6.5.2 had a few security issues, so that could be coming into play. If you have something like phpmyadmin installed I'd take a look at your w3t_Users table, specifically the U_Password field and make sure that things look ok. It's possible if your forum has been compromised that they've ran some database queries to change things.
