Search Archive

Bypass AVIC-Z2

By 901SoundsofMemphis · Mar 26, 2007in Hacks/Mods💬 572 posts👁️ 191,716 views
Page 11 of 23
Posted May 14, 2007 · 20:34 UTC#251
dimaj: Your GOLDEN! Thanks for getting this out there. I went through the Pioneer parts replacement website to purchase the Z2 guide. Interestingly, they list the Z1 guide at about $100USD - but its shown as no longer available. The Z2 lists about $25USD (no donations necessary :) , though we might consider a prize for the first to identify and share the bypass! Like the X Prize for AVIC Z2 owners lol), but its backordered about 6 weeks. This was a pleasant surprise today, my reading now commences :)

 

Cheers!

 

I called them customer support this morning asking about invalid character display (I have some Russian MP3s and tags are not shown correctly, however everything is showing if CD is going through Gracenote...) but anyhow.. the guy on the phone couldn't help me, so I asked him about a service manual and if I could get my hands on it...

Basically it is $110 for the manual and some other addition for $25... that's insane!!!

I found a better deal: $15 for the manual at http://getmanual.com

They seem to have a pretty large selection!

 

dimaj

Posted May 15, 2007 · 04:03 UTC#252

Does anyone have the $15 manual to download or am I being too cheap and should just pay and download it myself. :) Thanks.

Posted May 15, 2007 · 04:38 UTC#253

try scrolling up a few posts :roll:

Posted May 15, 2007 · 12:35 UTC#254

Lot's of good stuff in that guide, just can't discern anything of immediate relevance ... yet.

Posted May 15, 2007 · 14:11 UTC#255

oic, they are the same guides. Cool....I just downloaded it. I may pay $15 for the service manual to my car if it has wiring diagrams so I can connect the VSS. :)

Posted May 15, 2007 · 14:37 UTC#256

Guys, on page 221 of the SM, it talks about changing the hdd flag status for shipping. Isn't this the same as changing the region code? It states it won't erase any hdd info. I wonder if it would work for the bypass. Has anyone tried this?

Posted May 15, 2007 · 16:29 UTC#257

I caught that as well. My initial assumption was that this step was "locking" the hard drive - which is usually the step prior to units shipping. You might be right, region code might be set here as well - but it smells like locking of the drive. Further, it doesn't describe "unlocking" the drive.

 

Certainly requires some investigation. My trouble is that theres no detail provided behind what this means in the document. So there must be either supplemental documents, memo's, or circulars which would describe this and other "features".

Posted May 16, 2007 · 00:58 UTC#258

Ok, I have been reading the hell out of the service manual today. I noticed that there is a log for the sensing of "Low Speed Vehicle". It stores that variable somewhere in a log file. It should have some thing along the lines of "NG xx" Where the "xx" is the speed in mph that trips the unit into lockout unless bypassed of course. So my thoughts are to find this file on the HDD and change the "xx" from whatever it is, to a higher number like "99". If someone with a HDD image can look through files, open them up in notepad and do a search for "NG" minus the qoutes and then change the file and then test it, that would be great. I don't have access to my radio at this time. I would imagine that the log file would be pretty small. So I wouldn't worry about anything over 500K. This file may not be a .txt file but attempt to open it in notepad anyways.Or if someone would be so kind to send me a PM with a link to the files, I would be glad to search myself.

Posted May 16, 2007 · 01:03 UTC#259

Oh, another thing to compare is it wouldn't be in the update disk.

Posted May 16, 2007 · 05:08 UTC#260

I was not able to open the files due to ".rar". Is there any specific program i need or update needed to view the info?

Posted May 16, 2007 · 06:20 UTC#261

".rar" files are like .zip files

 

get a program called winrar to uncompress

Posted May 16, 2007 · 06:53 UTC#262

WinRAR from RARlabs is the best archiving tool ever!

It allows you to control pretty much all known archive types.

When you install the WinRAR, right-click on the first file and it will extract the manual from all files and merge it together for you ;)

Posted May 16, 2007 · 16:40 UTC#263

Something is REALLY odd happening here...

Last night my Z2 wouldn't boot. It was just sitting at the Pioneer boot screen and that's it... I read somewhere on this site that if you reset it multiple times it might work... well, it didn't but that's besides a point...

This morning it started working and it was bypassed!!! How I have no idea... I didn't do anything to it! I'm not sure about the DVD capability, but I was racing to work (100+) and I was able to navigate through all menus, do an address search and so forth...

This is weird...

 

P.S. Last night I got in to a Service Menu and was doing a HDD Read Test (which failed with the following message:

Read address: 00002469h

Result: NG [Error Code = 00000017h])

 

dimaj

Posted May 16, 2007 · 17:18 UTC#264
:shock: Maybe you should provide your HD image for some of these guys. A file could have been corrupted and that is what is allowing full functionality.
Posted May 16, 2007 · 18:22 UTC#265
It should have some thing along the lines of "NG xx" Where the "xx" is the speed in mph that trips the unit into lockout unless bypassed of course.

 

dimaj,

 

Do you think your NG error might have something to do with this other "NG."

What a coincidence!

Posted May 16, 2007 · 18:32 UTC#266

Not sure if this helps, but I found it on another Forum...

 

The only thing that I tried on the Z2 was grounding the dimmer cable (orange/white) and seems to bypass it. Navigation background would be stuck on daytime though.

Posted May 16, 2007 · 18:43 UTC#267

dwhitley0381: No go on that - for heck of it, I tried and no go. LOL, in process I accidentally grounded my vehicle ILL lead, blowing a fuse. Drove home Mothers Day night with no lights on dash.

 

dimaj: Keep us posted on your future findings with this. Who knows. In reading svc man I was of impression NG = "No Good", versus G for "Good". Think on the unit Hardware / System Info screen it uses NOK versus OK... Further, the previously mentioned log file, I don't believe would be storing variables for system use. Log files are status outputs, not (in my experience) used for storing static reference data. Please advise ANY other options you may have executed under the system screens.

 

All-in-all, it's good that the svc guides got out to more here. I have no doubt someone here will stumble into, or find the solution to bypass once and for all. Unfortunately I am taking a brake from car this week as my wife is still somewhat peeved I spent all day Mothers Day messing with it :( (can't imagine why :? )

Posted May 16, 2007 · 18:54 UTC#268

BTW, reference from page 201 of service manual regarding "NG":

 

"OK" is displayed for about 2 seconds when it is successful and "NG" when it fails, and the system returns to the touch panel test mode menu.

 

So even more confident NG = No Good....

Posted May 16, 2007 · 18:59 UTC#269

Hey guys,

 

When I got my unit installed, I kept on getting this annoying message about incorrect parking break connection (or something along those lines). Then I don't have the illumination connected (or at least i think so, because i don't have the day/night mode)

 

According to some of the posts i've been reading this all could relate to the bypass. If installers grounded illumination wire and grounded E-Brake, maybe after a few resets system went crazy and unlocked its full potential... just a stupid thought :)

 

But i just checked and everything works, including DVD playback during car movements...

 

I will keep you posted if something changes.

 

as far as images go, I will need to save up some $$$, get my HDD unlocked and then follow ducatiboy's procedure of removing my personal data from it. Once I'll do that, I will gladly share my image.

 

dimaj

Posted May 16, 2007 · 20:14 UTC#270
Something is REALLY odd happening here...

Last night my Z2 wouldn't boot. It was just sitting at the Pioneer boot screen and that's it... I read somewhere on this site that if you reset it multiple times it might work... well, it didn't but that's besides a point...

This morning it started working and it was bypassed!!! How I have no idea... I didn't do anything to it! I'm not sure about the DVD capability, but I was racing to work (100+) and I was able to navigate through all menus, do an address search and so forth...

This is weird...

 

P.S. Last night I got in to a Service Menu and was doing a HDD Read Test (which failed with the following message:

Read address: 00002469h

Result: NG [Error Code = 00000017h])

 

dimaj

 

Could you post up the instructions on how to get into this menu you got into?

Posted May 16, 2007 · 20:27 UTC#271

I posted it on page 16 (the very first message) but here it is again:

 

1. When +Battery and ACC are ON, push RESET and EJECT buttons simultaneously.

2. After 10 seconds Release RESET button and then EJECT button

3. Enter the password.

4. When the password has been entered, press [ENTER] key (that's a 'T' button)

5. If the correct password has been entered, the test mode menu will be displayed.

* The password entry screen, as the one used in the previous model, is no longer displayed.

<< Password for the service >>

The password is [ (up)] [ (up)] [ (down)] [ (down)] [ENTER].

If 8 digits or more are entered and [ENTER] key is pressed, it will be treated as a password error.

Up/down keys are defined by P.LIST

Posted May 16, 2007 · 20:35 UTC#272
I posted it on page 16 (the very first message) but here it is again:

 

1. When +Battery and ACC are ON, push RESET and EJECT buttons simultaneously.

2. After 10 seconds Release RESET button and then EJECT button

3. Enter the password.

4. When the password has been entered, press [ENTER] key (that's a 'T' button)

5. If the correct password has been entered, the test mode menu will be displayed.

* The password entry screen, as the one used in the previous model, is no longer displayed.

<< Password for the service >>

The password is [ (up)] [ (up)] [ (down)] [ (down)] [ENTER].

If 8 digits or more are entered and [ENTER] key is pressed, it will be treated as a password error.

Up/down keys are defined by P.LIST

 

Interesting. So you got into that menu, did you change anything? Also, is your p-brake wire grounded? From what im gathering from what you're saying, you got into the menu, your unit then locked up and you reset it several times. This did nothing, then today (or whenever it was) you turned your car on and now the unit is bypassed completely. Does that about cover it? If so, i think you're either extremely lucky, or you changed something in that menu and didnt realize it. OR.... you fubar'd your unit, something is broke, but you havent realized it yet.

 

I'm going to hold off on entering that menu until I see a few more people on here who have successfully followed the steps you did. Because its either a goofy fluke way to get the unit bypassed and wont work on everyones, OR its a quick way to screw up the unit.

Posted May 16, 2007 · 20:37 UTC#273

when you reset it did that reset 3d hybrid? if so you could be locked out again as soon as it gets back to 3d hybrid.

Posted May 16, 2007 · 20:48 UTC#274
Interesting. So you got into that menu, did you change anything? Also, is your p-brake wire grounded? From what im gathering from what you're saying, you got into the menu, your unit then locked up and you reset it several times. This did nothing, then today (or whenever it was) you turned your car on and now the unit is bypassed completely. Does that about cover it? If so, i think you're either extremely lucky, or you changed something in that menu and didnt realize it. OR.... you fubar'd your unit, something is broke, but you havent realized it yet.

 

I'm going to hold off on entering that menu until I see a few more people on here who have successfully followed the steps you did. Because its either a goofy fluke way to get the unit bypassed and wont work on everyones, OR its a quick way to screw up the unit.

 

So, here's the thing...

Yesterday I got off work and turned on my car. My unit was sitting at the Pioneer screen for almost 10 mins and nothing changed. Then I did a few resets - still no luck. I went to this form to see if somebody had the same problem and found a thread which lead me to believe that this was a heat related problem. Somebody also mentioned that if unit behaves the way i described - hard drive failed. That's when i decided to run a quick "Read and Write" tests to see if drive is still OK.

 

I have NOT changed any settings in that menu!

 

After I finished some diagnostic test unit still didn't come up. This morning (after a, more or less, cold night) unit started up like nothing happened. Then by accident I realized that all menus are still enabled even though I was moving.

 

So, either unit went crazy due to a heat issue and completely reprogrammed itself (which is not practical) or there's an issue with a hard drive and it couldn't read some sector which is responsible for setting speed limits at which unit disables most functions. If it helps, the address that was failing on read test is: 00002469h

 

dimaj

Posted May 16, 2007 · 20:50 UTC#275
when you reset it did that reset 3d hybrid? if so you could be locked out again as soon as it gets back to 3d hybrid.

 

I'm in the Basic Hybrid (or something like that) as a learning mode, however all other settings are still saved (right turn, left turn, distance, etc.) including all my radio settings.

 

I assume that when you are talking about Hybrid, you are talking about 3D Calibration, right?

 

dimaj

Page 11 of 23