[t_quattro]

Hello,

I bought a MIB2High unit(8v1035035A) for retrofitting into my pre-facelift Audi A3 8V(standard MIB1High). I believed it was an unmodified unit when I bought it, and the ebay.co.uk seller doesn't know any additional info about it -like who hacked it-, the seller appears to be from a breaker's yard. When I received it, I noticed that is a hacked unit becase of the following: no message about Componet Proctection on FIS/MMI screen, the FECs from the unit are for a 4M Q7, I get no response from 5F with VCDS. I get not sound from the unit, but that's because the coding on the unit is using the MOST optical output, and my car needs the analog sound outputs. The part number, startup screen and the firmware(MHI2_ER_AU37x_p3620 MU:0875) are for an A3/S3. Green Engineering Menu is not enabled.

When I tried a firmware update to MHI2_ER_AU37x_P5089 MU:1326, it failed because the unit appears to also have a custom "train" variant: CN_AU_MLE(China A4/A5 platform) instead of EU_AU_MQB. This appears to be an anti-unhacking measure(?).

So, diagnostics are diasabled, GEM is disabled and I assume that the root passoword will also be a custom one and this would make telnet/rs232 connection unusable without reading the password's hash from the unit.... any chance of unhacking the unit that doesn't involve desoldering the eMMC chip? Any way to force a firmware update? Or should I just try returning the unit?

Thank you!

Some screenshots from the unit:

[hog4]

you cant go in green menu? if diagnostic is disable maybe you have a modify green menu and you have to enable it by it.

[ziomal-84]

you can enable by telnet or rs232

[agr]

How enable it without diagnostic? I mean if files already inside but CAN connection missed

[qian3303]

do you try cn fw to recovery it ?
and get password,to flash fw by telnet /rs232.
or enter emgency mode to try emgency password

[filipppc6]

How get emergency mode?

[t_quattro]

I gave up, and I sent the unit away to be re-hacked. It works ok now.