IE Defender/Files Secure/MalwareBell/IE Antivirus Codec has been update, it installs files with semi-random filenames, composed from fragment words: sl, ps, dig, a32, onyx, arox
Files could look like: slarox.dll ...
and displays alert messages with popups:
Use SmitfraudFix to remove the infection.