Given that it happens at exactly 12am, it is safe to assume that the machine itself is infected with some kind or rogue software. Kill all unknown processes in the machine. Get an updated virus/malware cleaner. Look at scheduled tasks on the machine. Did you check registry entries? Good luck