I only ever use my AOL email via their website, and I'd like to think I'm fairly careful with what I have on my laptop etc.
To rule this out, last time I changed my password on AOL, I only ever logged in to read my emails using my iPhone, but it still sent spam.