My dad had a very similar problem in XP and it was a virus.
That would be a good starting point. What kind of virus scanner does she have, and what kind of bootable recovery utility do they have.