@realbminer not saying this miner is a Trojan horse, but it was working ok for many hours then in the night suddenly it started using all my hash for miners using it "Bminer 5.4" to mine somewhere else with IP address amazon compute(i.e. hosted by amazon) and some other places there was no change on the console nor was there a disconnect from the miner just that all shares found where going else where and my pool address share rate went to zero for about 30-60 minutes though miners where mining for all systems using the miner.
That is miner was mining for someone else for 30-60 minutes(not fee mining), this could have been triggered remotely by you as the miner appears shady, you need to explain, also there maybe a back door author uses to access mining machines using windows RDP (I had to disable this as passwords no longer accepted on some systems for RDP sessions)

@realbminer needs to adress this question but you also need to show the logs showing this. This is your first post so as you can imagine one can question it as well