It's been fixed, I restarted her pc in safe mode and found hundreds of adware/spyware/malware from Adaware