Did I said I found username and pass on facebook? I found a user and he sold that to me.So he may sold me a hacked account.
You're missing the point. There is no record of a password change or an e-mail change. You said you changed both, and it would make sense if you actually bought the account. But it doesn't look like you did.