IE Defender/Files Secure/MalwareBell/IE Antivirus Codec has been update, it installs a file with semi-random filename composed from fragment words: g, g2, G, tool, tbl, tool~1
Possible filenames are: gtool.dll, gtbl.dll, gtool~1.dll, g2tool.dll, g2tbl.dll, g2tool~1.dll, Gtool.dll, Gtbl.dll, Gtool~1.dll.
It displays alert messages with popups that download IE Antivirus:
Use SmitfraudFix to remove the infection.