Sorry, my bad :wink:

Execute Avenger with this script

Files to delete:
c:\users\HEELO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\okyy.vbs
c:\users\HEELO\AppData\Roaming\okyy.vbs

Registry values to delete:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|okyy