While my mother was trying to sign into her bank account, the download bar in Chrome filled up with hundreds of downloads. Her computer then froze so she restarted it and it seemed to work fine, and only 2 of the hundreds of files actually got downloaded. I looked back at the her history in Chrome and all she had open was her Gmail and Yahoo email accounts, the bank's website, and this IP address http://220.127.116.11 which she didn't open. I wasn't there when the downloads happened, but she says the page was one of those "Warning, you have a virus!" ones. I know she didn't click anything on it yet somehow the downloads all started by themselves and when she was trying to sign in to her bank account.
I also looked at the downloads in Chrome and all of those links look like this, just with different numbers and letters: blob:http://18.104.22.168/e0d7ab8b-b68a-4092-895a-15c69131bb88
I made sure she didn't click either of the two files that got downloaded and deleted them immediately.
I did a whois lookup and the IP address comes from California, but her bank is a local one in Arizona.
What can I do to secure her computer? How can I prevent fishy IP addresses like this from downloading a bunch of crap on her computer?