I've seen this a few times now. See this question I posted some while ago and look at the links.
http://www.experts-exchange.com/Security/Vulnerabilities/Q_23425855.htmlI had to deal with a compromised email account only a few days ago. Check your Secret Questions. The hacker in this case added in a Question which of course my client did not know the answer to: the date that the Secret question was added appears in the list so you can get a good idea whether you're right to be paranoid. I am now recommending to all my clients that they move away from Yahoo pdq.