Having her change her password was the right thing to do.
Unfortunately it sounds as if her email address was hijacked. Meaning, they have the address and spam people using it. For all appearances it's coming "from her". I had the same thing happen to a Yahoo email account. Unfortunately it's not that uncommon.
The other possibility is that the malware was not completely removed. However, being as that the mail client is web based and not installed on the system I would doubt this to be the cause of the spam under her name.
You could always boot into Safe Mode on her system though and run your scans again.