I reloaded windows and copied my bookmarks back to firefox. I also copied them to internet explorer from firefox bookmarks. I then ran virsus check for rootkits and it found a rootkit in the internet explorer and I removed it. Funny thing was that the bookmark did not show up in firefox and also zonealarm did not show it there. I went back and reloaded the bookmarks form firefox back to internet explorer and it was there again and zonealarm found it. I then again removed the bad favorite from internet explorer and copied them to firefox . This got rid of the rootkit for both. What I got form this is that zonealarm is not looking at firefox bookmarks at all or it is not finding rootkits that are in the bookmarks.