Fix result of Farbar Recovery Scan Tool (x64) Version:25-07-2015
Ran by Donek at 2015-07-26 17:39:07 Run:1
Running from C:\Users\Donek\Desktop
Loaded Profiles: Donek (Available Profiles: Donek)
Boot Mode: Normal
==============================================

fixlist content:
*****************
CloseProcesses:
Startup: C:\Users\Donek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HELP_DECRYPT.PNG [2015-07-26] ()
InternetURL: C:\Users\Donek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HELP_DECRYPT.URL -> hxxp://6i3cb6owitcouepv.misterhoppo.com/19izt75
S3 NPF; system32\drivers\NPF.sys [X]
S4 nvvad_WaveExtensible; system32\drivers\nvvad64v.sys [X]
U3 kwddikog; \??\C:\Users\Donek\AppData\Local\Temp\kwddikog.sys [X]
C:\Users\Donek\Desktop\HELP_DECRYPT.URL
C:\Users\HELP_DECRYPT.URL
C:\Users\Public\HELP_DECRYPT.URL
C:\Users\Public\Documents\HELP_DECRYPT.URL
C:\Users\Donek\HELP_DECRYPT.URL
C:\Users\Donek\Documents\HELP_DECRYPT.URL
C:\Users\Donek\AppData\Roaming\HELP_DECRYPT.URL
C:\Users\Donek\AppData\HELP_DECRYPT.URL
C:\Users\Donek\AppData\Local\HELP_DECRYPT.URL
C:\ProgramData\HELP_DECRYPT.URL
EmptyTemp:
*****************

Processes closed successfully.
C:\Users\Donek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HELP_DECRYPT.PNG => moved successfully.
C:\Users\Donek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HELP_DECRYPT.URL => moved successfully.
NPF => service removed successfully
nvvad_WaveExtensible => service removed successfully
kwddikog => service not found.
C:\Users\Donek\Desktop\HELP_DECRYPT.URL => moved successfully.
C:\Users\HELP_DECRYPT.URL => moved successfully.
C:\Users\Public\HELP_DECRYPT.URL => moved successfully.
C:\Users\Public\Documents\HELP_DECRYPT.URL => moved successfully.
C:\Users\Donek\HELP_DECRYPT.URL => moved successfully.
C:\Users\Donek\Documents\HELP_DECRYPT.URL => moved successfully.
C:\Users\Donek\AppData\Roaming\HELP_DECRYPT.URL => moved successfully.
C:\Users\Donek\AppData\HELP_DECRYPT.URL => moved successfully.
C:\Users\Donek\AppData\Local\HELP_DECRYPT.URL => moved successfully.
C:\ProgramData\HELP_DECRYPT.URL => moved successfully.
EmptyTemp: => 709.8 MB temporary data Removed.


The system needed a reboot.. 

==== End of Fixlog 17:39:14 ====