Noticed this today while looking at top. Can someone give me more info on the following.

1013 root 8 0 4444 4444 3996 S 0.0 0.9 0:00.15 httpd

This is the HTTP (Web) server. Try accessing http://localhost/ in your browser and see if it works.

Sorry should have added why did it run under root?

What kind of Web server do you have? If you have Apache, then you should look in your httpd.conf; the "User" and "Group" directives should specify what user to run as.

Do you see only this process ?
httpd has many processes. The master process runs as root usually (it binds port 80 etc) and the others as the user you mention
in the httpd.conf

e.g the output of top in my box
3104 root 16 0 77832 5068 3324 S 0.0 0.5 0:00.09 httpd
3105 nobody 15 0 77968 5372 3536 S 0.0 0.5 0:00.02 httpd
3106 nobody 15 0 77832 5216 3428 S 0.0 0.5 0:00.00 httpd

"top" doesn't mention it but if i run "ps" i get
root 3104 1 0 Aug12 ? 00:00:00 /usr/sbin/httpd -DSSL
nobody 3105 3104 0 Aug12 ? 00:00:00 /usr/sbin/httpd -DSSL
nobody 3106 3104 0 Aug12 ? 00:00:00 /usr/sbin/httpd -DSSL

As you see the parent pid of the process running as root is 1 (init) and the parent pid of the others is 3104 (the master process)
So, it may not be anything to worry about.