Same thing happen to me several years ago, Some how they got your password and that's how they are able to heck your contacts.

Also on hotmail you can block them from sendingg you emails.

I haven't had any problems since but it did piss a lot of my friends off.