(responding to sixpack13's second post)
after an run of rkhunter --check on my box (with an open firefox) and
an
grep zaRwT.KiT /var/log/rkhunter/rkhunter.log
=>
[19:30:42] Checking for zaRwT.KiT Rootkit...
[19:30:43] zaRwT.KiT Rootkit [ Not found ]
same here.
thanks,
Bill.