falsches DHL Mail geöffnet und Link gefolgt - Trojaner?

 Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 06-05-2015 01
Ran by Medion at 2015-05-11 13:34:26 Run:1
Running from C:\Users\Medion\Desktop
Loaded Profiles: Medion & Rebecca & Patrick (Available profiles: Medion & Rebecca & Patrick)
Boot Mode: Normal

==============================================

Content of fixlist:
*****************
HKU\S-1-5-21-492691455-1038603225-177290196-1002\...\MountPoints2: {e73c601d-b428-11e0-90cd-806e6f6e6963} - E:\start.exe
GroupPolicyUsers\S-1-5-21-492691455-1038603225-177290196-1002\User: Group Policy restriction detected <======= ATTENTION
GroupPolicyUsers\S-1-5-21-492691455-1038603225-177290196-1001\User: Group Policy restriction detected <======= ATTENTION
HKU\S-1-5-21-492691455-1038603225-177290196-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
Toolbar: HKU\S-1-5-21-492691455-1038603225-177290196-1000 -> No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
Toolbar: HKU\S-1-5-21-492691455-1038603225-177290196-1001 -> No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} -  No File
Toolbar: HKU\S-1-5-21-492691455-1038603225-177290196-1002 -> No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} -  No File
FF Extension: Avira Browser Safety - C:\Users\Medion\AppData\Roaming\Mozilla\Firefox\Profiles\7tlj2xab.default\Extensions\abs@avira.com [2015-04-29]
FF Extension: Ask Toolbar - C:\Users\Medion\AppData\Roaming\Mozilla\Firefox\Profiles\7tlj2xab.default\Extensions\toolbar_FF3-V7@apn.ask.com.xpi [2013-07-26]
CustomCLSID: HKU\S-1-5-21-492691455-1038603225-177290196-1000_Classes\CLSID\{7F902AD4-FC6A-4B2F-8B8D-B6DD4E329B76}\InprocServer32 -> C:\Users\Medion\AppData\Local\ASKTOO~1\DOWNLO~1\AVIRAW~1.DLL No File
CustomCLSID: HKU\S-1-5-21-492691455-1038603225-177290196-1000_Classes\CLSID\{DF846759-BE0F-4451-B9D3-4BEFF765A1FD}\InprocServer32 -> C:\Users\Medion\AppData\Local\ASKTOO~1\DOWNLO~1\AVIRAT~1.DLL No File
EmptyTemp:
         
*****************

"HKU\S-1-5-21-492691455-1038603225-177290196-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{e73c601d-b428-11e0-90cd-806e6f6e6963}" => Key deleted successfully.
HKCR\CLSID\{e73c601d-b428-11e0-90cd-806e6f6e6963} => Key not found. 
C:\Windows\system32\GroupPolicyUsers\S-1-5-21-492691455-1038603225-177290196-1002\User => Moved successfully.
C:\Windows\system32\GroupPolicy\GPT.ini => Moved successfully.
C:\Windows\system32\GroupPolicyUsers\S-1-5-21-492691455-1038603225-177290196-1001\User => Moved successfully.
"HKU\S-1-5-21-492691455-1038603225-177290196-1000\SOFTWARE\Policies\Microsoft\Internet Explorer" => Key deleted successfully.
HKU\S-1-5-21-492691455-1038603225-177290196-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{21FA44EF-376D-4D53-9B0F-8A89D3229068} => value deleted successfully.
HKCR\CLSID\{21FA44EF-376D-4D53-9B0F-8A89D3229068} => Key not found. 
HKU\S-1-5-21-492691455-1038603225-177290196-1001\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D4027C7F-154A-4066-A1AD-4243D8127440} => value deleted successfully.
HKCR\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440} => Key not found. 
HKU\S-1-5-21-492691455-1038603225-177290196-1002\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D4027C7F-154A-4066-A1AD-4243D8127440} => value deleted successfully.
HKCR\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440} => Key not found. 
C:\Users\Medion\AppData\Roaming\Mozilla\Firefox\Profiles\7tlj2xab.default\Extensions\abs@avira.com => Moved successfully.
C:\Users\Medion\AppData\Roaming\Mozilla\Firefox\Profiles\7tlj2xab.default\Extensions\toolbar_FF3-V7@apn.ask.com.xpi => Moved successfully.
"HKU\S-1-5-21-492691455-1038603225-177290196-1000_Classes\CLSID\{7F902AD4-FC6A-4B2F-8B8D-B6DD4E329B76}" => Key deleted successfully.
"HKU\S-1-5-21-492691455-1038603225-177290196-1000_Classes\CLSID\{DF846759-BE0F-4451-B9D3-4BEFF765A1FD}" => Key deleted successfully.
EmptyTemp: => Removed 588.4 MB temporary data.


The system needed a reboot. 

==== End of Fixlog 13:36:36 ====