1. The DSO exploit is simply a bug in spybot. It's a false positive
2. Run HijackThis! and look for anything out of place
3. Rundll32.exe is probably not the culprit here. All sorts of programs use it to launch other crap. So, it's not necessarily Rundll32.exe that is infected.

Cheers,
cgkanchi