From 29f2242e02e6a2c018a245121589f08c47e8db92 Mon Sep 17 00:00:00 2001
From: Sam Sneed <163201376+sam-sneed@users.noreply.github.com>
Date: Thu, 25 Jul 2024 14:00:14 -0500
Subject: [PATCH] Update main.py

---
 main.py | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/main.py b/main.py
index 2553b39..1ef8428 100644
--- a/main.py
+++ b/main.py
@@ -23,7 +23,7 @@ import yara  # YARA for malware scanning
 critical_processes = [
     "System Idle Process", "System", "smss.exe", "csrss.exe", "wininit.exe",
     "services.exe", "lsass.exe", "svchost.exe", "winlogon.exe", "explorer.exe",
-    "dwm.exe", "ntoskrnl.exe", "hal.dll", "kernel32.dll", "user32.dll",
+    "dwm.exe", "ntoskrnl.exe", "hal.dll", "kernel32.dll", "user32.dll", "WmiPrvSE.exe"
     "kernel_task", "launchd", "loginwindow", "windowserver", "cfprefsd",
     "usernoted", "hidd", "mds", "kernel", "syslogd", "distnoted", "cloudd",
     "securityd", "init", "systemd", "kthreadd", "rcu_sched", "ksoftirqd/0",
@@ -221,6 +221,7 @@ def monitor_cpu_gpu_usage():
         
         if gpu_usage > 80 and cpu_percent < 10:
             print("Warning: High GPU usage detected with low CPU usage.")
+            kill_suspicious_processes()
         
         time.sleep(5)
 
@@ -273,7 +274,7 @@ def kill_suspicious_processes():
             for file_path in cmdline:
                 if os.path.isfile(file_path):
                     if scan_for_malware(file_path) and proc_name not in bypassed_processes and proc_name not in critical_processes:
-                        print(f"Terminating potentially malicious process {proc.info['name']}  (PID: {proc.info['pid']} NOW...")
+                        print(f"Terminating potentially malicious process {proc.info['name']}  (PID: {proc.info['pid']}) NOW...")
                         proc.terminate()
                         proc.wait()
         except (psutil.NoSuchProcess, psutil.AccessDenied) as e: