This question already has an answer here:
- How do I deal with a compromised server? 6 answers
My father in law just had a problem,He clicked on a link in an email (he was using gmail on the version 35.0.1916.114m of Chrome), and suddenly the computer sort of went black, and possibly something downloaded. He says he didn't input his password. Later on, a whole bunch of phishing emails got sent out to his address book.
One of the links were to
http:// 126.96.36.199 /d/?xo=fe&mucoto=Z3VsYWJpc3JhbmlAZ21haWwuY29t &id=c2hyYXlyYWdpQGdtYWlsLmNvbQ== &mesugomabeca=c2hyYXlyYWdp
He figured something was wrong and turned off the computer. When I turned it on, Windows 7 went into Safe Mode. I've since run a full scan using Microsoft Security Essentials - nothing shows up. There's nothing I found looking into Chrome history, or in the downloads folder. We've changed the important passwords and also moved to 2-factor authentication.
Any suggestions on what I should do next ?