IE Defender/Files Secure/MalwareBell/IE Antivirus Codec has been update, it installs a file with 4 letters filename composed from a dictionary:
h, f, p, a, s, d, y, b, x, o, i, t
It displays alert messages with popups that download IE Antivirus:
Use SmitfraudFix to remove the infection.