But unless your girlfriend is fairly savvy with computers, a bit unlikely.

If you're getting a number of alerts from the firewall, it sounds more like a general spyware/malware infestation than a concerted effort on someone else's part.