According to the author, "One day a process was eating up 90% of my CPU time, and its name was RUNDLL32. Arg, I hate that ! That little program is used to start COM objects and other nuisances. So then I patched RUNDLL32 to write its startup arguments to the event log. Once you've installed this tool, you'll see entries like the following in the Event Viewer Application Log: 'RUNDLL32.EXE: GetCommandLineW(): C:\WINNT\System32\RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp'".....(free).....