Add files via upload

增加中文

Driver/Protect/Install_Driver.bat

@@ -0,0 +1,34 @@
+@echo off
+setlocal
+
+:: Check for permissions
+>nul 2>&1 "%SYSTEMROOT%\system32\icacls.exe" "%SYSTEMROOT%\system32\config\system"
+
+if %errorlevel% NEQ 0 goto NoAdmin
+goto gotAdmin
+
+:NoAdmin
+    echo You do not have administrator rights, please run this script as administrator.
+    pause
+    exit /B
+
+:gotAdmin
+    if exist "%temp%\getadmin.vbs" del "%temp%\getadmin.vbs"
+
+set "script_dir=%~dp0"
+set "script_dir=%script_dir:~0,-1%"
+
+bcdedit -debug on
+bcdedit /set testsigning on
+bcdedit /deletevalue {current} safeboot
+
+powershell.exe -ExecutionPolicy Bypass -Command ^
+"$endDate = (Get-Date).AddYears(100); ^
+ $cert = New-SelfSignedCertificate -DnsName PYAS -CertStoreLocation cert:\LocalMachine\My -Type CodeSigning -NotAfter $endDate; ^
+ $pwd = ConvertTo-SecureString -String 'PYAS' -Force -AsPlainText; ^
+ Export-PfxCertificate -Cert $cert -FilePath '%script_dir%\PYAS.pfx' -Password $pwd;"
+"%script_dir%\signtool.exe" sign /f "%script_dir%\PYAS.pfx" /p PYAS "%script_dir%\PYAS_Driver.sys"
+sc create PYAS_Driver type= kernel start= demand binPath= "%script_dir%\PYAS_Driver.sys"
+
+shutdown -r -t 0
+endlocal

Driver/Protect/Uninstall_Driver.bat

@@ -0,0 +1,25 @@
+@echo off
+setlocal
+
+:: Check for permissions
+>nul 2>&1 "%SYSTEMROOT%\system32\icacls.exe" "%SYSTEMROOT%\system32\config\system"
+
+if %errorlevel% NEQ 0 goto NoAdmin
+goto gotAdmin
+
+:NoAdmin
+    echo You do not have administrator rights, please run this script as administrator.
+    pause
+    exit /B
+
+:gotAdmin
+    if exist "%temp%\getadmin.vbs" del "%temp%\getadmin.vbs"
+
+sc stop PYAS_Driver
+sc delete PYAS_Driver
+
+bcdedit /set testsigning off
+bcdedit -debug off
+
+shutdown -r -t 0
+endlocal

Engine/Model/PYAS_Model.json

@@ -0,0 +1,12 @@
+{
+    "Suffix": [".com", ".exe", ".dll", ".sys", ".scr",
+               ".bat", ".cmd", ".ps1", ".vbs", ".wsf"], 
+
+    "Labels": ["Pefile/White", "Script/White", "Pefile/General", "Script/General"], 
+
+    "Detect": ["Pefile/General", "Script/General"],  
+
+    "Pixels": [224, 224], 
+
+    "Values": 90
+}

Extens/Repair/Repair_Regedit.reg

@@ -0,0 +1,117 @@
+Windows Registry Editor Version 5.00
+
+; Repair system restrictions
+[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\MMC]
+; NoControlPanel
+"NoControlPanel"=dword:00000000
+; NoDrives
+"NoDrives"=dword:00000000
+; NoFileMenu
+"NoFileMenu"=dword:00000000
+; NoFind
+"NoFind"=dword:00000000
+; NoRealMode
+"NoRealMode"=dword:00000000
+; NoRecentDocsMenu
+"NoRecentDocsMenu"=dword:00000000
+; NoSetFolders
+"NoSetFolders"=dword:00000000
+; NoSetFolderOptions
+"NoSetFolderOptions"=dword:00000000
+; NoViewOnDrive
+"NoViewOnDrive"=dword:00000000
+; NoClose
+"NoClose"=dword:00000000
+; NoRun
+"NoRun"=dword:00000000
+; NoDesktop
+"NoDesktop"=dword:00000000
+; NoLogOff
+"NoLogOff"=dword:00000000
+; NoFolderOptions
+"NoFolderOptions"=dword:00000000
+; RestrictRun
+"RestrictRun"=dword:00000000
+; NoViewContextMenu
+"NoViewContexMenu"=dword:00000000
+; HideClock
+"HideClock"=dword:00000000
+; NoStartMenuMorePrograms
+"NoStartMenuMorePrograms"=dword:00000000
+; NoStartMenuMyGames
+"NoStartMenuMyGames"=dword:00000000
+; NoStartMenuMyMusic
+"NoStartMenuMyMusic"=dword:00000000
+; DisableCMD
+"DisableCMD"=dword:00000000
+; NoWinKeys
+"NoWinKeys"=dword:00000000
+; StartMenuLogOff
+"StartMenuLogOff"=dword:00000000
+; NoSimpleNetlDList
+"NoSimpleNetlDList"=dword:00000000
+; NoLowDiskSpaceChecks
+"NoLowDiskSpaceChecks"=dword:00000000
+; DisableLockWorkstation
+"DisableLockWorkstation"=dword:00000000
+; Restrict_Run
+"Restrict_Run"=dword:00000000
+; DisableTaskMgr
+"DisableTaskMgr"=dword:00000000
+; DisableRegistryTools
+"DisableRegistryTools"=dword:00000000
+; DisableChangePassword
+"DisableChangePassword"=dword:00000000
+; Wallpaper
+"Wallpaper"=dword:00000000
+; NoComponents
+"NoComponents"=dword:00000000
+; NoAddingComponents
+"NoAddingComponents"=dword:00000000
+; NoStartMenuPinnedList
+"NoStartMenuPinnedList"=dword:00000000
+; NoActiveDesktop
+"NoActiveDesktop"=dword:00000000
+; NoSetActiveDesktop
+"NoSetActiveDesktop"=dword:00000000
+; NoActiveDesktopChanges
+"NoActiveDesktopChanges"=dword:00000000
+; NoChangeStartMenu
+"NoChangeStartMenu"=dword:00000000
+; NoFavoritesMenu
+"NoFavoritesMenu"=dword:00000000
+; NoRecentDocsHistory
+"NoRecentDocsHistory"=dword:00000000
+; NoSetTaskbar
+"NoSetTaskbar"=dword:00000000
+; NoSMHelp
+"NoSMHelp"=dword:00000000
+; NoTrayContextMenu
+"NoTrayContextMenu"=dword:00000000
+; NoViewContextMenu
+"NoViewContextMenu"=dword:00000000
+; NoManageMyComputerVerb
+"NoManageMyComputerVerb"=dword:00000000
+; NoWindowsUpdate
+"NoWindowsUpdate"=dword:00000000
+; ClearRecentDocsOnExit
+"ClearRecentDocsOnExit"=dword:00000000
+; NoStartMenuNetworkPlaces
+"NoStartMenuNetworkPlaces"=dword:00000000
+
+; Repair Image File Execution Options
+[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options]
+; (Delete all subkeys here if necessary)
+
+; Repair executable file icon
+[HKEY_CLASSES_ROOT\exefile\DefaultIcon]
+@="%1"
+[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\exefile\DefaultIcon]
+@="%1"
+
+; Repair executable file type
+[HKEY_CLASSES_ROOT\.exe]
+@="exefile"
+[HKEY_CLASSES_ROOT\exefile\shell\open\command]
+@="\"%1\" %*"
+

Extens/Repair/Repair_System.bat

@@ -0,0 +1 @@
+sfc /scannow

Extens/Tools/Tools.txt

@@ -0,0 +1 @@
+None

LICENSE.md

@@ -1,6 +1,6 @@
 MIT License
 
-Copyright (c) 2020-2023 87owo (PYAS Security)
+Copyright (c) 2020-2024 87owo (PYAS Security)
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

PYAS_Engine.py

@@ -0,0 +1,109 @@
+import os, sys, time, json, yara
+import numpy, pefile, onnxruntime
+from PIL import Image
+
+class YRScan:
+    def __init__(self):
+        self.rules = {}
+        self.network = []
+
+    def load_rules(self, file_path):
+        try:
+            ftype = os.path.splitext(file_path)[-1].lower()
+            if ftype in [".yara", ".yar"]:
+                self.rules[file_path] = yara.compile(file_path)
+            elif ftype in [".yc", ".yrc"]:
+                self.rules[file_path] = yara.load(file_path)
+            elif ftype in [".ip", ".ips"]:
+                with open(file_path, "r") as f:
+                    self.network += [l.strip() for l in f.readlines()]
+        except Exception as e:
+            print(e)
+
+    def yr_scan(self, file_path):
+        try:
+            if isinstance(file_path, str):
+                with open(file_path, "rb") as f:
+                    file_path = f.read()
+            for name, rules in self.rules.items():
+                matchs_rules = rules.match(data=file_path)
+                if matchs_rules:
+                    label = str(matchs_rules[0]).split("_")[0]
+                    level = str(matchs_rules[0]).split("_")[-1]
+                    return f"Rules/{label}", level
+            return False, False
+        except Exception as e:
+            return False, False
+
+class DLScan:
+    def __init__(self):
+        self.models = {}
+        self.shells = ['0', '1', '2', '3', '4', '5', '6', '7', '8', '9', '!o',
+        'cry', 'test', 'ace', 'yg', 'obr', 'tvm', 'dec', 'enc', 'b1_', 'base',
+        'bss', 'clr_uef', 'cursors', 'trs_age', 'engine', 'enigma', 'protect',
+        'nep', 'no_bbt', 'wpp_sf', 'retpol', 'rt', 'rwexec', 'rygs', 'poolmi',
+        's:@', 'pgae', 'proxy', 'wisevec', 'segm', 'transit', 'vmp', 'extjmp',
+        'upx', 'tracesup', 'res', 'lzma', 'malloc_h', 'miniex', 'ndr64', 'be',
+        'mssmixer', 'wow', 'press', 'fio', 'pad', 'hexpthk', 'h~;', 'icapsec',
+        'sanontcp', 'secur', 'asmstub', 'nsys_wr', 'orpc', 'pack', 'wow64svc',
+        'uedbg', 'viahw', 'data', 'zk', 'fothk', 'qihoo']#"""
+
+    def load_model(self, file_path):
+        try:
+            ftype = os.path.splitext(file_path)[-1].lower()
+            if ftype in [".json", ".txt"]:
+                with open(file_path, 'r') as f:
+                    self.class_names = json.load(f)
+            elif ftype in [".onnx"]:
+                self.models[file_path] = onnxruntime.InferenceSession(file_path)
+            self.labels = self.class_names['Labels']
+            self.detect = self.class_names['Detect']
+            self.pixels = self.class_names['Pixels']
+            self.values = self.class_names['Values']
+            self.suffix = self.class_names['Suffix']
+        except Exception as e:
+            pass
+
+    def dl_scan(self, file_data):
+        try:
+            label_similarities = {label: [] for label in self.labels}
+            image_data = self.preprocess_image(file_data, tuple(self.pixels))
+            image_array = numpy.asarray(image_data).astype('float32') / 255.0
+            image_expand = numpy.expand_dims(image_array, axis=(0, -1))
+            for model_name, model in self.models.items():
+                input_name = model.get_inputs()[0].name
+                pre_answers = model.run(None, {input_name: image_expand})[0][0]
+                for k, score in enumerate(pre_answers):
+                    label_similarities[self.labels[k].strip()].append(score)
+            label_percentage = {label: (sum(similarities) / len(self.models)) * 100
+            for label, similarities in label_similarities.items()}
+            label, level = max(label_percentage.items(), key=lambda x: x[1])
+            return label, int(level)
+        except Exception as e:
+            return False, False
+
+    def preprocess_image(self, file_data, target_size):
+        wah = int(numpy.ceil(numpy.sqrt(len(file_data))))
+        file_data = numpy.frombuffer(file_data, dtype=numpy.uint8)
+        image_array = numpy.zeros((wah * wah,), dtype=numpy.uint8)
+        image_array[:len(file_data)] = file_data
+        image = Image.fromarray(image_array.reshape((wah, wah)), 'L')
+        return image.resize(target_size, Image.Resampling.NEAREST)
+
+    def get_type(self, file_path):
+        match_data = {}
+        ftype = os.path.splitext(file_path)[-1].lower()
+        if ftype in self.suffix:
+            try:
+                with pefile.PE(file_path, fast_load=True) as pe:
+                    for section in pe.sections:
+                        section_name = section.Name.rstrip(b'\x00').decode('latin1')
+                        if (section.Characteristics & 0x00000020 and not
+                        any(shell in section_name.lower() for shell in self.shells)):
+                            match_data[section_name] = section.get_data()
+            except:
+                if ftype in [".bat", ".cmd", ".ps1", ".vbs", ".wsf", ".html", ".js", 
+                    ".txt", ".htm", ".hta", ".php", ".css", ".xml", ".json", ".wasm"]:
+                    with open(file_path, 'rb') as file:
+                        match_data[ftype] = file.read()
+        return match_data

PYAS_Language.py

@@ -1,50 +1,60 @@
-translations = {"zh_TW": {"已开启":"已開啟","已关闭":"已關閉","On":"已開啟","Off":"已關閉"},
-                "zh_CN": {"已開啟":"已开启","已關閉":"已关闭","On":"已开启","Off":"已关闭",
-                          "軟體":"软件","檔案":"文件","確定":"确认","設定":"设置","關於":"关于",
-                          "錯誤":"错误","實時":"实时","發現":"发现","本機":"电脑","資料":"数据",
-                          "誤殺":"误杀","開發":"开发","關閉":"关闭","試":"试","資訊":"资讯",
-                          "總數":"总数","註冊":"注册","嗎":"吗","項":"项","掃":"扫","鑰":"钥",
-                          "當":"当","後":"后","護":"护","導":"导","區":"区","復":"复","攔":"拦",
-                          "請":"请","統":"统","刪":"删","進":"进","個":"个","選":"选","啟":"启",
-                          "監":"监","並":"并","裝":"装","徑":"径","盤":"盘","隱":"隐","動":"动",
-                          "誌":"志","靈":"灵","這":"这","會":"会","題":"题","擇":"择","語":"语",
-                          "顯":"显","變":"变","戶":"户","碼":"码","雲":"云","訂":"订","稱":"称",
-                          "類":"类","輸":"输","執":"执","數":"数","尋":"寻","網":"网","詢":"询",
-                          "製":"制","員":"员","許":"许","條":"条","藍":"蓝","紅":"红","綠":"绿",
-                          "態":"态","擇":"择","務":"务","連":"连","檢":"检","測":"测",},
-                "en_US": {"已開啟":"On","已關閉":"Off","已开启":"On","已关闭":"Off","啟用":"Enable ",
-                          "正在掃描":"Scanning ","正在刪除":"Deleting ","正在尋找":"Searching ",
-                          "正在檢測":"Checking ","無法確定":"Can't Confirm ","可疑":"Suspicious ",
-                          "狀態":"State ","掃描":"Scan ","工具":"Tools ","防護":"Protect ",
-                          "禁用":"Disable ","系統":"System ","雲端":"Cloud ","重啟":"Reboot ",
-                          "創建":"Create ","日期":"Date ","檔案":"File ","當前":"Currently ",
-                          "失敗":"Failed ","請":"Please ","路徑":"Path ","方式":"Method ",
-                          "需要":"Need ","病毒":"Virus ","選擇":"Select ","返回":"Back",
-                          "裝置":"Device ","發現":"Found ","，":", ","密鑰錯誤":"Key Error",
-                          "找到":"Find ","受到":"Been ","錯誤":"Error ","完成":"Complete ",
-                          "修復":"Repair ","正在初始化中":"Initializing ","實時":"Real-Time ",
-                          "立即刪除":"Delete Now","安全模式":"Safe Mode","不安全":"Unsafe",
-                          "確定要":"Sure Want To ","成功":"Success ","清理":"Cleanup ",
-                          "確定":"OK","執行":"Execute ","警告":"Warning ","輸入了":"Input ",
-                          "搜尋":"Search ","不是有效":"Is Not A Valid ","命令":"Command",
-                          "修改":"Modify ","用戶":"User ","使用":"Use ","哈希":"Hash",
-                          "更多":"More","重置":"Reset ","網路":"Network ","配置":"Config ",
-                          "選項":"Options ","監控":"Monitor ","連接":"Connect ","可以":"To ",
-                          "進程":"Process ","攔截":"Block ","引導":"Boot ","刪除":"Delete ",
-                          "分區":"Partition ","設定":"Setting","關於":"About","模式":"Mode ",
-                          "靈敏度":"Sensitivity ","提高":"Improve ","安全":"Security ",
-                          "白色主題":"White","黑色主題":"Black","黃色主題":"Yellow","紅色主題":"Red",
-                          "藍色主題":"Blue","綠色主題":"Green","語言":"Language ","製作":"Make",
-                          "但":"But ","註冊表":"Regedit ","顯色":"Color ","主題":"Themes ",
-                          "介面":"GUI ","核心":"Core ","服務":"Services ","測試人員":"Testers",
-                          "官方網站":"Website","許可條款":"License Terms","全盤":"Full ",
-                          "隱私":"Privacy ","更多":"More ","開發":"Devs ","管理":"Manage",
-                          "垃圾":"Junk ","輸出":"Output ","版本資訊":"Information","位元":"Bits",
-                          "粉碎":"Shredding","自訂":"Customize ","分析":"Analyze ","函數":"Func",
-                          "變更":"Change ","位置查詢":"Location Query","總數":"Total","結束":"End ",
-                          "本機":"Computer ","加密":"Encrypt ","解密":"Decrypt ","文字":"Text",
-                          "類型":"Type","資料":"Data","日誌":"Log","停止":"Stop ","值":"Value ",
-                          "前":"Before","後":"After","密碼":"Password ","此":"This ","立即":"",
-                          "名":"Name","高":"High ","新":"New ","稱":"","是":"Is ","中":"",
-                          "您":"You ","未":"Not ","已":"Has ","個":"","的":"","到":"For ",
-                          "嗎":"","並":"And ","會":"Can ","行":"","  ":" "}}
+translate_dict = {
+    "zh_TW": {"已开启":"已開啟","已关闭":"已關閉","On":"已開啟","Off":"已關閉"},
+    "zh_CN": {"已開啟":"已开启","已關閉":"已关闭","On":"已开启","Off":"已关闭",
+              "軟體":"软件","檔案":"文件","確定":"确认","設定":"设置","關於":"关于",
+              "錯誤":"错误","實時":"实时","發現":"发现","關閉":"关闭","裝置":"设备",
+              "總數":"总数","註冊":"注册","圖標":"图标","路徑":"路径","網路":"网络",
+              "位元":"字节","彈窗":"弹窗","靈敏":"敏感","複製":"复制","開啟":"开启",
+              "訊":"讯","項":"项","掃":"扫","試":"试","黃":"黄","嗎":"吗","防":"保",
+              "鑰":"钥","當":"当","後":"后","護":"护","導":"导","區":"区","復":"复",
+              "攔":"拦","請":"请","統":"统","刪":"删","進":"进","個":"个","選":"选",
+              "啟":"启","監":"监","並":"并","徑":"径","盤":"盘","隱":"隐","動":"动",
+              "狀":"状","誌":"志","這":"这","會":"会","題":"题","擇":"择","語":"语",
+              "無":"无","顯":"显","變":"变","戶":"户","碼":"码","雲":"云","介":"界",
+              "稱":"称","類":"类","輸":"输","執":"执","數":"数","尋":"寻","網":"网",
+              "詢":"询","製":"制","員":"员","許":"许","條":"条","藍":"蓝","紅":"红",
+              "綠":"绿","態":"态","務":"务","連":"连","檢":"检","測":"测","關":"关",
+              "強":"强","驅":"驱","為":"为","腳":"脚","單":"单","開":"开","擴":"扩",
+              "惡":"恶","據":"据","庫":"库","經":"经","敗":"败","謝":"谢","別":"别",
+              "載":"载","誤":"误","報":"报","鏈":"链","竄":"窜","蹤":"踪","記憶體":"内存",},
+    "en_US": {"已開啟":"On","已關閉":"Off","已开启":"On","已关闭":"Off","，":", ",
+              "立即刪除":"Delete Now","安全模式":"Safe Mode","官方網站":"Website ",
+              "腳本":"Script ","鏈式":"Chain ","記憶體":"Memory ","加載":"Load ",
+              "行為":"Behavior ","可疑":"Suspicious ","勒索":"Ransom ",
+              "許可條款":"License Terms ","惡意":"Malicious","可疑":"Suspicious",
+              "啟用":"Enable ","禁用":"Disable ","正在初始化中":"Initializing ",
+              "正在掃描":"Scanning ","正在刪除":"Deleting ","正在追蹤":"Tracking ",
+              "最小化到":"Minimize To ","靈敏度":"Sensitivity ","正在檢查":"Checking ",
+              "確定要":"Sure Want To ","引擎靈敏度":"Sensitivity ","更新":"Update ",
+              "白色主題":"White","黃色主題":"Yellow","紅色主題":"Red","語言":"Language ",
+              "藍色主題":"Blue","綠色主題":"Green","自定主題":"Custom","最新":"Latest ",
+              "特別感謝":"Contributors ","版本資訊":"Information","通訊":"Connect ",
+              "註冊表":"Registry ","退出":"Quit ","檔案":"File ","當前":"Currently ",
+              "狀態":"State ","掃描":"Scan ","工具":"Tools ","防護":"Protect ",
+              "失敗":"Failed ","請":"Please ","路徑":"Path ","方式":"Method ",
+              "需要":"Need ","病毒":"Virus ","選擇":"Select ","返回":"Back",
+              "受到":"Been ","錯誤":"Error","完成":"Complete ","引擎":"Engine ",
+              "托盤":"Tray ","圖標":"Icon ","不安全":"Unsafe","增強":"Enhance ",
+              "系統":"System ","雲端":"Cloud ","重啟":"Reboot ","修復":"Repair ",
+              "裝置":"Device ","發現":"Found ","成功":"Success ","清理":"Cleanup ",
+              "確定":"OK","執行":"Execute ","警告":"Warning ","使用":"Use ",
+              "網路":"Network ","變更":"Change ","總數":"Total","結束":"End ",
+              "選項":"Options ","監控":"Monitor ","連接":"Connect ","可以":"To ",
+              "進程":"Process ","攔截":"Block ","引導":"Boot ","刪除":"Delete ",
+              "分區":"Partition ","設定":"Settings","關於":"About","模式":"Mode ",
+              "提高":"Improve ","安全":"Security ","顯色":"Color ","主題":"Themes ",
+              "風險":"Risk ","介面":"GUI ","核心":"Core ","服務":"Services ",
+              "管理":"Manage","所有":"All ","您":"You ","取消":"Cancel ","未":"Not ",
+              "垃圾":"Junk ","位元":"byte ","本機":"Computer ","停止":"Stop ",
+              "增加到":"Add To ","白名單":"White List ","軟體":"Software ","正在":"",
+              "增加":"Add ","移除":"Delete","項目":"Items ","生成":"Create ","稱":"",
+              "複製":"Copy ","開啟":"Open ","此":"This ","並":"And ","全盤":"Full ",
+              "已經在":"Already ","數據庫":"Database ","誤報":"False Positive ",
+              "高":"High ","新":"New ","和":"And ","可能會":"Possible ","會":"Can ",
+              "日誌":"Log","已":"Has ","彈窗":"Window ","要":"To ","驅動":"Driver ",
+              "的":"","顯示":"","個":"","嗎":"","中":"","了":"","行":"","立即":"",
+              "密鑰":"Key ","檢測":"Detect ","製作":"Maker ","運行":"Running",
+              "擴展":"Extension ","套件":"Kit ","自動":"Auto ","上報":"Report ",
+              "分析":"Analysis ","自身":"Self ","其他":"Other ","配置":"Config ",
+              "丟失":"Lost ","網站":"Website ","不兼容":"Not Compatible ",
+              "竄改":"Tamper ","第三方":"Other ","與":"With ","  ":" "}}

PYAS_Model.py

@@ -1 +0,0 @@
-function_list = [['_CorExeMain'], ['GetProcessHeap', 'RtlUnwind', 'RaiseException', 'HeapSize', 'TerminateProcess', 'UnhandledExceptionFilter', 'SetUnhandledExceptionFilter', 'IsDebuggerPresent', 'HeapDestroy', 'HeapCreate', 'VirtualFree', 'Sleep', 'GetStdHandle', 'GetTimeZoneInformation', 'GetACP', 'SetHandleCount', 'GetFileType', 'GetStartupInfoA', 'GetCommandLineA', 'GetEnvironmentStrings', 'FreeEnvironmentStringsW', 'GetEnvironmentStringsW', 'QueryPerformanceCounter', 'GetSystemTimeAsFileTime', 'LCMapStringA', 'LCMapStringW', 'GetConsoleCP', 'GetConsoleMode', 'GetStringTypeA', 'GetStringTypeW', 'SetStdHandle', 'WriteConsoleA', 'GetConsoleOutputCP', 'WriteConsoleW', 'GetDateFormatA', 'GetTimeFormatA', 'GetDriveTypeA', 'SetEnvironmentVariableA', 'HeapReAlloc', 'VirtualAlloc', 'SetCurrentDirectoryA', 'HeapAlloc', 'HeapFree', 'GetTickCount', 'GetCurrentDirectoryA', 'LocalFileTimeToFileTime', 'CreateFileA', 'GetShortPathNameA', 'GetVolumeInformationA', 'GetCurrentProcess', 'DuplicateHandle', 'GetFileSize', 'SetEndOfFile', 'UnlockFile', 'LockFile', 'FlushFileBuffers', 'SetFilePointer', 'WriteFile', 'ReadFile', 'DeleteFileA', 'MoveFileA', 'GetOEMCP', 'GetCPInfo', 'InterlockedIncrement', 'SystemTimeToFileTime', 'GetThreadLocale', 'GlobalFlags', 'TlsFree', 'DeleteCriticalSection', 'LocalReAlloc', 'TlsSetValue', 'TlsAlloc', 'InitializeCriticalSection', 'GlobalHandle', 'GlobalReAlloc', 'EnterCriticalSection', 'TlsGetValue', 'LeaveCriticalSection', 'LocalAlloc', 'CloseHandle', 'GetPrivateProfileStringA', 'WritePrivateProfileStringA', 'GetPrivateProfileIntA', 'GetCurrentProcessId', 'GetCurrentThread', 'ConvertDefaultLocale', 'GetModuleFileNameA', 'EnumResourceLanguagesA', 'GetLocaleInfoA', 'lstrcmpA', 'GetDiskFreeSpaceA', 'GetFullPathNameA', 'GetTempFileNameA', 'GetFileTime', 'SetFileTime', 'GetFileAttributesA', 'FreeResource', 'GetCurrentThreadId', 'GlobalGetAtomNameA', 'GlobalAddAtomA', 'GlobalFindAtomA', 'GlobalDeleteAtom', 'lstrcmpW', 'GetVersionExA', 'GlobalFree', 'GlobalAlloc', 'FormatMessageA', 'LocalFree', 'GlobalLock', 'GlobalUnlock', 'MulDiv', 'FindFirstFileA', 'FileTimeToLocalFileTime', 'FileTimeToSystemTime', 'FindNextFileA', 'FindClose', 'FreeLibrary', 'InterlockedDecrement', 'LockResource', 'SizeofResource', 'LoadResource', 'FindResourceA', 'ExitProcess', 'GetVersion', 'CompareStringA', 'GetModuleHandleA', 'LoadLibraryA', 'GetProcAddress', 'lstrcmpiA', 'SetLastError', 'GetLastError', 'InterlockedExchange', 'GetStringTypeExA', 'MultiByteToWideChar', 'CompareStringW', 'WideCharToMultiByte', 'lstrlenA', 'FreeEnvironmentStringsA', 'GetComputerNameA', 'CopyAcceleratorTableA', 'CreateMenu', 'PostThreadMessageA', 'GetTabbedTextExtentA', 'RegisterClipboardFormatA', 'GetSysColorBrush', 'UnregisterClassA', 'LoadCursorA', 'DestroyCursor', 'SetCursorPos', 'SetCapture', 'RedrawWindow', 'InflateRect', 'UnpackDDElParam', 'ReuseDDElParam', 'LoadMenuA', 'DestroyMenu', 'ReleaseCapture', 'LoadAcceleratorsA', 'InsertMenuItemA', 'CreatePopupMenu', 'BringWindowToTop', 'SetMenu', 'TranslateAcceleratorA', 'IsZoomed', 'WindowFromPoint', 'KillTimer', 'SetTimer', 'SetRect', 'SetParent', 'GetSystemMenu', 'DeleteMenu', 'SetRectEmpty', 'IsRectEmpty', 'GetDesktopWindow', 'CreateDialogIndirectParamA', 'GetNextDlgTabItem', 'EndDialog', 'GetMessageA', 'TranslateMessage', 'GetActiveWindow', 'GetCursorPos', 'ValidateRect', 'GetWindowThreadProcessId', 'ShowOwnedPopups', 'SetCursor', 'PostQuitMessage', 'IsWindowEnabled', 'SetWindowTextA', 'IsDialogMessageA', 'SetDlgItemTextA', 'RegisterWindowMessageA', 'LoadIconA', 'SendDlgItemMessageA', 'WinHelpA', 'GetCapture', 'SetWindowsHookExA', 'CallNextHookEx', 'GetClassNameA', 'SetPropA', 'GetPropA', 'RemovePropA', 'SetFocus', 'GetWindowTextLengthA', 'GetWindowTextA', 'GetLastActivePopup', 'SetActiveWindow', 'DispatchMessageA', 'BeginDeferWindowPos', 'EndDeferWindowPos', 'GetDlgItem', 'GetTopWindow', 'DestroyWindow', 'GetMessageTime', 'GetMessagePos', 'PeekMessageA', 'MapWindowPoints', 'ScrollWindow', 'TrackPopupMenu', 'GetKeyState', 'SetScrollRange', 'GetScrollRange', 'SetScrollPos', 'GetScrollPos', 'SetForegroundWindow', 'ShowScrollBar', 'IsWindowVisible', 'GetMenu', 'PostMessageA', 'MessageBoxA', 'CreateWindowExA', 'GetClassInfoExA', 'GetClassInfoA', 'RegisterClassA', 'EqualRect', 'DeferWindowPos', 'GetScrollInfo', 'SetScrollInfo', 'PtInRect', 'DefWindowProcA', 'CallWindowProcA', 'SetWindowPos', 'OffsetRect', 'IntersectRect', 'SystemParametersInfoA', 'GetWindowPlacement', 'GetWindowRect', 'GetSystemMetrics', 'GetWindow', 'GetMenuStringA', 'AppendMenuA', 'GetMenuItemID', 'InsertMenuA', 'GetMenuItemCount', 'GetSubMenu', 'RemoveMenu', 'GetSysColor', 'EndPaint', 'BeginPaint', 'GetWindowDC', 'ClientToScreen', 'ScreenToClient', 'GrayStringA', 'DrawTextExA', 'DrawTextA', 'TabbedTextOutA', 'FillRect', 'SetWindowRgn', 'DrawIcon', 'FindWindowA', 'LockWindowUpdate', 'GetDCEx', 'DestroyIcon', 'GetClassLongA', 'GetMenuItemInfoA', 'GetDlgCtrlID', 'IsChild', 'InvalidateRect', 'IsIconic', 'AdjustWindowRectEx',Line truncated

PYAS_Suffixes.py

@@ -0,0 +1,12 @@
+slist = [".exe",".dll",".sys",".com",".scr",
+         ".bat",".ps1",".vbs",".cmd",".js"]
+
+alist = [".exe",".dll",".sys",".com",".scr",
+         ".zip",".7z",".rar",".tar",".gz",
+         ".js",".bat",".cmd",".ps1",".vbs",
+         ".ppt",".pptx",".wps",".txt",".rtf",
+         ".pdf",".xls",".xlsx",".doc",".docx",
+         ".jpg",".jpeg",".png",".webp",".gif",
+         ".mp3",".wav",".aac",".ogg",".flac",
+         ".mp4",".avi",".mov",".wmv",".mkv",
+         ".aux",".cur",".mui",".ttf",".efi"]

PYAS_Version.py

@@ -0,0 +1,11 @@
+import pyinstaller_versionfile
+
+pyinstaller_versionfile.create_versionfile(
+output_file="versionfile.txt",
+version='3.2.6',
+company_name="PYAS Security",
+file_description="Python Antivirus Software",
+internal_name="PYAS",
+legal_copyright="PYAS Security",
+original_filename="PYAS.exe",
+product_name="PYAS")

PYAS_Version_File.py

@@ -1,10 +0,0 @@
-import pyinstaller_versionfile
-pyinstaller_versionfile.create_versionfile(
-    output_file="versionfile.txt",
-    version='2.6.7',
-    company_name="PYAS Security",
-    file_description="Python Antivirus Software",
-    internal_name="PYAS",
-    legal_copyright="© PYAS Security",
-    original_filename="PYAS.exe",
-    product_name="PYAS")

README.md

@@ -1,21 +1,74 @@
 # PYAS (Python Antivirus Software)
-![PYAS](https://user-images.githubusercontent.com/85057800/202692146-e55848d5-7e24-405d-b33d-f4fa3883fba6.png)
 
+![PYAS](https://github.com/user-attachments/assets/39c273b9-c467-480a-a8b3-31714a6df3ef)
+
+## Readme Language
+
+繁體中文 : https://github.com/87owo/PYAS/blob/main/README_zh_TW.md
+
+简体中文 : https://github.com/87owo/PYAS/blob/main/README_zh_CN.md
+
+## Requirements
+
+```
+pip install pefile==2023.2.7
+pip install pyperclip==1.8.2
+pip install PyQt5==5.15.9
+pip install yara-python==4.5.1
+pip install numpy==2.1.1
+pip install onnxruntime==1.18.1
+pip install pillow==10.4.0
+```
+
+## File Information
+
+```
+PYAS/
+├── Driver/ (Protect driver and Microsoft runtime)
+│   └── ...
+│
+├── Engine/ (Deep learn model and Yara database)
+│   └── ...
+│
+├── Exten/ (Exten tools and System repair tools)
+│   └── ...
+│
+├── PYAS.py (Main PYAS program with qtui interaction and protect function)
+├── PYAS_Engine.py (Deep learning predict and yara rules file scanner)
+├── PYAS_Suffixes.py (including scan file suffixes and common suffixes)
+├── PYAS_Interface.py (Qt designer ui, must be matched with the main program)
+├── PYAS_Resource.py (status pictures, icon packages, and button icons)
+├── PYAS_Language.py (Traditional Chinese, Simplified Chinese and English)
+├── PYAS_Version.py (file information, version information, original name)
+└── ...
+```
+
+## Official Website
+
+https://pyantivirus.wixsite.com/pyas
 
-## Official Website 
-https://pyantivirus.wixsite.com/pyas , 
 https://github.com/87owo/PYAS
 
-## MIT License
+## Microsoft Runtime
+
+https://github.com/87owo/Microsoft_Runtime/releases
+
+## PYAS Driver
+
+https://github.com/0sha0/PYAS_Protection
+
+## MIT license
+
 https://github.com/87owo/PYAS/blob/main/LICENSE.md
 
 ## Support System
-Windows 8.1, 10, 11 (64-bit), Ram 1GB, Rom 1GB or higher
 
-## Import Module
-os, sys, time, json, psutil, struct, win32api, win32con, requests, socket, platform, cryptocode, subprocess, pefile, hashlib, PYAS_Language, threading, random, PyQt5, PYAS_UI
+Windows 8.1, 10, 11 (64-bit), Ram 500MB, Rom 200MB or higher
+
+Other systems may experience software malfunctions or crash
 
 ## Special Thanks
-Wix, VirusShare, mtkiao129, LenStevens
 
-Copyright© 2020~2023 PYAS Security By 87owo
+Wix, mtkiao129, 0sha0, AV-T Team of LisectGroup
+
+Copyright© 2020~2024 PYAS Security By 87owo

README_zh_CN.md

@@ -0,0 +1,68 @@
+# PYAS (Python 杀毒软件)
+
+![PYAS](https://github.com/user-attachments/assets/39c273b9-c467-480a-a8b3-31714a6df3ef)
+
+## 安装要求
+
+```
+pip install pefile==2023.2.7
+pip install pyperclip==1.8.2
+pip install PyQt5==5.15.9
+pip install yara-python==4.5.1
+pip install numpy==2.1.1
+pip install onnxruntime==1.18.1
+pip install pillow==10.4.0
+```
+
+## 文件信息
+
+```
+PYAS/
+├── Driver/ (驱动保护和微软运行库)
+│   └── ...
+│
+├── Engine/ (深度学习和规则数据库)
+│   └── ...
+│
+├── Exten/ (扩展功能与系统修复工具)
+│   └── ...
+│
+├── PYAS.py (PYAS主程序含界面交互与保护功能)
+├── PYAS_Engine.py (深度学习预测和规则扫描器)
+├── PYAS_Suffixes.py (获取扫描或事件文件的后缀)
+├── PYAS_Interface.py (搭配主程序的Qt设计介面)
+├── PYAS_Resource.py (状态图片和图标和按钮图片)
+├── PYAS_Language.py (繁体中文和简体中文和英文翻译)
+├── PYAS_Version.py (版本和讯息名称和打包文件名)
+└── ...
+```
+
+## 官方网页
+
+https://pyantivirus.wixsite.com/pyas
+
+https://github.com/87owo/PYAS
+
+## 微软运行库
+
+https://github.com/87owo/Microsoft_Runtime/releases
+
+## 驱动程序
+
+https://github.com/0sha0/PYAS_Protection
+
+## 开源协议
+
+https://github.com/87owo/PYAS/blob/main/LICENSE.md
+
+## 支援系统
+
+Windows 8.1, 10, 11 (64-bit), 内存 500MB, 存储 200MB 或更高
+
+其他系统或版本可能会遇到软体功能故障或程序崩溃
+
+## 特别感谢
+
+Wix, mtkiao129, 0sha0, AV-T Team of LisectGroup
+
+Copyright© 2020~2024 PYAS Security By 87owo

README_zh_TW.md

@@ -0,0 +1,68 @@
+# PYAS (Python 防毒軟體)
+
+![PYAS](https://github.com/user-attachments/assets/39c273b9-c467-480a-a8b3-31714a6df3ef)
+
+## 安裝要求
+
+```
+pip install pefile==2023.2.7
+pip install pyperclip==1.8.2
+pip install PyQt5==5.15.9
+pip install yara-python==4.5.1
+pip install numpy==2.1.1
+pip install onnxruntime==1.18.1
+pip install pillow==10.4.0
+```
+
+## 檔案資訊
+
+```
+PYAS/
+├── Driver/ (驅動防護和微軟運行庫)
+│   └── ...
+│
+├── Engine/ (深度學習和規則數據庫)
+│   └── ...
+│
+├── Exten/ (擴展功能與系統修復工具)
+│   └── ...
+│
+├── PYAS.py (PYAS主程序含介面交互與防護功能)
+├── PYAS_Engine.py (深度學習預測和規則掃描器)
+├── PYAS_Suffixes.py (獲取掃描或事件檔案的副檔名)
+├── PYAS_Interface.py (搭配主程序的Qt設計介面)
+├── PYAS_Resource.py (狀態圖片圖標和按鈕圖片)
+├── PYAS_Language.py (繁體中文和簡體中文和英文翻譯)
+├── PYAS_Version.py (檔案版本和訊息名稱和打包檔名)
+└── ...
+```
+
+## 官方網頁
+
+https://pyantivirus.wixsite.com/pyas
+
+https://github.com/87owo/PYAS
+
+## 微軟運行庫
+
+https://github.com/87owo/Microsoft_Runtime/releases
+
+## 驅動程式
+
+https://github.com/0sha0/PYAS_Protection
+
+## 開源協議
+
+https://github.com/87owo/PYAS/blob/main/LICENSE.md
+
+## 支援系統
+
+Windows 8.1, 10, 11 (64-bit),記憶體 500MB, 磁碟容量 200MB 或更高
+
+其他系統或版本可能會遇到軟體功能故障或程序崩潰
+
+## 特別感謝
+
+Wix, mtkiao129, 0sha0, AV-T Team of LisectGroup
+
+Copyright© 2020~2024 PYAS Security By 87owo