there could be something called spyware on her computer
possibly a dialer
i would advise her to download and install adaware from click here
to check that there isn't any unwanted connections
right click internet explorer/properties/connections
she should only have one connection there.
also make sure always dial my default connection is ticked