IE Defender/Files Secure/MalwareBell/IE Antivirus/Total Secure 2009 Codec has been update, it installs a file with semi-random filename composed from a dictionary:
sd, gj, et, op, cs, li
Possible filenames are:
sdetcs.dll, sdetli.dll, sdopcs.dll, sdopli.dll, gjetcs.dll, gjetli.dll, gjopcs.dll, gjopli.dll
It displays alert messages with popups that download Total Secure 2009:
It also drops Internet Shortcut on the desktop, Favorites, Start Menu: Free Porn.url , Free MP3 Search.url, Search Online.url and VIP Casino.url
Use SmitfraudFix to remove the infection.