dj, ugs, ifv, ak, ot, er
Possible filenames are:
djifvot.dll, djifver.dll, djakot.dll, djaker.dll, ugsifvot.dll, ugsifver.dll, ugsakot.dll, ugsaker.dll
It displays alert messages with popups that download WinDefender 2009:

It also drops Internet Shortcut on the desktop, Favorites, Start Menu: Cheap Pharmacy Online.url , Search Online.url, SMS Trap.url and VIP Casino.url
Use SmitfraudFix to remove the infection.