Add files via upload

Driver/Install_Driver.bat

@@ -2,31 +2,33 @@
 setlocal
 
 :: Check for permissions
->nul 2>&1 "%SYSTEMROOT%\system32\cacls.exe" "%SYSTEMROOT%\system32\config\system"
+>nul 2>&1 "%SYSTEMROOT%\system32\icacls.exe" "%SYSTEMROOT%\system32\config\system"
 
-if '%errorlevel%' NEQ '0' (goto UACPrompt) else (goto gotAdmin)
+if %errorlevel% NEQ 0 goto NoAdmin
+goto gotAdmin
 
-:UACPrompt
-    echo Set UAC = CreateObject^("Shell.Application"^) > "%temp%\getadmin.vbs"
-    echo UAC.ShellExecute "cmd.exe", "/c ""%~s0""", "", "runas", 1 >> "%temp%\getadmin.vbs"
-    "%temp%\getadmin.vbs"
+:NoAdmin
+    echo You do not have administrator rights, please run this script as administrator.
+    pause
     exit /B
 
 :gotAdmin
-    if exist "%temp%\getadmin.vbs" ( del "%temp%\getadmin.vbs" )
+    if exist "%temp%\getadmin.vbs" del "%temp%\getadmin.vbs"
+
+set "script_dir=%~dp0"
+set "script_dir=%script_dir:~0,-1%"
 
-set script_dir=%~dp0
-set script_dir=%script_dir:~0,-1%
 bcdedit -debug on
-bcdedit /deletevalue {current} safeboot
 bcdedit /set testsigning on
+bcdedit /deletevalue {current} safeboot
+
 powershell.exe -ExecutionPolicy Bypass -Command ^
 "$endDate = (Get-Date).AddYears(100); ^
  $cert = New-SelfSignedCertificate -DnsName PYAS -CertStoreLocation cert:\LocalMachine\My -Type CodeSigning -NotAfter $endDate; ^
  $pwd = ConvertTo-SecureString -String 'PYAS' -Force -AsPlainText; ^
  Export-PfxCertificate -Cert $cert -FilePath '%script_dir%\PYAS.pfx' -Password $pwd;"
-start "" "%script_dir%\signtool.exe" sign /f "%script_dir%\PYAS.pfx" /p PYAS "%script_dir%\PYAS_Driver.sys"
+"%script_dir%\signtool.exe" sign /f "%script_dir%\PYAS.pfx" /p PYAS "%script_dir%\PYAS_Driver.sys"
 sc create PYAS_Driver type= kernel start= demand binPath= "%script_dir%\PYAS_Driver.sys"
-shutdown -r -t 0
 
+shutdown -r -t 0
 endlocal

Driver/Uninstall_Driver.bat

@@ -2,23 +2,24 @@
 setlocal
 
 :: Check for permissions
->nul 2>&1 "%SYSTEMROOT%\system32\cacls.exe" "%SYSTEMROOT%\system32\config\system"
+>nul 2>&1 "%SYSTEMROOT%\system32\icacls.exe" "%SYSTEMROOT%\system32\config\system"
 
-if '%errorlevel%' NEQ '0' (goto UACPrompt) else (goto gotAdmin)
+if %errorlevel% NEQ 0 goto NoAdmin
+goto gotAdmin
 
-:UACPrompt
-    echo Set UAC = CreateObject^("Shell.Application"^) > "%temp%\getadmin.vbs"
-    echo UAC.ShellExecute "cmd.exe", "/c ""%~s0""", "", "runas", 1 >> "%temp%\getadmin.vbs"
-    "%temp%\getadmin.vbs"
+:NoAdmin
+    echo You do not have administrator rights, please run this script as administrator.
+    pause
     exit /B
 
 :gotAdmin
-    if exist "%temp%\getadmin.vbs" ( del "%temp%\getadmin.vbs" )
+    if exist "%temp%\getadmin.vbs" del "%temp%\getadmin.vbs"
 
 sc stop PYAS_Driver
 sc delete PYAS_Driver
-bcdedit -debug off
-bcdedit /set testsigning off
-shutdown -r -t 0
 
+bcdedit /set testsigning off
+bcdedit -debug off
+
+shutdown -r -t 0
 endlocal

Exten/Bitdefender/bdc.ini

@@ -0,0 +1,15 @@
+ExcludeXMD = 
+Extensions = exe;com;dll;ocx;scr;bin;dat;386;vxd;sys;wdm;cla;class;ovl;ole;hlp;doc;dot;xls;ppt;wbk;wiz;pot;ppa;xla;xlt;vbs;vbe;mdb;rtf;htm;hta;html;xml;xtp;php;asp;js;shs;chm;lnk;pif;prc;url;smm;pfd;msi;ini;csc;cmd;bas;nws;
+ExcludeExtensions = 
+ConfigFile = bdc.ini
+HttpProxy = 
+InfectedFolder = Infected
+SuspectedFolder = Suspected
+LogMaxSize = 1024
+RenameExtension = vir
+PluginsPaths = Plugins
+LogName = bdc.log
+UpdateHttpLocation = http://upgrade.bitdefender.com/av32bit-eps
+XMD = *
+LastUpdate = Wed Feb 18 16:39:59 2009
+ProductID = {AAD1516D-28AB-4EB5-B7C8-DF54FE4442E9}

Exten/Bitdefender/plugins.htm

@@ -0,0 +1,14 @@
+<p>AVCORE v2.2 Windows/i386 11.0.1.21 (August 15, 2021)</p>
+<p>disp.xmd - Dispatcher (0.00) 0x1[997] (r)</p>
+<p>pyinstaller.xmd - PYInstaller unpacker (1.0) 0x8[12] (r)</p>
+<p>rar.xmd - RAR5 unpacker (0.5) 0xA[12] (r)</p>
+<p>thebat.xmd - TheBat Engine (0.03a) 0x4010[12] (r) +</p>
+<p>html.xmd - HTML Parser (1.0) 0x4008[11] (r) +</p>
+<p>mdx.xmd - Macro Defense Expert (3.57b) 0x1[11] 1[0] (r)</p>
+<p>cevakrnl.xmd - CEVA (0.03a) 0x1[10] (r)</p>
+<p>pdf.xmd - PDF Engine (2.0) 0x4009[10] (r) +</p>
+<p>imp.xmd - IMP (1.4.2) 0x2[9] (r)</p>
+<p>sfx.xmd - Sfx Engine (1.8.6) 0xA[9] (r)</p>
+<p>sdx.xmd - SDX () 0x1[5] 191729[0] (r)</p>
+<p>jpeg.xmd - JPEG Engine (0.05) 0x1[1] 14[1] (r)</p>
+<p>rtf.xmd - RTF (1.0) 0x4008[0] (r) +</p>

Model/PYAS_Model.json

@@ -1 +1 @@
-{"Unknown": [38413146381396798812836662586219087594480760119241756145287379993031670453973, 96759775057307603829199050115151442660431386536877578909394799687553144825391], "White": [92860071170291586757870565976957954052649178883790647665503983139114277816413, 50625869624179221836524636484722091669820057030729734765256925026245308185143, 79303266820014134748061006437377483029320717142203104125806969476209010566146, 50391760446499089493384482654016917630509060287507523223191455177998253781572, 34733894651460458125941968926483828168477919119649839915356573816494375383659, 16447578251589668808184123721615810667991570306415913809506896532563163557975, 18668853151306203943053249777678854424409647574074706653144503993068509738028, 16447129799599854768187525514242197965987640167415805965954293039200573272151, 42965648781535883376480003940402366467478625051031283341289116138472520399484, 45637511530246203537935382208327538642024163565740899790237852717178844340385, 100662025713257198141308144602569453810226448934776598411982222249289646045820, 2813878798545665948450767843887867208740292941021073849284371582085785669685, 54695748401254225125045716155327877471149349614359435230254611073117412307518, 27428665293760567560050957450577436769403462770366418052177943137905489504373, 32018095881556959863902669246154132691484124511748151111295836576906027842532, 82735669648112373508385530969898006750362429118827185652448450648454052106395, 27853809242729492000984914092533936796891917926358854729439436487683423285261, 20030429995379197455160031864140436552884002299333955332088108013764717533796, 82338140557728967648601024370995428985866052631101882076231147335348455671038, 71339449324799277130427957011381342555145697382104653874846579353871764366968, 2432232479351500614611699169184443988440809841079862157291791071419485606436, 9463527399566410848087352636323112952591923803840644609432039785310381355253, 17287926889345790925003722717807755244540044472850272987265624141065166747251, 31507509644511868166890345905396462199402122513677304280568315890707028374136, 92802443753971611323223428952970105040389824130209263287070763891097867755624, 60491018752293550079699763462944244393253888103551546202593483014975813742967, 45133408084728538869955951560598604064861024543940290379768365214821771604584, 6759146298068049614085390992799666053918974602489525613718797088468975708017, 43161770374046173333870752071317153674965637163816017117315179871715332666383, 55200886519442939000007636174371797768786544863806926514781108850256791225983, 102124766481586899841647737641698083212305154684644839980199278690335383712492, 52992286898317605666180786036367620316269750824654214415314225077986227890804, 96307454545313440124283308270263825589093792315386382296096934270155352236733, 36073459579994433898643313577597321150634749356791285363958792075031385371364, 5354562433688861244299028006341553420425390015040147574513776499404802540118, 2671602537216404752611755689384448521170725107261295121211275163689399347529, 31174448189678483951801405655647041557287598300853213718404097030076935043252, 817984956081990458969224676381868506770627801582748844000835755782736667191, 6997953573828232905847825866256444005094471443450029313008738013465446666864, 41288968033780608769032189481784193916730262129846893330891418484950645535282, 56724589038911745751056508177185337741291265472470897077742981563488398484126, 3353938097938067320481103667469354721822387389147415219233498938990215839034, 21195721951654457114265478558602466514207347021822959737607658828495062116920, 2916561284514958799877078174216081002558870786437593202464334407456915288119, 93137488384582768487662730765406914258099784103320160609442537879778117334700, 21195721951654457114265478558602377311225888285332501136798116331518898022972, 85036278951571446667616241901438186945472743486751871120301019617002115253240, 14623491695050192413097067629676318500123044497134202517578785087180871258165, 2022308710750553104057453378681448926020203033444470910346149752954363011822, 16435447118324352510213480738895714506136417806014749563314727656196027207884, 20110908101408861236178371339075650317185505287106087252378028881915405550816, 97262306467112548995108413358594977802790545321935863056096364390382492643957, 96614497885586867524036482497010189662872359368622249290846422070379022959337, 1895288773648887609359329471072769468085207279473521707976899919066265183340, 2651591106060448314208209841614702280337184080195391257416359882876000875095, 114619913163036058498985801603082782363327281628924544162718017899237779173997, 2481883953883130814217575190747389944608730963897863224598923997640828351014, 45000300637061336566799421885334051647634671537987073940268834014403441552901, 79047998258892679051555952202178856054614923426747250310189496005785954516966, 92887093185298651693450115442544102614083847612212241647641096093293220418098, 7140769773119319253009453104401896171570019200295580355390762162793695491644, 17012496707Line truncated
+{"Unknown": [38413146381396798812836662586219087594480760119241756145287379993031670453973, 96759775057307603829199050115151442660431386536877578909394799687553144825391], "White": [92860071170291586757870565976957954052649178883790647665503983139114277816413, 50625869624179221836524636484722091669820057030729734765256925026245308185143, 79303266820014134748061006437377483029320717142203104125806969476209010566146, 50391760446499089493384482654016917630509060287507523223191455177998253781572, 34733894651460458125941968926483828168477919119649839915356573816494375383659, 16447578251589668808184123721615810667991570306415913809506896532563163557975, 18668853151306203943053249777678854424409647574074706653144503993068509738028, 16447129799599854768187525514242197965987640167415805965954293039200573272151, 42965648781535883376480003940402366467478625051031283341289116138472520399484, 45637511530246203537935382208327538642024163565740899790237852717178844340385, 100662025713257198141308144602569453810226448934776598411982222249289646045820, 2813878798545665948450767843887867208740292941021073849284371582085785669685, 54695748401254225125045716155327877471149349614359435230254611073117412307518, 27428665293760567560050957450577436769403462770366418052177943137905489504373, 32018095881556959863902669246154132691484124511748151111295836576906027842532, 82735669648112373508385530969898006750362429118827185652448450648454052106395, 27853809242729492000984914092533936796891917926358854729439436487683423285261, 20030429995379197455160031864140436552884002299333955332088108013764717533796, 82338140557728967648601024370995428985866052631101882076231147335348455671038, 71339449324799277130427957011381342555145697382104653874846579353871764366968, 2432232479351500614611699169184443988440809841079862157291791071419485606436, 9463527399566410848087352636323112952591923803840644609432039785310381355253, 17287926889345790925003722717807755244540044472850272987265624141065166747251, 31507509644511868166890345905396462199402122513677304280568315890707028374136, 92802443753971611323223428952970105040389824130209263287070763891097867755624, 60491018752293550079699763462944244393253888103551546202593483014975813742967, 45133408084728538869955951560598604064861024543940290379768365214821771604584, 6759146298068049614085390992799666053918974602489525613718797088468975708017, 43161770374046173333870752071317153674965637163816017117315179871715332666383, 55200886519442939000007636174371797768786544863806926514781108850256791225983, 102124766481586899841647737641698083212305154684644839980199278690335383712492, 52992286898317605666180786036367620316269750824654214415314225077986227890804, 96307454545313440124283308270263825589093792315386382296096934270155352236733, 36073459579994433898643313577597321150634749356791285363958792075031385371364, 5354562433688861244299028006341553420425390015040147574513776499404802540118, 2671602537216404752611755689384448521170725107261295121211275163689399347529, 31174448189678483951801405655647041557287598300853213718404097030076935043252, 817984956081990458969224676381868506770627801582748844000835755782736667191, 6997953573828232905847825866256444005094471443450029313008738013465446666864, 41288968033780608769032189481784193916730262129846893330891418484950645535282, 56724589038911745751056508177185337741291265472470897077742981563488398484126, 3353938097938067320481103667469354721822387389147415219233498938990215839034, 21195721951654457114265478558602466514207347021822959737607658828495062116920, 2916561284514958799877078174216081002558870786437593202464334407456915288119, 93137488384582768487662730765406914258099784103320160609442537879778117334700, 21195721951654457114265478558602377311225888285332501136798116331518898022972, 85036278951571446667616241901438186945472743486751871120301019617002115253240, 14623491695050192413097067629676318500123044497134202517578785087180871258165, 2022308710750553104057453378681448926020203033444470910346149752954363011822, 16435447118324352510213480738895714506136417806014749563314727656196027207884, 20110908101408861236178371339075650317185505287106087252378028881915405550816, 97262306467112548995108413358594977802790545321935863056096364390382492643957, 96614497885586867524036482497010189662872359368622249290846422070379022959337, 1895288773648887609359329471072769468085207279473521707976899919066265183340, 2651591106060448314208209841614702280337184080195391257416359882876000875095, 114619913163036058498985801603082782363327281628924544162718017899237779173997, 2481883953883130814217575190747389944608730963897863224598923997640828351014, 45000300637061336566799421885334051647634671537987073940268834014403441552901, 79047998258892679051555952202178856054614923426747250310189496005785954516966, 92887093185298651693450115442544102614083847612212241647641096093293220418098, 7140769773119319253009453104401896171570019200295580355390762162793695491644, 17012496707Line truncated

PYAS_Extension.py

@@ -1,8 +1,24 @@
-slist = [".exe",".dll",".com",".msi",".scr",
-         ".js",".bat",".cmd",".ps1",".vbs"]
+from subprocess import *
+import os, re, sys
 
-alist = [".ppt",".pptx",".wps",".txt",".rtf",
-         ".pdf",".xls",".xlsx",".doc",".docx",
-         ".jpg",".jpeg",".png",".webp",".gif",
-         ".mp3",".wav",".aac",".ogg",".flac",
-         ".mp4",".avi",".mov",".wmv",".mkv"]
+class ExtenRules:
+    def __init__(self):
+        self.exten = {}
+        self.pyas = sys.argv[0].replace("\\", "/")
+        self.dir = os.path.dirname(self.pyas)
+        self.exten = os.path.join(self.dir, "Exten")
+
+    def bdc_scan(self, file):
+        if self.exten.replace("\\", "/") not in file.replace("\\", "/"):
+            cmd = f'"{self.exten}\\Bitdefender\\bdc.exe" "{file}"'
+            p = Popen(cmd, stdout=PIPE, stderr=PIPE, shell=True, universal_newlines=True)
+            for matchs in re.finditer(r'(?P<filename>[^\s]+)\s+infected:\s+(?P<virusname>.+)', p.communicate()[0]):
+                return matchs
+        return False
+
+    def mem_scan(self, p):
+        if self.exten.replace("\\", "/") not in p.exe().replace("\\", "/"):
+            cmd = f'"{self.exten}\\hollows_hunter\\hollows_hunter.exe" /ofilter 2 /pid "{p.pid}"'
+            p = Popen(cmd, stdout=PIPE, stderr=PIPE, shell=True, universal_newlines=True)
+            return 'Detected' in p.communicate()[0]
+        return False

PYAS_Language.py

@@ -4,7 +4,7 @@ translate_dict = {
               "軟體":"软件","檔案":"文件","確定":"确认","設定":"设置","關於":"关于",
               "錯誤":"错误","實時":"实时","發現":"发现","關閉":"关闭","裝置":"设备",
               "總數":"总数","註冊":"注册","圖標":"图标","路徑":"路径","網路":"网络",
-              "位元":"字节","彈窗":"弹窗","靈敏":"敏感","複製":"复制","誤":"误","報":"报",
+              "位元":"字节","彈窗":"弹窗","靈敏":"敏感","複製":"复制","開啟":"开启",
               "訊":"讯","項":"项","掃":"扫","試":"试","黃":"黄","嗎":"吗","防":"保",
               "鑰":"钥","當":"当","後":"后","護":"护","導":"导","區":"区","復":"复",
               "攔":"拦","請":"请","統":"统","刪":"删","進":"进","個":"个","選":"选",
@@ -14,25 +14,26 @@ translate_dict = {
               "稱":"称","類":"类","輸":"输","執":"执","數":"数","尋":"寻","網":"网",
               "詢":"询","製":"制","員":"员","許":"许","條":"条","藍":"蓝","紅":"红",
               "綠":"绿","態":"态","務":"务","連":"连","檢":"检","測":"测","關":"关",
-              "強":"强","驅":"驱","為":"为","腳":"脚","增":"增","單":"单","開":"开",
-              "惡":"恶","據":"据","庫":"库","經":"经","敗":"败"},
+              "強":"强","驅":"驱","為":"为","腳":"脚","單":"单","開":"开","擴":"扩",
+              "惡":"恶","據":"据","庫":"库","經":"经","敗":"败","謝":"谢","別":"别",
+              "載":"载","誤":"误","報":"报","鏈":"链","竄":"窜","記憶體":"内存",},
     "en_US": {"已開啟":"On","已關閉":"Off","已开启":"On","已关闭":"Off","，":", ",
-              "立即刪除":"Delete Now","安全模式":"Safe Mode","官方網站":"Website",
-              "惡意檔案":"Virus ","惡意軟體":"Malware ","勒索行為":"Ransom ",
-              "惡意腳本":"Script ","惡意行為":"Behavior ","可疑軟體":"Suspicious ",
-              "許可條款":"License Terms","惡意":"Malicious","可疑":"Suspicious",
+              "立即刪除":"Delete Now","安全模式":"Safe Mode","官方網站":"Website ",
+              "腳本":"Script ","鏈式":"Chain ","記憶體":"Memory ","加載":"Load ",
+              "行為":"Behavior ","可疑":"Suspicious ","勒索":"Ransom ",
+              "許可條款":"License Terms ","惡意":"Malicious","可疑":"Suspicious",
               "啟用":"Enable ","禁用":"Disable ","正在初始化中":"Initializing ",
               "正在掃描":"Scanning ","正在刪除":"Deleting ","最小化到":"Minimize To ",
               "確定要":"Sure Want To ","靈敏度":"Sensitivity ","更新":"Update ",
               "白色主題":"White","黃色主題":"Yellow","紅色主題":"Red","語言":"Language ",
               "藍色主題":"Blue","綠色主題":"Green","自定主題":"Custom","最新":"Latest ",
-              "測試人員":"Testers","版本資訊":"Information","通訊":"Communication ",
+              "特別感謝":"Contributors ","版本資訊":"Information","通訊":"Connect ",
               "註冊表":"Registry ","退出":"Quit ","檔案":"File ","當前":"Currently ",
               "狀態":"State ","掃描":"Scan ","工具":"Tools ","防護":"Protect ",
               "失敗":"Failed ","請":"Please ","路徑":"Path ","方式":"Method ",
               "需要":"Need ","病毒":"Virus ","選擇":"Select ","返回":"Back",
               "受到":"Been ","錯誤":"Error","完成":"Complete ","引擎":"Engine ",
-              "托盤":"Tray ","圖標":"Icon ","不安全":"Unsafe","增強":"Enhanced ",
+              "托盤":"Tray ","圖標":"Icon ","不安全":"Unsafe","增強":"Enhance ",
               "系統":"System ","雲端":"Cloud ","重啟":"Reboot ","修復":"Repair ",
               "裝置":"Device ","發現":"Found ","成功":"Success ","清理":"Cleanup ",
               "確定":"OK","執行":"Execute ","警告":"Warning ","使用":"Use ",
@@ -44,12 +45,15 @@ translate_dict = {
               "風險":"Risk ","介面":"GUI ","核心":"Core ","服務":"Services ",
               "管理":"Manage","所有":"All ","您":"You ","取消":"Cancel ","未":"Not ",
               "垃圾":"Junk ","位元":"byte ","本機":"Computer ","停止":"Stop ",
-              "增加到":"Add File To ","白名單":"White List ","軟體":"Software ",
-              "增加":"Add","移除":"Delete","項目":"Items ","生成":"Create ","稱":"",
+              "增加到":"Add To ","白名單":"White List ","軟體":"Software ","正在":"Start ",
+              "增加":"Add ","移除":"Delete","項目":"Items ","生成":"Create ","稱":"",
               "複製":"Copy ","開啟":"Open ","此":"This ","並":"And ","全盤":"Full ",
               "已經在":"Already ","數據庫":"Database ","誤報":"False Positive ",
               "高":"High ","新":"New ","和":"And ","可能會":"Possible ","會":"Can ",
-              "日誌":"Log","已":"Has ","彈窗":"Window ","要":"To ","驅動":"Drive ",
+              "日誌":"Log","已":"Has ","彈窗":"Window ","要":"To ","驅動":"Driver ",
               "的":"","顯示":"","個":"","嗎":"","中":"","了":"","行":"","立即":"",
-              "密鑰":"Key ","檢測":"Detect ","製作":"Make","運行":"Running",
-              "自動":"Auto ","上報":"Report ","分析":"Analysis ","  ":" "}}
+              "密鑰":"Key ","檢測":"Detect ","製作":"Maker ","運行":"Running",
+              "擴展套件":"Extension Kit ","自動":"Auto ","上報":"Report ","與":"With ",
+              "分析":"Analysis ","自身":"Self ","其他":"Other ","配置":"Config ",
+              "丟失":"Lost ","網站":"Website ","不兼容":"Not Compatible ","追蹤":"Tracking ",
+              "竄改":"Tamper ","  ":" "}}

PYAS_Suffixes.py

@@ -0,0 +1,11 @@
+slist = [".exe",".dll",".com",".msi",".scr",
+         ".js",".bat",".cmd",".ps1",".vbs"]
+
+alist = [".exe",".dll",".zip",".7z",".rar",
+         ".js",".bat",".cmd",".ps1",".vbs",
+         ".ppt",".pptx",".wps",".txt",".rtf",
+         ".pdf",".xls",".xlsx",".doc",".docx",
+         ".jpg",".jpeg",".png",".webp",".gif",
+         ".mp3",".wav",".aac",".ogg",".flac",
+         ".mp4",".avi",".mov",".wmv",".mkv",
+         ".aux",".cur",".mui",".ttf",".efi"]

PYAS_Version.py

@@ -2,7 +2,7 @@ import pyinstaller_versionfile
 
 pyinstaller_versionfile.create_versionfile(
 output_file="versionfile.txt",
-version='3.1.1',
+version='3.1.4',
 company_name="PYAS Security",
 file_description="Python Antivirus Software",
 internal_name="PYAS",

README.md

@@ -97,25 +97,25 @@ Show the new process name, file path, cmd line, pid
 import psutil, time
 
 def proc_detect():
-    existing_processes = set()
+    existing_process = set()
     for p in psutil.process_iter():
-        if p.pid not in existing_processes:
-            existing_processes.add(p.pid)
+        existing_process.add(p.pid)
     while True:
         time.sleep(0.1)
+        new_process = set()
         for p in psutil.process_iter():
+            new_process.add(p.pid)
+        for pid in new_process - existing_process:
             try:
-                if p.pid not in existing_processes:
-                    existing_processes.add(p.pid)
-                    name, file, cmd = p.name(), p.exe(), p.cmdline()
-                    print(f"Name: {name}")
-                    print(f"File: {file}")
-                    print(f"Pid: {p.pid}")
-                    print(f"Cmd: {cmd}")
-                elif not psutil.pid_exists(p.pid):
-                    existing_processes.remove(p.pid)
-            except:
-                pass
+                p = psutil.Process(pid)
+                name, file, cmd = p.name(), p.exe(), p.cmdline()
+                print(f"Name: {name}")
+                print(f"File: {file}")
+                print(f"Pid: {p.pid}")
+                print(f"Cmd: {cmd}")
+            except Exception as e:
+                print(f"Error: {e}")
+        existing_process = new_process
 
 proc_detect()
 ```
@@ -155,6 +155,10 @@ https://pyantivirus.wixsite.com/pyas
 
 https://github.com/87owo/PYAS
 
+## PYAS Driver
+
+https://github.com/0sha0/PYAS_Protection
+
 ## MIT license
 
 https://github.com/87owo/PYAS/blob/main/LICENSE.md
@@ -167,6 +171,6 @@ Other systems may experience software malfunctions or crash
 
 ## Special Thanks
 
-360, Wix, VirusShare, mtkiao129, AV-T Team of LisectGroup
+Wix, 0sha0, mtkiao129, AV-T Team of LisectGroup
 
 Copyright© 2020~2024 PYAS Security By 87owo

README_zh_CN.md

@@ -92,23 +92,25 @@ print(info)
 import psutil, time
 
 def proc_detect():
-    existing_processes = set()
+    existing_process = set()
     for p in psutil.process_iter():
-        if p.pid not in existing_processes:
-            existing_processes.add(p.pid)
+        existing_process.add(p.pid)
     while True:
         time.sleep(0.1)
+        new_process = set()
         for p in psutil.process_iter():
+            new_process.add(p.pid)
+        for pid in new_process - existing_process:
             try:
-                if p.pid not in existing_processes:
-                    existing_processes.add(p.pid)
-                    name, file, cmd = p.name(), p.exe(), p.cmdline()
-                    print(f"Name: {name}")
-                    print(f"File: {file}")
-                    print(f"Pid: {p.pid}")
-                    print(f"Cmd: {cmd}")
-            except:
-                pass
+                p = psutil.Process(pid)
+                name, file, cmd = p.name(), p.exe(), p.cmdline()
+                print(f"Name: {name}")
+                print(f"File: {file}")
+                print(f"Pid: {p.pid}")
+                print(f"Cmd: {cmd}")
+            except Exception as e:
+                print(f"Error: {e}")
+        existing_process = new_process
 
 proc_detect()
 ```
@@ -152,6 +154,10 @@ https://github.com/87owo/PYAS
 
 https://github.com/87owo/PYAS/blob/main/LICENSE.md
 
+## 驱动程序
+
+https://github.com/0sha0/PYAS_Protection
+
 ## 支援系统
 
 Windows 8.1, 10, 11 (64-bit), 内存 500MB, 存储 200MB 或更高

README_zh_TW.md

@@ -91,23 +91,25 @@ print(info)
 import psutil, time
 
 def proc_detect():
-    existing_processes = set()
+    existing_process = set()
     for p in psutil.process_iter():
-        if p.pid not in existing_processes:
-            existing_processes.add(p.pid)
+        existing_process.add(p.pid)
     while True:
         time.sleep(0.1)
+        new_process = set()
         for p in psutil.process_iter():
+            new_process.add(p.pid)
+        for pid in new_process - existing_process:
             try:
-                if p.pid not in existing_processes:
-                    existing_processes.add(p.pid)
-                    name, file, cmd = p.name(), p.exe(), p.cmdline()
-                    print(f"Name: {name}")
-                    print(f"File: {file}")
-                    print(f"Pid: {p.pid}")
-                    print(f"Cmd: {cmd}")
-            except:
-                pass
+                p = psutil.Process(pid)
+                name, file, cmd = p.name(), p.exe(), p.cmdline()
+                print(f"Name: {name}")
+                print(f"File: {file}")
+                print(f"Pid: {p.pid}")
+                print(f"Cmd: {cmd}")
+            except Exception as e:
+                print(f"Error: {e}")
+        existing_process = new_process
 
 proc_detect()
 ```
@@ -150,6 +152,10 @@ https://github.com/87owo/PYAS
 
 https://github.com/87owo/PYAS/blob/main/LICENSE.md
 
+## 驅動程式
+
+https://github.com/0sha0/PYAS_Protection
+
 ## 支援系統
 
 Windows 8.1, 10, 11 (64-bit),記憶體 500MB, 磁碟容量 200MB 或更高
@@ -158,6 +164,6 @@ Windows 8.1, 10, 11 (64-bit),記憶體 500MB, 磁碟容量 200MB 或更高
 
 ## 特別感謝
 
-360, Wix, VirusShare, mtkiao129, AV-T Team of LisectGroup
+Wix, 0sha0, mtkiao129, AV-T Team of LisectGroup
 
 Copyright© 2020~2024 PYAS Security By 87owo