenPort(String portName, Int32 baudRate) in C:\Users\gmeno\src\kw1281test\Program.cs:line 325
at BitFab.KW1281Test.Program.Run(String[] args) in C:\Users\gmeno\src\kw1281test\Program.cs:line 153
at BitFab.KW1281Test.Program.Main(String[] args) in C:\Users\gmeno\src\kw1281test\Program.cs:line 28
KW1281Test 0.55-beta (https://github.com/gmenounos/kw1281test/releases)
Args: COM5 10400 17 DumpEeprom 204 6
Opening serial port COM5
Unhandled exception: System.IO.FileNotFoundException: Could not find file 'COM5'.
File name: 'COM5'
at System.IO.Ports.SerialStream..ctor(String portName, Int32 baudRate, Parity parity, Int32 dataBits, StopBits stopBits, Int32 readTimeout, Int32 writeTimeout, Handshake handshake, Boolean dtrEnable, Boolean rtsEnable, Boolean discardNull, Byte parityReplace)
at System.IO.Ports.SerialPort.Open()
at BitFab.KW1281Test.Interface.GenericInterface..ctor(String portName, Int32 baudRate) in C:\Users\gmeno\src\kw1281test\Interface\GenericInterface.cs:line 23
at BitFab.KW1281Test.Program.OpenPort(String portName, Int32 baudRate) in C:\Users\gmeno\src\kw1281test\Program.cs:line 325
at BitFab.KW1281Test.Program.Run(String[] args) in C:\Users\gmeno\src\kw1281test\Program.cs:line 153
at BitFab.KW1281Test.Program.Main(String[] args) in C:\Users\gmeno\src\kw1281test\Program.cs:line 28

 

[TdiRN]

Tried from scratch and I'm back to this:

KW1281Test 0.55-beta (https://github.com/gmenounos/kw1281test/releases)
Args: COM5 9600 17 DumpEeprom 204 6
Opening serial port COM5
Sending wakeup message
Reading sync byte
Unhandled exception: System.TimeoutException: The operation has timed out.
at System.IO.Ports.SerialStream.ReadByte(Int32 timeout)
at System.IO.Ports.SerialStream.ReadByte()
at System.IO.Ports.SerialPort.ReadByte()
at BitFab.KW1281Test.Interface.GenericInterface.ReadByte() in C:\Users\gmeno\src\kw1281test\Interface\GenericInterface.cs:line 33
at BitFab.KW1281Test.KwpCommon.WakeUp(Byte controllerAddress, Boolean evenParity) in C:\Users\gmeno\src\kw1281test\KwpCommon.cs:line 47
at BitFab.KW1281Test.Program.Kwp1281Wakeup(Boolean evenParityWakeup) in C:\Users\gmeno\src\kw1281test\Program.cs:line 275
at BitFab.KW1281Test.Program.Run(String[] args) in C:\Users\gmeno\src\kw1281test\Program.cs:line 189
at BitFab.KW1281Test.Program.Main(String[] args) in C:\Users\gmeno\src\kw1281test\Program.cs:line 28

 

[gmenounos]

This may be a total coincidence, but I just tried the latest version of kw1281test with a KII-USB cable and got the same timeout that you're getting. At first I thought maybe I broke something in the latest release but I poked around in VCDS and was able to fix it by going into Options, clicking Test and then clicking Save. You might want to give that a try.

Also, if you run VCDS can you connect to the cluster with it?

 

[gmenounos]

Tried from scratch and I'm back to this:

KW1281Test 0.55-beta (https://github.com/gmenounos/kw1281test/releases)
Args: COM5 9600 17 DumpEeprom 204 6
Opening serial port COM5
Sending wakeup message
Reading sync byte

This probably isn't why you're getting the timeout but make sure you always use 10400 baud when connecting to the cluster. Most of the other modules use 9600 but the cluster uses 10400 (except for maybe Beetle clusters. I should really write this stuff down...)

 

[TdiRN]

Not sure if I can connect to cluster yet. I'm testing this with the key turned on so I get a battery light on the cluster.

The reason I have 9600 on there is I was trying both 9600 and 10400 just to cover all my bases.

This morning when I was trying it for a few minutes (in VCDS) I was getting "No Response from Controller!" I'm not sure if I don't have the key turned far enough forward. I was able to do an autoscan and it did pull the codes (I have a ton from my auto to manual swap).