There is a huge difference between running a scan in normal mode, and safe mode with networking.
I'm not sure what her regular security program is, but malwarebytes is a higher quality scanner than OneCare. SuperAntiSpyware is also another good scanner.
www.superantispyware.com/
But because there are a lot less services and programs running in safe mode, there is a lot less chance any infection will be running. You want to boot into safe mode with networking, because you always want to update the scanner's database before running the scan.