Thanks for your response.
Upon further investigation and now that I can get into my CP and see the logs, it looks like a login was made to my CP using an admin user name. It also shows the change made to the database paths and urls/paths and urls page replacing the board info with their info.
IP shows Cairo Egypt. I'm in NY.
Changed password and privileges for the acct in question.
Think that's enough?
Thanks again.
