Strange that you say the password is the same for mail and web access and works for the web.
What did you scan with? The usual recommended is Malwarebytes for starters.
If AOL are washing their hands of you, and the password has been changed, it looks to me as if you are stuck on emails.
Since you are not using AOL for internet now, it looks as if you will have to write those emails off and get a new provider/address to me. Maybe someone else has a fix.
This from another site - be warned! A few password changes will be a good idea I think.
"Let's say you're on AOL. All I need to do is go to the website and supply your name plus maybe the city you were born in, info that's easy to find in the age of Google. With that, AOL gives me a password reset and I can log in as you. So, what's the first thing I do? Search for the word "bank" to figure out where you do your online banking. I go there and click on the "Forgot Password?" link. I get the password reset and log in to your account, which I control. Now I own your bank account as well as your email.
This summer I learned how to get into, well, everything. With two minutes and $4 (£2.50) to spend at a sketchy foreign website, I could report back with your credit card, phone number, and your home address. Allow me five minutes more and I could be inside your accounts for, say, Amazon, Best Buy, Hulu, Microsoft and Netflix."