rundll32.exe

Read thru some of the google searches as there is alot of varied info on this.

W32.Miroot.Worm

Let me know if i can add more.

Can you get your friend to post a HiJackThis log?

http://www.isecurity.org.uk/misc/hijackthis.html

He took his computer into a Shop, he has learned that the worm(s) has spread throughout the operating system, and his computer hardrive must be wiped clean.