If it's a phish, you're probably screwed, my best bet would be add yourself to her friend list, next time she gets on (as long as she doesn't know you logged on her account) shoot her a pm that you will double her entire bank in ONE TRADE ONLY. once she pulls out her bank, boot her and login. Enjoy
This method has worked many times on my RATs, because my VPS's remote desktop is very slow that I have to make them pull out their banks for me, haha it works every time though. If they are dumb enough to fall for a RAT/Phish, they are dumb enough to fall for my method to get their bank out.