Check the phone number she is dialling... a Hijacker or dialler virus could change it or even the proxy server settings...