Question Mouse cursor moving on its own and trying to sign into Amazon ?

[Chad1123]

So recently my friend told me someone was moving the mouse cursor on his PC and trying to log into Amazon to buy stuff at around 3 am. (He was awake and saw this thankfully) This has happened on more than one occasion, usually late at night. I consider myself somewhat good with computers so I went over to his house and checked out his PC, doing virus/malware scans and looking for any weird programs. I couldn't find a thing, and the system was clean.

Then I thought about possibly it being Remote Desktop Connection or some similar program and could be someone living at his house or using his Wi-Fi to do this, but I'm not sure exactly how this person would be doing this or how to prove this. After I checked his PC I asked him if he wanted me to do a factory reset of Windows to fix it. He said he really wanted to find out who is doing it if possible. (he really didn't want to format his drive) So for the time being, I changed his lock screen and amazon password to a pretty long one and wrote it down for him. He doesn't really use his PC much so it's off mostly. Any ideas on what I could do to figure out what's going on?

Edit: Also this seems to happen pretty randomly, with the only thing in common is it being late at night.

 

[Secret-Squirrel]

Use Task Manager to check for any remote-control apps such as TeamViewer, AnyDesk, etc in the "Processes" -> "Apps" and "Startup" sections.

Look too in Settings -> Apps -> Installed Apps. Sort the entries by date and see if anything suspicious has been installed recently.

 

[Ralston18]

And Task Scheduler. Look for some action that may trigger other actions.

Also look in Reliability History/Monitor for entries regarding the 3 a.m. activity.

There may be othere entries as well.

 

[Chad1123]

Thanks for the suggestions, will give them a try and report back!