This morning I woke up to find that someone has used my email account to send out spam messages to everyone in my address book and everyone I've ever sent an email to. A lot of the messages were bounced back, but many others went through. I'm not sure how many messages were sent, but I found three of the infected emails in my sent folder. These emails were sent when the infected computer was turned off. My account password has not been changed, and it doesn't seem like the hijacker has taken control of my account, although I can't be sure.

I know I got this virus when a family member decided to click on an infected link his friend had sent. Is there anything I can do?

Is my email being phished or spoofed? Should I change the password on every account - banking, social media, etc. - I have?

Please give me some advice. Thanks!