seems strange to me....did you change the FTP password yet to see if this problem goes away? Sounds like a script is FTPing into the account and removing or trying to modify the default page from how you describe it...