I've been hacked....

Yep... I have been hacked. Someone somehow got into my AOL account and is sending out all of this junk mail to EVERYONE in my contacts list. I have had my email account since I was in 7th or 8th grade, so everyone includes people that I have been friends with at any point since then and sent them an email. It also includes people I go to church with, worked the church nursery with and so on and so on. These emails sometimes are ads for things that are not so much appropriate. This time is was a list of different drugs. This is also the second time it has happened. This first time was when I was on the cruise and honestly since I was out of the country I didn't think much of it. I thought this would be an easy problem to fix. Wrong! So I tried to change my AOL password. Well to change my password, it asks me a security question. The security question is what is the name of your school. Like I said I have had the email address since I was in the 7th or 8th grade. I have tried entering in EVERY school or combination of schools I have ever been to and none of them seem to be the right answer. It has the option to click here if you forgot your password. So I clicked on it, and it wants to know the name of the person on the account and the home phone number and the last 4 digits of the credit card in which your account is billed to. I don't pay for AOL, but I did have AOL, back in the day when you did have to pay for it and I'm pretty sure whatever credit/debit card this was billed to back in 1996 probably no longer exists.
    Sooooooooo I called the 800 number to try and explain the situation. The 800 number sucks. It was an automated person who wants to know all of the same information the computer does. Then it asks me to say the first 3 letters or numbers of my AOL email address. It then tells me it cant find it on record. Really? I use it everyday so I'm pretty sure its there. I hit every option the fake teleprompter person gave me and the closest I ever got to talking to a real person was that if I would like to talk to a live person I would have to pay to upgrade my account. Are you kidding me? So I don't know what to do. I thought about telling them I would upgrade my account just so they would put me through to a real person, but right now that is my only option. I deleted all of my contacts except for a few close friends and family who I know won't get mad or think my computer is sending them viruses if it happens again. I'm hoping if the hacker tries to send out a mass email again before I figure this out then he/she might be discouraged when they see I only have like 5 contacts now, but who knows. Any suggestions? I'm desperate.........

~Megan