This sounds like just general computer ignorance and fear which is pretty common among people who aren't terribly informed but have been given security training and over-extend any (sometimes dubious) lessons from that.
Or her work has software on her computer and she's worried they'd catch her doing that and get in trouble. Problem is many such people just aren't interested in the 10 minutes it takes to become educated by a friend on that and will shrug off attempts at explaining it because computers are scary.