Zed-Bull clone users, look here!

[Fallen]

Started a thread in another section, probably should of been here. Looking for input on the clone chaps.

http://www.digital-kaos.co.uk/forums/f68/zed-bull-clone-what-can-cant-do-143618/

Cheers

[gopelhu]

Hi,

If you have more questions for zed-bull clone key programmer please write me.

Here is the website that you will see the item description : http://www.obdauto.com/views.asp?hw_id=687

All Chinese Zed-bull clone key programmers works with Zed-QX v2.02 software but NOT with IEA software.

These Chinese Sellers copied the product description from the original website and after was pasted onto their website.

Which info still do you need ?

Regards,G

[obdmaster]

Well paul12345 clone zed bull came with the IEA software, he posted it on forum m8

[Fallen]

Paul's write up was great describing the what he went through to get the machine but once he got it, the reports stopped unfortunately.

[paul_12345]

Not much to add, theres no obd cable - nor is obd supported in the clones software version, the eprom functions are pretty much the same as the transponics/ad900 clone, seems to be able to create the transponders from blanks ok.

I'd imagine updates will be slow if any, as they will have to extract the firmware again and crack the protection again.

So not much gains over ad900 clone unless you want to create the transponders listed in the software, or precode fiat id48 etc

[Fallen]

Thanks Paul, can it copy TPX1 and 2?

[gopelhu]

Hi all,

Where did you buy the Zed-bull key programmer which works with IEA software?

Write here the link, please...

Thanks,G

[gopelhu]

Hi all again,

Does anyone have this software I attached ?

If so, is it possible to upload this software here.

I think ( 99,99% ) this is the latest version of Transpronics software.

Regards,G

[Iggie]

Not much to add, theres no obd cable - nor is obd supported in the clones software version, the eprom functions are pretty much the same as the transponics/ad900 clone, seems to be able to create the transponders from blanks ok.

I'd imagine updates will be slow if any, as they will have to extract the firmware again and crack the protection again.

So not much gains over ad900 clone unless you want to create the transponders listed in the software, or precode fiat id48 etc

Are you saying that you can prepare blank PCF7935 transponder (without using precoded from Istanbul Anahtar)? And what about TPX1 and TPX2? I heard that is not possible to copy 4D to TPX2!!!

[autolockmasters]

I have bought one from china couple of weeks ago. I am very impressed by it. The software version it came with is 5.08. Can generate alot of ID's from 7935, 7936 and also couple of 7946 for Renault. Unlock some ID48 locked transponders as well as some VAG CAN chip.

Does copy 4c and 4d on to EH1, EH2. Have not tried TPX. Also allows you to read/write custom data to some HITAG transponders. (see pics attached)

I think it well worth the money (for me anyway)

[MASTERLOCK]

autolockmasters (http://www.digital-kaos.co.uk/forums/members/143441-autolockmasters/) where did you bye it? have you got link?

[gopelhu]

Hi,

Where did you buy this Zed-Bull key programmer which works with IEA software and how much was it ?

Regards,G

[autolockmasters]

CNAUTOKEY TECHNOLOGY CO., LTD. (http://cnautoqi.com/proshow.asp?i=878)

This is where i bought it from and paid 550 usd + shipping

[electronicar]

Hi guys , maybe u can help me ?
I bought AD900Pro chinese clone , it reads all keys it supposed to but gives me "write error " when trying to copy . I have tried a few suppliers in China , all their chips dont seem to work ?
If i read a key successfully then it allows me to write the same saved data back to the orig chip , does that make any sense ? Someone said i should order PRECODED chips , what's the difference between a precoded and a normal blank ? Precoded with what ? Sorry for all the questions , but i am between a rock and a hard place :damnmate:

[Fallen]

Forget chinese AD900's, there garbage.
They are transponics clones, ancient machines, think AD90.

Any clone key copier will never work 100% and if you need it professionally, that's what you need.

If I was after an original key cloner I would look into a TMPRO 2.
You only buy the modules that you need.
It can do a LOT more than copy keys and in the future you will not have to buy another machine as they upgrade it (software and hardware) all the time.

Transponder Maker Pro 2 (http://www.bogivarna.com/tmpro/tmpro.html)

[gopelhu]

Hi,

Does this China type work with IEA software?
If so, what version IEA software?

Regards,G

[autolockmasters]

Yes it does. The software version it comes with is zed-bull 5.08 produced by IEA. software is easy to install if one follows the instructions given with it.

Also have a look at the pictures in my earlier post.

[cjawahir]

autolockmasters (http://www.digital-kaos.co.uk/forums/members/143441-autolockmasters/) can you upload the pc software here ?

is there umlimited amount of token ?

i look at you pic and i see zero token , how are you going to update the token , with out token you cant do anything like program chip to start car .

cj

[gopelhu]

Hi all,

I have these software version but I do not have *.msi file to the newest version.:banghead:

Regards,G

[gopelhu]

This is a v5.08 version....that I got and not a setup version but folder only:(

First install the v5.06 and 2nd run v5.08....

Regards,G

[isaky]

es possible duplicate a id46 with this clone machine
thank you

[autolockmasters]

I am out at the min. Will post the software when I get in. It says 0 token cas I did not have my zed bull connected. I have 286 tokens and the sellr said the tokens are cracked and I do not need any more tokens. Same as t300.

P.s. ID 46 copy is not possible with version of software.

[cjawahir]

I am out at the min. Will post the software when I get in. It says 0 token cas I did not have my zed bull connected. I have 286 tokens and the sellr said the tokens are cracked and I do not need any more tokens. Same as t300.

P.s. ID 46 copy is not possible with version of software.

thanks for your reply , do you know if it can copy to tpx2 .

cj

[autolockmasters]

Sorry for the delay been a bit busy. Here is the software for zed bull 5.08. It includes the installation instructions and manual. I have not included "Microsoft .net frame work 3.5" because of the size. You will have to install download and install it before installing the software.

cjawahir (http://www.digital-kaos.co.uk/forums/members/106566-cjawahir/) : I have tried Silca key head to copy onto but have not tried TPX chips. But if you select to copy through the software it gives you the option to choose between Silca head or TPX chips as well as z4c chip. hope that helps.

[gopelhu]

Hi,

When can you try to copy 4D ( ID60....67 ) into TPX2 ?
TPX2 transponder cheaper than EH2 .

Regards,G

[Fallen]

I seriously doubt a clone will be able to copy TPX2 as they need access to the official servers to crack the key.
There is a standalone box that JMA have released for their machine which the zed bull can use but once again, I’m pretty sure the clone will not work with it.
Can somebody with a clone confirm this?

[cjawahir]

hi all, the software install perfect , install older version and then copy and paste the new version files to the program folders .

thanks again to auto lockmaster , can you try to copy to tpx2 please .

cj

[MASTERLOCK]

i dont think it can tpx2 as Fallen says need extra box JMA TPX cloner because original zed bull do tpx2 via internet.

[cjawahir]

hi all , it is my understanding that this clone can only copy 4c chip , and can only copy to eletronic head , not to tpx1 and to tpx2 .

cj

Copy zedbull function：
1：can write data on the blank chip as the list：
Directly Copy 4C chip




2：can not copy 4D chip, JMATPX1 chip, JMATPX2 chip

[canorivera]

Hi all, do you think this clone will unlock Chrysler remote head keys???

Thanks...:smokin:

[gopelhu]

Hi all,

Yes, Fallen is right, NONE OF THE CLONES CANNOT COPY 4D TO JMA TPX2 !!!!

Today I had some time and could look arround on the internet.

I'm interested in Code Reader 2 or Zed-BULL clone which can copy 4D to TPX2.
Zed-BULL does not work without the internet and access login !!!
On Russian website very informative descriptions are available about these key programmers.
They clearly tell you that these tools cannot copy 4D to TPX2.

I have uploaded two descriptions on Code Reader 2 compare them.

Regards,G

PS: I got an offer for original Zed-BULL from a Hungarian distributor.
The price is 1700Euro+VAT this includes ( 4D to TPX2, ID46 copy and 90 eeprom application ...etc ).

[cjawahir]

type 46 copy is on eletronic head and you need the car to do this job .

cj

[drivesure]

you can buy an extra unit for the zedbul - around 650 euro ( internal board for zedbull) that allow copy of 4d to TPX2 as a stand alone unit- no internet needed. i believe zedbull wll bring a Z4D transponder out soon and you can copy onto these as well. time with the internal board module is also much quicker to copy.

[drivesure]

another way would be with the tex cloning cd's. when reading a 4d key you need page 4 info to copy the key. page 4 is the secret code that gets calculated. if you can figure out page 4 info with the cd's then you can write the 4d manually using the zedbull ( not sure if clone will work). picture attached to write to tpx-2 . it starts from top and will be page 1, 2, 3 ,4 (secret key)

[adam66]

Hi guys , maybe u can help me ?
I bought AD900Pro chinese clone , it reads all keys it supposed to but gives me "write error " when trying to copy . I have tried a few suppliers in China , all their chips dont seem to work ?
If i read a key successfully then it allows me to write the same saved data back to the orig chip , does that make any sense ? Someone said i should order PRECODED chips , what's the difference between a precoded and a normal blank ? Precoded with what ? Sorry for all the questions , but i am between a rock and a hard place :damnmate:
These machines only clone T5 chips

[gopelhu]

Hi again,

Today I got this Zed-BULL setup. Version is v7.0.1
Does this software version works with the china clone hardware version ?????????????

Can somebody help in this matter?

Regards,G

[obdmaster]

Can autolockmasters or someone else just confirm the eeprom functions are working on clone zed bull, before i blow my hard earned cash.


Much thanks in advance as always.

[gopelhu]

All.....

Today I received the CR2 key programmer and I tested it and works perfectly !!!!!!!

The CR2 can copy all 4D transponders into TPX2 or EH2 !!!!!!

It has 44 eeprom function. I tested all Fiat ID48,Philips Crypto and works 100%.

I bought CR2 key programmer from Vag-com,TachoPro,KWP2000,BMW Scanner,BMW Carsoft,MB Carsoft,ELM323,Code Reader,Can-bus (http://www.obdfactory.com/product_view.asp?id=618)

OBDMASTER....If you can please wait untill next week Tue. or Wed. because i will receive ZB clone programmer and I will testing all function and I will let you know the result.

I bought ZB clone programmer from CHEERY TECHNOLOGY LIMITED (http://www.autocheery.com/a/en/product/Car_Key_Programmer/2010/0528/220.html)
I got the best price $550+$50 shipping charge= $600 + 5% PayPal fee so total = $630
This ZB works with IEA software.

Regards,G

[obdmaster]

can you upload software m8, that comes with codereader 2 so i can take a look m8.

and how much you pay for codereader 2?


thanks for your help m8

[gopelhu]

Hi,

I can upload the CR2 software but it will not work because it needs USB hardware key and security card.
If you want it I can upload it.

I bought this CR2 from abdfactory for $450+$50 ship DHL+ 5% PayPal fee + $22 (because its price has gone up) so total = $547 , because the boss of obdfactory is a good friend of mine.
He gave me a lot of discounts.

Regards,G

[obdmaster]

Is the software for eeprom functions on code reader 2 the transporonics software re badged m8, with hitag and few others added?

[gopelhu]

Hi,

Yes, CR2 contains 44 eeprom function and lot of crypto applications ( such as Hitag2,Texas DST, Megamos crypto...)

I uploaded some pictures on CR2 applications.

At ID46 reading you can see if the transponder is locked or not.
If is is locked it is marked RED.
If it is unlocked it is marked GREEN.

4D decoder needs min 2 max 11 minutes to find Pg4 decrypt data.

Regards,G

[gopelhu]

These pictures are the 4D decrypt solutions

[Alekso]

And now I will tale you something funy...something that you didnt see...
Colect all your money spend on noworking,un-update,low quality,3 in 1 machines,frods from false salers....
And you will see that you lose twice more money then worth the original,nervous,lost time and bad service to the costumers,wondering what to do without support...
I findout this when I buy my third T-300
Its a basic rule "Niggard pay double" :) :) :)
No needs for THANKS button,its a free advice :)

[obdmaster]

And now I will tale you something funy...something that you didnt see...
Colect all your money spend on noworking,un-update,low quality,3 in 1 machines,frods from false salers....
And you will see that you lose twice more money then worth the original,nervous,lost time and bad service to the costumers,wondering what to do without support...
I findout this when I buy my third T-300
Its a basic rule "Niggard pay double" :) :) :)
No needs for THANKS button,its a free advice :)


Dont worry wont be hitting the "thanks button", as for the t300 yes they are low quality clone, if you wanted the same but good quality, should of paid the extra $20, and bought an MVP clone. I have one my friend who has ad100pro original has one also.Never let us down, both of us swear by them, absolute bargain.

This thread is talking about ZED BULL clone and code reader 2, which you obviously know nothin about . So goodbye m8.

[ramhalo]

And now I will tale you something funy...something that you didnt see...
Colect all your money spend on noworking,un-update,low quality,3 in 1 machines,frods from false salers....
And you will see that you lose twice more money then worth the original,nervous,lost time and bad service to the costumers,wondering what to do without support...
I findout this when I buy my third T-300
Its a basic rule "Niggard pay double" :) :) :)
No needs for THANKS button,its a free advice :)


Good advice alesko BUT...with the price of these so called non-workin,low quality,un-update,etc compared to the price of the original machine its worth it to purchase .thats my opinion...unless AD an ZEDBull or any other machine manufacturer decide top drop the prices of the original products for some people the clone is their only option. its ridiculous to see what some of these machines cost but amazingly enough the clones work better in some instances than the original......:smokin:

[ramhalo]

And now I will tale you something funy...something that you didnt see...
Colect all your money spend on noworking,un-update,low quality,3 in 1 machines,frods from false salers....
And you will see that you lose twice more money then worth the original,nervous,lost time and bad service to the costumers,wondering what to do without support...
I findout this when I buy my third T-300
Its a basic rule "Niggard pay double" :) :) :)
No needs for THANKS button,its a free advice :)


Good advice alesko BUT...with the price of these so called non-workin,low quality,un-update,etc compared to the price of the original machine its worth it to purchase .thats my opinion...unless AD an ZEDBull or any other machine manufacturer decide to drop the prices of the original products for some people the clone is their only option. its ridiculous to see what some of these machines cost but amazingly enough the clones work better in some instances than the original......:smokin:

[Alekso]

Dont worry wont be hitting the "thanks button", as for the t300 yes they are low quality clone, if you wanted the same but good quality, should of paid the extra $20, and bought an MVP clone. I have one my friend who has ad100pro original has one also.Never let us down, both of us swear by them, absolute bargain.

This thread is talking about ZED BULL clone and code reader 2, which you obviously know nothin about . So goodbye m8.

Wile you are tying to work with software from 2005y. Im working with software from yesterday...oh yes,the diference is that I have all the cars in the menu :)
And what is the diference...well you will buy evry year a new T300,or MVP what is the same,is you didnt notice they have the same software,and the number version they change evry mance so you can buy like a new update.Original software what is ofered in T300 and MVP is 4.80 and here stop evrything becouse now they have new hardware whats use 8.89 latest update :)
Colect all the machines what is standing in your closet and calculate the price.That will be atleast twice expencive then the original.
An other thing,about zedbull...well its 1600 euros.Chines zedbull is 400 USD,plus calculate the expences for transport and problems what will be when the machine will come on costums :)
Something else,software from Chines zedbull is 5.08 what is software from 3 years ago.It have less then 50 eproms aplication and thats all.Texsas 4D its not suported,Philips cripto 46 its not suported.
Whats the diference beatwin Turkey Zedbull...
With the new update there will be more then 100 eprom aplications including BMW CAS programing transponder/remote,and a lots of motorbikes.Plus COPY 4D and philips 46.Good suport with a great choise of virgine files...so if you acsedently damige the eprom to be able to get out of the SHIT you made :)
Also one future is developin a VAG precoded CAN meg.48 what will work on OBD...and probably many more things what I will recive them for free becouse I have the original :)
And you can weith for about 5-10 years and you will buy them from china for exstra very low price.
What I work now,you will work that for about 5 till 10 years in to the future.And all that for a 1600 euros what is a triple price of the clone.We are talking for 1600 euros,not for 16000 euros.Beather ilustrated that is 16 cars made by zedbull.
:musicus:

[Alekso]

Good advice alesko BUT...with the price of these so called non-workin,low quality,un-update,etc compared to the price of the original machine its worth it to purchase .thats my opinion...unless AD an ZEDBull or any other machine manufacturer decide to drop the prices of the original products for some people the clone is their only option. its ridiculous to see what some of these machines cost but amazingly enough the clones work better in some instances than the original......:smokin:

Meybe...but thanks to the originals I can make keys for Mercedes Benz till 2010 :)
I make keys for BMW and VAG too.I always buy originals and till now I never lose money and Im the best.Its not becouse of me,its becouse of the machines,I can make evrything...and becouse of that Im the person who make the prices.I take the Honey and for the rest stay the scraps.

[canorivera]

Im the best.

hahahahahahaha

Who says that????????? !!!!!!!!!!!!!

Come on, congratulations for buying original tools, so If you don't like clones, what a hell are you doing in this forum, just go to IEA forum and leave us alone.....
:celticparty:

[obdmaster]

Meybe...but thanks to the originals I can make keys for Mercedes Benz till 2010 :)
I make keys for BMW and VAG too.I always buy originals and till now I never lose money and Im the best.Its not becouse of me,its becouse of the machines,I can make evrything...and becouse of that Im the person who make the prices.I take the Honey and for the rest stay the scraps.



I am very pleased you have original and doin so well, is there a point to all this? lol

Or does it just peave you, that your original has a clone for a quarter of the price, which from what ive read seems to work quite well. lol

[Alekso]

I am very pleased you have original and doin so well, is there a point to all this? lol

Or does it just peave you, that your original has a clone for a quarter of the price, which from what ive read seems to work quite well. lol

Yes,it will work same...for about 10 years :)
Now you are hooping that you will work the things that I wosh working 3 years ago...someone is calling that "demode" :)
Probably with that update you will be capable to make keys for a museum cars :)
No afence,just jokeing.
Im makeing a comparation beatwin original and clone.That is the subject of this post.Well see for your self.im not saying nothing more.

PS:even the clone if its free I dont like them,I need support for my money and my money need to the company to develop new futures.If that dont exsist,then the Chines will dont have what to clone :)

[Alekso]

hahahahahahaha

Who says that????????? !!!!!!!!!!!!!

Come on, congratulations for buying original tools, so If you don't like clones, what a hell are you doing in this forum, just go to IEA forum and leave us alone.....
:celticparty:
Im a secret agent,something like 007.Im working against China,Mao`Ce Tung govrement.I make a conspiricy against there superior Clone technology.

PS:I know the originals are no good so I must lie the people to buy them.

[obdmaster]

Yes,it will work same...for about 10 years :)
Now you are hooping that you will work the things that I wosh working 3 years ago...someone is calling that "demode" :)
Probably with that update you will be capable to make keys for a museum cars :)
No afence,just jokeing.
Im makeing a comparation beatwin original and clone.That is the subject of this post.Well see for your self.im not saying nothing more.

PS:even the clone if its free I dont like them,I need support for my money and my money need to the company to develop new futures.If that dont exsist,then the Chines will dont have what to clone :)

Glad to see youve calmed down m8. lol

But you do have valid points, the clone you buy, no updates, no support. But im auto-elec, not autolocksmith, i need lots of machines and i have lots. lol its the eeprom functions that interest me and to get original in uk with eeprom functions, would be over ?2000.
the v5.08 has 55 with clone m8, and there around $600 delivered BIG difference m8.

[canorivera]

Im a secret agent,something like 007.Im working against China,Mao`Ce Tung govrement.I make a conspiricy against there superior Clone technology.

PS:I know the originals are no good so I must lie the people to buy them.


Clone, James Clone....

[Alekso]

Glad to see youve calmed down m8. lol

But you do have valid points, the clone you buy, no updates, no support. But im auto-elec, not autolocksmith, i need lots of machines and i have lots. lol its the eeprom functions that interest me and to get original in uk with eeprom functions, would be over ?2000.
the v5.08 has 55 with clone m8, and there around $600 delivered BIG difference m8.

You dont need the zedbull programers for reading eproms and motorola,so you will buy just the machine,what makes to be more chiper.For reading the eproms you can use any programer.If in england is more expencive...then try to find from other place,mebe from the source.
And here is a place from where you can find chiper machine in UK,Its less then ?1300 :)
Hickleys :: The Zed-Bull Transponder Machine (http://www.hickleys.com/diagnostics/zedbull.php)

[obdmaster]

yes m8 ?1300+vat then eeprom fuctions are around ?450+vat extra. think everywhere else eeprom functions are included in basic package. But were in rip off england m8. lol

Attached is there brochure plus prices m8

[ray-ray]

zen-bull support is always late,and there forum is weak.there is no type of share info. there.theard are short with little info. (your in the dark) they give you a honda unlock menu with no info. provided (honda rhk do not lock up there reusable).most of the cloner software are bought out,and not created or crack.chrysler unlock was first sold by tmpro then tango and the other follow.nothing new to the chrysler has been done the small button still can not crack.

[ramhalo]

You dont need the zedbull programers for reading eproms and motorola,so you will buy just the machine,what makes to be more chiper.For reading the eproms you can use any programer.If in england is more expencive...then try to find from other place,mebe from the source.
And here is a place from where you can find chiper machine in UK,Its less then ?1300 :)
Hickleys :: The Zed-Bull Transponder Machine (http://www.hickleys.com/diagnostics/zedbull.php)

some of these suppliers dony allow you to purchase these machines if you not from the specific country."please contact your resident distributor " ive priced the ad 100 pro fully loaded which works out to about 130 000.00 ZAR (south african rands)the machine alone is about 20 to 25000.00 rans plus you must still purchase software modules which costs between 8 an 12 000 rands a module.tha ad 900 pro costs about 45000 rands pus modules..so do the math guys.

[gopelhu]

Hello again.....


Today I received the Zed-BULL china key programmer.

I tested it and works perfectly. Works with IEA software.
It has the red key.This key equal with the security login card.
It has 286 tokens and it has enable all eeprom functions and transponders menu.Pls check the attachment.

Tomorrow I will testing eeprom and transponder functions and I will let you know the result.

Regards,G

[canorivera]

That's great gopelhu (http://www.digital-kaos.co.uk/forums/members/116124-gopelhu/), I will be waiting for your test's feedback...

Thanks again for all your help.

[pasonjayne]

Do you think it makes a difference where we buy these Zed Bull clone units from as i suspect they all come off the same production lines and are distributed across all the chinese online sellers.

I'm looking to buy one of these units and have in the past bought a lot of units off OBDFACTORY and have had no problems with their kit. It makes sense to stick with a supplier that has delivered in the past what they say unless of course there are more than one type of Clone Zed Bull units knocking around with some better built than others. If this is the case then i think it may best to go with a supplier that a DK member has used and has no problems.

Opinions appreciated.

[obdmaster]

gopelhu m8, thankyou for pictures im eagerly awiating your test results. Many many thanks m8.

[gopelhu]

Hi again,

Today I tested ZB china key programmer and works perfectly 100%.

1st: It can copy 4D transponder into TPX2 in stand alone mode. It does NOT need internet connection.

2nd: Eeprom fuctions work perfectly and does NOT reduce tokens. Check the ZB_Atmega2561 picture. It cannot overwrite the token.:rock:

3rd: Transponder fuction work but at the moment I do not have blank transponder.

4th: There is OBDII fuction implemented but I haven't received OBDII cable in the package.

All in all it is worth the price, it is worth buying it.

It is better than CR2 because 4D decryptor is in the main unit.

Regards,G

[pasonjayne]

That is good news, seems like a worthwhile purchase was almost going to buy CR2. You mentined that the OBD cable to supplied, was this missed off shipping or still in production to work with the unit?

[gopelhu]

Hi all,

Yes, it was missing from the package.

It was not sold with the OBDII cable.

Kit contains:
1: main unit
2: security login card
3: USB cable
4: power supply
5: 1piece DVD (setup and information)

Regards,G

[pasonjayne]

I have asked my usual supplier to open one up to see what comes with the unit, so i will update to see if they should come with it or not and to see if they are identical stock to the one you bought.

[canorivera]

So this you bougth from a different provider than OBDFactoty, any reason??

Thanks.

[gopelhu]

Hi,

Yes there is a reason.

What obdfactory sells it works with Zed-QX v2.02 software and NOT with the IEA software.Pls check the attacment.

This is the only reason.

Regards,G

[canorivera]

Hi,

Yes there is a reason.

What obdfactory sells it works with Zed-QX v2.02 software and NOT with the IEA software.Pls check the attacment.

This is the only reason.

Regards,G

That's a BIG reason, thanks my friend, it would be great that you continue giving us your comments...

Thanks...:barscarf:

[Fallen]

Hi gopelhu, nice reporting!

I'm shocked that it can copy 4D to TPX2. You actually cloned a 4D key and started the car with it?

[gopelhu]

Hi,

Yes I cloned a 4D Yaris transponder to TPX2 and after started the car with TPX2 transponder.

Regards,G

[pasonjayne]

Spoke to OBDFactory and they confirmed they have had some bad feedback on the ZedBull they are selling and are now pushing CR2 instead for this reason.

Your supplier must have different batch, you not think it is only a software problem rather than hardware?

[paul_12345]

I haven't used alot of functions of my zed-bull but the few eprom functions that I've used work well.

id's transponders fine etc, not tried copying to txp2 as I haven't got any.

Dont see any reason why all the eprom functions wouldn't work as it does fiat id48 perfect which ad900 dont do.

There's a few different factories making them.

Mine looks the same apart from it has a green screen rather than the blue.

Just ask for a screenshot of the software if uses before buying or ask the version of software it uses.

Also for anyone who's interested you can open the exe with reflector to see the code, also works with the newer software posted here. (by the way the newer software dont work on this version it gets stuck on retrieving number of tokens)

[pasonjayne]

Thanks Paul, deffo worth knowing that. Looks like the machine Gopelhu bought from Cherry works fine with 508 software and the only setback was the missing OBD cable.

I suppose as long as people like Cherry dont change their suppliers then there could be common ground where to buy good working machines from.

So question for Gopelhu do you think the clone Zed Bull you have from Cherry is better than the CR2 you had from OBD factory, not for quality but for functionality. Or would you say it is handy having both machines?

Thanks all for the info so far.

[gopelhu]

Hi all,

Thanks for the questions.

Before anyone would write anything, I was looking for a key programmer which can copy 4D transponder to TPX2. I wasn't inerested in any other quality or something else.

I wrote a lot on this forum and asked for help but didn't received any.
So I decided I would check all of them.

Currency exchange rate:
$1.00 = 230HUF
GBP 1.00 = 340HUF
EUR 1.00 = 290HUF

I got three offers from 3 Hungarian distributors.

Zed-BULL = 1700EUR
TPX clonner = 500EUR
=================
Total = 2200EUR -200EUR discount = 2000EUR + VAT = 665000HUF

Hungarian VAT = 25%

JMA TSR5000 + TPX clonner = 450000HUF inc VAT

AD900/Megacopy = 2000EUR
90 eep application = 90 x 36EUR = 3240EUR
TPX clonner = 700EUR
==================================
Total = 5940EUR + VAT from elmetools = 2153250HUF

After considering all the programmers and their prices I decided I would buy these chines clone key programmers because the total price of all chines programmer is rather lower then only one authentich programmer.

All the chinese programmer cost me $240+$549+$630=$1419

So any may want to buy CR2 or ZB the functionality of both programmers are almost the same.

I will keep the ZB but sell CR2 and super AD900.

Regards,G

[Fallen]

" Hungarian VAT = 25% "

I think I just shat myself a little!

[gopelhu]

Hi all again,

Yes, Hungarian VAT is really 25%.

I have a little problem with ZB 4D cloning.
Please check the attacment, but the car is started.
I don't know why?

Maybe enough DATA bytes at Yaris?

RESP code is different.....:banghead:

The CR2 copied all info to TPX2 !!!

Regards,G

[pasonjayne]

I have uploaded the manual and software from OBDFACTORY as you can see the hard unit is slightly different, Key pad colour etc which shows different batch/manufacture of unit.

Gopelhu yours from Cherry seems to be better unit for software etc so if anyone contemplating buying from any other source than Cherry may want to get pictures and software first so that you can compare to see what batch of machine you may receive. OBDFACTORY are not happy selling theres due to problems so again be carefull off other suppliers.

I'm now swaying back to CR2 after issue with 4D to TPX2 something not right somewhere.

[paul_12345]

I have uploaded the manual and software from OBDFACTORY as you can see the hard unit is slightly different, Key pad colour etc which shows different batch/manufacture of unit.

Gopelhu yours from Cherry seems to be better unit for software etc so if anyone contemplating buying from any other source than Cherry may want to get pictures and software first so that you can compare to see what batch of machine you may receive. OBDFACTORY are not happy selling theres due to problems so again be carefull off other suppliers.

I'm now swaying back to CR2 after issue with 4D to TPX2 something not right somewhere.

Do not buy this version it comes with zedqx software, also the screenshots aint right.

Also the 'obd' screen just shows the VAG group, looks like its zedqx software modded to include vag-prog or similar made to look like zed-bull

My version only has usb port, power switch, power jack and a 6 pin socket

[obdmaster]

Ive ordered one from yoyo at anyscan, i sent her glopehu,s pictures of unit and software pictures to be sure, and she has assured me its the same when it arrives i will post pics and post test results.

[pasonjayne]

Thanks Paul for info, if yours doesnt have OBD port and is the same unit as Gopehus then that would explain why no OBD lead was shipped with his.

Other question would be how can it utilize OBD functions?

[gopelhu]

Hi all again,

The OBD port of Zed-BULL is 6pin telephone connector.

I uploaded the original Zed-Bull pictures and my Zed-BULL pictures. Please compare them.

Regards,G

[pasonjayne]

Gopelhu, would you still buy over CR2 ? is it worth having both? Thanks.

[gopelhu]

Hi,

Yes, it is worth buying both.
CR2 cost is from $550 till $750 and ZB cost is from $580 till $760.

Zed-Bull available :
Zed-BULL V508 Key programmer (http://www.obd2shopping.com/index.php?route=product/product&path=24&product_id=102&gclid=CIaL772AxqMCFQsgZwodU06yZw)
CHEERY TECHNOLOGY LIMITED (http://www.autocheery.com/a/en/product/Car_Key_Programmer/2010/0528/220.html)

I bought from Cherry. Pls contact Jacky.

Regards,G

[canorivera]

So after that TPX2 info missing problem, what will you recomend as the best for copying TPX2 and in general???

Thanks...

[gopelhu]

Hi,

I would recommend both ( ZB and CR2 ).
ZB tells from 4D if it is a Master or Valett.
ZB copies only the first 8 bytes.

CR2 includes a 4D decoder so it copies the 4D chip to the full.
While in CR2 there are 44 eeprom applications, in ZB there are 55.
I will write later these fuction.

I will keep both programmer for such money.

Regards,G

[obdmaster]

Hi all again,

The OBD port of Zed-BULL is 6pin telephone connector.

I uploaded the original Zed-Bull pictures and my Zed-BULL pictures. Please compare them.

Regards,G

Got to say gopelhu m8, your zed bull clone looks identical to original, just hope mine is as good.:smokin:

[gopelhu]

Hi all,

Today I checked my CR2 content and I found this COM cable.
This cable works with my ZB.
Here are the pinout and some pictures on this cable.

I have an idea.

All V.A.G. cars communicate with VAG-COM COM DB9 interface (KW1281 and KW2089).
All Toyota immobox communicate with KWP2000 protocol.
I will make the VAG-COM COM DB9 cable to my ZB for OBD function and i will let you know the result.

Regards,G

[paul_12345]

Hi all,

Today I checked my CR2 content and I found this COM cable.
This cable works with my ZB.
Here are the pinout and some pictures on this cable.

I have an idea.

All V.A.G. cars communicate with VAG-COM COM DB9 interface (KW1281 and KW2089).
All Toyota immobox communicate with KWP2000 protocol.
I will make the VAG-COM COM DB9 cable to my ZB for OBD function and i will let you know the result.

Regards,G

The obd cables have firmware in them dont they? So unless they cracked this and put it in the zed-bull any other cable wont work.

Also if they did crack the cable firmware you'd of thought they would have gave a cable with the zed-bull as it would sell more.

[obdmaster]

I agree with paul gopelhu m8, dont do it think you will either do zed bull harm or the car you try it on m8.

[gopelhu]

Hi,

I logged my ZB with HDD serial port monitor.
I have seen the data commonication the ZB sent via KWP2000.
I do not work with ZB on cars just on the table with VAG dash or Toyota immobox.

I will give it a try and let you know the result next weekend.

Regards,G

[gopelhu]

Hi,

Can you upload more pictures on VAG ZB OBD cable?
(inside and outside pictures)

Regards,G

[paul_12345]

I not got any pics of it, but I've just tried entering the obd menu and it says you must install the software package xxx ect

So if yours does different maybe your version is able to do obd with a more simple obd lead??

If you brave you can alway try the obd update in the software using a fake file to see if it does anything more than say bootloader failed

if it responds than maybe they have included the proper cracked obd cable firmware in the zed-bull, else maybe they just added their own software to do the obd on yours like the old version of the cloned zed-bull did.

[gopelhu]

Hi all,

It seems Paul is right !!!!

I have just written a datalogger program for serial port.
You may want to check data communication you can use this program.
In this program you have to enter manually the BaudRate.

This is the communication of VAG dash family:
paOdd, 10400, db7, sb1 KW1281 and KW2089

This is the comm of Toyota Immobox:
paNone, 10400, db8, sb1 KWP2000

I will even try to use an ordenary VAG-COM DB9 cable for my ZB.
I bought one on the UK eBay yestreday,that I will presumably receive next Thuesday.

Regards,G

[Taher]

Hi all,

Where did you buy the Zed-bull key programmer which works with IEA software?

Write here the link, please...

Thanks,G
www.NourAutoKey.Com Take a look in this website and if you find somthing interresting just Contact us
Thanks

[gopelhu]

Hi all,

Does anyone have above v5.00 or v5.04 *.zbp file???
I have v5.04 , and I could decode my file.
I'm looking for higher version because i want to build a developer board and can test it.:idea:

Other think I have asked for pictures on any original OBD cables for Zed-BULL, but again nobody helped me.:(
I just want to check what there is on a PCB board.

Regards,G

[drivesure]

i sent you a picture of renault lead. my lead is still under warranty am still trying to get the tag loose without damaging it (otherwise bye-bye warranty). will post pics if i get it off. sent some other info as well.

[obdmaster]

My zed bull is exactly same as gopelhu,s. Used eeprom functions to make transponder and read pin of 1998 vw transporter, prepared few transponders, its read and copied 4c to eh1 and vice versa and its read 1998 kangoo transponder and gave me pin code for van from transponder.

Cant see it being able to copy 4D as even original cant in basic package without internet connection , but i will try and post results. Overall im very happy with it.


Thankyou gopelhu for informing me about this excellent clone.

[MrSporty]

Gopelhu, I see you posted a picture of the Atmega MCU in your ZB clone. Would it be possible for you to post a full picture of the PCB.

Im interested iin what type of rfid base station IC they are using.

Cheers .. MrS

[adamgr]

I have renault OBD lead
but am not opening it up as warrenty will be void

but the firmware is 100% in the lead
as when you update it
you only connect the lead via usb to pc
Not the zedbull

HTH Adam

[obdmaster]

heres zed bull instruction manual, dont think anyone else has posted, sorry if they have.

[gopelhu]

Hi all new members....

I will not upload anything untill I receive *.zbp file.

Thanks for your understanding.

The GARAGE was closed because anybody contributed just downloaded files and sold sw and programs illegaly.
http://www.digital-kaos.co.uk/forums/f2/visitors-garage-please-read-154247/

I DON'T WANT THIS HAPPEN TO THIS LOCKSMITH SECTION !!!

Regards,G

[Fallen]

Hi gopelhu, I don't understand what a *.zbp file is and i'm sure i'm not the only one!
If you could explain what it is your after it may help. Most of us in the locksmithing section are dumb locksmiths, not smart auto electricians.

;)

[gopelhu]

Hi,

*=file name
zbp= type of file ( zed-bull update firmware )

I'm interested in ZB firmware *zbp file and NOT a OBD cable file !!!

Regards,G

[Taher]

Hi all,

Does anyone have above v5.00 or v5.04 *.zbp file???
I have v5.04 , and I could decode my file.
I'm looking for higher version because i want to build a developer board and can test it.:idea:

Other think I have asked for pictures on any original OBD cables for Zed-BULL, but again nobody helped me.:(
I just want to check what there is on a PCB board.

Regards,G
i think this link can help you :P
ZED-BULL (http://www.nourautokey.com/en/zed_bull.php)

just click Thanks if that help you

[gopelhu]

Hi,

I know this website.
Where did you find the *.zbp file ?

I thought about this: Hickleys :: Zed-Bull Updates (http://www.hickleys.com/diagnostics/zedbull_software.php) :smokin:

Regards,G

[Taher]

in the last of discruption to zed-bull in the website , write download file ?! is that what you mean ?

ZED-BULL (http://www.nourautokey.com/en/zed_bull.php)

[Fallen]

Software Downloads (http://www.keyquip.com.au/software_downloads)

Bottom of the page, some other interesting stuff here as well.

Just realised it's the same version you already have.
Close, but no cigar.
:(

[gopelhu]

Thanks Fallen

but it is I already have.
I need the higher version ( exanple : v5.06 or v5.08 or the latest ) :banghead:

Regards,G

[autolockmasters]

It good to be back in garage section. missed is very much. :smokin:

To the point now. One of my m8 bought his from hickleys. I will speak to him if we can get the new firmware for the zedbull box. Must add one thing though I think the firmware is genrated for each indiviual zedbull based on the id.

Taher (http://www.digital-kaos.co.uk/forums/members/196862-taher/):
I think you own/work in this shop -> nourautokey because your name is in the sales Section Suhil Taher. Any way if you guys are zedbull distributor then you will have access to firmware?

[pasonjayne]

Hi I spoke to another supplier today of Clone red bull, same as the one Gopelhu has purchased and they said machine can be updated for a year if it is sent back to the supplier. Not sure how they are going to do this, surely if it was easy to do via a firmware dump they would supply that via internet. Am thinking the box is probably ID linked to the firmware similar to the X431 boxes with everyone sharing a cloned ID. I gather there must be a way around it somehow as there seems to be more cracked Launch updates floating around these days.

[gopelhu]

Hi all again,

I'm interested in ZB main unit firmware only !!!!:secruity:

Main unit has two processors. One of them ATmega2561 and the other one Atmega48V.

The Atmega2561 content is the firmware and ATmega48V content is the serial number,token...etc.

Regards,G

[Taher]

Hi all,

Where did you buy the Zed-bull key programmer which works with IEA software?

Write here the link, please...

Thanks,G

www.NourAutokey.com

[paul_12345]

I dont think you will be able to do anything with the update files. I know if I was programming the firmware I'd of encrypted the firmware update and had a decryption routine in the existing firmware so you needed valid firmware in the chip to be able to put the new firmware in. Also even if you had a dump of the newer firmware if the cloners have programmed functions themselves ie your obd or txp2 without internet +eprom functions then there would be a lot of work to do.

[autolockmasters]

I asked my friend about the new firmware. He said that hickleys only allow one download and the firmware is only for the particular box. It can not be used for any other zed bull. So I guess that we will have to wait 4 for the Chinese guys to come up with a solution :-)

[pasonjayne]

Gopelhu, did you have any other joy with trying to make the OBD cable. My supplier confirmed to me that the original Zed Bull OBD cable will work with the clone. If someone was willing to open up an original unit lead for the schematic you think this could be copied. The firmware in the lead cant be linked directly to one machine so there must be a way around it. You not think we could modify an older rs232 VAGCOM compatible lead?

[obdmaster]

Gopelhu, did you have any other joy with trying to make the OBD cable. My supplier confirmed to me that the original Zed Bull OBD cable will work with the clone. If someone was willing to open up an original unit lead for the schematic you think this could be copied. The firmware in the lead cant be linked directly to one machine so there must be a way around it. You not think we could modify an older rs232 VAGCOM compatible lead?



You would think the chinese sellers would offer this add on, as it would be good to have.

[pasonjayne]

They say that the OBD cable is very expensive to make and supply which contradicts them making the machine in the first place. Surely the lead is pounds in comparison. If they say 100% the original lead will work what effect would that have on the original Zed Bull unit when it is plugged back in to that machine. Bit over my head but you think the main unit updates the firmware in the OBD lead when it is first plugged in so that the lead knows what software update the main unit has. Maybe if they supplied the clones with OBD cable every time update came out new lead would need to be supplied as well with updated firmware and hence the reason why my suppler says they will update my machine for free only if i send it back?

[gopelhu]

Hi all,

The Main Unit firmware update file format *.zbp.
The OBDII cable firmware update file format *.HEX.

I have planned the developer board and firts prototype will be ready next week.

No one should update the Chinese clones untill I release the results.

It is very likely that Paul is right as it seems it will be very difficult to make this project.

There is a DS2432 1-WIRE 6pin Eeprom which does the cryptographic and it is inpossible to read this Eeprom.

Every Zed-BULL's serial number the cryptographic code.

Please check attachment and check this website : Cartridge chips XC01/X90/X01 Programmer (http://lapatushka.com/eng/#SolutionsFromLS).

Regards,G

[obdmaster]

well I can confirm eeprom functions work on clone zed bull perfectly.

Read mc68hco5b8 from seat immobiliser box using clone xprog-m in adaptor. read perfectly first time opened file on zed-bull pc program identified dump instantly. Gave me pin code for vehicle and i made a transponder using clone zed bull on a T5 to start car. Car started instantly, no problems at all. Arent the chinese brilliant.!!

[jamesnz888]

Hi all,
I have been on this thread for some time now,been reading all the posts regarding ZB and Code reader2.
I am flying out to ShenZhen to meet the supplier,he claims that he is the actual people behind the scene. He has a R&D in TianJin while all sales are centered from ShenZhen. I will have a chat with him re his ZB further development. I may be able to pass on some questions on your behalf. Only technical question please.

[Fallen]

Cheers james, ask him if the JMA TPX cloner module will work with the clone. On the original zedbull this is used to copy 4D in stand alone mode.

[gopelhu]

Hi,

1: Could you get or ask for newer than 5.00 firmware for ZB main Unit ( Europe, USA types) ?
2: Will newer software be if there is newer firmware?
3: When will OBDII cable be available for Chinese ZB?

Thanks.

Regards,G

[Fallen]

Ok, I got to have a play with a ZB clone today, same supplier, same contents of box.

Everything worked except 4D.
It would read ok but not copy to EH2/TPX2

When trying to copy through unit it come up with a menu
1. zed-bull 4d module (select this and it says "will be ready soon"
2 . Internet connection (select this and it says "you should use zbull 4d fast client pc software")
3. TPX cloner module (select this and it says "waiting for module"
All of them did not work.

Try and copy 4D through the PC software and it will give you 2 error messages, both are pictured.

Original ZB has 3 ways of copying 4D.

1. use an internet connection to copy 4D.
2. use a JMA TPX cloner module, this was a separate box that plugged in- an external module.
3. use an internal module that got added inside the ZB.

What process did you use to copy your 4D gopelhu?

[jamesnz888]

Cheers james, ask him if the JMA TPX cloner module will work with the clone. On the original zedbull this is used to copy 4D in stand alone mode.


Talked to Mr. XXX, the man behind the scene. he indicated that his ZB will work with JMA's TPX cloner module (350 euro tho).

He said he may integrated the 4D function into ZB, Q1 of 2011 if he has engouh fund for development.

[jamesnz888]

Hi,

1: Could you get or ask for newer than 5.00 firmware for ZB main Unit ( Europe, USA types) ?
2: Will newer software be if there is newer firmware?
3: When will OBDII cable be available for Chinese ZB?

Thanks.

Regards,G

Mr. XXX, the man behind the scene indicated he bought ZB 5.0 from Greece for reverse engineering, he sent his ZB back for upgrade but has not received from Greece yet. so all his ZB are firmware 5.0 with software 5.08.

he indicate Q1 2011 may have upgrade for Zb but pending on sales and funding.

Hie did NOT buy OBD option and is willing to pt some effort into OBD options if he can get hold of a OBD cable, even just a photo of circuit for the ODB cable, he like to what encryption chip used in the OBD cable.


overall speaking, his ZB development may depend on the sales of his ZB.

he also indicates he may be able to provide firmware upgrade via Internet, and some technical support with some anunal subscription fee, these money will be used for his further development (cloning).
===========================================

I ordered one ZB and CR2 from him, also 50 of PCF7935 and PCF7936, he has access to all immo electronic consumables too.

will try to send some reports once I got mine.
============================================

[Fallen]

Talked to Mr. XXX, the man behind the scene. he indicated that his ZB will work with JMA's TPX cloner module (350 euro tho).

He said he may integrated the 4D function into ZB, Q1 of 2011 if he has engouh fund for development.


Thanks James, good effort mate!

Where did you see the cloner module for 350 euro?

Also a further note on my ZB test drive I noticed the PC interface was a bit "flaky". as in, if you clicked read it would read but incorrectly ID the chip but the unit itself would ID it correctly.

Apart from that and the 4D issue, it worked flawlessly.

[jamesnz888]

Thanks James, good effort mate!

Where did you see the cloner module for 350 euro?

Also a further note on my ZB test drive I noticed the PC interface was a bit "flaky". as in, if you clicked read it would read but incorrectly ID the chip but the unit itself would ID it correctly.

Apart from that and the 4D issue, it worked flawlessly.


Hi M8,

A couple of weeks ago Mr. XXX sent me Tex Clone and a little box for all 4D chips, it is a Silca Tex Clone actually. I tried it on a couple of cars and they all works perfectly with Chinese EH2 ( around US$7), I do NOT have to use Silca Eh2 for it.
Also CR2 works so well with 4D too, even works with TPX. maybe 4D is something good to have but given we all use PC for our work then 4D for ZB is no longer a MUST, this is my opinion.

Also I won T300, SBB ( V31.02) and MVP, then I am wondering why we need ODB options for ZB. Maybe I miss out something here.

as many people said if you want the best quality then buy original ones once you earned some bucks. these clone machines are good for testing and evaluation only.
=======================================

[obdmaster]

More successs on eeprom functions opel immo 1 off 1996 corsa, same method, read with clone xprog-m, made transponder to start car with clone zed bull and read pin code all good again.


Car started off the button think we can say 100% eeprom functions are working 100%.

[canorivera]

Hi jamesnz888 (http://www.digital-kaos.co.uk/forums/members/196632-jamesnz888/), I will like to buy the ZB directly with the involved people for having acces to future features such as updates and support you said before, can you please tell us Mr. XXX's website or a way to contact him to buy the hardware??

If you don't want to reveal his identity for security reasons can you please send me a PM with the info???

Thank you very much all you people expending money and time and letting us know all that info...

[paul_12345]

well gopelhu's picture showed the pic had its leg cut probably the read/write pin to stop you braking/updating to the original firmware.. so how are the internet updates going to work??

[paul_12345]

Hi M8, then I am wondering why we need ODB options for ZB. Maybe I miss out something here. What about renault programming - no pin needed

[gopelhu]

Hi all,

Last night I finished ZB developer board shematic and PCB files.
The following fuctions : keyboard and key reading are not included in this board.
If someone feel like joinning this project , write me a private email and I will send you more info (*.pcb...etc)

The first panel will be ready by the end of next week.:top:

Regards,G

[Fallen]

Not sure how I can help mate, but I can get access to the ZB I tested if it helps.

[pasonjayne]

It confuses me why someone would go to the time and expense to clone a machine and not look at the other internal options that work with it.

I agree with James that the OBD functions are neither here or there as the same key programming functions can be done with other tools so maybe this is the reason seeing as they are all ?600 options. Same as the JPX 4D cloner option if the original unit works with the ZB clone then again no point unless there is going to be a clone standalone unit to work alongside it in the future.

However the internal 4D module i thought would have been a must, i know it is a ?530 (retail) option but in the light of things if you are going to buy an original machine to reverse engineer why not buy that unit as well and sell as option seeing as this is a deciding factor whether to buy the unit or not.

As i see it the clone is identical to the original unit in every way and if you have the original OBD lead and original external JPX 4D cloner it will work identical. The only missing link is having internet access to program 4D which we all know is never going to work anyway.

Question to ask do you think the internal 4D module will work with the provided firmware if you were to install out of an original in to the clone? If all the other original options will work why wouldnt this and if so would this part be more interesting to look at to achieve a full working solution?

[NZBrakelathes]

Hi Guys
Can you give me some advise - I have never done keys etc etc how ever I am thinking of getting in to it etc.
What machine or machines are needed? What advise or answers to questions would I need? Where should I start etc? I am in NEw Zealand and most cars a Jap and used Jap as well some VAG Benz etc and we have a very big range of car makes etc.
Where to start? If at all?

[paul_12345]

It confuses me why someone would go to the time and expense to clone a machine and not look at the other internal options that work with it.

I agree with James that the OBD functions are neither here or there as the same key programming functions can be done with other tools so maybe this is the reason seeing as they are all ?600 options. Same as the JPX 4D cloner option if the original unit works with the ZB clone then again no point unless there is going to be a clone standalone unit to work alongside it in the future.

However the internal 4D module i thought would have been a must, i know it is a ?530 (retail) option but in the light of things if you are going to buy an original machine to reverse engineer why not buy that unit as well and sell as option seeing as this is a deciding factor whether to buy the unit or not.

As i see it the clone is identical to the original unit in every way and if you have the original OBD lead and original external JPX 4D cloner it will work identical. The only missing link is having internet access to program 4D which we all know is never going to work anyway.

Question to ask do you think the internal 4D module will work with the provided firmware if you were to install out of an original in to the clone? If all the other original options will work why wouldnt this and if so would this part be more interesting to look at to achieve a full working solution?

Quite simple.. it cost to extract the firmware from a chip and cost to reverse the firmware. Now if you throw in a few more chips these arn't going to be free, you might not even get any discount.

So if you create 3x as much work you'd want 3x as much money, which would start to make the original more attractive, meaning you'd sell less. So you'd only invest in a full package to clone if you knew you had enough interest at a certain price to recoupe your money and make a decent markup as theres a fair bit or risk also you dont know just how much money you'd have to throw at it to reverse the firmware or even if it can be done.


As for the obd interface theres no reason I can see why any understanding/reversing would have to be done - just copy it, so if it cost a few thousand $ to do it would get the money back easy selling at a cheap price. Although you'd probably couldnt update it using the oringal update.

[MrSporty]

I would offer another point of view in that not everyones motivation is to simply turn a profit.

Take Gopelhu's schematic he just posted, time and effort went into creating it and you would imagine that if his sole interest was to make and sell a clone of a ZB Clone, he wouldn't be so keen to offer up such information.

Personally i have and will continue to use my own time and funds to reverse engineer and have code extracted from various devices simply to satisfy my curiosity of how things work.

pasonjayne : I would have thought the original 4D module would work fine, providing they didn't incorporate some form of authentication. The TPX clonner and its internal equivalent are obviously just standalone versions of the tex code lookup (rainbow?) tables. Could its contents be as simple as a 16GB mass storage device and a fast micro doing a lookup ?

MrS

[gopelhu]

Hi all,

Thank you all for your efforts and contributions to this topic.

I didn't mean to make a ZB clone just the development environment.

I don't want to sell clone ZB.

I thought I would help you to firmware clone ZB, but thanks to MrSporty I will leave this thread.

Regards to all and my two friends obdmaster and canorivera.

[cjawahir]

Hi all,

Thank you all for your efforts and contributions to this topic.

I didn't mean to make a ZB clone just the development environment.

I don't want to sell clone ZB.

I thought I would help you to firmware clone ZB, but thanks to MrSporty I will leave this thread.

Regards to all and my two friends obdmaster and canorivera.

Gopelhu i think you misunderstood MrSporty, and you have more than two friends , I am also you friend , we all are .

you have posted a lot on this topic and we all thank you for doing such .

cj :slug:

[gopelhu]

Hi all again,

Sorry, I misunderstund.

OK, I will NOT leave this thread.

About.. Today I made an Opel transponder with ZB eeprom function and success all. The car strarted.

AGAIN: I will be able to help you to UPDATE the FIRMWARE of chinese clone ZB.

Regards,G

[MrSporty]

No appology needed gopelhu, sometimes its hard to grasp the nuances in other peoples posts. Its easy to forget that english is not always peoples first choice language.

What i said meant that its obvious from your posts you are more interested in researching and reversing the inner workings of the china clone Zed Bull. Its obvious by the fact that your providing good info that you dont simply want to create another clone to sell. It's got me interested enough that im looking into aquiring my own to help with the research.

Keep up the good work.

MrS

[Fallen]

Are you guys electrical engineers? This is all WAY above my head! (but I am enjoying the ride!)

[canorivera]

Are you guys electrical engineers? This is all WAY above my head! (but I am enjoying the ride!)


Hehehe, same happens to me that's why I stay behind the scenes....

[gopelhu]

Hi all,

I'm a programming mathematician.
I write autodiagnostic software in Delphi6 Prof.
Anyway I dissasemble and debug with IDA Pro and an other software.
I solved a lot of communication and seedkey protocols: Bosch, Siemens,Temic...etc.

Yesterday I bought the AVR studio development kit with some adapters and interface.

Now I'm interested in key programming protocol.
That is way I'm dealing with this ZB project.:banghead:

Regards,G

[pasonjayne]

Hi all,

I'm a programming mathematician.
I write autodiagnostic software in Delphi6 Prof.
Anyway I dissasemble and debug with IDA Pro and an other software.
I solved a lot of communication and seedkey protocols: Bosch, Siemens,Temic...etc.

Yesterday I bought the AVR studio development kit with some adapters and interface.

Now I'm interested in key programming protocol.
That is way I'm dealing with this ZB project.:banghead:

Regards,G
Genius, loving it :-)

[mecadriano]

Hello friends, we will continue this Asunto because I'm very interested, I have a clone zed, bought in China to work with zed508, but did not work, I have this corompido cd, but I downloaded the version for 506 508, but here in the forum but do not communicate with usb zed. So I decided to post the images here for those who understand more than clone zed, can give an explanation.
If you have any solution for this model.



Sorry for the translation (google English)

[mecadriano]

more pictures

[gopelhu]

Hi,

This ZB that you have works with Zed-QX v2.02 software only !!!

Please download the sw from this thread and try it.

Your hardware equal with any AD-90 hw and NOT a IEA hw but this hw included OBD function.
Have you got OBDII cable?

Regards,G

[mecadriano]

yes cable OBDII
You know if posivel trasponick work with the same ad 900?
if so what should I do?

[drivesure]

have a look at this gopelhu.

[MrSporty]

WOW!, i wouldn't have thought it but that add on board actually is a parallel brute force cracker.

Figures why its quite expensive , looks like they use wither 4 or 6 Cyclone 3 FPGA's.

[gopelhu]

Hi all,

Today my pcb was made.
I put it together though I made a mistake I swapped +/- at the USB connector.
I will check and test it and let you know the result.

This PCB is different from that one we bought from the chinese sellers.

Our ZB main unit does not work with v7.0.1 software but my development board is detected by v7.0.1 software.

I hope I can solve it.

Regards,G

[MrSporty]

Nice board, looks easy to dev on.

Are those windows devices just the FTDI/24LC or have you also progged up the ATMEGA's ?

[mecadriano]

Gopelhu friend you know tell me if it posivel use my zed qx with trapronics softwer?

[gopelhu]

Hi,

NO !!!

Zed-QX hardware works with Zed-QX Anahtar software.
The both devices are Turkish development.
Transpronics sold the licence to Advanced Diagnostics.

Regards,G

[ramhalo]

Hi,

NO !!!

Zed-QX hardware works with Zed-QX Anahtar software.
The both devices are Turkish development.
Transpronics sold the licence to Advanced Diagnostics.

Regards,G

MR Gopelhu is there anyway you can assist with proper upgrading of the t300 or atleast find a way to load the original mvp software on there minus the token deduction of course....Im sure there will be alot of grateful people if you can do this.:rock:

[ray-ray]

focus! 1 project at a time,that how to work.

[gopelhu]

Hi,

I'm sorry to let you know but I didn't have any solutions for T300 yet.
I haven't bought neither T300 nor MPV because I think both are worthless.

I have all the openings and more fuctions and password modification for SBB only !!!

I have solved only this.

Regards,G

[electrosoft]

Hi gopelhu i havent the last zed bull setup can you uplad it and can you discrib the protection of this box usb dongle or Smart Card or micro schip atmel and the software it is packed ? im a new member but maybe i can help thanks br.

[snecii]

Hello!

I bougth one from china, how can I read out pin code? There is no cable for OBD - Zedbull. Can I buy somewhere or how can I read out?

[paul_12345]

Hello!

I bougth one from china, how can I read out pin code? There is no cable for OBD - Zedbull. Can I buy somewhere or how can I read out?

Read the thread - there is no obd cable

[paul_12345]

Hi gopelhu i havent the last zed bull setup can you uplad it and can you discrib the protection of this box usb dongle or Smart Card or micro schip atmel and the software it is packed ? im a new member but maybe i can help thanks br.





The protection is the fact that you can not read the microprocessors to get the firmware.

If you copied pcb and cloned the chips you'd have a working clone although it would need tokens updating and there could be protection on this, athough you could always overwrite the chips with the original dumps again refreshing the tokens.

[snecii]

Hello!

How can it read the pin from keys? I tryed it with PCF7946 but NO pin.... How can I teach the new key if I change the chip? Copy from the 2. key?
What if there is no 2. key for the car?
I can teach with PIN right?

[pasonjayne]

Hello!

How can it read the pin from keys? I tryed it with PCF7946 but NO pin.... How can I teach the new key if I change the chip? Copy from the 2. key?
What if there is no 2. key for the car?
I can teach with PIN right?

This thread is about the functionality and upgradeability of the clone Zed Bull unit. If you need to read immo pin codes to program keys you need to search other tools to do this such as AD100 pro MVP, T300, SBB etc. The Zed Bull clone wont read pins as it doesnt have OBD cable supplied. If you are referring to VAG pin codes you will need the other tools i mentioned to program the key as they cant simply be cloned from one key to another, and even then dependent upon year of car you still may struggle.

[snecii]

This thread is about the functionality and upgradeability of the clone Zed Bull unit. If you need to read immo pin codes to program keys you need to search other tools to do this such as AD100 pro MVP, T300, SBB etc. The Zed Bull clone wont read pins as it doesnt have OBD cable supplied. If you are referring to VAG pin codes you will need the other tools i mentioned to program the key as they cant simply be cloned from one key to another, and even then dependent upon year of car you still may struggle.


What do you recommend for Franch cars? Like PCF7946....
I need PIN code to start the car in that case, and for teaching new keys.... ( I have original CLIP but I dont have any more renault net :( )

[pasonjayne]

What do you recommend for Franch cars? Like PCF7946....
I need PIN code to start the car in that case, and for teaching new keys.... ( I have original CLIP but I dont have any more renault net :( )

What Renault is it, you can extract EEPROM dump from UCH and then use Zed Bull to make transponder from dump dependent on what car you are referring to.

[snecii]

What Renault is it, you can extract EEPROM dump from UCH and then use Zed Bull to make transponder from dump dependent on what car you are referring to.

All kind OF Renault mostly MEGANE, SCENIC, CLIO

What is a good EEPROM reader for these?


What is with other franch cars like Citroen Peugeot 44 45 immo ?

[pasonjayne]

All kind OF Renault mostly MEGANE, SCENIC, CLIO

What is a good EEPROM reader for these?


What is with other franch cars like Citroen Peugeot 44 45 immo ?

What clone Zed Bull do you have. If you have the full clone version RED and BLUE and not the earlier copy version of Ad900 software, you have the menus that will tell you what transponders you can make from EEPROM dumps etc. Locked 46 chip keys you cant copy so you will need UCH dump. Dependent on car you will need a chip programmer/reader and either an 8 PIN SOIC adaptor or clip to read the info. load in to zed bull and it will do the rest with blank key.

[snecii]

What clone Zed Bull do you have. If you have the full clone version RED and BLUE and not the earlier copy version of Ad900 software, you have the menus that will tell you what transponders you can make from EEPROM dumps etc. Locked 46 chip keys you cant copy so you will need UCH dump. Dependent on car you will need a chip programmer/reader and either an 8 PIN SOIC adaptor or clip to read the info. load in to zed bull and it will do the rest with blank key.

Yes it is form Ufodiag and full version if I am right...
What is good for reading uch dump? Wich product?

Can you tell it in steps... I read the dump from UCH the witch point in ZEDBULL soft? What to do with dump?



Really thanks!

[pasonjayne]

Yes it is form Ufodiag and full version if I am right...
What is good for reading uch dump? Wich product?

Can you tell it in steps... I read the dump from UCH the witch point in ZEDBULL soft? What to do with dump?



Really thanks!

Dependent on car and Zed Bull software;

1) Find UCH (Black box) on car, open it up and locate 8 pin serial EEPROM. Zed Bull software will tell you what chip is in the unit under special functions.

2) Either clip on to chip with adaptor of desolder and put on to adaptor board for 8 PIN SERIAL EEPROMS. Better to remove at times to get clean read. Any DIL chip programmer should work for this with adaptor, or buy X-PROG-M or similar if you want more functionality to do other cars, read EEPROMS, MICROS etc

3) Load dump in to Zed Bull, and choose make transponder from Dump. Put in the blank key in and it will program it.

[snecii]

Dependent on car and Zed Bull software;

1) Find UCH (Black box) on car, open it up and locate 8 pin serial EEPROM. Zed Bull software will tell you what chip is in the unit under special functions.

2) Either clip on to chip with adaptor of desolder and put on to adaptor board for 8 PIN SERIAL EEPROMS. Better to remove at times to get clean read. Any DIL chip programmer should work for this with adaptor, or buy X-PROG-M or similar if you want more functionality to do other cars, read EEPROMS, MICROS etc

3) Load dump in to Zed Bull, and choose make transponder from Dump. Put in the blank key in and it will program it.

Really thanks!

And what if I buy a SSB 2010 ? Can it read out PIN for new key? Or can it directly program new key?
Thanks

[pasonjayne]

Really thanks!

And what if I buy a SSB 2010 ? Can it read out PIN for new key? Or can it directly program new key?
Thanks

Can program key if you already have Key code from the dealer but wont pull PIN code for you. You may find seaching other threads to see if someone can pull PIN from dump for you.

[snecii]

Can program key if you already have Key code from the dealer but wont pull PIN code for you. You may find seaching other threads to see if someone can pull PIN from dump for you.


Ok then there is no point for buying SSB , if I read UCH then Zedbull will creat code for new key right?

And What do I have to do with old car/key? I change the chip on it, the what to do?

If I have the original clip with dealer code then just same as usual? Or I have to do something first with blank chip?

If I want to do with zedbull just give the dump from UCH and it will calculate code and write blank key?


Thanks

[pasonjayne]

Ok then there is no point for buying SSB , if I read UCH then Zedbull will creat code for new key right?

And What do I have to do with old car/key? I change the chip on it, the what to do?

If I have the original clip with dealer code then just same as usual? Or I have to do something first with blank chip?

If I want to do with zedbull just give the dump from UCH and it will calculate code and write blank key?


Thanks

Old key is scrap as chip on it is locked so if it doesnt work you cant reprogram it. You will need new blank key and Zed Bull will write code in to it from UCH dump, or alternatively get key code from dealer and use your CLIP.

[snecii]

Old key is scrap as chip on it is locked so if it doesnt work you cant reprogram it. You will need new blank key and Zed Bull will write code in to it from UCH dump, or alternatively get key code from dealer and use your CLIP.


But If I change Pcf7946 chip it will be blank again?
SO I can reprog it again?

I try to skipp the dealer, I want to solve it....

Thanks for your help. I will buy a Xprog and then ask for lots of question :)

Really thanks

[pasonjayne]

But If I change Pcf7946 chip it will be blank again?
SO I can reprog it again?

I try to skipp the dealer, I want to solve it....

Thanks for your help. I will buy a Xprog and then ask for lots of question :)

Really thanks

46 Chip soldered to the PCB so you would have to desolder out and put new one in. Chip cheaper than a new key if you are 100% it is the transponder that doesnlt work and you want to utilize the other key part functions.

[snecii]

46 Chip soldered to the PCB so you would have to desolder out and put new one in. Chip cheaper than a new key if you are 100% it is the transponder that doesnlt work and you want to utilize the other key part functions.


Yes that is what I need! How can you check the key?
I mean what is wrog with it? If I solder in the new chip then the Zedbull will recognise it as BLANK not? If that OK then I can write it. If it is not working after soldering key not reparable...?

Other key function can be teach to new car like central lock not?

[pasonjayne]

Yes that is what I need! How can you check the key?
I mean what is wrog with it? If I solder in the new chip then the Zedbull will recognise it as BLANK not? If that OK then I can write it. If it is not working after soldering key not reparable...?

Other key function can be teach to new car like central lock not?

Again dependent on what Renault you are dealing with the Zed Bull should be able to program the other key functions as the UCH controls all other aspects of the car, central lockng plus other things so the details from the dump will be written in to the new key chip. Bare in mind though that desoldering the 46 chip out the key is a risky job as other components are close to the chip. If you read the new 46 chip first before programming and installing in the key it will tell you what you can do with it. Personally i would buy a blank aftermarket key , program and swap key blade less messing about.

As a matter of interest what car key is it your are trying to fix.

[snecii]

If I read out the dump from UCH Do I need to find something in it or just put file in ZEDbull and it will do anything?

[pasonjayne]

If I read out the dump from UCH Do I need to find something in it or just put file in ZEDbull and it will do anything?

Pull file out and let Zed Bull do the rest.

[snecii]

Pull file out and let Zed Bull do the rest.

REally Thanks!

Is there any catalog to know wich key is good for write and wich is for program from UCH?


Like exaple I have a Suzuki key it has 4c TEXAS. Zedbull sad Just write to 4c or Tx1. But somebody sad that If I have a blank 4c than I can't just write for that I need a Tx1.
I want to buy a new suzuki key from china with blank 4c texas chip!

So Can I just press Write button or not?



Thanks for helping!

[MrSporty]

There isnt such a thing as a "blank" original 4C because original 4C's have a factory fixed manufacturer ID.

The TPX1 is in esscence a fully writable, aftermarket 4C and is able to be programmed with the Identification of a standard 4C transponder.

[snecii]

There isnt such a thing as a "blank" original 4C because original 4C's have a factory fixed manufacturer ID.

The TPX1 is in esscence a fully writable, aftermarket 4C and is able to be programmed with the Identification of a standard 4C transponder.

So IF I buy one of these:

Suzuki Transponder Key (http://www.autokeys.us/product_details.php?category_id=99&item_id=1067)

And I copy the original key, can I just write to car or I has to program it with code from UCH!?
I know that tx1 is vaiable to write it on but that aftermarket key has 4c chip in it! So what????

Thanks

[MrSporty]

Yes you would have to program it using a diagnostic tool and the pin from the UCH because your car wouldn't recognise the ID of the new 4C chip.

A TPX1 main use is when you are cloning an already working key or generating from an immo dump because unlike an original Texas 4C you can also change the ID code of a TPX1.

You can give the TPX1 the same ID and encryption code as the original and it will then start the car with no further programming needed.

[albertros]

Hi,
does the clone come with the "Renault System 1" function found under "Extended functions" ?

Here's the crazy thing I have a genuine Zed bull without the EEprom package and its ?450 to upgrade. Very simular to a new clone unit.

So do I upgrade or get a clone unit as a spare? I know which makes more sence. Unless I can upgrade through a dealer for less out of the UK?

[snecii]

Hi,
does the clone come with the "Renault System 1" function found under "Extended functions" ?

Here's the crazy thing I have a genuine Zed bull without the EEprom package and its ?450 to upgrade. Very simular to a new clone unit.

So do I upgrade or get a clone unit as a spare? I know which makes more sence. Unless I can upgrade through a dealer for less out of the UK?

In my china zedbull teher is more renault like megane2 laguna stb... and can calculate PIN from UCH DUMP. And program key. IF I'am right (I never tryed it , I'am new) :)

[albertros]

Hi,
Thanks for that.

The "Renault System 1" proceedure is a bit involved.
After preparing a working transponder you have to load a file into the UCH / BIC unit to record the remote.

Any chance of some letting me have a copy of the file to play with?

Thanks in advance.

[canorivera]

Well I think that all experts have lost interest in this post :(.

Any ways I wanted to tell you that now Zed Bull is $400 shipping included in most of chinese sellers.

Would that be because is something better coming???

[obdmaster]

Well I think that all experts have lost interest in this post :(.

Any ways I wanted to tell you that now Zed Bull is $400 shipping included in most of chinese sellers.

Would that be because is something better coming???

Got to say , if there the same as mine its a very good price $400 delivered.

[canorivera]

Got to say , if there the same as mine its a very good price $400 delivered.


It's from AutoCheery the offer I got and also from Onlyda...

Regards.

[cjawahir]

i see it here also for 350usd .

cj

[obdmaster]

hi ladies and gentelmans
i have 4 Zed-BULL device,2 original device and 2 aftermarket device but i should say that chinese always bad working,,when i want to try copy 4D about Toyota,always unsuccessful but original is perfect work,,if i were you,never try to buy aftermarket,,also i cant find technical support for aftermarket

Regardly
Suat

M8, 4d clone on original either needs internet login or extra module, so its pretty obvious the clone wont copy 4D at the moment!!!!!!!

As for Bad working on clone NEVER experienced it.

[mecadriano]

friends bought another zed bull china seems that this came true,
now I need a lot of tips shared here, and also post, my s experience hehehhe

[paul_12345]

hi ladies and gentelmans
i have 4 Zed-BULL device,2 original device and 2 aftermarket device but i should say that chinese always bad working,,when i want to try copy 4D about Toyota,always unsuccessful but original is perfect work,,if i were you,never try to buy aftermarket,,also i cant find technical support for aftermarket

Regardly
Suat

:confused: The clone was so bad you brought another ??

[gopelhu]

Hi all,

Today I finished the Final1 or V1.0 development board which including Key reading a keyboard and Antenna.

This weekend I will made the Final2 or v2.0 board.

Next week I will testing the v1.0 board with some different serial number.

All of the ZB use 1piece DS2432 1-wire eeprom.
In this eeprom has the serial number and cannot be modified !!!:banghead:
Also, it has the SHA-1 engine security cryptograph.:banghead:

I have a lot of DS2432 eeprom cca12pieces.

I will checking all serial nr and i will let you know the result.

Regards,G

[canorivera]

That looks great Gopelhu, Congratulations!!!!!!!!!!

Thanks for sharing it whit us.

[ray-ray]

script,gooie,and the cammands to the device,is needed for it to work.

[obdmaster]

BIG THANKS GOPELHU



your a very clever man m8.

[MrSporty]

Thanks Gopelhu

I've been dying to see how they implemented the regular 125Khz RF section along side the TIRIS one and your schematic shows that perfectly. Using a relay to physically switch the antenna between the 2 types of tuned basestation.

Im guessing you hear a nice little click when selecting 4C/4D stuff.

Cheers m8

Ohh , any ideas of the value of the antenna ?

[cjawahir]

hi sporty , the antenna i think should be like

Antenna Inductance = ~440 μH
Coil = 66 turns,
Wire = enameled copper wire
Wire diameter = 0.18 mm diameter

the chip TMS3705A match antenna , its a common chip used on most cars like toyota, nissan , subaru etc .


cj

[gopelhu]

Hi all

I use Opel Immobox antenna.

It is almost the same as CJ writed.

Regards,G

[MrSporty]

Quite a good idea to reuse ignition barrel coils, most of them stick to the 7991/3705 default application setups so the values are pretty similar across the board.

Am i right in thinking that with a bit of reworking of the firmware you could eventually ditch the Atmega48 and the DS2432 and just use the 2561 to run the whole show ?

[MrSporty]

Hmm, had another look at the schematic and from the relay you used (ATQ209) shouldn't the antenna decoupling be like this instead ?

http://i55.tinypic.com/1zoukyc.jpg

[cammy25]

Gopelh

Its not possible to use other DS2432, as it has a unique in-lasered 64bit serial nr. I have a simulation program of DS2402 for PIC12f629. this works on any I-button device.
We need only to implement the 1K eeprom memory.

[gopelhu]

Hi all,

The Relay is TQ2-5V.

Here is the DS2432 pdf.

The DS2432 cannot be implemented into any PIC bec of the SHA-1 engine security.

I dissasemled the 8bytes 64bit security word #80-#87 which is locked the registered page #88-#8F.
This 8bytes is TOP SECRET sorry.....

Regards,G

[cammy25]

What security word did you extract???? mate ...its readable with shitty I-button interface. Its BTW not programmed and locked ,but In-lasered while manufacturing.

I understand it cannot be implemented in PIC simulation, as the MAC calculation is powered by SHA-1 encryption engine.
But.........Is it used????????????????
Did you log the I-button?

I have a practical example: BMW OPPS has DS2432 too!
But the only use is the in-lasered serial nr. I succesfully copied ID from OPPS head to another just with PIC emulation WITH DS2432!

Lets hope only Unique ID is used. Sometimes you dont have to think too hard ,just try to log and we will see.
I-button interface is easy to build for rs232 port.


(BTW: Diga consult is same ,i successfully emulated)

[cammy25]

Sorry i see now we are talking both about 2 different things.
You talk about key in memory area and im talking about ID.

But still i think only ID is used ,as the device ID is static and based on Dallas ID

[MrSporty]

TQ2-5V is the same pinout as the ATQ209 , so if left with the original schematic, you would still be connecting the antenna to both the 125khz and TIRIS basestation IC's at he same time.

[gopelhu]

Hi,

Yes, You are right manufactured ID cannot be modified just to emulate.

To all:

Beleive me I have already designed and built all the interfaces which nessesary for this project.

This DS2432 has extended memory too.

The security login card is stored in the extended memory.
No matter how many SN apply just the security login card is important.
Check attachment.

Opel Immoboy antenna is bigger than Toyota key reader.
In the attachment there is one of an Avensis.

Regards,G

[Fallen]

I don't think I have ever felt dummer in my life after reading the last 2 pages of posts.
I'm not sure what you guys are talking about but it sure sounds interesting!

YouTube - check out the big brain on brad

[cammy25]

REspect for your effort and time in this project Gopelhu.

How did you obtain code of ATMEL?? Reversing or real invasive attack?

DId you disassembel Dallas secret key out of Atmel code?

[canorivera]

I don't think I have ever felt dummer in my life after reading the last 2 pages of posts.
I'm not sure what you guys are talking about but it sure sounds interesting!

YouTube - check out the big brain on brad (http://www.youtube.com/watch?v=Hrm-rPSCIBw)


Feeling the same Fallen, lets read and just try to imagine what they are talking about...:smokin:

[gopelhu]

Hi,

Thanks for your questions.

Sorry be my secret.
Anyway i solved it with software.

I use IDA Pro Advanced and an other dissasemling program.
I bought IDA for 800Euro 5 years ago.
It is worth its price.

Regards,G

[marginal]

Hello people.

I have two questions:
1. Does the ZB clone to TPS2 transponders?
2. Where to buy cheap TPX1 & TPX2 transponders from?

Regards.

[canorivera]

Hi all, I'm still wondering if the ZB clone is able to unlock ID46 transponders, have somebody tried??

It will be great if it can unlock Honda and Chrysler remote head keys.

Thanks...

[doddy2323]

Hi to all!I have problem with my zed bull.I open the sw,connect with ZB,and after that I recive the message ?Device not responding`.Anyone have similar problem?How you solved?

[obdmaster]

Hi to all!I have problem with my zed bull.I open the sw,connect with ZB,and after that I recive the message ?Device not responding`.Anyone have similar problem?How you solved?

you on the correct com port m8?

[doddy2323]

Thank for your replay!Yes,is correct com port.Somtimes is connecting show me the tokens,somtimes I can read one key,but after that show me this message.I use sw v508.Net farmework is updated.

[gopelhu]

Hi,

Your ZB is it orig or China clone?

What firmware version is in?

Regards,G

[canorivera]

Hi all, I asked to a seller to send me some screen pictures of the ZB they are selling and he did, I need you to tell me if this is the best available or if there is someone better.

Thanks...

[canorivera]

More pictures....

[marginal]

Hello.

Could anyone tell if there's a big difference between the European and the north American model please?

Thanks.

[gopelhu]

Hi,

There are differences within auto types.
Like: Opel = Vauxhall = GM = Holden or Chevrolet EU = Chevrolet US....etc.

There are NO differences within transponders.

Here is the SW ver5.08 HW v5.00 user manual.

Regards,G

[marginal]

Thank you gopelhu ...

[gopelhu]

Hi all,

Does anyone have a faulty AD900 on SALE in which there is ATmega128L?

If so,pls let me know.

I would buy one.

Thanks...

Regards,G

[cjawahir]

hi check this link .
EmbeddedDeveloper.com - Atmel - Mega AVR - ATmega128L (http://www.embeddeddeveloper.com/processors/1714/Atmel/ATmega128L.htm)

cj

[gopelhu]

Hi CJ,

Yes, but I need the complete pcb and not just the ATmega128L only.

Regards,G

[Fallen]

edit edit edit

[ray-ray]

pc 7.1.3 and version 5.0 is what i'm waiting for with chrysler 46 unlock in the menu.once that happen,please keep me posted.

[doddy2323]

Hi,

Your ZB is it orig or China clone?

What firmware version is in?

Regards,G
Hi!Is a clone from China.It is igual at pics from canorivera (http://www.digital-kaos.co.uk/forums/members/168360-canorivera/).

[carclima]

well my friends..after carefuly reading whole this post on 16 pages Iam prety sure I will but this tool,for only one reason..here is some serious folks and they know what a hell will I do with this tool when it broke down..right now all this is science fiction for myne workshop

[snecii]

How can I copy 4D crypto? Zedbull sad need special 4d program....

4D-60 chip!

Thanks

[Automat]

onlyda.com search for 4D clone box. Will do electronic keys, but not TPX

[gopelhu]

Hi,

Please check this thread.

If you have a clone version you cannot copy 4D into the TPX2 transponder because P1-P3 can be copied but Page4 cannot be copied clone ZB.
For Page4 4D decoder is needed.

Original ZB has 3 different solition, please check this thread again.

1. TPX clonner interface ( ZB clone works with this ) Hickleys :: The Zed-Bull Transponder Machine - Extras (http://www.hickleys.com/diagnostics/zedbull_extras.php)
2. 4D module ( that Drivesure uploaded this thread 11page)
3. Internet

Regards,G

[gopelhu]

Hi,

You have a clone ZB.
It works with v5.0.8 software version.
Your firmware version is v5.00.

This sw version is works with COM port ( USB to Serial interface).

The v5.04 or above firmware version uses directly USB port NOT the COM port.

At this firmware version Istambul Elektronik Anahtar ( IEA )changed main unit application.

Regards,G

[canorivera]

Hi,

Please check this thread.

If you have a clone version you cannot copy 4D into the TPX2 transponder because P1-P3 can be copied but Page4 cannot be copied clone ZB.
For Page4 4D decoder is needed.

Original ZB has 3 different solition, please check this thread again.

1. TPX clonner interface ( ZB clone works with this ) Hickleys :: The Zed-Bull Transponder Machine - Extras (http://www.hickleys.com/diagnostics/zedbull_extras.php)
2. 4D module ( that Drivesure uploaded this thread 11page)
3. Internet

Regards,G

Anyway will be cheaper to buy CodeReader2 instead of ZB and TPx Cloner, I mean If what we need is to copy 4D in TPX2 rigth???

Thanks.

[gopelhu]

Hi,

Yes ,the CR2 cheaper than ZB+TPX clonner.

Regards,G

[Fallen]

Hi Gopelhu, do you know if the TPX cloner module will work on the clone ZB?

[electrosoft]

to gopelhu


http://www.digital-kaos.co.uk/forums/attachment.php?attachmentid=33117&stc=1&d=1285715379
(http://www.digital-kaos.co.uk/forums/members/116124-gopelhu/)

[gopelhu]

Hi,

I am sorry to let you know but I haven't tested it yet.

The TPX clonner price is 240000HUF+VAT=300000HUF cca $1400 so it is very higher prices in Hungarian distributor.

Regards,G

[doddy2323]

Hi,

You have a clone ZB.
It works with v5.0.8 software version.
Your firmware version is v5.00.

This sw version is works with COM port ( USB to Serial interface).

The v5.04 or above firmware version uses directly USB port NOT the COM port.

At this firmware version Istambul Elektronik Anahtar ( IEA )changed main unit application.

Regards,G
And what I can do in this case?My ZB have USB port.

[mecadriano]

friends, my zed clone, did successfully, key fiat id 48 transponder generated, and pin code, so it was very easy, using SBB and get the job done, thank you all, and just let my new experience overall

[MASTERLOCK]

i just buy a zed bull at first works fine now when i turn it on writes on the screen <oro16 hatarisap1> did anybody knows what is that?

[gopelhu]

Hi,

You should to find out what language is the errormessage?
What did you do with it previously?

Regards,G

[gopelhu]

Hi,

Please read again my message on this thread 11page.

About here is again.....

I hope you understand me.

Regards,G

[electromech]

What the price of a original ZB and who sells it (hickleys???) vs the clone I see the prices of clone go from $350 to about $750

[MASTERLOCK]

Hi,

You should to find out what language is the errormessage?
What did you do with it previously?

Regards,G


now its ok maybe i was push any buttons and crash for a while.i want to ask you if i can connect my tpx cloner to zed bull chinese clone.
thanks in advance

[dam495]

Hi,

I'm sorry to let you know but I didn't have any solutions for T300 yet.
I haven't bought neither T300 nor MPV because I think both are worthless.

I have all the openings and more fuctions and password modification for SBB only !!!

I have solved only this.

Regards,G
explain for us how do you do it? any solution for mvp and t300?