thanks for reply bro
Quote:
Originally Posted by Jeoni
You could use a network sniffer like wireshark to see if and which HTTP Requests are sent (there you'll see the "direct links"). In the unlikely case that a proprietary protocol is used instead of HTTP, it would get much more complicated.
With best regards
Jeoni
|
i actually tried paessler and wireshark but i have no idea what i am doing, wireshark dont show any direct links at all if i remember right
Quote:
Originally Posted by Daifoku
You could also try this approach:
1) open the binary with ollydbg
2) take a look at all referenced strings (just copy the whole table to any texteditor you like and STRF+F your way through it )
The URL is hardcoded in the referenced string table and should contain %s printf statements that tell you further informations about the structure of each update link.
|
i'll try this ollydbg later but it looks complicated
here is the screenshot of me running the updater and wireshark, any idea what to do ?i tried ctrl + F and find reactor.exe (the updater process) but nothing found