Here is the answer you should give her:
Lets see....
1. You connected to the internet without enabling the Windows firewall.
2. You also have no antivirus software installed.
3. You did not update your version of windows...if you had, the patch to
prevent infection from the SASSER worm would have been on your system (it's
been available for months).
The reason that your machine is infected is because of all of the above.
You must educate yourself on basic computer security.
Here's what you need to do now, in this exact order...
1. Disconnect the computer from the internet...If you have broadband,
physically disconnect the cable from the back of the computer.
2. Turn the computer on. When the message appears, START>Run>'Shutdown -a"
3. Enable the windows firewall. It is very rudimentary as firewalls go,
but it is better than nothing.
4. Install a reputable Antivirus program. You will have to update it after
re-connecting to the internet, and thereafter you MUST KEEP IT UPDATED.
5. Connect to the internet.
6. Update your antivirus software.
7. Run a scan and let the antivirus software will clean your system.
8. Connect to Windows Update and download ALL Critical downloads. Install
them. You may have to repeat this more than once in order to download and
install all Critical Updates.
9. Never, ever connect to the internet, even briefly, without having met
all of the above requirements.
You not only allowed you machine to be infected, but you turned it into a
tool that is/was looking for other unprotected computers to connect. It has
been recently announced that an unprotected computer can be infected in as
little as 40 seconds.
I would venture a bet that your computer has more than just the latest
variant of the SASSER worm.
Once you begin to practice basic computer security, you can become a
responsible "netizen"
Bobby
