IMMEDIATELY changing your password for the account and see if the spamming stops.

If someone else has accessed your account it is quite possible that they already have copied your online address book so deleting it might not stop the spamming even if they get locked out of your account.

Read through this thread for additional info -