Rootkit verdacht unter win7 64bit ultimate

ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=9a0dc3c4fefc12458aa4cebd885ccc35
# end=init
# utc_time=2015-11-17 03:51:57
# local_time=2015-11-17 04:51:57 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# osver=6.1.7601 NT Service Pack 1
ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=9a0dc3c4fefc12458aa4cebd885ccc35
# end=init
# utc_time=2015-11-17 03:55:17
# local_time=2015-11-17 04:55:17 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# osver=6.1.7601 NT Service Pack 1
Update Init
Update Download
Update Finalize
Updated modules version: 26767
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=9a0dc3c4fefc12458aa4cebd885ccc35
# end=updated
# utc_time=2015-11-17 03:58:24
# local_time=2015-11-17 04:58:24 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# osver=6.1.7601 NT Service Pack 1
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=9a0dc3c4fefc12458aa4cebd885ccc35
# engine=26767
# end=finished
# remove_checked=true
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2015-11-17 05:15:51
# local_time=2015-11-17 06:15:51 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='Microsoft Security Essentials'
# compatibility_mode=5895 16777213 100 100 358971 70760945 0 0
# scanned=153309
# found=3
# cleaned=3
# scan_time=4646
sh=96B85214CD9E4FF85AC6144E7EF3DDF9E0F215E6 ft=1 fh=098a6735f96a550a vn="Win64/Thinknice.G evtl. unerwünschte Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\kkll.dll.vir"
sh=91DC006B84C4F51ADCADC1BB498E3376FC40130E ft=1 fh=c3b5952672b90e6f vn="Variante von Win64/Systweak.A evtl. unerwünschte Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Windows\SysNative\roboot64.exe.vir"
sh=A3033CF78950409A0D584C07360C1E5CBF540F25 ft=0 fh=0000000000000000 vn="PHP/Phishing.Agent.A Trojaner (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\PhishingFaceBook\login.php"