I somehow got hacked, basicly my superuser password got changed, the password reminder now sends me all ***** when I try to make a new account and login I get the wrong password error for host, but for the other accounts it does not error out it just does not login. I have tried changing the superuser in the db but it doesnt matter it just is not able to log in. Has anyone had an experience like this before?

Does anyone know how to make it so I can login again with another superuser and fix the damage, and how they could have gotten in to start with. My superuser password was very complex using non alpha numeric keys and different cases.

no there has not been a upgrade, I changed the iis redirect to point to the full domain and not the old dev sub-domain. The web.config did not change. It was working on the new sub-domain yesterday just fine. That was about 2 or so days after changing the iis path. I have an old copy of the web.config from back when it was working. I just tried copying it over but it did not work.

if you need to fix host login, you might find this tip useful as well.