Discussion in 'other anti-malware software' started by fredvries, Feb 22, 2012.
its continuously updating hosts file...
there should be its own database instead of using Hosts file..
Thank you for your comments. We're looking into this problem.
I think Mirage Anti-Bot should allow the user to specify domain names to be allowed, in case an IP is shared or for some reason a good IP address gets blocked.
It could allow the user to specify the processes that should be allowed connection to that IP, if it matches a given domain name.
The reason for this suggestion is quite simple. I've using ZeuS, SpyEye and Palevo C&C IPs, and today I noticed that abuse.ch Palevo tracker is blocking IP 18.104.22.168 and, surprisingly http://amada.abuse.ch/ is hosted on that IP address.
I wonder how something like that happened. I thought the abuse.ch team/security researcher made sure things like this wouldn't happen?
a log file with blocked events would be nice.
You should drink a stronger coffee. The latest two suggestions you have given, have already been given.
Feature request (if you are still planning in using hosts file as database):
Apply the hostsoptimizer function as described here -http://forum.abelhadigital.com/viewtopic.php?f=8&t=4&sid=e22263720f67ec6d5fb6ce3abada39fd
It will help prevent slowdowns if the size of the hosts file increase. (eg. database keeps increasing)
I can't seem to find the direct download from that site, is MirageAntiBotv10_downloader_by_MirageAntiBotv10.exe the actual installer or a downloader for the actual installer? From the name, it is a downloader right?
Hitman Pro indicates its a trojan. Mamutu - nothing. I deleted it from my PC - I thought, but according Hitman its still there. How do I get rid of it while waiting for a version that has an uninstaller?
Latest news on Mirage? Very silent - project gone to sleep? Should I just press "Remove" on the file or is there a removal tool I should use?
Mirage Anti-Bot 2.0 cause problem (freezing) when I shut down win xp .
Not sure about the latest news... but part of the protection is now gone. abuse.ch Malware Database (AMaDa) has been discontinued. That includes the Palevo tracker. I don't know if it's still possible for Mirage Anti-Bot to use such data?
AMaDa has been discontinued.
The project is certainly not discontinued.
Yes, we know about the tweet/mail from abuse.ch that one of three lists is discontinued but we strive to keep Mirage as useful as possible.
How do I remove/uninstall this Mirage. It seems I cant find it on my PC.
There's been quite sometime... Any news about a new version, or is it pretty much a dead project?
No, the project isn't dead an we expect an update as soon as possible. The name might change to Phrozen Anti-Bot.
Thanks. But, the name might be a bit unfortunate. Phrozen (read Frozen) Anti-Bot. Maybe a name without Phrozen in it.
Well, it's a catchy name... but, it may not be the most appropriate name for a security application. But, who knows. lol
Mirage Anti-Bot 3.0 has been released.
[x] Recoded from the ground up
[x] Logs blocked events/sites
[x] You can now add your own sites to block
More info and download here.
Separate names with a comma.