M276 / E300 fueling issue




Perhaps all this ECU/harness is only about a marginal crank sensor, +5V.Ref, GND ...
These sensors are known to actup only when hot.
Meanwhile waiting for a return call from the company that did work on the ECU to find out more. I already spoke to them yesterday, but as their serial number label missing on the ECU they have a bit of a hard time tracking the history. But the logical next step would probably be to have them test the ECU once more, as there is no logical reason, at least to me, why the ECU would bridge these 2 signal pins.




Meanwhile waiting for a return call from the company that did work on the ECU to find out more. I already spoke to them yesterday, but as their serial number label missing on the ECU they have a bit of a hard time tracking the history. But the logical next step would probably be to have them test the ECU once more, as there is no logical reason, at least to me, why the ECU would bridge these 2 signal pins.
Sounds like ECU did not get properly repaired or tested during service - This is not an easy job at any rate.
++++
It's too bad the ECU connector pins are not sealed to prevent external contamination.
I was just thinking about painting a layer of high-temp PCB protection at the base of input pins... but then my left brain said "If it works, don't f*** with it!". I don't have the urge to temper with that particular VIP box

I rationalized that with little chance of oil coming up my harness then no need protection...

The cam PCB pins laying near the crank pins provide a well executed failure. Crankshaft signal drives the whole engine timing calculations

Last edited by CaliBenzDriver; Oct 13, 2023 at 04:03 PM.
Sounds like ECU did not get properly repaired or tested during service - This is not an easy job at any rate.
++++
It's too bad the ECU connector pins are not sealed to prevent external contamination.
I was just thinking about painting a layer of high-temp PCB protection at the base of input pins... but then my left brain said "If it works, don't f*** with it!". I don't have the urge to temper with that particular VIP box

I rationalized that with little chance of oil coming up my harness then no need protection...

The cam PCB pins laying near the crank pins provide a well executed failure. Crankshaft signal drives the whole engine timing calculations

I wish I knew what the sealer was, I would seal every sensor that touched oil, coolant, or trans fluid on my car.
However, due to heat on the crank sensor from it's location, several earlier model engines are recommended replacing crank sensor as a preventive maintenance much like the cam and magnet sensors on the later engines.
Just a thought I wanted to share.




Here is measurement for you, of the CRANKshaft pos sensor
My tester wire kit number 1, 2 & 3 is the exact same as device/sensor connector number 1, 2 and 3
As I wrote on last post : I modify a bit
==================UNLOADED TEST =================================
01. Do not connect connector M the 96 pins one to ECM.
02. Only connect the F connector, the 58 or 56 pin one to ECM.
With ignition ON, engine OFF, read pin 44(-) and 19 (+) at ECM male terminal, connector M.
================================================== ================
You can also do loaded test by not disconnecting connector M of wire harness to ECM.
UNLOADED TEST
If connector M wire harness side is removed, and you get say 5.5V or higher at pin 44(-) and 19 (+) at ECM male terminal, that is most likely issue with ECM.
Often ECM can loose its 5V power supply/driver. However you case is unique, the Exhaust CAMshaft Pos Sensor signal contaminating CRANK-Pos-Sensor.

I do not know if our MED177 ECM uses single 5V power supply or more than 1 channel. Some ECM can use 2 channels 5V power supply for better reliability,
not as back up but more for load/risk sharing.
In this setup, I was able to scope pin #83 (yellow lead), while I ended up providing +5V from the ECU (not connected in the picture, connected later on). Took a lot of trying around, cause I kept keeping way to much noise on the picoscope to measure anything useful. So I learned not to leave the battery charger connected while trying to scope anything
With that out of the way, I could see I got a steady 0V on #83, even while turning the engine by hand. That kind of confirmed the crankshaft sensor is broken.
This is a picture from underneath the car of the crankshaft sensor, with connector attached, installed at the rear of the engine. The heat shield is partially bent open to get access. It was fiddly, but doable to get the sensor out. Bench testing the sensor confirmed the 0V signal on pin #2, so next step is to get a new sensor and install it. The sensor is an original MB part, the bit sticking inside the engine was surprisingly oily, not sure what to think of that yet. I wouldn't expect any oil present that high in bell housing.
Once I get a new sensor, I'll probably be able to get a descent crankshaft signal on the ECU. Then of course there's the question why this sensor failed within 400km. Did the oil interere with its working somehow? I'll have to leave this one upside down as well for a while, see if anything drips out.




Did you actually get unloaded ( no sensor ) voltage reading at ECU male pin 83 and 19 ? With the connector M disconnected.
NOTE : My measurement was a loaded one, ECM connector and sensors are all connected.
The Best of Mercedes & AMG




We need to know 5V power supply from those two pins, 44 & 19
Pin 17 is also a 5V positive.




5V to pin 3
GND to pin 1
Signal on pin 2.
Whatever I do, I keep getting 0V at pin 2, just like the old sensor. (0V difference referenced to either pin 1 or 3). This looks like a duff sensor. I'll order a cheap aftermarket one as reference, as this is starting to do my head in a little.
I'll be away for a few days so next update will take about a week.




5V to pin 3
GND to pin 1
Signal on pin 2.
Whatever I do, I keep getting 0V at pin 2, just like the old sensor. (0V difference referenced to either pin 1 or 3). This looks like a duff sensor. I'll order a cheap aftermarket one as reference, as this is starting to do my head in a little.
I'll be away for a few days so next update will take about a week.
Tap/touch, the end of sensor with ferrous metal or magnet, while reading voltage at signal wire.
Yeah, I've tried both magnets and iron cutlery to trigger something. This is the test setup.
But franklu, looking at your scope data in post #41 from a known good crank sensor, it looks to be a pull down sensor. So I would expect 5V with no metal close to the sensor, and a pull-down to 0 with something close. Though the WIS document describing how the ECU gets engine positions points at a pull-up type sensor:
Well, whichever type it is, the 2 sensors I have in front of me right now stay fixed at 0V. Which cannot be any good.




What are the chances you got a bad brand new MB brand sensor... Dang, this is not good.Looking at the tone generator at the flywheel, and the waveform from WIS , it does fit the description of Pull Up of WIS since the 2 missing tooth at flywheel is a VOID and waveform by WIS shows zero/low volt.
https://www.ebay.com/itm/165438271622
M276 3.0 has intercooler blocking the crankshaft pulley, so me can not spin engine by hand.




The ECM timings for injectors and sparks are based on high resolution crankshaft position.
Camshafts sensors are only used for VVT positioning.
++++ Same flywheel

I turned up the similar flywheel!!!
same features
ECM must be looking at BOTH the starter teeth AND the side windows to locate TDC#1.
Last edited by CaliBenzDriver; Oct 16, 2023 at 05:57 PM. Reason: weird...




But frankly, looking at your scope data in post #41 from a known good crank sensor, it looks to be a pull down sensor.
So I would expect 5V with no metal close to the sensor, and a pull-down to 0 with something close.
Though the WIS document describing how the ECU gets engine positions points at a pull-up type sensor:
Well, whichever type it is, the 2 sensors I have in front of me right now stay fixed at 0V. Which cannot be any good.
let's say 360 teeth per flywheel turning at 750Rpm divided by 60Secs equals 5kHz ticks near idle - it's hard to emulate that by hand.
The way the sensor runs off of 5V says it has a built-in electronic amplifier to help cleanup signal and drive the output line to ECU.
This sensor could be a distant cousin of serial LIN minus networking protocol - Trust Bosch for innovations!
Best here may be to trust the new MB sensor as a reference.
Last edited by CaliBenzDriver; Oct 16, 2023 at 06:24 PM.
And, hanging head in shame here, with the scope I do get a signal. From all 3 CPS I have laying around by now. The thing is, these sensor give only give a short pulse on any changes in the magnetic field.
This pulse takes about 4ms from start till it gets below 1V again. I generated these pulses by inserting a metal allen key into my drill and spinning this in front of the sensor, hence the steady pattern. The pulse length is independent from the drill speed, even if I move the sensor manually towards a piece of metal, it generated only a single pulse once I get close enough to the metal.
The pulse is only measurable between pin 3 (+5V) and pin 2 (Signal), I see no pulses if I measure between pin 1 (GND) and pin 2. This last bit is very important, as I limited my measurements of the CPS on the car between Signal and GND. I have to measure this between +5 and Signal instead, which I just never tried. So it's time to put the sensor back in to the car and do my measurements on the car again, now knowing what to look for.
Learnings here, I have to know more specifically what the pattern of a known-good sensor should look like before I can conclude whether anything on my car has an issue. And I have to thread more careful in further troubleshooting, to avoid replacing random parts that are not faulty.




Most conventional DVM are limited to 50/60Hz AC/DC and are totally out of their field with exotic signals ... that's where scopes shine in low voltage applications.
When you plug everything back together, what next step does this lead you to?
So next, everything connected to the ECU, ignition on / engine off, I can no longer detect the pulse from the CPS by back probing the ECU connector. The only thing I (once again) see on the CPS pin on the ECU (#83) is a copy of the intake camshaft hall sensor. This even goes so far, as connecting / disconnecting the left intake camshaft hall sensor just gives a similar 5V difference on pin #83.
Furthermore, I did the 53° test with the cam tone wheels to see if that all ligns up, and on the right intake, and left exhaust (these are easiest to access) everything lines up perfectly.
I checked the various common issues once more, with regard to the CPS sensor. There is no short between the 3 wires, the 5V gets to the sensor, ground is connected to ground etc. etc. Not much else I can think of except for the ECU itself right now.




CRANK pos sensor uses 5V and probably 1 amp max power supply.
CAM pos sensors uses 12V and outputs 5V signal. This is direct 12V power from Fuse 23 and 24 of front SAM 15 and 20 amps, depending on which bank.
So, if indeed ECM internally goes banana, it wont be a surprise that CAM pos sensor higher power supply could be the "attacker" of the 5V channel or CRANK pos sensor
I think he also references Super Mario Diagnostics, I think he gives a more in-depth play by play on the programming and how to connect to MB for the program files on a TopDon Phoenix Max.
Side note Topdon and Thinktool uses the Launch X431 program, the Autel is it's own program.
But if I'm lucky, it's really an untouched, brand new, ECU that's underway, and my baby Launch has the options... I'll check on the car what's available!






