I dont think malware would phisically move the mouse.

I would also go with VNC and that line of software. My IT teacher in High school used to mess with everyone using VNC.

However if you have done the above requirements then run an activescan for me and post or pm me the logs.

http://www.pandasecurity.com/activescan/index/