Martin64 - Thank you. I won't rest until I do. ;)

Michelle69 - I changed my cpanel password (which changes the db password, too, it seems). I tried to change my FTP password, too, but I ended up having to create a new account in my cpanel FTP with a new password. I am in contact with the host to have them delete the old FTP accounts. I've never dealt much with this kind of stuff before. I never had to. Looks like I'll be brushing up on it now. :) Thanks for all the help.

What's really weird about all of this is that I feel violated now. Almost like my house has been robbed. That happened to me a few years back and I don't think I ever really got over that feeling. I dealt with the perps personally in a rather harsh and swift manner then and I was hoping to never feel that kind of anger again. I guess I'm destined to repeat myself no matter what I think the right thing is to do. And that sucks! I guess the old saying is true...the older you get, you more you get set in your ways.

I'm not sure what the following attachment means (whether is is real or a hacker's smokescreen) but this is what I found when I went to my other site this AM.

Before they say "no war" they should get the spelling of Iraq correct. I love 12-year-old hackers :)

LOL I thought the very same thing. Sounds like a smokescreen to me. This should make them easier to trace.

Irak is how Iraq is spelt in many countries. In Germany for one.

yeah it seems totally wrong, my old host got hacked, they totally defaced the site but left the forums alone and we was all he hosted, the only thing that upsets me now is that we've got this racist dude who won't leave the forums alone even tho's he's had ip ban after ip ban and never gets his account authorised, wish you luck tracing em down.

[edit]did you check for the url's owner on whois.org.uk[/edit]

Contact the ass's ISP and get his service cut.

on the map its spelled "Iraq" you guys are just pronouncing it like it reads, but its not the proper way to spell it.

Was this 2nd one after you changed your password? Somewhere in your setup you have a security hole, exposed file, permissions set wrong, something.. your webhost should help you with this, it may be a server configuration flaw and not just your site at risk. Start looking back in your server logs, error logs, find out who's been accessing your directories and how. It sounds like one of these kiddies who thinks they're doing you a service by letting you know you have a security flaw :rolleyes:

Do a Google search of BenGack, you'll see he got a couple other sites at one time, including a hosting company.

filburt1 - already in the works. ;)

Michelle69 - The 2nd hack was at my other site. I have another site that I was doing support for Fantom CD (which is no longer). The reason I didn't notice it until now was I hardly go up there anymore since Fantom CD is dead.