Sorry, my bad 
Execute Avenger with this script
Files to delete:
c:\users\HEELO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\okyy.vbs
c:\users\HEELO\AppData\Roaming\okyy.vbs
Registry values to delete:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|okyy