Run the mir3.exe without any cheat,make a md5 of the game running,make an aplication can load mir3.exe and check the mir3.exe in memory,if md5 is diferent make this loader connect to server for advice or ban this IP,simply program like proxy for mir gates to manage the IP Ban,another is unpack mir3.exe,pack using another method and use this MD5 (Or something).
Another way is get the dll are running the process or inserted in process mir3.exe,take a look the normal dll are using in run mode and check if any dll is inserted.
Other method (More crap) is check the port of the cheat and make the loader uses the same port,this makes the cheat unservible until these port are in config file.
I hope it serves. Soz for my english :P
Bye