bhoie, b_ie, iebho, surf, sf, s
Possible filenames are:
bhoiesurf.dll, bhoiesf.dll, bhoies.dll, b_iesurf.dll, b_iesf.dll, b_ies.dll, iebhosurf.dll, iebhosf.dll, iebhos.dll
It displays alert messages with popups that download Total Secure 2009:

Use SmitfraudFix to remove the infection.