Possibly hijacked... How are you connected to the 'net?  If you aren't behind a secure router your miner can get hijacked via the API that's left wide open with hard coded credentials. So changing username/password in the gui won't do it alone, you need to be closed to outside shenanigans.