It is behaving as expected, it hasn’t internally DDOSed itself since avast labeled rundll32 as malware, equally that file hasn’t changed, after what you said I think perhaps rundll had something to do with it