IE Defender, Files Secure, Malware Bell, IE Antivirus, Total Secure 2009

IE Defender/Files Secure/MalwareBell/IE Antivirus/Total Secure 2009 Codec has been update, it installs a file with semi-random filename composed from a dictionary:
msys, lsyst, amd, ipl, 32, 64

Possible filenames are:
msysamd32.dll, msysamd64.dll, msysipl32.dll, msysipl64.dll, lsystamd32.dll, lsystamd64.dll, lsystipl32.dll, lsystipl64.dll

It displays alert messages with popups that download Total Secure 2009:


It also drops Internet Shortcut on the desktop, Favorites, Start Menu: Cheap Pharmacy Online.url , Search Online.url and VIP Casino.url

Use SmitfraudFix to remove the infection.