Coder Social home page Coder Social logo

87owo / pyas Goto Github PK

View Code? Open in Web Editor NEW
125.0 6.0 15.0 1.02 GB

Python Antivirus Software

Home Page: https://pyantivirus.wixsite.com/pyas

License: MIT License

Python 93.85% Batchfile 0.18% YARA 5.97%
antivirus hashlib pyqt5 python security tools scanner protect windows pefile simhash yara

pyas's Introduction

PYAS (Python Antivirus Software)

PYAS

Readme Language

繁體中文 : https://github.com/87owo/PYAS/blob/main/README_zh_TW.md

简体中文 : https://github.com/87owo/PYAS/blob/main/README_zh_CN.md

Requirements

psutil==5.9.5
pefile==2023.2.7
requests==2.31.0
pyperclip==1.8.2
pywin32==306
PyQt5==5.15.9

File Information

PYAS/
├── Driver/
│   ├── PYAS_Driver.sys -------> Extension Kit (self protection driver for pyas by 0sha0)
│   └── ...
│
├── Exten/
│   ├── bitdefender/ ----------> Extension Kit (bitdefender windows console scan engine)
│   ├── pe_sieve/ -------------> Extension Kit (pe sieve windows console memory engine)
│   └── ...
│
├── Model/
│   ├── PYAS_Model.json -------> Virus Database (the database must be in the specified dir)
│   └── ...
│
├── Rules/
│   ├── Yara_Rules.yar ---------> Yara Rules (yara rules in plain text format)
│   ├── Yara_Rules.yrc ---------> Compile Rules (yara rules in compiled format)
│   └── ...
│
├── PYAS.* ---------------------> Main PYAS Program (including animation, scan, protect functions, ...)
├── PYAS_Engine.py -------------> Conversion Database (used to transform profiles and forecast data)
├── PYAS_Suffixes.py -----------> File Suffixes (including scanned file suffixes and common suffixes)
├── PYAS_Extension.py ----------> Extension Kit (extension scanners developed by other developers)
├── PYAS_Interface.py ----------> PyQt5 Interface (use QT designer, must be matched with the main program)
├── PYAS_Resource.py -----------> PyQt5 Resource (status pictures, icon packages, button icons, ...)
├── PYAS_Language.py -----------> Translate Dict (Traditional Chinese, Simplified Chinese, English)
├── PYAS_Version.py ------------> Pyinstaller (file information, version information, original name, ...)
└── ...

Official Website

https://pyantivirus.wixsite.com/pyas

https://github.com/87owo/PYAS

PYAS Driver

https://github.com/0sha0/PYAS_Protection

MIT license

https://github.com/87owo/PYAS/blob/main/LICENSE.md

Support System

Windows 8.1, 10, 11 (64-bit), Ram 500MB, Rom 200MB or higher

Other systems may experience software malfunctions or crash

Special Thanks

Wix, 0sha0, mtkiao129, AV-T Team of LisectGroup

Copyright© 2020~2024 PYAS Security By 87owo

pyas's People

Contributors

87owo avatar mtkiao avatar pyas-security avatar zackzheng1121 avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar  avatar  avatar

pyas's Issues

Undo a whitelist?

I whitelisted a program for testing purpose. How do i undo that whitelist? There doesn't seem to be document.

进程保护绕过

AppData 字样加到主程序可执行文件名下就能绕过了,如 HELLO_AppData.EXE (注意大小写)

PYAS/PYAS.py

Lines 1222 to 1223 in 3e0749a

elif ":/Windows" in file or ":/Program" in file or "AppData" in file:
continue

VirtualBox_Test_PYAS_03_07_2023_21_46_03

▲ 能阻止 HELLO.EXE 但是会放行 HELLO_AppData.EXE 执行,文件内容一致。

(碎碎念:这东西在 VirtualBox 下运行经常把 Windows 干到重启,你有什么头绪吗)

白名单请求

英文:
I beg you to learn tinder, add a white list, and black list, it, or always false positive, I am speechless, tinder did not join in, you directly clean my memory to kill: [2023/05/20 08:05:40] successfully intercept the virus: memreduct.exe laugh to death, the official website download

中文:
我求你学学火绒,加个白名单,和黑名单,吧,不然老是误报,我都无语了,火绒都没凑热闹,你直接把我内存清理给杀了:[2023/05/20 08:05:40] 成功拦截病毒: memreduct.exe笑死,官网下载的

The Windows search service is interfered.

Does PYAS interfere with the Windows Search process? After enabling PYAS to start automatically on boot, I found that my search function was not working. Even after disabling PYAS, the Windows Search service remained unavailable.
I tried various troubleshooting methods to enable my Windows search service, but it only became functional after I uninstalled PYAS.

Program Version: 3.0.1.
Computer Version: Windows 10 X64.

Thank you for your help!

被360,ESET等拦截

被360拦截 属于 正常情况 吗 (ESET弹出了正在分析,然后检查后提示文件安全,卡巴斯基没有拦截)

image

Usage Report

There is obvious lag in the running of the program. When virus scanning is in progress, switching to other options causes the screen to display very slowly.

隔离区请求

求求你把该做的都做了,把隔离区加上吧,误杀了东西谁负责

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.