I believe you said she had someone work on the computer(as in physically). If you can determine what program it is and find the software you can probably determine the date of the installation and compare that to the time this person worked on the computer. That should provide a little more evidence if you need it.