If this has not already been suggested.. sign out of ALL google accounts and then change the password. Changing the password alone might not boot the criminals out of the account.
Anyone know of where/who to contact at Google to make sure that everything is signed out?
I signed on with her password from my work computer to test the 2 step verification (it worked), but she keeps having an issue where she will get booted from her gmail & have to log in again (also happened to me when I was logged in as her).
I'm was thinking/hoping it might be a result of the hackers still trying to access with the old password, but if anyone has some knowledge about the aftermath of having your email hacked, that would be helpful.