1. Run anti-virus and anti-spyware programs on your computer. Follow your software manufacturer's instructions for performing a full system scan. For best results, perform these scans in Windows Safe Mode (Resource 1). Reboot the computer when complete.
2. Look for errors or instability in your system. If your computer runs more smoothly after the virus/spyware scans, you likely eradicated the processes that were hijacking rundll32.exe.

3. Check for the legitimate rundll32.exe file. If you continue to have problems, you must pinpoint which programs are masquerading as rundll32. The real rundll32.exe file is located in C:\Windows\System32\rundll32.exe. Locate this file by performing a search. Click the 'Start' button, then 'Search.' Type 'rundll32' in the search box. In Windows Vista and 7, type 'rundll32' in the run/search box in the 'Start' menu.
4. Copy---but don't move---the legitimate rundll32.exe file from the System32 folder to your desktop. Rename it rundll32COPY.exe.
5. Delete all other rundll32.exe files that were returned in your search. Do not delete the version located in C:\Windows\System32. Empty your Recycle Bin after you have deleted the files.
6. Reboot your computer. In most cases, you should have deleted all malicious versions of rundll32.exe. If you left the legitimate file intact, Windows should function normally. If you deleted it by mistake, copy the backup version from your desktop back into the System32 folder and rename it rundll32.exe.