So I have done the hackmode password retrieval on many 850/950/150, as well as on a new NEX unit. (no i'm not stealing these things, I work at a shop that sells Pioneer and don't enjoy charging my customers to send their unit to Pioneer to reset the password).

 

I now have a customer with a Z120 and the old Hackmode trick does not seem to be working. I have searched a lot and found one thread stating to run the firmware update with a couple files replaced and as soon as the update was done the unit again asked for the password.

 

I also tried using hackmode with a Z140 testmode.key and ended up with the file maintenance screen, but instead of all the standard options it just had two options to write system data or something along those lines with it seems no way to get into the regular maintenance files.

 

Any ideas on what to try next or am I stuck sending this unit to Pioneer?