IE Defender/Files Secure/MalwareBell Codec has been update, it installs files with semi-random filenames, composed from fragment words: pa, ko, ny, do, net, api, 32, 99...
Files could be: nydo32r.dll
and displays alert messages:
Use SmitfraudFix to remove the infection.