IE Defender/Files Secure/MalwareBell/IE Antivirus/Total Secure 2009 Codec has been update, it installs a file with semi-random filename composed from a dictionary:
sup, sys, roi, safe, sf, s
Possible filenames are:
supsafe.dll, supsf.dll, sups.dll, syssafe.dll, syssf.dll, syss.dll, roisafe.dll, roisf.dll, rois.dll
It displays alert messages with popups that download Total Secure 2009:
Use SmitfraudFix to remove the infection.