Hi Brian, thanks for the tip, on checking my user tables I found 4 entries that should not have been there all with admin rights, one of them was for user “Backup”. I have now deleted these entries.
I’ll now check my site for any signs of hacking although a quick look yesterday didn’t reveal anything.
Paul