IE Defender/Files Secure/MalwareBell/IE Antivirus/Total Secure 2009 Codec has been update, it installs a file with semi-random filename composed from a dictionary:
gax, gm, gmd, ptr, stc, api
Possible filenames are:
gaxptr.dll, gaxstc.dll, gaxapi.dll, gmptr.dll, gmstc.dll, gmapi.dll, gmdptr.dll, gmdstc.dll, gmdapi.dll
It displays alert messages with popups that download Total Secure 2009:
Use SmitfraudFix to remove the infection.