With daylight savings time ending late this year, I wouldn't be surprised it the clock was off an hour. However, her time would still be off. I would imagine that her log in time should be within 5 minutes of the turning off the alarm.
Is the time clock hooked into her PC? I suspect she is changing the time on her PC before logging in on the time clock, clocking in and then changing the time back if that's possible.
One thing you can do, if you have Windows XP is pull up the Event Viewer and check her login times.