Add files via upload

PYAS.py

@@ -20,7 +20,7 @@ class MainWindow_Controller(QMainWindow):
         self.pyas = sys.argv[0].replace("\\", "/")
         self.dir = os.path.dirname(self.pyas)
         self.pyae_version = "0000-00-00 00:00:00"
-        self.pyas_version = "3.0.3"
+        self.pyas_version = "3.0.4"
         self.ui = Ui_MainWindow()
         self.ui.setupUi(self)
         self.init_show_pyas()
@@ -866,8 +866,6 @@ class MainWindow_Controller(QMainWindow):
                 file = str(os.path.join(path,fd)).replace("\\", "/")
                 if self.scan_file == False:
                     break
-                elif ":/Windows" in file:
-                    continue
                 elif os.path.isdir(file):
                     self.traverse_path(file)
                 elif file not in self.whitelist:
@@ -1027,7 +1025,7 @@ class MainWindow_Controller(QMainWindow):
                 for i in Permission:
                     try:
                         win32api.RegDeleteValue(key,i)
-                        self.proc.kill()
+                        self.kill_process(self.proc)
                         file = self.proc.exe().replace("\\", "/")
                         self.send_notify(self.trans("惡意行為攔截: ")+file)
                     except:
@@ -1265,19 +1263,19 @@ class MainWindow_Controller(QMainWindow):
                         if file != self.pyas and file not in self.whitelist:
                             psutil.Process(p.pid).suspend()
                             if "powershell" in name and self.api_scan(cmd[-1].split("'")[-2]):
-                                p.kill()
+                                self.kill_process(p)
                                 file = cmd[-1].split("'")[-2].replace("\\", "/")
                                 self.send_notify(self.trans("惡意腳本攔截: ")+file)
                             elif "cmd.exe" in name and self.api_scan(" ".join(cmd[2:])):
-                                p.kill()
+                                self.kill_process(p)
                                 file = " ".join(cmd[2:]).replace("\\", "/")
                                 self.send_notify(self.trans("惡意腳本攔截: ")+file)
                             elif ":/Windows" in file and self.api_scan(cmd[-1]):
-                                p.kill()
+                                self.kill_process(p)
                                 file = cmd[-1].replace("\\", "/")
                                 self.send_notify(self.trans("惡意軟體攔截: ")+file)
                             elif ":/Windows" not in file and self.proc_scan(p):
-                                p.kill()
+                                self.kill_process(p)
                                 self.send_notify(self.trans("惡意軟體攔截: ")+file)
                             elif ":/Windows" not in file and self.sign_scan(file):
                                 self.proc = p
@@ -1288,6 +1286,14 @@ class MainWindow_Controller(QMainWindow):
                 except:
                     pass
 
+    def kill_process(self, parent):
+        try:
+            parent.kill()
+            for child in parent.children(recursive=True):
+                child.kill()
+        except:
+            pass
+
     def protect_file_thread(self):
         hDir = win32file.CreateFile("C:/",win32con.GENERIC_READ,win32con.FILE_SHARE_READ|win32con.FILE_SHARE_WRITE|win32con.FILE_SHARE_DELETE,None,win32con.OPEN_EXISTING,win32con.FILE_FLAG_BACKUP_SEMANTICS,None)
         while self.file_protect:
@@ -1297,7 +1303,7 @@ class MainWindow_Controller(QMainWindow):
                     ftype = str(f".{fpath.split('.')[-1]}").lower()
                     if action == 2 and ":/Users" in fpath and "/AppData/" not in fpath:
                         if ftype in alist:
-                            self.proc.kill()
+                            self.kill_process(self.proc)
                             file = self.proc.exe().replace("\\", "/")
                             self.send_notify(self.trans("勒索行為攔截: ")+file)
                     elif action == 3 and os.path.getsize(fpath) <= 20971520 and ftype in slist:
@@ -1315,13 +1321,13 @@ class MainWindow_Controller(QMainWindow):
                 time.sleep(0.2)
                 with open(r"\\.\PhysicalDrive0", "r+b") as f:
                     if self.mbr_value[510:512] != b'\x55\xAA':
-                        self.proc.kill()
+                        self.kill_process(self.proc)
                         file = self.proc.exe().replace("\\", "/")
                         self.send_notify(self.trans("惡意行為攔截: ")+file)
                     elif f.read(512) != self.mbr_value:
                         f.seek(0)
                         f.write(self.mbr_value)
-                        self.proc.kill()
+                        self.kill_process(self.proc)
                         file = self.proc.exe().replace("\\", "/")
                         self.send_notify(self.trans("惡意行為攔截: ")+file)
             except:
@@ -1347,7 +1353,7 @@ class MainWindow_Controller(QMainWindow):
                     file = self.proc.exe().replace("\\", "/")
                     if ":/Windows" not in file and ":/Program" not in file:
                         if conn.laddr.ip == local:
-                            self.proc.kill()
+                            self.kill_process(self.proc)
                             self.send_notify(self.trans("網路通訊攔截: ")+file)
             except:
                 pass

PYAS_Function.vdb

@@ -1 +1 @@
-{"2024-02-11 11:48:42": ["f8eaca69", "f0f5732f", "1b02d2da", "9b83055e", "fa39258e", "ebad499a", "7e7275ce", "f9f96fde", "dc2bd521", "2e3086b1", "4cbbe367", "62a39640", "628691a4", "7feb71ad", "c8756155", "724103b9", "21bb3aef", "8b136daa", "d2668208", "5e47ce27", "55e78944", "ec90753b", "cb9e21ee", "55634643", "d1ad686f", "319e2db4", "632f4531", "ecf51f02", "57b1794e", "cf04dfb7", "68b4c29f", "776c99fe", "bafe8409", "07483ddf", "e4753bc3", "86f8c21f", "c069d7d5", "0513868a", "55433105", "a51343e5", "5dd1e0c9", "8b6a35fc", "b2c4204c", "736a55d1", "0e2d378e", "221b87e3", "62a348cf", "1f53d69f", "ac0b27eb", "bee130c7", "00b0d86d", "f1dc8325", "d1e142b8", "87074aa5", "2bd013a0", "d2528b9e", "d90657b4", "b16889df", "c21af82e", "e81da5d7", "0ae06db8", "a072f779", "6c48e028", "acf0fbaa", "846a7177", "97be1e02", "94c2d42c", "e1240e10", "ee0a9c21", "0facf2a6", "2beae172", "39ae5ad7", "6a0c7324", "f074f5b4", "e952305f", "c969fd9d", "9af5a01e", "14688765", "596a470f", "94691d9a", "f30de2e7", "191f1163", "bdcb5a86", "18b3bf16", "30739d24", "e91746a4", "36888e71", "e26dfd80", "d8261ac3", "1a5cb45a", "23191f29", "20cb7eec", "94497ba5", "ce095672", "acf3bb61", "94bff605", "aea0475c", "b6a46047", "f1ae2ce5", "f25e7c70", "4c626e62", "d4da4030", "35eeb9fc", "010bd7e6", "088b5c3d", "4e552f39", "234f232b", "be39b5c7", "4d57d439", "3efc231b", "e3e0254f", "cf88078b", "957e7561", "0157ab1a", "6d75bcaa", "fdf069cb", "a1895d33", "aebc3614", "43d61eab", "967929f9", "11b631fb", "fbe63639", "0593e9a2", "c838e850", "a33c2ab4", "fa8ceeae", "71fa160a", "05178537", "f1bde64f", "30547b8f", "7fe931dd", "5dea0cda", "af0d6ebb", "f242ebc1", "ef2ac9f8", "09082309", "85a4b8a4", "65284f49", "cf215013", "6be2182a", "39d583d4", "e65f4785", "3cbb09cf", "73b78451", "61099a43", "1fe35f2e", "690b5995", "19d85999", "fcaa2063", "522ec9f6", "dfea1c9a", "1e54fc8c", "3d19c3b6", "13102764", "f0949aca", "7782a5e0", "a141f55e", "16eb1d17", "f14e284b", "3c36ae8e", "44349994", "0077b966", "8d8e66bb", "26dbaaa7", "69134125", "6be14646", "d4afaff6", "10c1954f", "07687215", "18b6668e", "295e94f1", "4beef072", "15bbc35a", "833b1998", "b81c15eb", "d0c36eb5", "30ff5635", "23edb694", "b5f2dd11", "9542f014", "2ba7934b", "8ac3e370", "be5348af", "2f7ca0b7", "c11f9756", "72646e9e", "ebaa875f", "d8efdadd", "cea3f4a5", "8f74e253", "c8ee6a44", "29a60790", "b6ed92dc", "022ab8d8", "f45011dd", "5606be13", "9fe86003", "c90d1128", "7bf6f523", "5dc456d1", "d41f3fb7", "839f31ff", "72e25499", "d0008616", "d6d13cfd", "018b8805", "3bd56a87", "7bf71a77", "302c6754", "639a51eb", "3025c6b7", "b233ddd9", "9297a1cb", "c10f2cf6", "a0a8dfd1", "6399f135", "8d394492", "d786ef37", "f516133b", "b71b7a0d", "a51484ee", "b6ec2abf", "184ccf63", "6cc57095", "897e3a5f", "5064bd10", "0abbe6f4", "57d2bb57", "3e3a904e", "cb25c53f", "35ebf1ea", "ec883603", "6c3d2e9a", "cd48542a", "e0b6a475", "1ed5d4af", "5cfe1ec3", "2f3f077c", "817d5bcb", "e7e4805a", "a8ac4be7", "3ae3b681", "781b603d", "99e3aca7", "d3cb5549", "e4e549d2", "eda8c8fd", "5a34fc94", "35385307", "b47d2a97", "8c0d1b23", "5529b024", "068c506c", "41858343", "861a909a", "96471e95", "a2b9d78f", "97255487", "506d0366", "7c5e3180", "e1aee43f", "99ad8db1", "1f4f4ab1", "cc431464", "cffd3e92", "ece85b50", "de6d3489", "9425f525", "c9dfa23f", "a97155f3", "002e23f2", "d440e8ed", "08798831", "96474097", "34962f83", "979532a1", "31f03b48", "5b692416", "c56d5e02", "5c2a1c1e", "6d642743", "fb15345a", "1bf7af93", "bb94e602", "4492b29b", "355885b6", "1e62932b", "f1bede8b", "6104f9a3", "86a6529d", "971f7f79", "8ace816a", "86a8a864", "4f85c567", "333b7df1", "cebe043f", "aa818d5e", "5458e526", "5354fc59", "14238173", "4794d596", "bd2797bd", "7e5013a9", "4211942c", "8c919cb4", "39bae570", "c8476924", "59d0bcc8", "29a47420", "62145122", "0b95337c", "55cd1300", "6fec3fac", "7abd0227", "ec842bbb", "f60b523e", "8ec73106", "e29225d6", "54224ade", "d722b746", "9342c1e3", "ce494c91", "4c1e1a2e", "20879280", "1c623712", "0ab6b9b5", "3cbe70c8", "090a5016", "1176c81f", "c4ca6358", "0ac1e588", "327018cc", "1aa3b54f", "9d8ed7e1", "98ecee4c", "1250f47d", "b48f6dcc", "2fd8a8a8", "df5292b9", "43ca2196", "eabebfd0", "5ef75e18", "6043426b", "5668ab16", "5694217b", "8da2c149", "8e108bc2", "4c44a17c", "ccdbc95c", "d578162e", "a828b92d", "226217c3", "5008e44f", "6ff4ce20", "10f2a2b1", "ee6b50e6", "1bc9bab0", "a69a2aba", "9dbfcd08", "539bc501", "640f2927", "e7e38d5e", "43adb03a", "7033ad33", "a98e1d1d", "19c928b8", "20fcecfd", "2038f57b", "1938493f", "47a32506", "6aa98b23", "051020bf", "4f5a3b25", "34d7276a", "79f68a23", "5b28a176", "15826bb9", "6a2eaaab", "23269a41", "79d85fa6", "51fe1954", "8f737801", "44dde6a5", "f8b69084", "136c1369", "086c7679", "0016c379", "2fe5822d", "1b146d77", "ff778b87", "6357bd68", "95840477", "c605b02a", "d9e4a2da", "1488771c", "1d067fed", "6c1c79f2", "4ce7e503", "c0d7b8fb", "ef0a1059", "f8984bae", "c9f98890", "f4eb7828", "5e570d46", "9ea12215", "de09d16e", "a470767a", "8c43a7fe", "65f145c0", "e425c385", "51453f5f", "fbca4af8", "5f213b95", "a6e2669f", "0d8e3Line truncated
+{"2024-02-19 09:09:40": ["f8eaca69", "f0f5732f", "1b02d2da", "9b83055e", "fa39258e", "7e7275ce", "ebad499a", "628691a4", "4cbbe367", "f9f96fde", "2e3086b1", "dc2bd521", "62a39640", "7feb71ad", "724103b9", "8b136daa", "5e47ce27", "21bb3aef", "d2668208", "cb9e21ee", "d1ad686f", "ec90753b", "55e78944", "55634643", "bafe8409", "632f4531", "319e2db4", "ecf51f02", "cf04dfb7", "c8756155", "e4753bc3", "57b1794e", "0513868a", "c069d7d5", "776c99fe", "07483ddf", "62a348cf", "55433105", "86f8c21f", "68b4c29f", "221b87e3", "736a55d1", "5dd1e0c9", "1f53d69f", "b2c4204c", "d1e142b8", "00b0d86d", "f1dc8325", "a51343e5", "0e2d378e", "8b6a35fc", "ac0b27eb", "87074aa5", "2bd013a0", "bee130c7", "d90657b4", "c21af82e", "d2528b9e", "e81da5d7", "0ae06db8", "acf0fbaa", "b16889df", "a072f779", "97be1e02", "94c2d42c", "f074f5b4", "e1240e10", "6c48e028", "ee0a9c21", "2beae172", "c969fd9d", "846a7177", "39ae5ad7", "6a0c7324", "9af5a01e", "bdcb5a86", "596a470f", "191f1163", "f30de2e7", "14688765", "0facf2a6", "94691d9a", "e952305f", "20cb7eec", "18b3bf16", "36888e71", "30739d24", "e91746a4", "1a5cb45a", "23191f29", "e26dfd80", "d8261ac3", "94bff605", "94497ba5", "acf3bb61", "ce095672", "aea0475c", "d4da4030", "b6a46047", "f25e7c70", "010bd7e6", "4e552f39", "4c626e62", "cf88078b", "4d57d439", "35eeb9fc", "f1ae2ce5", "3efc231b", "088b5c3d", "234f232b", "be39b5c7", "6d75bcaa", "0157ab1a", "fdf069cb", "a1895d33", "957e7561", "967929f9", "43d61eab", "aebc3614", "fbe63639", "e3e0254f", "0593e9a2", "fa8ceeae", "11b631fb", "71fa160a", "c838e850", "7fe931dd", "30547b8f", "5dea0cda", "05178537", "f1bde64f", "85a4b8a4", "ef2ac9f8", "af0d6ebb", "f242ebc1", "6be2182a", "39d583d4", "a33c2ab4", "e65f4785", "73b78451", "65284f49", "09082309", "cf215013", "f14e284b", "690b5995", "f0949aca", "3c36ae8e", "6be14646", "13102764", "8d8e66bb", "d4afaff6", "a141f55e", "69134125", "7782a5e0", "07687215", "0077b966", "16eb1d17", "19d85999", "295e94f1", "3cbb09cf", "61099a43", "1fe35f2e", "10c1954f", "833b1998", "18b6668e", "d0c36eb5", "dfea1c9a", "b5f2dd11", "15bbc35a", "1e54fc8c", "522ec9f6", "3d19c3b6", "b81c15eb", "2ba7934b", "30ff5635", "23edb694", "4beef072", "2f7ca0b7", "fcaa2063", "8ac3e370", "72646e9e", "be5348af", "b6ed92dc", "c11f9756", "8f74e253", "29a60790", "26dbaaa7", "9542f014", "44349994", "d8efdadd", "ebaa875f", "5dc456d1", "c90d1128", "cea3f4a5", "7bf6f523", "022ab8d8", "5606be13", "839f31ff", "9fe86003", "f45011dd", "c8ee6a44", "72e25499", "d0008616", "d6d13cfd", "d41f3fb7", "7bf71a77", "302c6754", "3bd56a87", "639a51eb", "3025c6b7", "018b8805", "b233ddd9", "9297a1cb", "8d394492", "6399f135", "f516133b", "b71b7a0d", "897e3a5f", "6cc57095", "184ccf63", "a51484ee", "d786ef37", "57d2bb57", "b6ec2abf", "c10f2cf6", "5064bd10", "0abbe6f4", "a0a8dfd1", "cb25c53f", "3e3a904e", "35ebf1ea", "ec883603", "2f3f077c", "e0b6a475", "817d5bcb", "e7e4805a", "1ed5d4af", "a8ac4be7", "5cfe1ec3", "6c3d2e9a", "cd48542a", "3ae3b681", "781b603d", "99e3aca7", "e4e549d2", "d3cb5549", "a2b9d78f", "b47d2a97", "5a34fc94", "eda8c8fd", "5529b024", "068c506c", "35385307", "8c0d1b23", "7c5e3180", "41858343", "861a909a", "96471e95", "97255487", "506d0366", "e1aee43f", "1f4f4ab1", "99ad8db1", "cffd3e92", "cc431464", "ece85b50", "de6d3489", "9425f525", "c9dfa23f", "a97155f3", "d440e8ed", "002e23f2", "96474097", "08798831", "34962f83", "31f03b48", "979532a1", "5b692416", "5c2a1c1e", "6d642743", "4492b29b", "1e62932b", "fb15345a", "c56d5e02", "86a8a864", "bb94e602", "1bf7af93", "4f85c567", "6104f9a3", "971f7f79", "cebe043f", "f1bede8b", "5458e526", "5354fc59", "86a6529d", "8ace816a", "355885b6", "4211942c", "bd2797bd", "4794d596", "7e5013a9", "333b7df1", "aa818d5e", "14238173", "39bae570", "c8476924", "8c919cb4", "59d0bcc8", "55cd1300", "6fec3fac", "62145122", "29a47420", "54224ade", "8ec73106", "e29225d6", "0b95337c", "7abd0227", "9342c1e3", "20879280", "3cbe70c8", "ce494c91", "d722b746", "ec842bbb", "090a5016", "1176c81f", "327018cc", "f60b523e", "b48f6dcc", "4c1e1a2e", "8e108bc2", "9d8ed7e1", "1c623712", "df5292b9", "1aa3b54f", "98ecee4c", "0ac1e588", "0ab6b9b5", "5ef75e18", "5668ab16", "6043426b", "226217c3", "8da2c149", "1250f47d", "43ca2196", "6ff4ce20", "ccdbc95c", "eabebfd0", "c4ca6358", "5694217b", "a69a2aba", "10f2a2b1", "539bc501", "4c44a17c", "5008e44f", "2fd8a8a8", "a828b92d", "ee6b50e6", "1bc9bab0", "9dbfcd08", "640f2927", "e7e38d5e", "a98e1d1d", "7033ad33", "20fcecfd", "19c928b8", "2038f57b", "d578162e", "051020bf", "79f68a23", "23269a41", "1938493f", "34d7276a", "6aa98b23", "47a32506", "43adb03a", "51fe1954", "6a2eaaab", "5b28a176", "4f5a3b25", "136c1369", "ff778b87", "0016c379", "79d85fa6", "15826bb9", "8f737801", "6357bd68", "086c7679", "d9e4a2da", "1d067fed", "44dde6a5", "f8b69084", "1b146d77", "1488771c", "c0d7b8fb", "ef0a1059", "2fe5822d", "6c1c79f2", "f4eb7828", "c605b02a", "95840477", "9ea12215", "5e570d46", "51453f5f", "4ce7e503", "c9f98890", "de09d16e", "f8984bae", "fbca4af8", "0d8e37d4", "8c43a7fe", "65f145c0", "5f213b95", "e425c385", "a470767a", "19c39Line truncated

PYAS_Version.py

@@ -1,7 +1,7 @@
 import pyinstaller_versionfile
 pyinstaller_versionfile.create_versionfile(
 output_file="versionfile.txt",
-version='3.0.3',
+version='3.0.4',
 company_name="PYAS Security",
 file_description="Python Antivirus Software",
 internal_name="PYAS",