So, I open up Task Manager....






And all that is running. If i try to end it, it says "access denied". I am the computer admin.
There are no noticeable problems with my computer.
Anyone care to interpret?

It just means a lot of programs are using .dll files...

Click show process from all users if you want to kill it anyway.

UAC reasons.

Also looks like a lot of those process are not running under his account.
That seems a bit suspicious.

If it were programs being run under his account, won't rundll be under his account, and not some random account.

Also try to check if the path is right.
If it's not in the right folder(Windows/System32 or something) then it's probably a virus.

You could do a scan if you like, but viruses would more likely be run under <Your Username> usernames, not blank or System. It's perfectly normal for there to be a bunch of blank username or system username proccesses.

Yes, I know that normally there are a lot of system process, but not all rundll.

Why would an application use rundll as system?

If the virus wanted to protect it self, running as system would be a good idea.

Anyway, there are a good amount of viruses that take up names such rundll32.exe,crss.exe and others to hide.

So it might not be the real rundll.

So he has several different viruses all using the same disguise....
Whatever, I still say it's entirely possible nothing's wrong, but I'd scan just in case.
If you don't have anti-virus then you can use this to scan...

Computer scans itself every night at 3. Nothing ever comes up.

Then ignore it...

http://technet.microsoft.com/en-us/sysi ... 96645.aspx If you want to know abit more about what each is doing..

Just delete runddl32.exe

Its not a system critical process.

And afterwards we can just have him set fire to his motherboard. You know, maximum idiocy.

Process Explorer(what WJ linked to) can show what rundll32.dll is loading, and show what app launched the program.

Should help in identifying if it is a rootkit or glitch.

It is a very useful app.