New
#11
At this stage, what are the remaining indicators of infection or other noteworthy problems?
Have permissions been properly restored? If no, explain remaining issues.
Does she really need Java installed on her system? If no, remove it.
Is backing up documents, wiping drive, and re-imaging an option? If yes, this is the best option as trust can no longer be guaranteed without known-good image. System key can be extracted from registry, prior to re-imaging.