IE Defender/Files Secure/MalwareBell/IE Antivirus/Total Secure 2009 Codec has been update, it installs a file with semi-random filename composed from a dictionary:
mi, mo, pin, pon, u, a
Possible filenames are:
mipinu.dll, mipina.dll, miponu.dll, mipona.dll, mopinu.dll, mopina.dll, moponu.dll, mopona.dll
It displays alert messages with popups that download Total Secure 2009:
It also drops Internet Shortcut on the desktop, Favorites, Start Menu: Cheap Pharmacy Online.url , Search Online.url and VIP Casino.url
Use SmitfraudFix to remove the infection.