I suppose an enlightened opinion...would depend on how much reliability one can have in your ability remove a host of malware from a system.
Me...I just would have done a clean install, rather than try to do surgery and remove the harmful effects which may run throughout the O/S. I would not even have tried the AII forum, no matter how much I respect their efforts and abilities to recover from some disastrous situations.
You have 3 basic key XP functions (that you know of) which are not functioning properly...there may be more.
Have you taken a look in Event Viewer?
Are the latest XP critical updates installed? Can you access the MS website or Windows Update?
If the user doesn't employ any AV protection...how about a firewall?