sounds like to me she doesn't have admin privladges, due to the virus corrupting her account demoting her to non admin. I would back up all her stuff and formatt the machine. save youself alot of time.
btw: there is also one other thing you can try before formatting, using a boot cd ( live cd...