IE Defender/Files Secure/MalwareBell/IE Antivirus Codec has been update, it still use the same dictionary to compose the filename but it displays a new message box with the registered user name (pixelized on the screenshot):
Use SmitfraudFix to remove the infection.