There is a 0% chance that you can recover any files from her PC without paying - the people that code these viruses do know their stuff and crypto.

Even if you pay, there is a chance that you won't get any decryption key. After all, customer service is not exactly what these guys are up to, as most of their customers don't want to deal with them in the future again.

You help her best by getting her a backup software, reformatting the PC and showing her how to do backups in the future. If you want to, you can try to pay the criminals instead, though I have my doubts that it'll work. Once Bitcoin ATMs become more widespread, these kinds of "data kidnapping" will also spread out, they already accept other digital payments like paysafecard for quite some time now.