Compare commits
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
8d9dea4b08 | ||
|
|
4e98d6d8ce | ||
|
|
55b5cd939e | ||
|
|
d72f5a43c8 | ||
|
|
b406d8d30b | ||
|
|
f9c91c9ba0 | ||
|
|
0213d7eeb4 | ||
|
|
048c5c0970 | ||
|
|
728542fce8 | ||
|
|
81ca24c7a2 | ||
|
|
32ec272253 | ||
|
|
758982b660 | ||
|
|
a83bba10e3 | ||
|
|
4b9342fa8b | ||
|
|
a48162cf4a | ||
|
|
3fa61e777c | ||
|
|
01a2c55207 | ||
|
|
1a2376e6b7 | ||
|
|
dab0d6a47f | ||
|
|
b5d90b5cb7 | ||
|
|
25fd0bd2af | ||
|
|
a4bb63fcd4 | ||
|
|
9d85785c27 | ||
|
|
4206242627 | ||
|
|
f0149be9ad | ||
|
|
5d56a1f0e0 | ||
|
|
ad06c75058 | ||
|
|
d5b6e17e59 | ||
|
|
ffe2514e11 | ||
|
|
8621bed5d4 | ||
|
|
634031e6dc | ||
|
|
11fae36469 | ||
|
|
3d01e36a71 | ||
|
|
c2082b1ac5 | ||
|
|
c94bbf84fe | ||
|
|
930363cd3f | ||
|
|
085ca9eb58 | ||
|
|
f486d44804 |
No files matched your search
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
Binary file not shown.
@@ -1,6 +1,5 @@
|
||||
{
|
||||
"Suffix": [".com", ".exe", ".dll", ".sys", ".scr",
|
||||
".bat", ".cmd", ".ps1", ".vbs", ".wsf"],
|
||||
"Suffix": [".com", ".exe", ".dll", ".sys", ".scr", ".bat", ".cmd", ".ps1", ".vbs", ".wsf"],
|
||||
|
||||
"Labels": ["Pefile/White", "Script/White", "Pefile/General", "Script/General"],
|
||||
|
||||
@@ -8,5 +7,5 @@
|
||||
|
||||
"Pixels": [224, 224],
|
||||
|
||||
"Values": 85
|
||||
"Values": 90
|
||||
}
|
||||
Binary file not shown.
File renamed without changes.
File renamed without changes.
@@ -0,0 +1,117 @@
|
||||
Windows Registry Editor Version 5.00
|
||||
|
||||
; Repair system restrictions
|
||||
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\MMC]
|
||||
; NoControlPanel
|
||||
"NoControlPanel"=dword:00000000
|
||||
; NoDrives
|
||||
"NoDrives"=dword:00000000
|
||||
; NoFileMenu
|
||||
"NoFileMenu"=dword:00000000
|
||||
; NoFind
|
||||
"NoFind"=dword:00000000
|
||||
; NoRealMode
|
||||
"NoRealMode"=dword:00000000
|
||||
; NoRecentDocsMenu
|
||||
"NoRecentDocsMenu"=dword:00000000
|
||||
; NoSetFolders
|
||||
"NoSetFolders"=dword:00000000
|
||||
; NoSetFolderOptions
|
||||
"NoSetFolderOptions"=dword:00000000
|
||||
; NoViewOnDrive
|
||||
"NoViewOnDrive"=dword:00000000
|
||||
; NoClose
|
||||
"NoClose"=dword:00000000
|
||||
; NoRun
|
||||
"NoRun"=dword:00000000
|
||||
; NoDesktop
|
||||
"NoDesktop"=dword:00000000
|
||||
; NoLogOff
|
||||
"NoLogOff"=dword:00000000
|
||||
; NoFolderOptions
|
||||
"NoFolderOptions"=dword:00000000
|
||||
; RestrictRun
|
||||
"RestrictRun"=dword:00000000
|
||||
; NoViewContextMenu
|
||||
"NoViewContexMenu"=dword:00000000
|
||||
; HideClock
|
||||
"HideClock"=dword:00000000
|
||||
; NoStartMenuMorePrograms
|
||||
"NoStartMenuMorePrograms"=dword:00000000
|
||||
; NoStartMenuMyGames
|
||||
"NoStartMenuMyGames"=dword:00000000
|
||||
; NoStartMenuMyMusic
|
||||
"NoStartMenuMyMusic"=dword:00000000
|
||||
; DisableCMD
|
||||
"DisableCMD"=dword:00000000
|
||||
; NoWinKeys
|
||||
"NoWinKeys"=dword:00000000
|
||||
; StartMenuLogOff
|
||||
"StartMenuLogOff"=dword:00000000
|
||||
; NoSimpleNetlDList
|
||||
"NoSimpleNetlDList"=dword:00000000
|
||||
; NoLowDiskSpaceChecks
|
||||
"NoLowDiskSpaceChecks"=dword:00000000
|
||||
; DisableLockWorkstation
|
||||
"DisableLockWorkstation"=dword:00000000
|
||||
; Restrict_Run
|
||||
"Restrict_Run"=dword:00000000
|
||||
; DisableTaskMgr
|
||||
"DisableTaskMgr"=dword:00000000
|
||||
; DisableRegistryTools
|
||||
"DisableRegistryTools"=dword:00000000
|
||||
; DisableChangePassword
|
||||
"DisableChangePassword"=dword:00000000
|
||||
; Wallpaper
|
||||
"Wallpaper"=dword:00000000
|
||||
; NoComponents
|
||||
"NoComponents"=dword:00000000
|
||||
; NoAddingComponents
|
||||
"NoAddingComponents"=dword:00000000
|
||||
; NoStartMenuPinnedList
|
||||
"NoStartMenuPinnedList"=dword:00000000
|
||||
; NoActiveDesktop
|
||||
"NoActiveDesktop"=dword:00000000
|
||||
; NoSetActiveDesktop
|
||||
"NoSetActiveDesktop"=dword:00000000
|
||||
; NoActiveDesktopChanges
|
||||
"NoActiveDesktopChanges"=dword:00000000
|
||||
; NoChangeStartMenu
|
||||
"NoChangeStartMenu"=dword:00000000
|
||||
; NoFavoritesMenu
|
||||
"NoFavoritesMenu"=dword:00000000
|
||||
; NoRecentDocsHistory
|
||||
"NoRecentDocsHistory"=dword:00000000
|
||||
; NoSetTaskbar
|
||||
"NoSetTaskbar"=dword:00000000
|
||||
; NoSMHelp
|
||||
"NoSMHelp"=dword:00000000
|
||||
; NoTrayContextMenu
|
||||
"NoTrayContextMenu"=dword:00000000
|
||||
; NoViewContextMenu
|
||||
"NoViewContextMenu"=dword:00000000
|
||||
; NoManageMyComputerVerb
|
||||
"NoManageMyComputerVerb"=dword:00000000
|
||||
; NoWindowsUpdate
|
||||
"NoWindowsUpdate"=dword:00000000
|
||||
; ClearRecentDocsOnExit
|
||||
"ClearRecentDocsOnExit"=dword:00000000
|
||||
; NoStartMenuNetworkPlaces
|
||||
"NoStartMenuNetworkPlaces"=dword:00000000
|
||||
|
||||
; Repair Image File Execution Options
|
||||
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options]
|
||||
; (Delete all subkeys here if necessary)
|
||||
|
||||
; Repair executable file icon
|
||||
[HKEY_CLASSES_ROOT\exefile\DefaultIcon]
|
||||
@="%1"
|
||||
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\exefile\DefaultIcon]
|
||||
@="%1"
|
||||
|
||||
; Repair executable file type
|
||||
[HKEY_CLASSES_ROOT\.exe]
|
||||
@="exefile"
|
||||
[HKEY_CLASSES_ROOT\exefile\shell\open\command]
|
||||
@="\"%1\" %*"
|
||||
|
||||
@@ -0,0 +1 @@
|
||||
sfc /scannow
|
||||
@@ -0,0 +1 @@
|
||||
None
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
MIT License
|
||||
|
||||
Copyright (c) 2020-2024 87owo (PYAS Security)
|
||||
Copyright (c) 2020-2025 87owo (PYAS Security)
|
||||
|
||||
Permission is hereby granted, free of charge, to any person obtaining a copy
|
||||
of this software and associated documentation files (the "Software"), to deal
|
||||
|
||||
+4
-4
@@ -9,7 +9,7 @@ class YRScan:
|
||||
|
||||
def load_rules(self, file_path):
|
||||
try:
|
||||
ftype = str(f".{file_path.split('.')[-1]}").lower()
|
||||
ftype = os.path.splitext(file_path)[-1].lower()
|
||||
if ftype in [".yara", ".yar"]:
|
||||
self.rules[file_path] = yara.compile(file_path)
|
||||
elif ftype in [".yc", ".yrc"]:
|
||||
@@ -50,7 +50,7 @@ class DLScan:
|
||||
|
||||
def load_model(self, file_path):
|
||||
try:
|
||||
ftype = str(f".{file_path.split('.')[-1]}").lower()
|
||||
ftype = os.path.splitext(file_path)[-1].lower()
|
||||
if ftype in [".json", ".txt"]:
|
||||
with open(file_path, 'r') as f:
|
||||
self.class_names = json.load(f)
|
||||
@@ -75,7 +75,7 @@ class DLScan:
|
||||
pre_answers = model.run(None, {input_name: image_expand})[0][0]
|
||||
for k, score in enumerate(pre_answers):
|
||||
label_similarities[self.labels[k].strip()].append(score)
|
||||
label_percentage = {label: (sum(similarities) / len(image_expand)) * 100
|
||||
label_percentage = {label: (sum(similarities) / len(self.models)) * 100
|
||||
for label, similarities in label_similarities.items()}
|
||||
label, level = max(label_percentage.items(), key=lambda x: x[1])
|
||||
return label, int(level)
|
||||
@@ -92,7 +92,7 @@ class DLScan:
|
||||
|
||||
def get_type(self, file_path):
|
||||
match_data = {}
|
||||
ftype = str(f".{file_path.split('.')[-1]}").lower()
|
||||
ftype = os.path.splitext(file_path)[-1].lower()
|
||||
if ftype in self.suffix:
|
||||
try:
|
||||
with pefile.PE(file_path, fast_load=True) as pe:
|
||||
|
||||
+1
-1
@@ -16,7 +16,7 @@ translate_dict = {
|
||||
"綠":"绿","態":"态","務":"务","連":"连","檢":"检","測":"测","關":"关",
|
||||
"強":"强","驅":"驱","為":"为","腳":"脚","單":"单","開":"开","擴":"扩",
|
||||
"惡":"恶","據":"据","庫":"库","經":"经","敗":"败","謝":"谢","別":"别",
|
||||
"載":"载","誤":"误","報":"报","鏈":"链","竄":"窜","蹤":"踪","記憶體":"内存",},
|
||||
"載":"载","誤":"误","報":"报","鏈":"链","竄":"窜","蹤":"踪","與":"与","記憶體":"内存",},
|
||||
"en_US": {"已開啟":"On","已關閉":"Off","已开启":"On","已关闭":"Off",",":", ",
|
||||
"立即刪除":"Delete Now","安全模式":"Safe Mode","官方網站":"Website ",
|
||||
"腳本":"Script ","鏈式":"Chain ","記憶體":"Memory ","加載":"Load ",
|
||||
|
||||
+10
-12
@@ -1,12 +1,10 @@
|
||||
slist = [".exe",".dll",".sys",".com",".scr",
|
||||
".bat",".ps1",".vbs",".cmd",".js"]
|
||||
|
||||
alist = [".exe",".dll",".sys",".com",".scr",
|
||||
".zip",".7z",".rar",".tar",".gz",
|
||||
".js",".bat",".cmd",".ps1",".vbs",
|
||||
".ppt",".pptx",".wps",".txt",".rtf",
|
||||
".pdf",".xls",".xlsx",".doc",".docx",
|
||||
".jpg",".jpeg",".png",".webp",".gif",
|
||||
".mp3",".wav",".aac",".ogg",".flac",
|
||||
".mp4",".avi",".mov",".wmv",".mkv",
|
||||
".aux",".cur",".mui",".ttf",".efi"]
|
||||
file_types = [
|
||||
".exe",".dll",".sys",".com",".scr",
|
||||
".zip",".7z",".rar",".tar",".gz",
|
||||
".js",".bat",".cmd",".ps1",".vbs",
|
||||
".ppt",".pptx",".wps",".txt",".rtf",
|
||||
".pdf",".xls",".xlsx",".doc",".docx",
|
||||
".jpg",".jpeg",".png",".webp",".gif",
|
||||
".mp3",".wav",".aac",".ogg",".flac",
|
||||
".mp4",".avi",".mov",".wmv",".mkv",
|
||||
".aux",".cur",".mui",".ttf",".efi"]
|
||||
+1
-1
@@ -2,7 +2,7 @@ import pyinstaller_versionfile
|
||||
|
||||
pyinstaller_versionfile.create_versionfile(
|
||||
output_file="versionfile.txt",
|
||||
version='3.2.4',
|
||||
version='3.2.7',
|
||||
company_name="PYAS Security",
|
||||
file_description="Python Antivirus Software",
|
||||
internal_name="PYAS",
|
||||
|
||||
@@ -11,11 +11,8 @@
|
||||
## Requirements
|
||||
|
||||
```
|
||||
pip install psutil==5.9.5
|
||||
pip install pefile==2023.2.7
|
||||
pip install requests==2.31.0
|
||||
pip install pyperclip==1.8.2
|
||||
pip install pywin32==306
|
||||
pip install PyQt5==5.15.9
|
||||
pip install yara-python==4.5.1
|
||||
pip install numpy==2.1.1
|
||||
@@ -27,26 +24,22 @@ pip install pillow==10.4.0
|
||||
|
||||
```
|
||||
PYAS/
|
||||
├── Driver/
|
||||
│ ├── PYAS_Driver.sys -------> Driver Protect (self protection driver for pyas by 0sha0)
|
||||
├── Driver/ (Protect driver and Microsoft runtime)
|
||||
│ └── ...
|
||||
│
|
||||
├── Model/
|
||||
│ ├── PYAS_Model.json -------> Virus Database (the database must be in the specified dir)
|
||||
├── Engine/ (Deep learn model and Yara database)
|
||||
│ └── ...
|
||||
│
|
||||
├── Rules/
|
||||
│ ├── Yara_Rules.yar ---------> Yara Rules (yara rules in plain text format)
|
||||
│ ├── Yara_Rules.yrc ---------> Compile Rules (yara rules in compiled format)
|
||||
├── Exten/ (Exten tools and System repair tools)
|
||||
│ └── ...
|
||||
│
|
||||
├── PYAS.py ---------------------> Main PYAS Program (including animation, scan, protect functions, ...)
|
||||
├── PYAS_Engine.py -------------> Conversion Database (used to transform profiles and forecast data)
|
||||
├── PYAS_Suffixes.py -----------> File Suffixes (including scanned file suffixes and common suffixes)
|
||||
├── PYAS_Interface.py ----------> PyQt5 Interface (use QT designer, must be matched with the main program)
|
||||
├── PYAS_Resource.py -----------> PyQt5 Resource (status pictures, icon packages, button icons, ...)
|
||||
├── PYAS_Language.py -----------> Translate Dict (Traditional Chinese, Simplified Chinese, English)
|
||||
├── PYAS_Version.py ------------> Pyinstaller (file information, version information, original name, ...)
|
||||
├── PYAS.py (Main PYAS program with qtui interaction and protect function)
|
||||
├── PYAS_Engine.py (Deep learning predict and yara rules file scanner)
|
||||
├── PYAS_Suffixes.py (including scan file suffixes and common suffixes)
|
||||
├── PYAS_Interface.py (Qt designer ui, must be matched with the main program)
|
||||
├── PYAS_Resource.py (status pictures, icon packages, and button icons)
|
||||
├── PYAS_Language.py (Traditional Chinese, Simplified Chinese and English)
|
||||
├── PYAS_Version.py (file information, version information, original name)
|
||||
└── ...
|
||||
```
|
||||
|
||||
@@ -76,6 +69,6 @@ Other systems may experience software malfunctions or crash
|
||||
|
||||
## Special Thanks
|
||||
|
||||
Wix, 0sha0, mtkiao129, AV-T Team of LisectGroup
|
||||
Wix, mtkiao129, 0sha0, AV-T Team of LisectGroup
|
||||
|
||||
Copyright© 2020~2024 PYAS Security By 87owo
|
||||
Copyright© 2020~2025 PYAS Security By 87owo
|
||||
+12
-19
@@ -5,11 +5,8 @@
|
||||
## 安装要求
|
||||
|
||||
```
|
||||
pip install psutil==5.9.5
|
||||
pip install pefile==2023.2.7
|
||||
pip install requests==2.31.0
|
||||
pip install pyperclip==1.8.2
|
||||
pip install pywin32==306
|
||||
pip install PyQt5==5.15.9
|
||||
pip install yara-python==4.5.1
|
||||
pip install numpy==2.1.1
|
||||
@@ -21,26 +18,22 @@ pip install pillow==10.4.0
|
||||
|
||||
```
|
||||
PYAS/
|
||||
├── Driver/
|
||||
│ ├── PYAS_Driver.sys -------> 驱动程序 (0sha0 为 pyas 提供的自我保护驱动程序)
|
||||
├── Driver/ (驱动保护和微软运行库)
|
||||
│ └── ...
|
||||
│
|
||||
├── Model/
|
||||
│ ├── PYAS_Model.json -------> 病毒数据库 (数据库必须位于指定目录中)
|
||||
├── Engine/ (深度学习和规则数据库)
|
||||
│ └── ...
|
||||
│
|
||||
├── Rules/
|
||||
│ ├── Yara_Rules.yar ---------> Yara 规则 (纯文本格式的 yara 规则)
|
||||
│ ├── Yara_Rules.yrc ---------> 编译规则 (编译格式的 yara 规则)
|
||||
├── Exten/ (扩展功能与系统修复工具)
|
||||
│ └── ...
|
||||
│
|
||||
├── PYAS.py ---------------------> PYAS主程序(包含动画、扫描、保护等功能...)
|
||||
├── PYAS_Engine.py -------------> 转换数据库(用于转换剖面图和预报数据)
|
||||
├── PYAS_Suffixes.py -----------> 文件后缀(包含扫描文件后缀和常用后缀)
|
||||
├── PYAS_Interface.py ----------> PyQt5界面(使用QT设计器,需与主程序搭配使用)
|
||||
├── PYAS_Resource.py -----------> PyQt5资源(状态图片、图标包、按钮图标...)
|
||||
├── PYAS_Language.py -----------> 翻译词典(繁体中文、简体中文、英文)
|
||||
├── PYAS_Version.py ------------> 安裝信息(文件信息、版本信息、原名...)
|
||||
├── PYAS.py (PYAS主程序含界面交互与保护功能)
|
||||
├── PYAS_Engine.py (深度学习预测和规则扫描器)
|
||||
├── PYAS_Suffixes.py (获取扫描或事件文件的后缀)
|
||||
├── PYAS_Interface.py (搭配主程序的Qt设计介面)
|
||||
├── PYAS_Resource.py (状态图片和图标和按钮图片)
|
||||
├── PYAS_Language.py (繁体中文和简体中文和英文翻译)
|
||||
├── PYAS_Version.py (版本和讯息名称和打包文件名)
|
||||
└── ...
|
||||
```
|
||||
|
||||
@@ -70,6 +63,6 @@ Windows 8.1, 10, 11 (64-bit), 内存 500MB, 存储 200MB 或更高
|
||||
|
||||
## 特别感谢
|
||||
|
||||
360, Wix, VirusShare, mtkiao129, AV-T Team of LisectGroup
|
||||
Wix, mtkiao129, 0sha0, AV-T Team of LisectGroup
|
||||
|
||||
Copyright© 2020~2024 PYAS Security By 87owo
|
||||
Copyright© 2020~2025 PYAS Security By 87owo
|
||||
+12
-19
@@ -5,11 +5,8 @@
|
||||
## 安裝要求
|
||||
|
||||
```
|
||||
pip install psutil==5.9.5
|
||||
pip install pefile==2023.2.7
|
||||
pip install requests==2.31.0
|
||||
pip install pyperclip==1.8.2
|
||||
pip install pywin32==306
|
||||
pip install PyQt5==5.15.9
|
||||
pip install yara-python==4.5.1
|
||||
pip install numpy==2.1.1
|
||||
@@ -21,26 +18,22 @@ pip install pillow==10.4.0
|
||||
|
||||
```
|
||||
PYAS/
|
||||
├── Driver/
|
||||
│ ├── PYAS_Driver.sys -------> 驅動程式 (0sha0 為 pyas 提供的自我保護驅動程式)
|
||||
├── Driver/ (驅動防護和微軟運行庫)
|
||||
│ └── ...
|
||||
│
|
||||
├── Model/
|
||||
│ ├── PYAS_Model.json -------> 病毒資料庫 (資料庫必須位於指定目錄)
|
||||
├── Engine/ (深度學習和規則數據庫)
|
||||
│ └── ...
|
||||
│
|
||||
├── Rules/
|
||||
│ ├── Yara_Rules.yar ---------> Yara 規則 (純文字格式的 yara 規則)
|
||||
│ ├── Yara_Rules.yrc ---------> 編譯規則 (編譯格式的 yara 規則)
|
||||
├── Exten/ (擴展功能與系統修復工具)
|
||||
│ └── ...
|
||||
│
|
||||
├── PYAS.py ---------------------> PYAS主程式(包含動畫、掃描、保護等功能...)
|
||||
├── PYAS_Engine.py -------------> 轉換資料庫(用於轉換剖面圖和預報資料)
|
||||
├── PYAS_Suffixes.py -----------> 文件後綴(包含掃描文件後綴和常用後綴)
|
||||
├── PYAS_Interface.py ----------> PyQt5介面(使用QT設計器,需與主程式搭配使用)
|
||||
├── PYAS_Resource.py -----------> PyQt5資源(狀態圖片、圖示包、按鈕圖示...)
|
||||
├── PYAS_Language.py -----------> 翻譯字典(繁體中文、簡體中文、英文)
|
||||
├── PYAS_Version.py ------------> 安裝資訊(檔案資訊、版本資訊、原名...)
|
||||
├── PYAS.py (PYAS主程序含介面交互與防護功能)
|
||||
├── PYAS_Engine.py (深度學習預測和規則掃描器)
|
||||
├── PYAS_Suffixes.py (獲取掃描或事件檔案的副檔名)
|
||||
├── PYAS_Interface.py (搭配主程序的Qt設計介面)
|
||||
├── PYAS_Resource.py (狀態圖片圖標和按鈕圖片)
|
||||
├── PYAS_Language.py (繁體中文和簡體中文和英文翻譯)
|
||||
├── PYAS_Version.py (檔案版本和訊息名稱和打包檔名)
|
||||
└── ...
|
||||
```
|
||||
|
||||
@@ -70,6 +63,6 @@ Windows 8.1, 10, 11 (64-bit),記憶體 500MB, 磁碟容量 200MB 或更高
|
||||
|
||||
## 特別感謝
|
||||
|
||||
Wix, 0sha0, mtkiao129, AV-T Team of LisectGroup
|
||||
Wix, mtkiao129, 0sha0, AV-T Team of LisectGroup
|
||||
|
||||
Copyright© 2020~2024 PYAS Security By 87owo
|
||||
Copyright© 2020~2025 PYAS Security By 87owo
|
||||
Reference in new issue
Block a user