Mirage Anti-Bot 2.0

[m00nbl00d]

Originally Posted by fredvries

@M00nbl00d:
Reporting/logging/signaling of communication to and from any of the SpyEye, ZeuS or Palevo C&C domains/IPs will hopefully be added in future versions of Mirage Anti-Bot

Thank you.

[nikanthpromod]

its continuously updating hosts file...
there should be its own database instead of using Hosts file..

[fredvries]

@nikanthpromod

Thank you for your comments. We're looking into this problem.

[m00nbl00d]

I think Mirage Anti-Bot should allow the user to specify domain names to be allowed, in case an IP is shared or for some reason a good IP address gets blocked.

It could allow the user to specify the processes that should be allowed connection to that IP, if it matches a given domain name.

The reason for this suggestion is quite simple. I've using ZeuS, SpyEye and Palevo C&C IPs, and today I noticed that abuse.ch Palevo tracker is blocking IP 82.165.47.254 and, surprisingly http://amada.abuse.ch/ is hosted on that IP address.

I wonder how something like that happened. I thought the abuse.ch team/security researcher made sure things like this wouldn't happen?

[nikanthpromod]

a log file with blocked events would be nice.

[m00nbl00d]

Originally Posted by nikanthpromod

a log file with blocked events would be nice.

You should drink a stronger coffee. The latest two suggestions you have given, have already been given.

http://www.wilderssecurity.com/showp...5&postcount=10

and

http://www.wilderssecurity.com/showp...3&postcount=17

[kupo]

Feature request (if you are still planning in using hosts file as database):
Apply the hostsoptimizer function as described here -http://forum.abelhadigital.com/viewtopic.php?f=8&t=4&sid=e22263720f67ec6d5fb6ce3abada39fd
It will help prevent slowdowns if the size of the hosts file increase. (eg. database keeps increasing)
EDIT:

Originally Posted by fredvries

...Yes, the direct download is via unremote.org...

I can't seem to find the direct download from that site, is MirageAntiBotv10_downloader_by_MirageAntiBotv10.exe the actual installer or a downloader for the actual installer? From the name, it is a downloader right?

[Rivalen]

Hitman Pro indicates its a trojan. Mamutu - nothing. I deleted it from my PC - I thought, but according Hitman its still there. How do I get rid of it while waiting for a version that has an uninstaller?

[Rivalen]

Latest news on Mirage? Very silent - project gone to sleep? Should I just press "Remove" on the file or is there a removal tool I should use?

Best Regards

[atlantis]

Mirage Anti-Bot 2.0 cause problem (freezing) when I shut down win xp .

[m00nbl00d]

Originally Posted by Rivalen

Latest news on Mirage? Very silent - project gone to sleep? Should I just press "Remove" on the file or is there a removal tool I should use?

Best Regards

Not sure about the latest news... but part of the protection is now gone. abuse.ch Malware Database (AMaDa) has been discontinued. That includes the Palevo tracker. I don't know if it's still possible for Mirage Anti-Bot to use such data?

-http://amada.abuse.ch/servers.php

AMaDa has been discontinued.

[fredvries]

The project is certainly not discontinued.

Yes, we know about the tweet/mail from abuse.ch that one of three lists is discontinued but we strive to keep Mirage as useful as possible.

[Rivalen]

How do I remove/uninstall this Mirage. It seems I cant find it on my PC.

Best Regards

[m00nbl00d]

There's been quite sometime... Any news about a new version, or is it pretty much a dead project?

[fredvries]

@m00nbl00d

No, the project isn't dead an we expect an update as soon as possible. The name might change to Phrozen Anti-Bot.

[m00nbl00d]

Originally Posted by fredvries

@m00nbl00d

No, the project isn't dead an we expect an update as soon as possible. The name might change to Phrozen Anti-Bot.

Thanks. But, the name might be a bit unfortunate. Phrozen (read Frozen) Anti-Bot. Maybe a name without Phrozen in it.

Well, it's a catchy name... but, it may not be the most appropriate name for a security application. But, who knows. lol

[fredvries]

Mirage Anti-Bot 3.0 has been released.

[x] Recoded from the ground up
[x] Logs blocked events/sites
[x] You can now add your own sites to block

More info and download here.

[Bodhitree]

Ooops..