Thanks Ray. I had tried changing my email several times and it looked like it didn't work. Now I logged out and logged back in and it did take.
As for the updates, in March you sent me all new files for CMS and I redid all my sites using it. The hacker must have exploited some old code. You said there had been an update but I never received an email about it. That was when my old email was still working so I don't know why I never got the notice but it worries me that I won't get notice in the future. It could have been a much easier fix before the hacking. Is this something to be concerned about?