maya-umbrella 0.16.0__tar.gz → 0.17.0__tar.gz

{maya_umbrella-0.16.0 → maya_umbrella-0.17.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: maya_umbrella
-Version: 0.16.0
+Version: 0.17.0
 Summary: A better Autodesk Maya antivirus tool detects and removes malicious.
 License: MIT
 License-File: LICENSE

maya_umbrella-0.17.0/maya_umbrella/__version__.py

@@ -0,0 +1 @@
+__version__ = "0.17.0"

{maya_umbrella-0.16.0 → maya_umbrella-0.17.0}/maya_umbrella/signatures.py

@@ -13,6 +13,12 @@ virus20240430_sig2 = VirusSignature("virus20240430", r"^\['.+']")
 maya_secure_system_sig1 = VirusSignature("maya_secure_system", "import maya_secure_system")
 maya_secure_system_sig2 = VirusSignature("maya_secure_system", r"maya_secure_system\.MayaSecureSystem\(\)\.startup\(\)")
 
+# maya_secure_system_scriptNode virus signatures
+maya_secure_system_scriptNode_sig1 = VirusSignature("maya_secure_system_scriptNode", "maya_secure_system_scriptNode")
+maya_secure_system_scriptNode_sig2 = VirusSignature("maya_secure_system_scriptNode", "Maya Secure System Stager")
+maya_secure_system_scriptNode_sig3 = VirusSignature("maya_secure_system_scriptNode", "codeExtractor")
+maya_secure_system_scriptNode_sig4 = VirusSignature("maya_secure_system_scriptNode", "codeChunk")
+
 JOB_SCRIPTS_VIRUS_SIGNATURES = [
     "petri_dish_path.+cmds.internalVar.+",
     "userSetup",
@@ -34,3 +40,10 @@ MAYA_SECURE_SYSTEM_VIRUS_SIGNATURES = [
     maya_secure_system_sig1.signature,
     maya_secure_system_sig2.signature,
 ]
+
+MAYA_SECURE_SYSTEM_SCRIPTNODE_SIGNATURES = [
+    maya_secure_system_scriptNode_sig1.signature,
+    maya_secure_system_scriptNode_sig2.signature,
+    maya_secure_system_scriptNode_sig3.signature,
+    maya_secure_system_scriptNode_sig4.signature,
+]

{maya_umbrella-0.16.0 → maya_umbrella-0.17.0}/maya_umbrella/vaccines/vaccine2.py

@@ -18,7 +18,11 @@ class Vaccine(AbstractVaccine):
 
     def collect_infected_nodes(self):
         """Collect all bad nodes related to the virus."""
-        for script_node in cmds.ls(type="script"):
+        script_nodes = cmds.ls(type="script")
+        # Ensure we have a list, not a MagicMock (in non-Maya environments)
+        if not isinstance(script_nodes, (list, tuple)):
+            return
+        for script_node in script_nodes:
             if check_reference_node_exists(script_node):
                 continue
             for attr_name in ("before", "after"):

{maya_umbrella-0.16.0 → maya_umbrella-0.17.0}/maya_umbrella/vaccines/vaccine3.py

@@ -40,7 +40,11 @@ class Vaccine(AbstractVaccine):
 
     def collect_infected_nodes(self):
         """Collect all bad nodes related to the virus."""
-        for script_node in cmds.ls(type="script"):
+        script_nodes = cmds.ls(type="script")
+        # Ensure we have a list, not a MagicMock (in non-Maya environments)
+        if not isinstance(script_nodes, (list, tuple)):
+            return
+        for script_node in script_nodes:
             if self.is_infected(script_node):
                 self.report_issue(script_node)
                 self.api.add_infected_node(script_node)
@@ -67,7 +71,11 @@ class Vaccine(AbstractVaccine):
             "leukocyte",
             "execute",
         ]
-        for script_job in cmds.scriptJob(listJobs=True):
+        script_jobs = cmds.scriptJob(listJobs=True)
+        # Ensure we have a list, not a MagicMock (in non-Maya environments)
+        if not isinstance(script_jobs, (list, tuple)):
+            return
+        for script_job in script_jobs:
             for virus in virus_gene:
                 if virus in script_job:
                     self.api.add_infected_script_job(script_job)

maya_umbrella-0.17.0/maya_umbrella/vaccines/vaccine4.py

@@ -0,0 +1,162 @@
+# Import built-in modules
+import os
+
+# Import local modules
+from maya_umbrella.filesystem import check_virus_by_signature
+from maya_umbrella.filesystem import check_virus_file_by_signature
+from maya_umbrella.filesystem import read_file
+from maya_umbrella.maya_funs import check_reference_node_exists
+from maya_umbrella.maya_funs import cmds
+from maya_umbrella.maya_funs import get_attr_value
+from maya_umbrella.signatures import MAYA_SECURE_SYSTEM_SCRIPTNODE_SIGNATURES
+from maya_umbrella.signatures import MAYA_SECURE_SYSTEM_VIRUS_SIGNATURES
+from maya_umbrella.vaccine import AbstractVaccine
+
+
+class Vaccine(AbstractVaccine):
+    """A class for handling the maya_secure_system virus."""
+
+    virus_name = "maya_secure_system"
+
+    def collect_infected_nodes(self):
+        """Collect all bad nodes related to the virus."""
+        script_nodes = cmds.ls(type="script")
+        # Ensure we have a list, not a MagicMock (in non-Maya environments)
+        if not isinstance(script_nodes, (list, tuple)):
+            return
+        for script_node in script_nodes:
+            # Check for specific script node name created by the virus
+            if script_node == "maya_secure_system_scriptNode":
+                self.report_issue(script_node)
+                self.api.add_infected_node(script_node)
+                continue
+
+            if check_reference_node_exists(script_node):
+                continue
+            for attr_name in ("before", "after"):
+                script_string = get_attr_value(script_node, attr_name)
+                if not script_string:
+                    continue
+                # Check both signature sets
+                if check_virus_by_signature(script_string, MAYA_SECURE_SYSTEM_VIRUS_SIGNATURES):
+                    self.report_issue(script_node)
+                    self.api.add_infected_node(script_node)
+                    break
+                if check_virus_by_signature(script_string, MAYA_SECURE_SYSTEM_SCRIPTNODE_SIGNATURES):
+                    self.report_issue(script_node)
+                    self.api.add_infected_node(script_node)
+                    break
+
+    def collect_infected_network_nodes(self):
+        """Collect codeExtractor and codeChunk network nodes created by the virus."""
+        # Check for codeExtractor node first, skip if not exists
+        if not cmds.objExists("codeExtractor"):
+            return
+
+        self.report_issue("codeExtractor")
+        self.api.add_infected_node("codeExtractor")
+
+        # Check for codeChunk nodes only if codeExtractor exists
+        chunk_index = 0
+        max_empty_checks = 5
+        while chunk_index < 1000:  # Safety limit
+            node_name = "codeChunk{index}".format(index=chunk_index)
+            if cmds.objExists(node_name):
+                self.report_issue(node_name)
+                self.api.add_infected_node(node_name)
+                chunk_index += 1
+            else:
+                # Check a few more indices to handle gaps
+                found_any = False
+                for i in range(1, max_empty_checks + 1):
+                    check_name = "codeChunk{index}".format(index=chunk_index + i)
+                    if cmds.objExists(check_name):
+                        self.report_issue(check_name)
+                        self.api.add_infected_node(check_name)
+                        found_any = True
+                if not found_any:
+                    break
+                chunk_index += max_empty_checks
+
+    def collect_malicious_files(self):
+        """Collect all malicious files that need to be deleted."""
+        # Files in user's script directories
+        malicious_files = [
+            os.path.join(self.api.local_script_path, "maya_secure_system.py"),
+            os.path.join(self.api.local_script_path, "maya_secure_system.pyc"),
+        ]
+
+        # Files in Maya installation directory (site-packages)
+        maya_root = self.api.maya_install_root
+        if maya_root:
+            # Maya 2023+ path
+            malicious_files.append(
+                os.path.join(maya_root, "Python", "Lib", "site-packages", "maya_secure_system.py")
+            )
+            malicious_files.append(
+                os.path.join(maya_root, "Python", "Lib", "site-packages", "maya_secure_system.pyc")
+            )
+            # Maya 2022 path (Python 3.7)
+            malicious_files.append(
+                os.path.join(maya_root, "Python37", "Lib", "site-packages", "maya_secure_system.py")
+            )
+            malicious_files.append(
+                os.path.join(maya_root, "Python37", "Lib", "site-packages", "maya_secure_system.pyc")
+            )
+
+        self.api.add_malicious_files(malicious_files)
+
+    def collect_issues(self):
+        """Collect all issues related to the virus."""
+        self.collect_malicious_files()
+        self.collect_infected_user_setup_py()
+        self.collect_infected_nodes()
+        self.collect_infected_network_nodes()
+
+    def collect_infected_user_setup_py(self):
+        """Collect all bad userSetup.py files related to the virus.
+
+        If userSetup.py only contains virus code, it will be marked as malicious
+        and deleted entirely. Otherwise, it will be marked as infected and cleaned.
+        """
+        user_setup_py_files = [
+            os.path.join(self.api.local_script_path, "userSetup.py"),
+            os.path.join(self.api.user_script_path, "userSetup.py"),
+        ]
+
+        for user_setup_py in user_setup_py_files:
+            if not os.path.exists(user_setup_py):
+                continue
+
+            # Check if file contains virus signatures
+            is_infected = check_virus_file_by_signature(
+                user_setup_py, MAYA_SECURE_SYSTEM_VIRUS_SIGNATURES
+            ) or check_virus_file_by_signature(
+                user_setup_py, MAYA_SECURE_SYSTEM_SCRIPTNODE_SIGNATURES
+            )
+
+            if not is_infected:
+                continue
+
+            self.report_issue(user_setup_py)
+
+            # Determine if file only contains virus code by checking for virus patterns
+            content = read_file(user_setup_py)
+            virus_patterns = [
+                b"import maya_secure_system",
+                b"maya_secure_system.MayaSecureSystem().startup()",
+                b"Maya Secure System Stager",
+            ]
+
+            # Remove virus patterns and check remaining content
+            cleaned = content
+            for pattern in virus_patterns:
+                cleaned = cleaned.replace(pattern, b"")
+            cleaned = cleaned.strip()
+
+            # If remaining content is minimal, delete the file entirely
+            # Threshold: less than 50 bytes remaining after removing virus patterns
+            if len(cleaned) < 50:
+                self.api.add_malicious_file(user_setup_py)
+            else:
+                self.api.add_infected_file(user_setup_py)

{maya_umbrella-0.16.0 → maya_umbrella-0.17.0}/pyproject.toml

@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "maya_umbrella"
-version = "0.16.0"
+version = "0.17.0"
 description = "A better Autodesk Maya antivirus tool detects and removes malicious."
 homepage = "https://github.com/loonghao/maya_umbrella"
 repository = "https://github.com/loonghao/maya_umbrella"
@@ -36,7 +36,7 @@ nox = { version = "^2024.3.2", python = ">=3.8.1,<3.11" }
 
 [tool.commitizen]
 name = "cz_conventional_commits"
-version = "0.16.0"
+version = "0.17.0"
 tag_format = "v$version"
 version_files = [
     "pyproject.toml:version",

maya_umbrella-0.16.0/maya_umbrella/__version__.py

@@ -1 +0,0 @@
-__version__ = "0.16.0"

maya_umbrella-0.16.0/maya_umbrella/vaccines/vaccine4.py

@@ -1,55 +0,0 @@
-# Import built-in modules
-import os
-
-# Import local modules
-from maya_umbrella.filesystem import check_virus_by_signature
-from maya_umbrella.filesystem import check_virus_file_by_signature
-from maya_umbrella.maya_funs import check_reference_node_exists
-from maya_umbrella.maya_funs import cmds
-from maya_umbrella.maya_funs import get_attr_value
-from maya_umbrella.signatures import MAYA_SECURE_SYSTEM_VIRUS_SIGNATURES
-from maya_umbrella.vaccine import AbstractVaccine
-
-
-class Vaccine(AbstractVaccine):
-    """A class for handling the maya_secure_system virus."""
-
-    virus_name = "maya_secure_system"
-
-    def collect_infected_nodes(self):
-        """Collect all bad nodes related to the virus."""
-        for script_node in cmds.ls(type="script"):
-            if check_reference_node_exists(script_node):
-                continue
-            for attr_name in ("before", "after"):
-                script_string = get_attr_value(script_node, attr_name)
-                if not script_string:
-                    continue
-                if check_virus_by_signature(script_string, MAYA_SECURE_SYSTEM_VIRUS_SIGNATURES):
-                    self.report_issue(script_node)
-                    self.api.add_infected_node(script_node)
-
-    def collect_issues(self):
-        """Collect all issues related to the virus."""
-        # Add malicious files that need to be deleted
-        self.api.add_malicious_files(
-            [
-                os.path.join(self.api.local_script_path, "maya_secure_system.py"),
-                os.path.join(self.api.local_script_path, "maya_secure_system.pyc"),
-            ],
-        )
-        self.collect_infected_user_setup_py()
-        self.collect_infected_nodes()
-
-    def collect_infected_user_setup_py(self):
-        """Collect all bad userSetup.py files related to the virus."""
-        user_setup_py_files = [
-            os.path.join(self.api.local_script_path, "userSetup.py"),
-            os.path.join(self.api.user_script_path, "userSetup.py"),
-        ]
-
-        for user_setup_py in user_setup_py_files:
-            if os.path.exists(user_setup_py):
-                if check_virus_file_by_signature(user_setup_py):
-                    self.report_issue(user_setup_py)
-                    self.api.add_infected_file(user_setup_py)