IE Defender/
Files Secure/
MalwareBell Codec has been update, it installs files with semi-random filenames, composed from fragment words: pa, ko, ny, do, net, api, 32, 99...
Files could be: nydo32r.dll
and displays alert messages:

Use
SmitfraudFix to remove the infection.