Just a quick note, unless you can not actually access your account, it entirely possible that someone is just making it look like the emails came from you account. I had that happen at my business site. They were not using my account but using an address (that didn't actually exist) that made it appear it was my business sending out the SPAM. After a 2 or 3 times they switched and started using another address.