Add files via upload

Update PYAS_Language.py

Engine/Model/PYAS_Model.json

@@ -1,12 +1,11 @@
 {
-    "Suffix": [".com", ".exe", ".dll", ".sys", ".scr",
-               ".bat", ".cmd", ".ps1", ".vbs", ".wsf"], 
+    "Suffix": [".com", ".exe", ".dll", ".sys", ".scr", ".bat", ".cmd", ".ps1", ".vbs", ".wsf"], 
 
     "Labels": ["Pefile/White", "Script/White", "Pefile/General", "Script/General"], 
 
     "Detect": ["Pefile/General", "Script/General"],  
 
-    "Pixels": [224, 224], 
+    "Resize": [224, 224, 1, "nearest"], 
 
-    "Values": 90
+    "Values": 95
 }

Engine/Rules/PYAS_Rules_A1.yar

@@ -772,31 +772,26 @@ rule General_28 {
       author = "PYAS Security"
       date = "2024-06-12"
    strings:
-      $s1 = "GNU C11 6.3.0" ascii
-      $s2 = "GCC: (MinGW.org GCC-6.3.0-1) 6.3.0" fullword ascii
-      $s3 = "___mingw_readdir" fullword ascii
-      $s4 = "___mingw_closedir" fullword ascii
-      $s5 = "___mingw_seekdir" fullword ascii
-      $s6 = "%d is not a prime number." fullword ascii
-      $s7 = "___mingw_rewinddir" fullword ascii
-      $s8 = "__mingw32_init_mainargs" fullword ascii
-      $s9 = "___mingw_telldir" fullword ascii
-      $s10 = "Enter an integer: " fullword ascii
-      $s11 = "___mingw_opendir" fullword ascii
-      $s12 = "/home/keith/" ascii
-      $s13 = "../../../src/gcc-6.3.0/libgcc" ascii
-      $s14 = "___mingw_dirname" fullword ascii
-      $s15 = "_isPrime`" fullword ascii
-      $s16 = "%d is a prime number." fullword ascii
-      $s17 = ".weak.__Jv_RegisterClasses.___EH_FRAME_BEGIN__" fullword ascii
-      $s18 = "-mtune=generic" ascii
-      $s19 = "-march=i586" ascii
-      $s20 = "-g -g -g -O2 -O2 -O2" ascii
-      $s21 = "-fbuilding-libgcc" ascii
-      $s22 = "-fno-stack-protector" ascii
+      $x1 = "schemas.microsoft.com" wide
+      $x2 = "Client Worker Thread" ascii
+      $s1 = "A6BFEA43-501F-456F-A845-983D3AD7B8F0" wide
+      $s2 = "upgrader" wide
+      $s3 = "rtvscan.exe" wide
+      $s4 = "Enable-WindowsOptionalFeature -FeatureName" wide
+      $s5 = "remupd.exe" fullword wide
+      $s6 = "Mcshield.exe" fullword wide
+      $s7 = "mssecess.exe" fullword wide
+      $s8 = "RavMonD.exe" fullword wide
+      $s9 = "KvMonXP.exe" fullword wide
+      $s10 = "baiduSafeTray.exe" fullword wide
+      $s11 = "Qavanijeb.exe" fullword wide
+      $s12 = "%s --> Error: %d, EC: %d" fullword ascii
+      $s13 = "wscript.exe //E:vbscript" wide
+      $s14 = "upgrader_64" wide
+      $s15 = "Process Data Error" fullword wide
    condition:
-      uint16(0) == 0x5a4d and filesize < 500KB and
-      8 of them
+      uint16(0) == 0x5a4d and filesize < 1000KB and
+      1 of ($x*) and 6 of them
 }
 
 rule General_29 {
@@ -1442,31 +1437,3 @@ rule General_52 {
       uint16(0) == 0x5a4d and filesize < 2000KB and
       8 of them
 }
-
-rule General_53 {
-   meta:
-      description = "53"
-      author = "PYAS Security"
-      date = "2024-06-12"
-   strings:
-      $x1 = "schemas.microsoft.com" wide
-      $x2 = "Client Worker Thread" ascii
-      $s1 = "A6BFEA43-501F-456F-A845-983D3AD7B8F0" wide
-      $s2 = "upgrader" wide
-      $s3 = "rtvscan.exe" wide
-      $s4 = "Enable-WindowsOptionalFeature -FeatureName" wide
-      $s5 = "remupd.exe" fullword wide
-      $s6 = "Mcshield.exe" fullword wide
-      $s7 = "mssecess.exe" fullword wide
-      $s8 = "RavMonD.exe" fullword wide
-      $s9 = "KvMonXP.exe" fullword wide
-      $s10 = "baiduSafeTray.exe" fullword wide
-      $s11 = "Qavanijeb.exe" fullword wide
-      $s12 = "%s --> Error: %d, EC: %d" fullword ascii
-      $s13 = "wscript.exe //E:vbscript" wide
-      $s14 = "upgrader_64" wide
-      $s15 = "Process Data Error" fullword wide
-   condition:
-      uint16(0) == 0x5a4d and filesize < 1000KB and
-      1 of ($x*) and 6 of them
-}

LICENSE.md

@@ -1,6 +1,6 @@
 MIT License
 
-Copyright (c) 2020-2024 87owo (PYAS Security)
+Copyright (c) 2020-2025 87owo (PYAS Security)
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

PYAS_Engine.py

@@ -1,5 +1,5 @@
-import os, sys, time, json, yara
-import numpy, pefile, onnxruntime
+import os, sys, time, json, yara, numpy
+import chardet, pefile, onnxruntime
 from PIL import Image
 
 class YRScan:
@@ -38,15 +38,27 @@ class YRScan:
 class DLScan:
     def __init__(self):
         self.models = {}
-        self.shells = ['0', '1', '2', '3', '4', '5', '6', '7', '8', '9', '!o',
-        'cry', 'test', 'ace', 'yg', 'obr', 'tvm', 'dec', 'enc', 'b1_', 'base',
-        'bss', 'clr_uef', 'cursors', 'trs_age', 'engine', 'enigma', 'protect',
-        'nep', 'no_bbt', 'wpp_sf', 'retpol', 'rt', 'rwexec', 'rygs', 'poolmi',
-        's:@', 'pgae', 'proxy', 'wisevec', 'segm', 'transit', 'vmp', 'extjmp',
-        'upx', 'tracesup', 'res', 'lzma', 'malloc_h', 'miniex', 'ndr64', 'be',
-        'mssmixer', 'wow', 'press', 'fio', 'pad', 'hexpthk', 'h~;', 'icapsec',
-        'sanontcp', 'secur', 'asmstub', 'nsys_wr', 'orpc', 'pack', 'wow64svc',
-        'uedbg', 'viahw', 'data', 'zk', 'fothk', 'qihoo']#"""
+        self.valid_interpolations = {
+        "box": Image.Resampling.BOX,
+        "none": Image.Resampling.NEAREST,
+        "bilinear": Image.Resampling.BILINEAR,
+        "hamming": Image.Resampling.HAMMING,
+        "bicubic": Image.Resampling.BICUBIC,
+        "lanczos": Image.Resampling.LANCZOS,
+        "nearest": Image.Resampling.NEAREST}
+
+        shell_section = ["0", "1", "2", "3", "4", "5", "6", "7", "8", "9", 
+        "cry", "tvm", "dec", "enc", "vmp", "upx", "aes", "lzma", "press", 
+        "pack", "enigma", "protect", "secur"]
+        unknown_section = ["asmstub", "base", "bss", "clr_uef", "cursors", 
+        "engine", "fio", "fothk", "h~;", "icapsec", "malloc_h", "miniex", 
+        "mssmixer", "ndr64", "nsys_wr", "obr", "wow", "wow64svc", "wpp_sf",
+        "pad", "pgae", "poolmi", "proxy", "qihoo", "res", "retpol", "uedbg",
+        "rwexec", "rygs", "s:@", "sanontcp", "segm", "test", "tracesup",
+        "transit", "trs_age", "wisevec"]
+        unimportant_section = ["viahwaes", "orpc", "nep", "ace", "extjmp", 
+        "no_bbt", "data", "page", "hexpthk"]
+        self.shells = shell_section + unimportant_section + unknown_section
 
     def load_model(self, file_path):
         try:
@@ -58,37 +70,69 @@ class DLScan:
                 self.models[file_path] = onnxruntime.InferenceSession(file_path)
             self.labels = self.class_names['Labels']
             self.detect = self.class_names['Detect']
-            self.pixels = self.class_names['Pixels']
             self.values = self.class_names['Values']
+            self.resize = self.class_names['Resize']
             self.suffix = self.class_names['Suffix']
         except Exception as e:
             pass
 
-    def dl_scan(self, file_data):
+    def dl_scan(self, file_path):
         try:
-            label_similarities = {label: [] for label in self.labels}
-            image_data = self.preprocess_image(file_data, tuple(self.pixels))
-            image_array = numpy.asarray(image_data).astype('float32') / 255.0
-            image_expand = numpy.expand_dims(image_array, axis=(0, -1))
+            batch_images = []
+            for section, file_data in self.get_type(file_path).items():
+                image_data = self.preprocess_image(file_data, tuple(self.resize))
+                image_array = numpy.asarray(image_data).astype('float32') / 255.0
+                if len(image_array.shape) == 2:
+                    image_array = numpy.expand_dims(image_array, axis=-1)
+                batch_images.append(image_array)
+            batch_results = [{label: [] for label in self.labels} for _ in range(len(batch_images))]
+            batch_images = numpy.stack(batch_images, axis=0)
             for model_name, model in self.models.items():
                 input_name = model.get_inputs()[0].name
-                pre_answers = model.run(None, {input_name: image_expand})[0][0]
-                for k, score in enumerate(pre_answers):
-                    label_similarities[self.labels[k].strip()].append(score)
-            label_percentage = {label: (sum(similarities) / len(self.models)) * 100
-            for label, similarities in label_similarities.items()}
-            label, level = max(label_percentage.items(), key=lambda x: x[1])
-            return label, int(level)
+                predictions = model.run(None, {input_name: batch_images})[0]
+                for i, pre_answers in enumerate(predictions):
+                    for k, score in enumerate(pre_answers):
+                        batch_results[i][self.labels[k].strip()].append(score)
+            final_results = []
+            for result in batch_results:
+                label_percentage = {label: (sum(scores) / len(scores)) * 100
+                for label, scores in result.items()}
+                best_label, best_confidence = max(label_percentage.items(), key=lambda x: x[1])
+                final_results.append((best_label, int(best_confidence)))
+                if best_label in self.detect:
+                    return best_label, int(best_confidence)
+            return False, False
         except Exception as e:
             return False, False
 
     def preprocess_image(self, file_data, target_size):
-        wah = int(numpy.ceil(numpy.sqrt(len(file_data))))
-        file_data = numpy.frombuffer(file_data, dtype=numpy.uint8)
-        image_array = numpy.zeros((wah * wah,), dtype=numpy.uint8)
-        image_array[:len(file_data)] = file_data
-        image = Image.fromarray(image_array.reshape((wah, wah)), 'L')
-        return image.resize(target_size, Image.Resampling.NEAREST)
+        width, height, channels, interpolation = target_size
+        wah = int(numpy.ceil(numpy.sqrt(len(file_data) / channels)))
+        array_data = numpy.frombuffer(file_data, dtype=numpy.uint8)
+        expected_size = wah * wah * channels
+        image_array = numpy.zeros((expected_size,), dtype=numpy.uint8)
+        image_array[:len(file_data)] = array_data
+        if channels == 1:
+            reshape = image_array.reshape((wah, wah))
+            image = Image.fromarray(reshape, 'L')
+        elif channels == 3:
+            reshape = image_array.reshape((wah, wah, 3))
+            image = Image.fromarray(reshape, 'RGB')
+        if width == 0 and height == 0:
+            return image
+        i = self.valid_interpolations.get(interpolation.lower(), Image.BILINEAR)
+        return image.resize((width, height), i)
+
+    def is_text_file(self, content, sample_size):
+        try:
+            raw_data = content[:sample_size]
+            encoding = chardet.detect(raw_data)["encoding"]
+            if encoding in ["ascii", "utf-8", "utf-8-sig"]:
+                if raw_data.decode(encoding):
+                    return True
+            return False
+        except:
+            return False
 
     def get_type(self, file_path):
         match_data = {}
@@ -97,13 +141,14 @@ class DLScan:
             try:
                 with pefile.PE(file_path, fast_load=True) as pe:
                     for section in pe.sections:
-                        section_name = section.Name.rstrip(b'\x00').decode('latin1')
+                        name = section.Name.rstrip(b'\x00').decode('latin1')
                         if (section.Characteristics & 0x00000020 and not
-                        any(shell in section_name.lower() for shell in self.shells)):
-                            match_data[section_name] = section.get_data()
+                        any(s in name.lower() for s in self.shells)):
+                            print(name)
+                            match_data[name] = section.get_data()
             except:
-                if ftype in [".bat", ".cmd", ".ps1", ".vbs", ".wsf", ".html", ".js", 
-                    ".txt", ".htm", ".hta", ".php", ".css", ".xml", ".json", ".wasm"]:
-                    with open(file_path, 'rb') as file:
-                        match_data[ftype] = file.read()
+                with open(file_path, 'rb') as f:
+                    file_content = f.read()
+                if self.is_text_file(file_content, 1024):
+                    match_data[ftype] = file_content
         return match_data

PYAS_Language.py

@@ -1,10 +1,10 @@
 translate_dict = {
     "zh_TW": {"已开启":"已開啟","已关闭":"已關閉","On":"已開啟","Off":"已關閉"},
     "zh_CN": {"已開啟":"已开启","已關閉":"已关闭","On":"已开启","Off":"已关闭",
+              "錯誤":"错误","發現":"发现","關閉":"关闭","裝置":"设备","記憶體":"内存",
               "軟體":"软件","檔案":"文件","確定":"确认","設定":"设置","關於":"关于",
-              "錯誤":"错误","實時":"实时","發現":"发现","關閉":"关闭","裝置":"设备",
               "總數":"总数","註冊":"注册","圖標":"图标","路徑":"路径","網路":"网络",
-              "位元":"字节","彈窗":"弹窗","靈敏":"敏感","複製":"复制","開啟":"开启",
+              "位元":"字节","靈敏":"敏感","複製":"复制","開啟":"开启","資源回收桶":"资源回收桶",
               "訊":"讯","項":"项","掃":"扫","試":"试","黃":"黄","嗎":"吗","防":"保",
               "鑰":"钥","當":"当","後":"后","護":"护","導":"导","區":"区","復":"复",
               "攔":"拦","請":"请","統":"统","刪":"删","進":"进","個":"个","選":"选",
@@ -16,7 +16,8 @@ translate_dict = {
               "綠":"绿","態":"态","務":"务","連":"连","檢":"检","測":"测","關":"关",
               "強":"强","驅":"驱","為":"为","腳":"脚","單":"单","開":"开","擴":"扩",
               "惡":"恶","據":"据","庫":"库","經":"经","敗":"败","謝":"谢","別":"别",
-              "載":"载","誤":"误","報":"报","鏈":"链","竄":"窜","蹤":"踪","記憶體":"内存",},
+              "載":"载","誤":"误","報":"报","鏈":"链","竄":"窜","蹤":"踪","與":"与",
+              "異":"异","實":"实","時":"时","彈":"弹","窗":"窗","暫":"暂","訂":"订",},
     "en_US": {"已開啟":"On","已關閉":"Off","已开启":"On","已关闭":"Off","，":", ",
               "立即刪除":"Delete Now","安全模式":"Safe Mode","官方網站":"Website ",
               "腳本":"Script ","鏈式":"Chain ","記憶體":"Memory ","加載":"Load ",
@@ -27,7 +28,7 @@ translate_dict = {
               "最小化到":"Minimize To ","靈敏度":"Sensitivity ","正在檢查":"Checking ",
               "確定要":"Sure Want To ","引擎靈敏度":"Sensitivity ","更新":"Update ",
               "白色主題":"White","黃色主題":"Yellow","紅色主題":"Red","語言":"Language ",
-              "藍色主題":"Blue","綠色主題":"Green","自定主題":"Custom","最新":"Latest ",
+              "藍色主題":"Blue","綠色主題":"Green","自訂主題":"Custom","最新":"Latest ",
               "特別感謝":"Contributors ","版本資訊":"Information","通訊":"Connect ",
               "註冊表":"Registry ","退出":"Quit ","檔案":"File ","當前":"Currently ",
               "狀態":"State ","掃描":"Scan ","工具":"Tools ","防護":"Protect ",
@@ -41,13 +42,13 @@ translate_dict = {
               "網路":"Network ","變更":"Change ","總數":"Total","結束":"End ",
               "選項":"Options ","監控":"Monitor ","連接":"Connect ","可以":"To ",
               "進程":"Process ","攔截":"Block ","引導":"Boot ","刪除":"Delete ",
-              "分區":"Partition ","設定":"Settings","關於":"About","模式":"Mode ",
+              "分區":"Partition ","設定":"Setting ","關於":"About","模式":"Mode ",
               "提高":"Improve ","安全":"Security ","顯色":"Color ","主題":"Themes ",
               "風險":"Risk ","介面":"GUI ","核心":"Core ","服務":"Services ",
               "管理":"Manage","所有":"All ","您":"You ","取消":"Cancel ","未":"Not ",
               "垃圾":"Junk ","位元":"byte ","本機":"Computer ","停止":"Stop ",
-              "增加到":"Add To ","白名單":"White List ","軟體":"Software ","正在":"",
-              "增加":"Add ","移除":"Delete","項目":"Items ","生成":"Create ","稱":"",
+              "到":"To ","白名單":"White List ","軟體":"Software ","正在":"",
+              "增加":"Add ","移除":"Delete ","項目":"Items ","生成":"Create ","稱":"",
               "複製":"Copy ","開啟":"Open ","此":"This ","並":"And ","全盤":"Full ",
               "已經在":"Already ","數據庫":"Database ","誤報":"False Positive ",
               "高":"High ","新":"New ","和":"And ","可能會":"Possible ","會":"Can ",
@@ -57,4 +58,9 @@ translate_dict = {
               "擴展":"Extension ","套件":"Kit ","自動":"Auto ","上報":"Report ",
               "分析":"Analysis ","自身":"Self ","其他":"Other ","配置":"Config ",
               "丟失":"Lost ","網站":"Website ","不兼容":"Not Compatible ",
-              "竄改":"Tamper ","第三方":"Other ","與":"With ","  ":" "}}
+              "竄改":"Tamper ","第三方":"Other ","實時":"Real Time ","查看":"View ",
+              "指定":"Specify ","清空":"Empty ","資源回收桶":"Recycle Bin ",
+              "與":"With ","當":"When ","功能":"Function ","異常":"Abnormal ",
+              "重置":"Reset ","窗口":"Window ","暫存":"Temp ","自訂":"Custom ",
+              "不支持":"Not Support ","共":"Total ","秒":"Seconds ","耗時":"Takes ",
+              "時":"","  ":" "}}

PYAS_Suffixes.py

@@ -1,12 +1,10 @@
-slist = [".exe",".dll",".sys",".com",".scr",
-         ".bat",".ps1",".vbs",".cmd",".js"]
-
-alist = [".exe",".dll",".sys",".com",".scr",
-         ".zip",".7z",".rar",".tar",".gz",
-         ".js",".bat",".cmd",".ps1",".vbs",
-         ".ppt",".pptx",".wps",".txt",".rtf",
-         ".pdf",".xls",".xlsx",".doc",".docx",
-         ".jpg",".jpeg",".png",".webp",".gif",
-         ".mp3",".wav",".aac",".ogg",".flac",
-         ".mp4",".avi",".mov",".wmv",".mkv",
-         ".aux",".cur",".mui",".ttf",".efi"]
+file_types = [
+    ".exe",".dll",".sys",".com",".scr",
+    ".zip",".7z",".rar",".tar",".gz",
+    ".js",".bat",".cmd",".ps1",".vbs",
+    ".ppt",".pptx",".wps",".txt",".rtf",
+    ".pdf",".xls",".xlsx",".doc",".docx",
+    ".jpg",".jpeg",".png",".webp",".gif",
+    ".mp3",".wav",".aac",".ogg",".flac",
+    ".mp4",".avi",".mov",".wmv",".mkv",
+    ".aux",".cur",".mui",".ttf",".efi"]

PYAS_Version.py

@@ -2,7 +2,7 @@ import pyinstaller_versionfile
 
 pyinstaller_versionfile.create_versionfile(
 output_file="versionfile.txt",
-version='3.2.6',
+version='3.3.0',
 company_name="PYAS Security",
 file_description="Python Antivirus Software",
 internal_name="PYAS",

README.md

@@ -1,6 +1,6 @@
 # PYAS (Python Antivirus Software)
 
-![PYAS](https://github.com/user-attachments/assets/39c273b9-c467-480a-a8b3-31714a6df3ef)
+![PYAS_UI](https://github.com/user-attachments/assets/68765836-7272-482f-b8cd-d8ba728d88ab)
 
 ## Readme Language
 
@@ -11,13 +11,15 @@
 ## Requirements
 
 ```
-pip install pefile==2023.2.7
-pip install pyperclip==1.8.2
-pip install PyQt5==5.15.9
-pip install yara-python==4.5.1
-pip install numpy==2.1.1
+pip install chardet==5.2.0
+pip install numpy==1.26.3
 pip install onnxruntime==1.18.1
+pip install pefile==2023.2.7
 pip install pillow==10.4.0
+pip install pyperclip==1.8.2
+pip install PyQt5==5.15.11
+pip install requests==2.32.3
+pip install yara-python==4.5.1
 ```
 
 ## File Information
@@ -71,4 +73,4 @@ Other systems may experience software malfunctions or crash
 
 Wix, mtkiao129, 0sha0, AV-T Team of LisectGroup
 
-Copyright© 2020~2024 PYAS Security By 87owo
+Copyright© 2020~2025 PYAS Security By 87owo

README_zh_CN.md

@@ -1,17 +1,19 @@
 # PYAS (Python 杀毒软件)
 
-![PYAS](https://github.com/user-attachments/assets/39c273b9-c467-480a-a8b3-31714a6df3ef)
+![PYAS_UI](https://github.com/user-attachments/assets/68765836-7272-482f-b8cd-d8ba728d88ab)
 
 ## 安装要求
 
 ```
-pip install pefile==2023.2.7
-pip install pyperclip==1.8.2
-pip install PyQt5==5.15.9
-pip install yara-python==4.5.1
-pip install numpy==2.1.1
+pip install chardet==5.2.0
+pip install numpy==1.26.3
 pip install onnxruntime==1.18.1
+pip install pefile==2023.2.7
 pip install pillow==10.4.0
+pip install pyperclip==1.8.2
+pip install PyQt5==5.15.11
+pip install requests==2.32.3
+pip install yara-python==4.5.1
 ```
 
 ## 文件信息
@@ -65,4 +67,4 @@ Windows 8.1, 10, 11 (64-bit), 内存 500MB, 存储 200MB 或更高
 
 Wix, mtkiao129, 0sha0, AV-T Team of LisectGroup
 
-Copyright© 2020~2024 PYAS Security By 87owo
+Copyright© 2020~2025 PYAS Security By 87owo

README_zh_TW.md

@@ -1,17 +1,19 @@
 # PYAS (Python 防毒軟體)
 
-![PYAS](https://github.com/user-attachments/assets/39c273b9-c467-480a-a8b3-31714a6df3ef)
+![PYAS_UI](https://github.com/user-attachments/assets/68765836-7272-482f-b8cd-d8ba728d88ab)
 
 ## 安裝要求
 
 ```
-pip install pefile==2023.2.7
-pip install pyperclip==1.8.2
-pip install PyQt5==5.15.9
-pip install yara-python==4.5.1
-pip install numpy==2.1.1
+pip install chardet==5.2.0
+pip install numpy==1.26.3
 pip install onnxruntime==1.18.1
+pip install pefile==2023.2.7
 pip install pillow==10.4.0
+pip install pyperclip==1.8.2
+pip install PyQt5==5.15.11
+pip install requests==2.32.3
+pip install yara-python==4.5.1
 ```
 
 ## 檔案資訊
@@ -65,4 +67,4 @@ Windows 8.1, 10, 11 (64-bit),記憶體 500MB, 磁碟容量 200MB 或更高
 
 Wix, mtkiao129, 0sha0, AV-T Team of LisectGroup
 
-Copyright© 2020~2024 PYAS Security By 87owo
+Copyright© 2020~2025 PYAS Security By 87owo