Someone has been using my email account to send out spam email. How do i stop that?

You may have opened an infected mail or an attachment. Some new malware can install itself just by opening it, without even clicking a link! (It only takes a few hours to crack an 8-character password!) If the mail goes to your Contacts list or you receive Mailer Daemon bounce-backs, you have had your account hacked temporarily - all they wanted was your address list. The mails will stop when they move on to spam other victims. Deleting your account or Contacts List will NOT stop this spam - once the spammers have the address, they will continue to use it for a while. Spam sent to your Contacts will also stop in a while, but it is annoying. 1. Check that the alternate e-mail address is still yours (Change it first!), and then change both your password AND your secret questions and answers. Make them unique and strong ones! (*** Changing your password also deletes the cookie which apparently inserts that sly trojan address grabber. ***) If you have a Yahoo! account, you can change your password at https://edit.yahoo.com/config/change_pw. If you can no longer access your account, you can get a new password at https://edit.yahoo.com/forgotroot/. If you still can’t access your account after going through the “Forgot Your Password” process, you may contact the Customer Care team for assistance. Click Help, then Customer Care, then Live Chat - it make take a while, but a human answers! You will be asked several questions to verify that you are the owner of the account. If you used this password for other accounts, change them too - make every one different. Make the password longer than 8 characters, with mixed symbols. Usually, this is all you need to do, although mail will still be sent in the name of the old account for a while. 2. *** If spam mail was sent to any of your contacts, apologize, and notify all your contacts NOT to open short e-mails, especially those with no subject, and definitely not to click any links. Warn them to scan for malware too, just in case. Set up an alternate 'alias' account to use instead. This allows you to use a different address for sending, but still keep all saved mails and contacts and the first address active too for incoming mail. Your friends can trust this new address. (There is a choice of address in an arrow in the From: box.) http://edit.yahoo..com/config/list_alias (alternate address) 3. To be sure your computer is not infected, run both an anti-virus and spyware/malware scans, updated and separately - even more than one malware scan, or Trend Micro's Housecall for an online a-v scan. (in 'Safe Mode with Networking' is the only truly effective method - click F8 repeatedly when the screen first lights on boot-up, then arrow keys and Enter to navigate.) Re-boot into Safe Mode for each separate scan. http://housecall.trendmicro.com/ http://www.malwarebytes.org/products/malwarebytes_free http://www.superantispyware.com/

Run spybot search and destroy or similar to find malware that is on your computer and could be sending your details to a third party. Then change your password. It would be best to run the anti malware in safe mode to get all the malware.