I think I found the trouble - I used the reset password via phpmyadmin:) to get back into control - but -
Seems anyone can mess up your password by doing the lost password send thing, because it doesn't send your password, it changes it randomly, and sends the new random password. So if you are not checking from your pop3 email you don't know your pw has been changed... dan