She should just abandon that email now and move accounts from it to another email address. It is tainted for sure.
As much as I like Kronii, this is what she get for not having proper infosec. How hard is it to just use different Windows accounts, let alone having different browsers?